limn-review 0.1.123

package/dist/db/migrations-pg/0039_trunk_ci_status_events.sql

@@ -0,0 +1,27 @@
+-- Default-branch ("trunk") CI transition log — the Postgres twin of sqlite
+-- 0052_trunk_ci_status_events.sql. HAND-WRITTEN ADDITIVE, like every pg migration since 0023:
+-- never regenerate the baseline with `pnpm db:generate:pg`, which squashes it.
+--
+-- See the sqlite twin for the full argument. In short: `branch_commits.ci_status` is updated IN
+-- PLACE, so the moment trunk turned red is otherwise unrecorded; rows are written only on a
+-- TRANSITION and only on a POSITIVE statement from GitHub (an `unknown` rollup — which is also
+-- what a `graphqlTolerant` partial produces — records nothing); `observed_at` is OUR observation
+-- time; `failing_checks` is the BranchCheckRun[] render payload, not ci_status_events' bare
+-- string[]; and the table is bounded by its own per-repo trim, because the retention sweep
+-- anchors to a parent PR's `updated_at` and a trunk row has no PR. That trim is HYBRID (newest
+-- TRUNK_CI_EVENT_WINDOW rows UNION everything inside FEED_WINDOW_DAYS) — a pure count bound
+-- evicted the very failure rows the Feed reads on the most active repos.
+CREATE TABLE IF NOT EXISTS "trunk_ci_status_events" (
+  "id" serial PRIMARY KEY NOT NULL,
+  "account_id" integer NOT NULL REFERENCES "accounts"("id") ON DELETE cascade,
+  "repo_id" integer NOT NULL REFERENCES "repos"("id") ON DELETE cascade,
+  "branch_name" text,
+  "head_sha" text NOT NULL,
+  "status" text NOT NULL,
+  "failing_checks" jsonb,
+  "observed_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "tcse_account_repo_observed" ON "trunk_ci_status_events" ("account_id","repo_id","observed_at");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "tcse_account_idx" ON "trunk_ci_status_events" ("account_id");

package/dist/db/migrations-pg/0040_automation_roles.sql

@@ -0,0 +1,63 @@
+-- Postgres twin of sqlite `0053_automation_roles.sql`. Read that file for the full reasoning:
+-- the stored role beats the login seed on read, so widening the vocabularies in code does nothing
+-- for an actor that has already been classified, and `github-actions` would keep sitting in the
+-- AI-reviewer ROI cohort with 385 submitted reviews behind it.
+--
+-- `source <> 'manual'` is the safety condition — a role a person chose is never re-derived.
+--
+-- The only spelling difference from the sqlite file: `regexp_replace(…, '\[bot\]$', '')` instead
+-- of `replace(…, '[bot]', '')`. Same operation — strip the `[bot]` suffix so the two `users` rows
+-- that are the same actor (`dependabot` and `dependabot[bot]` have different GitHub node ids)
+-- cannot land in different roles.
+UPDATE "workspace_reviewers"
+SET "role" = 'dependency'
+WHERE "source" <> 'manual'
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN (
+      'dependabot', 'dependabot-preview', 'renovate', 'renovate-bot',
+      'snyk-bot', 'pyup-bot', 'greenkeeper', 'depfu'
+    )
+  );
+UPDATE "workspace_reviewers"
+SET "role" = 'code_agent'
+WHERE "source" <> 'manual'
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN (
+      'devin-ai-integration', 'sweep-ai', 'codegen-sh', 'deepsource-autofix',
+      'pre-commit-ci', 'restyled-io', 'imgbot', 'imgbotapp',
+      'transifex-integration', 'crowdin-bot', 'mintlify', 'allstar'
+    )
+  );
+UPDATE "workspace_reviewers"
+SET "role" = 'release'
+WHERE "source" <> 'manual'
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN (
+      'mergify', 'kodiak', 'kodiakhq', 'bulldozer', 'release-please', 'releaser',
+      'semantic-release', 'semantic-release-bot', 'release-drafter', 'changeset-bot',
+      'changesets', 'autorelease', 'lumberbot-app', 'meeseeksdev', 'backport'
+    )
+  );
+UPDATE "workspace_reviewers"
+SET "role" = 'housekeeping'
+WHERE "source" <> 'manual'
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN (
+      'cla-bot', 'cla-assistant', 'claassistant', 'google-cla', 'googlebot',
+      'facebook-github-bot', 'dco', 'stale', 'welcome', 'lock', 'allcontributors',
+      'semantic-pull-request', 'sizebot', 'react-sizebot', 'diffray-bot',
+      'codesandbox-ci', 'netlify', 'vercel', 'gitpod-io'
+    )
+  );
+-- Supersedes pg 0029's narrower list rather than repeating it.
+UPDATE "workspace_reviewers"
+SET "role" = 'quality_check'
+WHERE "source" <> 'manual'
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN (
+      'sonarqubecloud', 'sonarcloud', 'codecov', 'codeclimate', 'codefactor-io',
+      'houndci-bot', 'coveralls', 'codacy-bot',
+      'github-actions', 'jit-ci', 'socket-security', 'gitguardian',
+      'semgrep-app', 'trunk-io'
+    )
+  );

package/dist/db/migrations-pg/0041_automation_vendor_kinds.sql

@@ -0,0 +1,488 @@
+-- Postgres twin of sqlite `0054_automation_vendor_kinds.sql`. Read that file for the reasoning:
+-- every non-reviewer integration was stored as `kind: 'in_house'` (the "In-house AI" bucket)
+-- because the classifier had no step between the AI-reviewer login check and the githubType
+-- fallback, and the stored kind wins on read.
+--
+-- Three conditions, each load-bearing: `identity_source <> 'manual'` (never re-derive a vendor a
+-- human named), `kind IN ('in_house','vendor')` (only upgrade the UNBRANDED kinds — a row with a
+-- real brand came from a stronger signal), and `label = NULL` (the label caches the kind's
+-- display name and the old rows hold the literal "In-house AI").
+--
+-- Only spelling difference from the sqlite file: `regexp_replace(…, '\[bot\]$', '')` rather
+-- than `replace(…, '[bot]', '')`.
+UPDATE "workspace_reviewers"
+SET "kind" = 'allcontributors', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('allcontributors')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'allstar', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('allstar')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'backport', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('backport', 'lumberbot-app', 'meeseeksdev')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'baz', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('baz-reviewer')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'bito', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('bito-code-review')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'bulldozer', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('bulldozer')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'changesets', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('changeset-bot', 'changesets')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'cla_assistant', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('cla-assistant', 'cla-bot', 'claassistant')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'codacy', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('codacy-bot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'codeclimate', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('codeclimate')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'codecov', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('codecov')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'codefactor', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('codefactor-io')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'codegen', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('codegen-sh')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'coderabbit', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('coderabbitai')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'codesandbox', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('codesandbox-ci')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'codex', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('chatgpt-codex-connector')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'copilot', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('copilot-pull-request-reviewer')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'coveralls', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('coveralls')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'crowdin', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('crowdin-bot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'cursor', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('cursor')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'dco', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('dco')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'deepsource', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('deepsource-io', 'deepsourcebot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'deepsource_autofix', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('deepsource-autofix')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'dependabot', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('dependabot', 'dependabot-preview')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'depfu', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('depfu')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'devin', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('devin-ai-integration')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'ellipsis', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('ellipsis-dev')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'entelligence', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('entelligence-ai-pr-reviews')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'gitguardian', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('gitguardian')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'github_actions', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('github-actions')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'github_advanced_security', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('github-advanced-security')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'github_code_quality', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('github-code-quality')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'gitpod', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('gitpod-io')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'google_cla', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('google-cla', 'googlebot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'graphite', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('graphite-app')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'greenkeeper', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('greenkeeper')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'greptile', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('greptile-apps')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'hound', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('houndci-bot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'imgbot', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('imgbot', 'imgbotapp')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'jit', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('jit-ci')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'kodiak', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('kodiak', 'kodiakhq')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'korbit', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('korbit-ai')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'lock_bot', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('lock')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'mergify', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('mergify')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'meta_cla', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('facebook-github-bot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'mintlify', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('mintlify')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'netlify', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('netlify')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'pre_commit_ci', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('pre-commit-ci')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'pyup', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('pyup-bot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'qodo', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('codiumai-pr-agent-free', 'qodo-ai', 'qodo-merge', 'qodo-merge-for-open-source', 'qodo-merge-pro')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'release_drafter', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('release-drafter')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'release_please', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('autorelease', 'release-please', 'releaser')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'renovate', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('renovate', 'renovate-bot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'restyled', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('restyled-io')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'semantic_pr', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('semantic-pull-request')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'semantic_release', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('semantic-release', 'semantic-release-bot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'semgrep', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('semgrep-app')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'sizebot', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('diffray-bot', 'react-sizebot', 'sizebot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'snyk', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('snyk-bot')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'socket', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('socket-security')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'sonarqube', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('sonarcloud', 'sonarqubecloud')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'sourcery', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('sourcery-ai')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'stale_bot', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('stale')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'sweep', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('sweep-ai')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'transifex', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('transifex-integration')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'trunk', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('trunk-io')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'vercel', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('vercel')
+  );
+UPDATE "workspace_reviewers"
+SET "kind" = 'welcome_bot', "label" = NULL
+WHERE "identity_source" <> 'manual'
+  AND "kind" IN ('in_house', 'vendor')
+  AND "author_user_id" IN (
+    SELECT "id" FROM "users" WHERE regexp_replace(lower("github_login"), '\[bot\]$', '') IN ('welcome')
+  );

package/dist/db/migrations-pg/0042_auto_merge_phase.sql

@@ -0,0 +1,8 @@
+-- Auto-merge ("merge when ready") gets a machine-readable phase — the Postgres twin of sqlite
+-- 0055_auto_merge_phase.sql. HAND-WRITTEN ADDITIVE, like every pg migration since 0023: never
+-- regenerate the baseline with `pnpm db:generate:pg`, which squashes it.
+--
+-- See the sqlite twin for the full argument. In short: `last_reason` is prose for a human (and
+-- is NULL at success), so the cross-PR progress surface needs a field it can switch on; the
+-- watcher writes both in the same call, and terminal outcomes stay on `state`.
+ALTER TABLE "auto_merge_requests" ADD COLUMN IF NOT EXISTS "phase" text;

package/dist/db/migrations-pg/0043_pr_mentions.sql

@@ -0,0 +1,19 @@
+-- Postgres twin of migrations/0056_pr_mentions.sql — "@you" on a PR, the MENTION arm of My
+-- Turn's personal-relevance rule (CORE, no AI). HAND-WRITTEN ADDITIVE, like every pg migration
+-- since 0023: never regenerate the baseline with `pnpm db:generate:pg`, which squashes it.
+-- Index names are byte-identical to the sqlite twin (they are the drizzle index names).
+CREATE TABLE IF NOT EXISTS "pr_mentions" (
+	"id" serial PRIMARY KEY NOT NULL,
+	"account_id" integer NOT NULL,
+	"repo_id" integer NOT NULL,
+	"pr_id" integer NOT NULL,
+	"login" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "pr_mentions" ADD CONSTRAINT "pr_mentions_account_id_accounts_id_fk" FOREIGN KEY ("account_id") REFERENCES "public"."accounts"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "pr_mentions" ADD CONSTRAINT "pr_mentions_repo_id_repos_id_fk" FOREIGN KEY ("repo_id") REFERENCES "public"."repos"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "pr_mentions" ADD CONSTRAINT "pr_mentions_pr_id_pull_requests_id_fk" FOREIGN KEY ("pr_id") REFERENCES "public"."pull_requests"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "prm_account_pr" ON "pr_mentions" USING btree ("account_id","pr_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "prm_account_repo_idx" ON "pr_mentions" USING btree ("account_id","repo_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "prm_pr_idx" ON "pr_mentions" USING btree ("pr_id");

package/dist/db/migrations-pg/0044_large_pr_threshold.sql

@@ -0,0 +1,6 @@
+-- Postgres twin of migrations/0057_large_pr_threshold.sql — the LARGE-PR FLAG's per-account
+-- code-churn threshold (CORE, free, no AI). HAND-WRITTEN ADDITIVE, like every pg migration since
+-- 0023: never regenerate the baseline with `pnpm db:generate:pg`, which squashes it.
+-- Nullable, no default, no backfill: NULL = use the 1,500-line product default (see the sqlite
+-- twin for why that is deliberately not a backfilled literal).
+ALTER TABLE "accounts" ADD COLUMN IF NOT EXISTS "large_pr_code_loc_threshold" integer;

package/dist/db/migrations-pg/0045_pending_mute.sql

@@ -0,0 +1,26 @@
+-- Postgres twin of migrations/0058_pending_mute.sql — THE PENDING MUTE (CORE, free, no AI).
+-- HAND-WRITTEN ADDITIVE, like every pg migration since 0023: never regenerate the baseline with
+-- `pnpm db:generate:pg`, which squashes it. Index and constraint names are byte-identical to the
+-- sqlite twin (they are the drizzle names).
+--
+-- Read the sqlite twin for the full argument. The three things that will otherwise be re-litigated:
+--   • a mute is NOT the `repos.inbox_watch` visibility axis migration 0046 dropped — no screen's
+--     population changes, only whether a row may CLAIM THE READER'S TURN and interrupt them;
+--   • the workspace flag and the repo rows are TWO INDEPENDENT FACTS, OR-ed, never a fallback
+--     chain (`null`-means-inherit is a named bug class here);
+--   • `pending_muted_repos` carries no `workspace_id` on purpose — a repo belongs to exactly one
+--     workspace already, and a fact lives at exactly one grain.
+ALTER TABLE "workspaces" ADD COLUMN IF NOT EXISTS "pending_muted" boolean DEFAULT false NOT NULL;--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "pending_muted_repos" (
+	"id" serial PRIMARY KEY NOT NULL,
+	"account_id" integer NOT NULL,
+	"repo_id" integer NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "pending_muted_repos_account_id_accounts_id_fk" FOREIGN KEY ("account_id") REFERENCES "accounts"("id") ON DELETE cascade,
+	-- The composite tenancy FK, declared INLINE like workspace_repos' pair in pg 0031: `repo_id`
+	-- arrives in a request body, so the PAIR is what must exist. It leans on the
+	-- `repos_id_account` unique index, which exists for exactly this purpose.
+	CONSTRAINT "pending_muted_repos_repo_account_fk" FOREIGN KEY ("repo_id","account_id") REFERENCES "repos"("id","account_id") ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "pending_muted_repos_account_repo" ON "pending_muted_repos" USING btree ("account_id","repo_id");