nlm-memory 0.21.0 → 0.21.12

package/dist/ui/index.html

@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>nlm memory</title>
-    <script type="module" crossorigin src="/ui/assets/index-CSaBtgXD.js"></script>
+    <script type="module" crossorigin src="/ui/assets/index-D6F3xAis.js"></script>
     <link rel="stylesheet" crossorigin href="/ui/assets/index-DSzo1eTD.css">
   </head>
   <body>

package/migrations/033_actions_kind_check.sql

@@ -0,0 +1,58 @@
+-- nlm:no-wrap
+-- Migration 033: CHECK constraint on actions.kind (#294).
+--
+-- actions.kind has been a freeform TEXT column since 000_initial_schema;
+-- the overlay reducer (src/core/actions/overlay.ts) only ever recognizes a
+-- fixed set, and unknown kinds silently no-op there instead of failing at
+-- write time. This constrains writes to the set the reducer actually
+-- understands: dismiss, snooze, retire_entity, label_entity, rename_entity,
+-- resolve_open, promote_open, dismiss_decision, revise_decision,
+-- merge_entity, set_coherence, plus 'undo' (actions-log.ts's own revert
+-- marker, subject_type 'action').
+--
+-- Adding a CHECK to an existing column requires a table rebuild (SQLite
+-- cannot ALTER a CHECK constraint). Runs under foreign_keys=OFF, hence
+-- nlm:no-wrap so the runner doesn't add its own BEGIN/COMMIT around this
+-- file's own transaction (see migrations/019_split_replaces.sql for the
+-- established precedent).
+
+PRAGMA foreign_keys = OFF;
+
+BEGIN;
+
+CREATE TABLE actions_new (
+  id                  TEXT PRIMARY KEY,
+  timestamp           TEXT NOT NULL,
+  kind                TEXT NOT NULL CHECK(kind IN (
+                        'dismiss', 'snooze', 'retire_entity', 'label_entity',
+                        'rename_entity', 'resolve_open', 'promote_open',
+                        'dismiss_decision', 'revise_decision', 'merge_entity',
+                        'set_coherence', 'undo'
+                      )),
+  subject_type        TEXT NOT NULL,
+  subject_id          TEXT NOT NULL,
+  payload             TEXT,
+  actor               TEXT NOT NULL DEFAULT 'user',
+  runtime             TEXT,
+  reverted_by         TEXT REFERENCES actions(id),
+  created_at          TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+INSERT INTO actions_new
+  (id, timestamp, kind, subject_type, subject_id, payload, actor, runtime, reverted_by, created_at)
+SELECT
+  id, timestamp, kind, subject_type, subject_id, payload, actor, runtime, reverted_by, created_at
+FROM actions;
+
+DROP TABLE actions;
+ALTER TABLE actions_new RENAME TO actions;
+
+CREATE INDEX IF NOT EXISTS idx_actions_subject ON actions(subject_type, subject_id);
+CREATE INDEX IF NOT EXISTS idx_actions_kind ON actions(kind);
+CREATE INDEX IF NOT EXISTS idx_actions_timestamp ON actions(timestamp DESC);
+
+INSERT OR IGNORE INTO schema_migrations (version, name) VALUES (33, 'actions_kind_check');
+
+COMMIT;
+
+PRAGMA foreign_keys = ON;

package/migrations/034_tenancy_teams_and_stamps.sql

@@ -0,0 +1,40 @@
+-- migrations/034_tenancy_teams_and_stamps.sql
+-- M1 (Team NLM program spec §2): tenancy registry + tenant stamps.
+-- sqlite lane: NOT NULL DEFAULT, no REFERENCES on ADD COLUMN (FKs enforced at
+-- runtime; SQLite forbids ADD COLUMN + REFERENCES + non-NULL default).
+-- Isolation is enforced at the store layer (M2), not by schema constraints.
+
+CREATE TABLE IF NOT EXISTS teams (
+  id         TEXT PRIMARY KEY,
+  name       TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS team_tokens (
+  token_hash TEXT PRIMARY KEY,
+  team_id    TEXT NOT NULL REFERENCES teams(id),
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  revoked_at TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_team_tokens_team ON team_tokens(team_id);
+
+INSERT OR IGNORE INTO teams (id, name) VALUES ('team_local', 'Local operator team');
+
+ALTER TABLE sessions       ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'team_local';
+ALTER TABLE facts          ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'team_local';
+ALTER TABLE code_exemplars ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'team_local';
+ALTER TABLE signals        ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'team_local';
+ALTER TABLE workstreams    ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'team_local';
+ALTER TABLE sources        ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'team_local';
+ALTER TABLE providers      ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'team_local';
+
+CREATE INDEX IF NOT EXISTS idx_sessions_tenant       ON sessions(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_facts_tenant          ON facts(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_code_exemplars_tenant ON code_exemplars(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_signals_tenant        ON signals(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_workstreams_tenant    ON workstreams(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_sources_tenant        ON sources(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_providers_tenant      ON providers(tenant_id);
+
+INSERT OR IGNORE INTO schema_migrations (version, name) VALUES (34, 'tenancy_teams_and_stamps');

package/migrations/035_tenancy_entity_rekey.sql

@@ -0,0 +1,75 @@
+-- nlm:no-wrap
+-- migrations/035_tenancy_entity_rekey.sql
+-- M1 (Team NLM program spec §2): entities become tenant-local. Composite PK
+-- (tenant_id, canonical); referencing tables re-keyed with composite FKs.
+-- Table rebuild per the 010-015/033 convention: FKs off, own transaction.
+
+PRAGMA foreign_keys = OFF;
+BEGIN;
+
+CREATE TABLE entities_new (
+  tenant_id           TEXT NOT NULL DEFAULT 'team_local',
+  canonical           TEXT NOT NULL,
+  type                TEXT NOT NULL,
+  status              TEXT NOT NULL CHECK(status IN ('active','dormant','retired','rejected','candidate')),
+  source              TEXT,
+  notes               TEXT,
+  first_seen_session  TEXT REFERENCES sessions(id),
+  last_seen_session   TEXT REFERENCES sessions(id),
+  session_count       INTEGER NOT NULL DEFAULT 0,
+  created_at          TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at          TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (tenant_id, canonical)
+);
+INSERT INTO entities_new (tenant_id, canonical, type, status, source, notes, first_seen_session, last_seen_session, session_count, created_at, updated_at)
+  SELECT 'team_local', canonical, type, status, source, notes, first_seen_session, last_seen_session, session_count, created_at, updated_at FROM entities;
+DROP TABLE entities;
+ALTER TABLE entities_new RENAME TO entities;
+CREATE INDEX IF NOT EXISTS idx_entities_type   ON entities(type);
+CREATE INDEX IF NOT EXISTS idx_entities_status ON entities(status);
+
+CREATE TABLE entity_variants_new (
+  tenant_id           TEXT NOT NULL DEFAULT 'team_local',
+  variant             TEXT NOT NULL,
+  canonical           TEXT NOT NULL,
+  source_session_id   TEXT REFERENCES sessions(id),
+  PRIMARY KEY (tenant_id, variant),
+  FOREIGN KEY (tenant_id, canonical) REFERENCES entities(tenant_id, canonical) ON DELETE CASCADE
+);
+INSERT INTO entity_variants_new (tenant_id, variant, canonical, source_session_id)
+  SELECT 'team_local', variant, canonical, source_session_id FROM entity_variants;
+DROP TABLE entity_variants;
+ALTER TABLE entity_variants_new RENAME TO entity_variants;
+CREATE INDEX IF NOT EXISTS idx_entity_variants_canonical ON entity_variants(tenant_id, canonical);
+
+CREATE TABLE session_entities_new (
+  tenant_id           TEXT NOT NULL DEFAULT 'team_local',
+  session_id          TEXT NOT NULL REFERENCES sessions(id) ON DELETE CASCADE,
+  entity_canonical    TEXT NOT NULL,
+  PRIMARY KEY (session_id, entity_canonical),
+  FOREIGN KEY (tenant_id, entity_canonical) REFERENCES entities(tenant_id, canonical)
+);
+INSERT INTO session_entities_new (tenant_id, session_id, entity_canonical)
+  SELECT 'team_local', session_id, entity_canonical FROM session_entities;
+DROP TABLE session_entities;
+ALTER TABLE session_entities_new RENAME TO session_entities;
+CREATE INDEX IF NOT EXISTS idx_session_entities_entity ON session_entities(tenant_id, entity_canonical);
+
+CREATE TABLE workstream_entities_new (
+  tenant_id        TEXT NOT NULL DEFAULT 'team_local',
+  workstream_id    TEXT NOT NULL REFERENCES workstreams(id) ON DELETE CASCADE,
+  entity_canonical TEXT NOT NULL,
+  session_count    INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY (workstream_id, entity_canonical),
+  FOREIGN KEY (tenant_id, entity_canonical) REFERENCES entities(tenant_id, canonical)
+);
+INSERT INTO workstream_entities_new (tenant_id, workstream_id, entity_canonical, session_count)
+  SELECT 'team_local', workstream_id, entity_canonical, session_count FROM workstream_entities;
+DROP TABLE workstream_entities;
+ALTER TABLE workstream_entities_new RENAME TO workstream_entities;
+CREATE INDEX IF NOT EXISTS idx_workstream_entities_entity ON workstream_entities(tenant_id, entity_canonical);
+
+INSERT OR IGNORE INTO schema_migrations (version, name) VALUES (35, 'tenancy_entity_rekey');
+COMMIT;
+PRAGMA foreign_keys = ON;
+PRAGMA foreign_key_check;

package/migrations/036_tenant_name_uniqueness.sql

@@ -0,0 +1,59 @@
+-- nlm:no-wrap
+-- migrations/036_tenant_name_uniqueness.sql
+-- M4 (Team NLM program spec §5 row M4): sources.name / providers.name
+-- uniqueness re-keyed from a single-column UNIQUE to (tenant_id, name), so
+-- two teams can register same-named sources/providers while a name still
+-- stays unique within one tenant. SQLite can't ALTER a column-level UNIQUE
+-- constraint, so this is a table rebuild under foreign_keys=OFF (precedent:
+-- migrations/019_split_replaces.sql, 033_actions_kind_check.sql,
+-- 035_tenancy_entity_rekey.sql). Every current column carried over exactly
+-- (verified against the live schema, incl. the 034-added tenant_id).
+
+PRAGMA foreign_keys = OFF;
+BEGIN;
+
+CREATE TABLE sources_new (
+  id            INTEGER PRIMARY KEY AUTOINCREMENT,
+  kind          TEXT    NOT NULL CHECK (kind IN ('claude-code', 'codex', 'hermes', 'hermes-agent', 'aider', 'cursor', 'windsurf', 'opencode', 'pi', 'jsonl-generic', 'webhook')),
+  name          TEXT    NOT NULL,
+  path_or_url   TEXT,
+  runtime_label TEXT    NOT NULL,
+  parse_config  TEXT    NOT NULL DEFAULT '{}',
+  enabled       INTEGER NOT NULL DEFAULT 1,
+  token         TEXT,
+  created_at    TEXT    NOT NULL DEFAULT (datetime('now')),
+  updated_at    TEXT    NOT NULL DEFAULT (datetime('now')),
+  tenant_id     TEXT    NOT NULL DEFAULT 'team_local',
+  UNIQUE (tenant_id, name)
+);
+INSERT INTO sources_new (id, kind, name, path_or_url, runtime_label, parse_config, enabled, token, created_at, updated_at, tenant_id)
+  SELECT id, kind, name, path_or_url, runtime_label, parse_config, enabled, token, created_at, updated_at, tenant_id FROM sources;
+DROP TABLE sources;
+ALTER TABLE sources_new RENAME TO sources;
+CREATE INDEX IF NOT EXISTS idx_sources_enabled ON sources(enabled) WHERE enabled = 1;
+CREATE INDEX IF NOT EXISTS idx_sources_tenant ON sources(tenant_id);
+
+CREATE TABLE providers_new (
+  id            INTEGER PRIMARY KEY AUTOINCREMENT,
+  kind          TEXT    NOT NULL CHECK (kind IN ('deepseek', 'ollama', 'openai', 'anthropic', 'openrouter', 'openai-compatible')),
+  name          TEXT    NOT NULL,
+  base_url      TEXT,
+  api_key       TEXT,
+  default_model TEXT,
+  enabled       INTEGER NOT NULL DEFAULT 1,
+  created_at    TEXT    NOT NULL DEFAULT (datetime('now')),
+  updated_at    TEXT    NOT NULL DEFAULT (datetime('now')),
+  tenant_id     TEXT    NOT NULL DEFAULT 'team_local',
+  UNIQUE (tenant_id, name)
+);
+INSERT INTO providers_new (id, kind, name, base_url, api_key, default_model, enabled, created_at, updated_at, tenant_id)
+  SELECT id, kind, name, base_url, api_key, default_model, enabled, created_at, updated_at, tenant_id FROM providers;
+DROP TABLE providers;
+ALTER TABLE providers_new RENAME TO providers;
+CREATE INDEX IF NOT EXISTS idx_providers_enabled ON providers(enabled) WHERE enabled = 1;
+CREATE INDEX IF NOT EXISTS idx_providers_tenant ON providers(tenant_id);
+
+INSERT OR IGNORE INTO schema_migrations (version, name) VALUES (36, 'tenant_name_uniqueness');
+COMMIT;
+PRAGMA foreign_keys = ON;
+PRAGMA foreign_key_check;

package/migrations/037_sessions_covering_index.sql

@@ -0,0 +1,25 @@
+-- migrations/037_sessions_covering_index.sql
+-- Covering index so joins that only need a session's id/tenant/started_at stop
+-- reading the row itself.
+--
+-- `sessions` carries `body`, which is the bulk of the store (378MB of a 1.45GB
+-- database on the reference install). Any plan that resolves a session by id
+-- through sqlite_autoindex_sessions_1 then visits the main b-tree and pays for
+-- that whole wide row. The entity-overlap lookup in the ingest path does
+-- exactly this, once per candidate: 10ms warm but 5,190ms cold, hit repeatedly
+-- on boot, inside a synchronous better-sqlite3 call that blocks the event loop
+-- (NLM #457 — same class of problem as the correlated LIKE fixed in
+-- core/actions/actions-log.ts, different query).
+--
+-- With this index the planner reports
+--   SEARCH s USING COVERING INDEX idx_sessions_cover_id_tenant_started (id=? AND tenant_id=?)
+-- and never touches the main table. Roughly 1MB for 15k sessions.
+--
+-- Column order is (id, tenant_id, started_at): id is the join/seek key,
+-- tenant_id the equality filter, started_at trails so it is available for
+-- ORDER BY without a lookup.
+
+CREATE INDEX IF NOT EXISTS idx_sessions_cover_id_tenant_started
+  ON sessions(id, tenant_id, started_at);
+
+INSERT OR IGNORE INTO schema_migrations (version, name) VALUES (37, 'sessions_covering_index');

package/migrations/038_sources_muse.sql

@@ -0,0 +1,33 @@
+-- nlm:no-wrap
+-- Add 'muse' to the sources.kind CHECK constraint. Without it, seedDefaults()
+-- fails at boot on any machine with a Muse sessions directory. Table rebuild
+-- under foreign_keys=OFF, carrying every column of the post-036 shape.
+
+PRAGMA foreign_keys = OFF;
+BEGIN;
+
+CREATE TABLE sources_new (
+  id            INTEGER PRIMARY KEY AUTOINCREMENT,
+  kind          TEXT    NOT NULL CHECK (kind IN ('claude-code', 'codex', 'hermes', 'hermes-agent', 'muse', 'aider', 'cursor', 'windsurf', 'opencode', 'pi', 'jsonl-generic', 'webhook')),
+  name          TEXT    NOT NULL,
+  path_or_url   TEXT,
+  runtime_label TEXT    NOT NULL,
+  parse_config  TEXT    NOT NULL DEFAULT '{}',
+  enabled       INTEGER NOT NULL DEFAULT 1,
+  token         TEXT,
+  created_at    TEXT    NOT NULL DEFAULT (datetime('now')),
+  updated_at    TEXT    NOT NULL DEFAULT (datetime('now')),
+  tenant_id     TEXT    NOT NULL DEFAULT 'team_local',
+  UNIQUE (tenant_id, name)
+);
+INSERT INTO sources_new (id, kind, name, path_or_url, runtime_label, parse_config, enabled, token, created_at, updated_at, tenant_id)
+  SELECT id, kind, name, path_or_url, runtime_label, parse_config, enabled, token, created_at, updated_at, tenant_id FROM sources;
+DROP TABLE sources;
+ALTER TABLE sources_new RENAME TO sources;
+CREATE INDEX IF NOT EXISTS idx_sources_enabled ON sources(enabled) WHERE enabled = 1;
+CREATE INDEX IF NOT EXISTS idx_sources_tenant ON sources(tenant_id);
+
+INSERT OR IGNORE INTO schema_migrations (version, name) VALUES (38, 'sources_muse');
+COMMIT;
+PRAGMA foreign_keys = ON;
+PRAGMA foreign_key_check;

package/migrations/039_learner_evidence.sql

@@ -0,0 +1,51 @@
+-- migrations/037_learner_evidence.sql
+-- Learner evidence (spec 2026-10-06-learner-evidence-design.md §2).
+-- STAMP tables: tenant_id NOT NULL DEFAULT 'team_local', no REFERENCES (see 034 header).
+-- Summaries are computed from events, never stored: no concept_states table.
+
+CREATE TABLE IF NOT EXISTS learners (
+  id           TEXT NOT NULL,
+  label        TEXT NOT NULL,
+  profile_json TEXT NOT NULL DEFAULT '{}',
+  tenant_id    TEXT NOT NULL DEFAULT 'team_local',
+  created_at   TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at   TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (tenant_id, id)
+);
+
+CREATE TABLE IF NOT EXISTS enrollments (
+  id                      TEXT PRIMARY KEY,
+  learner_id              TEXT NOT NULL,
+  course_id               TEXT NOT NULL,
+  workstream_id           TEXT REFERENCES workstreams(id),
+  plan_ref                TEXT NOT NULL,
+  plan_revision           INTEGER NOT NULL,
+  plan_fingerprint        TEXT NOT NULL,
+  status                  TEXT NOT NULL DEFAULT 'active' CHECK(status IN ('active','completed')),
+  completion_history_json TEXT NOT NULL DEFAULT '[]',
+  tenant_id               TEXT NOT NULL DEFAULT 'team_local',
+  created_at              TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at              TEXT NOT NULL DEFAULT (datetime('now')),
+  UNIQUE (tenant_id, learner_id, course_id),
+  FOREIGN KEY (tenant_id, learner_id) REFERENCES learners(tenant_id, id) ON DELETE CASCADE
+);
+
+CREATE TABLE IF NOT EXISTS learning_events (
+  id              TEXT NOT NULL,
+  enrollment_id   TEXT NOT NULL REFERENCES enrollments(id) ON DELETE CASCADE,
+  date            TEXT NOT NULL,
+  covered_json    TEXT NOT NULL DEFAULT '[]',
+  attempts_json   TEXT NOT NULL DEFAULT '[]',
+  interpretation  TEXT NOT NULL DEFAULT '',
+  next_step       TEXT NOT NULL,
+  tenant_id       TEXT NOT NULL DEFAULT 'team_local',
+  created_at      TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (enrollment_id, id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_learners_tenant    ON learners(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_enrollments_tenant ON enrollments(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_enrollments_ws     ON enrollments(workstream_id);
+CREATE INDEX IF NOT EXISTS idx_events_tenant      ON learning_events(tenant_id);
+
+INSERT OR IGNORE INTO schema_migrations (version, name) VALUES (37, 'learner_evidence');

package/migrations/pg/033_actions_kind_check.sql

@@ -0,0 +1,17 @@
+-- Mirrors migrations/033_actions_kind_check.sql (#294). Pg supports adding a
+-- CHECK constraint in place, no table rebuild needed. Same fixed set the
+-- overlay reducer (src/core/actions/overlay.ts) understands, plus 'undo'
+-- (actions-log.ts's own revert marker, subject_type 'action').
+
+BEGIN;
+
+ALTER TABLE actions DROP CONSTRAINT IF EXISTS actions_kind_check;
+ALTER TABLE actions ADD CONSTRAINT actions_kind_check
+  CHECK (kind IN (
+    'dismiss', 'snooze', 'retire_entity', 'label_entity',
+    'rename_entity', 'resolve_open', 'promote_open',
+    'dismiss_decision', 'revise_decision', 'merge_entity',
+    'set_coherence', 'undo'
+  ));
+
+COMMIT;

package/migrations/pg/034_tenancy.sql

@@ -0,0 +1,77 @@
+-- migrations/pg/034_tenancy.sql
+-- M1 (Team NLM program spec §2): tenancy registry, tenant stamps with full
+-- constraint rigor (the hosted lane), entity re-key to (tenant_id, canonical).
+
+CREATE TABLE IF NOT EXISTS teams (
+  id         TEXT PRIMARY KEY,
+  name       TEXT NOT NULL,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE TABLE IF NOT EXISTS team_tokens (
+  token_hash TEXT PRIMARY KEY,
+  team_id    TEXT NOT NULL REFERENCES teams(id),
+  created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  revoked_at TIMESTAMPTZ
+);
+CREATE INDEX IF NOT EXISTS idx_team_tokens_team ON team_tokens(team_id);
+
+INSERT INTO teams (id, name) VALUES ('team_local', 'Local operator team') ON CONFLICT DO NOTHING;
+
+-- Stamp the seven flat tables: add → backfill → NOT NULL → FK → index.
+DO $$
+DECLARE t TEXT;
+BEGIN
+  FOREACH t IN ARRAY ARRAY['sessions','facts','code_exemplars','signals','workstreams','sources','providers'] LOOP
+    EXECUTE format('ALTER TABLE %I ADD COLUMN IF NOT EXISTS tenant_id TEXT', t);
+    EXECUTE format('UPDATE %I SET tenant_id = ''team_local'' WHERE tenant_id IS NULL', t);
+    EXECUTE format('ALTER TABLE %I ALTER COLUMN tenant_id SET DEFAULT ''team_local''', t);
+    EXECUTE format('ALTER TABLE %I ALTER COLUMN tenant_id SET NOT NULL', t);
+    EXECUTE format('ALTER TABLE %I DROP CONSTRAINT IF EXISTS fk_%s_tenant', t, t);
+    EXECUTE format('ALTER TABLE %I ADD CONSTRAINT fk_%s_tenant FOREIGN KEY (tenant_id) REFERENCES teams(id)', t, t);
+    EXECUTE format('CREATE INDEX IF NOT EXISTS idx_%s_tenant ON %I(tenant_id)', t, t);
+  END LOOP;
+END $$;
+
+-- Entity re-key: stamp the four entity-graph tables, then swap keys.
+ALTER TABLE entities            ADD COLUMN IF NOT EXISTS tenant_id TEXT;
+ALTER TABLE entity_variants     ADD COLUMN IF NOT EXISTS tenant_id TEXT;
+ALTER TABLE session_entities    ADD COLUMN IF NOT EXISTS tenant_id TEXT;
+ALTER TABLE workstream_entities ADD COLUMN IF NOT EXISTS tenant_id TEXT;
+UPDATE entities            SET tenant_id = 'team_local' WHERE tenant_id IS NULL;
+UPDATE entity_variants     SET tenant_id = 'team_local' WHERE tenant_id IS NULL;
+UPDATE session_entities    SET tenant_id = 'team_local' WHERE tenant_id IS NULL;
+UPDATE workstream_entities SET tenant_id = 'team_local' WHERE tenant_id IS NULL;
+ALTER TABLE entities            ALTER COLUMN tenant_id SET DEFAULT 'team_local';
+ALTER TABLE entity_variants     ALTER COLUMN tenant_id SET DEFAULT 'team_local';
+ALTER TABLE session_entities    ALTER COLUMN tenant_id SET DEFAULT 'team_local';
+ALTER TABLE workstream_entities ALTER COLUMN tenant_id SET DEFAULT 'team_local';
+ALTER TABLE entities            ALTER COLUMN tenant_id SET NOT NULL;
+ALTER TABLE entity_variants     ALTER COLUMN tenant_id SET NOT NULL;
+ALTER TABLE session_entities    ALTER COLUMN tenant_id SET NOT NULL;
+ALTER TABLE workstream_entities ALTER COLUMN tenant_id SET NOT NULL;
+
+-- Drop the old single-column FKs (default constraint names from 001/025/029),
+-- then the old PKs, then rebuild composite.
+ALTER TABLE session_entities    DROP CONSTRAINT IF EXISTS session_entities_entity_canonical_fkey;
+ALTER TABLE workstream_entities DROP CONSTRAINT IF EXISTS workstream_entities_entity_canonical_fkey;
+ALTER TABLE entity_variants     DROP CONSTRAINT IF EXISTS entity_variants_canonical_fkey;
+ALTER TABLE entities            DROP CONSTRAINT IF EXISTS entities_pkey;
+ALTER TABLE entities            ADD PRIMARY KEY (tenant_id, canonical);
+ALTER TABLE entities            ADD CONSTRAINT fk_entities_tenant FOREIGN KEY (tenant_id) REFERENCES teams(id);
+
+ALTER TABLE entity_variants DROP CONSTRAINT IF EXISTS entity_variants_pkey;
+ALTER TABLE entity_variants ADD PRIMARY KEY (tenant_id, variant);
+ALTER TABLE entity_variants ADD CONSTRAINT fk_entity_variants_entity
+  FOREIGN KEY (tenant_id, canonical) REFERENCES entities(tenant_id, canonical) ON DELETE CASCADE;
+
+ALTER TABLE session_entities ADD CONSTRAINT fk_session_entities_entity
+  FOREIGN KEY (tenant_id, entity_canonical) REFERENCES entities(tenant_id, canonical);
+ALTER TABLE workstream_entities ADD CONSTRAINT fk_workstream_entities_entity
+  FOREIGN KEY (tenant_id, entity_canonical) REFERENCES entities(tenant_id, canonical);
+
+CREATE INDEX IF NOT EXISTS idx_entity_variants_canonical     ON entity_variants(tenant_id, canonical);
+CREATE INDEX IF NOT EXISTS idx_session_entities_entity_t     ON session_entities(tenant_id, entity_canonical);
+CREATE INDEX IF NOT EXISTS idx_workstream_entities_entity_t  ON workstream_entities(tenant_id, entity_canonical);
+
+INSERT INTO schema_migrations (version, name) VALUES (34, 'tenancy') ON CONFLICT DO NOTHING;

package/migrations/pg/035_tenant_name_uniqueness.sql

@@ -0,0 +1,15 @@
+-- migrations/pg/035_tenant_name_uniqueness.sql
+-- M4 (Team NLM program spec §5 row M4): sources.name / providers.name
+-- uniqueness re-keyed from a single-column UNIQUE constraint to
+-- (tenant_id, name), so two teams can register same-named sources/providers
+-- while a name still stays unique within one tenant. Constraint names
+-- verified against the live schema: sources_name_key / providers_name_key
+-- (the default names Postgres assigns to an inline `name TEXT ... UNIQUE`).
+
+ALTER TABLE sources   DROP CONSTRAINT IF EXISTS sources_name_key;
+ALTER TABLE providers DROP CONSTRAINT IF EXISTS providers_name_key;
+
+ALTER TABLE sources   ADD CONSTRAINT sources_tenant_name_key   UNIQUE (tenant_id, name);
+ALTER TABLE providers ADD CONSTRAINT providers_tenant_name_key UNIQUE (tenant_id, name);
+
+INSERT INTO schema_migrations (version, name) VALUES (35, 'tenant_name_uniqueness') ON CONFLICT DO NOTHING;

package/migrations/pg/036_sources_muse.sql

@@ -0,0 +1,12 @@
+-- Mirrors migrations/038_sources_muse.sql. Pg alters the CHECK in place.
+
+BEGIN;
+
+ALTER TABLE sources DROP CONSTRAINT IF EXISTS sources_kind_check;
+ALTER TABLE sources ADD CONSTRAINT sources_kind_check
+  CHECK (kind IN (
+    'claude-code', 'codex', 'hermes', 'hermes-agent', 'muse', 'aider',
+    'cursor', 'windsurf', 'opencode', 'pi', 'jsonl-generic', 'webhook'
+  ));
+
+COMMIT;

package/migrations/pg/037_learner_evidence.sql

@@ -0,0 +1,55 @@
+-- migrations/pg/036_learner_evidence.sql
+-- PG parity for SQLite migration 037 (learner evidence). Auto-applied by the
+-- version-gated runner (runMigrationsPg). Idempotent: every DDL statement uses
+-- IF NOT EXISTS, so re-applying on an existing schema is a no-op.
+-- Spec: docs/superpowers/specs/2026-10-06-learner-evidence-design.md §2.
+-- Summaries are computed from events, never stored: no concept_states table.
+
+BEGIN;
+
+CREATE TABLE IF NOT EXISTS learners (
+  id           TEXT NOT NULL,
+  label        TEXT NOT NULL,
+  profile_json JSONB NOT NULL DEFAULT '{}',
+  tenant_id    TEXT NOT NULL REFERENCES teams(id),
+  created_at   TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  updated_at   TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  PRIMARY KEY (tenant_id, id)
+);
+
+CREATE TABLE IF NOT EXISTS enrollments (
+  id                      TEXT PRIMARY KEY,
+  learner_id              TEXT NOT NULL,
+  course_id               TEXT NOT NULL,
+  workstream_id           TEXT REFERENCES workstreams(id),
+  plan_ref                TEXT NOT NULL,
+  plan_revision           INTEGER NOT NULL,
+  plan_fingerprint        TEXT NOT NULL,
+  status                  TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active','completed')),
+  completion_history_json JSONB NOT NULL DEFAULT '[]',
+  tenant_id               TEXT NOT NULL REFERENCES teams(id),
+  created_at              TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  updated_at              TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  UNIQUE (tenant_id, learner_id, course_id),
+  FOREIGN KEY (tenant_id, learner_id) REFERENCES learners(tenant_id, id) ON DELETE CASCADE
+);
+
+CREATE TABLE IF NOT EXISTS learning_events (
+  id              TEXT NOT NULL,
+  enrollment_id   TEXT NOT NULL REFERENCES enrollments(id) ON DELETE CASCADE,
+  date            TEXT NOT NULL,
+  covered_json    JSONB NOT NULL DEFAULT '[]',
+  attempts_json   JSONB NOT NULL DEFAULT '[]',
+  interpretation  TEXT NOT NULL DEFAULT '',
+  next_step       TEXT NOT NULL,
+  tenant_id       TEXT NOT NULL REFERENCES teams(id),
+  created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  PRIMARY KEY (enrollment_id, id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_learners_tenant    ON learners(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_enrollments_tenant ON enrollments(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_enrollments_ws     ON enrollments(workstream_id);
+CREATE INDEX IF NOT EXISTS idx_events_tenant      ON learning_events(tenant_id);
+
+COMMIT;