pikibun 0.20.0 → 0.22.0

package/dist/cli.js

@@ -1,9 +1,13 @@
 import {
   ConnectorSetupError,
+  ExtensionSourceError,
+  ExtensionStore,
   RepositoryCache,
   connectMain,
-  defaultStateDir
-} from "./chunks/chunk-BVKSJ7PV.js";
+  defaultStateDir,
+  loadInstalled,
+  parseExtensionSource
+} from "./chunks/chunk-KOZ2NZL7.js";
 
 // ../../apps/runner/src/cache-cli.ts
 import { join, relative, resolve } from "node:path";
@@ -61,10 +65,113 @@ async function cacheMain(args2) {
 `);
 }
 
+// ../../apps/runner/src/extensions-cli.ts
+import { resolve as resolve2 } from "node:path";
+import { parseArgs as parseArgs2 } from "node:util";
+var HELP2 = `Usage: pikibun extensions <command> [options]
+
+Pi extensions for the sessions on this host. A workspace chooses which ones its sessions use (Settings > Workspaces >
+the workspace > Extensions in Pikibun); a session runs with those this host has at the same version. The host's owner
+can also install them from Pikibun (Settings > Hosts > this host > Extensions). They run in the connector, as this
+machine's user, outside the sandbox: install only code you trust.
+
+Commands:
+  add SOURCE              Install an extension, pinned:
+                            npm:<package>@<exact version>     e.g. npm:@ollama/pi-web-search@0.0.5
+                            git:<https URL>@<full commit>     e.g. git:github.com/acme/search@<40-character commit>
+                            PATH                              a dev extension: a .ts/.js file or a package directory,
+                                                              loaded in place, in your own sessions on this host only
+  list                    Load Pikibun's own and the installed extensions and show what each offers, ignores, or why it
+                          doesn't load
+  remove NAME             Uninstall one: its source as listed, a package name, or a dev extension's path
+
+Options:
+  --state-dir PATH        Connector state (default ~/.local/share/pikibun/connector)
+  --allow-scripts         For add: let npm run the package's install scripts (off by default)
+  --help                  Show this help
+
+Pikibun's built-in extensions (piki:gh, piki:glab, piki:azure-cli) come with the connector: they run the GitHub, GitLab
+or Azure CLI installed and signed in on this host, where a workspace uses them. Nothing to install.
+
+A running connector picks up changes made here when it next reconnects; restart it to use them at once.
+`;
+async function extensionsMain(args2) {
+  const { values, positionals } = parseArgs2({ args: args2, strict: true, allowPositionals: true, options: {
+    help: { type: "boolean" },
+    "state-dir": { type: "string" },
+    "allow-scripts": { type: "boolean" }
+  } });
+  const [command2, ...rest] = positionals;
+  if (values.help || command2 === void 0) {
+    process.stdout.write(HELP2);
+    return;
+  }
+  const store = ExtensionStore.forStateDir(resolve2(values["state-dir"] ?? defaultStateDir()));
+  try {
+    if (command2 === "add" && rest.length === 1) {
+      const installed = await store.add(parseExtensionSource(rest[0]), { allowScripts: values["allow-scripts"] });
+      process.stdout.write(`Installed ${installed.source}.
+`);
+      print((await loadInstalled(store)).filter((item) => item.summary.source === installed.source));
+      return;
+    }
+    if (values["allow-scripts"]) throw new ConnectorSetupError("--allow-scripts applies to add only.");
+    if (command2 === "list" && !rest.length) {
+      const loaded = await loadInstalled(store);
+      if (!loaded.some((item) => !item.factories)) process.stdout.write(`No extensions installed in ${store.directory}.
+`);
+      print(loaded);
+      return;
+    }
+    if (command2 === "remove" && rest.length === 1) {
+      const removed = await store.remove(rest[0]);
+      process.stdout.write(`Removed ${removed.source}.
+`);
+      return;
+    }
+  } catch (error) {
+    if (error instanceof ExtensionSourceError) throw new ConnectorSetupError(error.message);
+    throw error;
+  }
+  throw new ConnectorSetupError(`Unknown extensions command: ${positionals.join(" ")}. Run "pikibun extensions --help".`);
+}
+function print(loaded) {
+  for (const { summary } of loaded) {
+    process.stdout.write(`${summary.source}${summary.dev ? "  (dev: your own sessions on this host)" : summary.source.startsWith("piki:") ? "  (built into the connector)" : ""}
+`);
+    if (summary.description) process.stdout.write(`  ${summary.description}
+`);
+    if (summary.error) {
+      process.stdout.write(`  Doesn't load: ${summary.error}
+`);
+      continue;
+    }
+    for (const module of summary.modules) {
+      process.stdout.write(`  ${module.path}
+`);
+      if (module.error) {
+        process.stdout.write(`    Doesn't load: ${module.error}
+`);
+        continue;
+      }
+      if (module.tools.length) process.stdout.write(`    Tools: ${module.tools.map((tool) => tool.name).join(", ")}
+`);
+      if (module.events.length) process.stdout.write(`    Events: ${module.events.join(", ")}
+`);
+      if (module.flags.length) process.stdout.write(`    Settings: ${module.flags.map((flag) => flag.name).join(", ")}
+`);
+      if (module.noops.length) process.stdout.write(`    Does nothing here: ${module.noops.join(", ")}
+`);
+      if (module.ignored.length) process.stdout.write(`    Not supported: ${module.ignored.join(", ")}
+`);
+    }
+  }
+}
+
 // package.json
 var package_default = {
   name: "pikibun",
-  version: "0.20.0",
+  version: "0.22.0",
   description: "Connect your Linux or WSL2 Pi host to a Pikibun workspace, or run Pikibun on your own computer.",
   license: "MIT",
   homepage: "https://pikibun.com",
@@ -82,6 +189,7 @@ var package_default = {
   dependencies: {
     "@earendil-works/chord": "1.4.0",
     "@earendil-works/pi-ai": "1.4.0",
+    "@earendil-works/pi-codemode": "1.4.0",
     "@earendil-works/pi-coding-agent": "1.4.0",
     "@earendil-works/pi-durable": "1.4.0",
     "@hono/node-server": "1.19.11",
@@ -105,6 +213,7 @@ Commands:
   serve       Run Pikibun on this computer, for yourself with it as the host,
               or shared with others (--share)
   cache       List or prune this host's repository cache
+  extensions  Add, list or remove this host's extensions
 
 Options:
   --help      Show this help
@@ -113,8 +222,8 @@ Options:
 Run "pikibun connect --help" or "pikibun serve --help" for their options.
 `;
 var [command, ...args] = process.argv.slice(2);
-var serveMain = async (args2) => (await import("./chunks/cli-W7LFSBCE.js")).serveMain(args2);
-var run = command === "connect" ? connectMain : command === "cache" ? cacheMain : command === "serve" ? serveMain : void 0;
+var serveMain = async (args2) => (await import("./chunks/cli-OGQRYOKN.js")).serveMain(args2);
+var run = command === "connect" ? connectMain : command === "cache" ? cacheMain : command === "extensions" ? extensionsMain : command === "serve" ? serveMain : void 0;
 if (run) {
   run(args).catch((error) => {
     process.stderr.write(error instanceof ConnectorSetupError ? `${error.message}

package/dist/migrations/postgres/0038_workspace_attachments.sql

@@ -0,0 +1,11 @@
+-- Postgres translation of sqlite/0045_workspace_attachments.sql.
+
+-- Files attached to messages (apps/server/src/file-uploads.ts).
+-- A workspace's attachment settings, as its owners and admins chose them; no row: the defaults (10 MiB a file).
+-- max_file_bytes: the largest file a message here may carry, uploaded into the session's worktree.
+CREATE TABLE workspace_attachment_settings (
+  workspace_id TEXT PRIMARY KEY REFERENCES workspaces(id) ON DELETE CASCADE,
+  max_file_bytes BIGINT NOT NULL CHECK (max_file_bytes BETWEEN 1048576 AND 52428800),
+  updated_by TEXT NOT NULL REFERENCES users(id),
+  updated_at TEXT NOT NULL
+);

package/dist/migrations/postgres/0039_extensions.sql

@@ -0,0 +1,54 @@
+-- Postgres translation of sqlite/0046_extensions.sql.
+
+-- Extensions (docs/design/host-extensions.md, apps/server/src/extensions.ts).
+-- The Pi extensions a workspace's sessions use, one version of each package, in order; its owners and admins choose them.
+-- package_key is npm:<name> or git:<url>; source pins the version (npm:<name>@<version>, git:<url>@<commit>).
+CREATE TABLE workspace_extensions (
+  workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  package_key TEXT NOT NULL,
+  source TEXT NOT NULL,
+  position BIGINT NOT NULL,
+  enabled BIGINT NOT NULL DEFAULT 1 CHECK (enabled IN (0, 1)),
+  tools_mode TEXT NOT NULL DEFAULT 'approval' CHECK (tools_mode IN ('approval', 'automatic')),
+  settings_json TEXT NOT NULL DEFAULT '{}',
+  updated_by TEXT NOT NULL REFERENCES users(id),
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (workspace_id, package_key)
+);
+-- What each host last reported it has installed (HostExtensionsReport), on each sync of its connector.
+CREATE TABLE connector_extensions (
+  connector_id TEXT PRIMARY KEY REFERENCES connectors(id) ON DELETE CASCADE,
+  report_json TEXT NOT NULL,
+  reported_at TEXT NOT NULL
+);
+-- The host owner's own extension settings; no row: the defaults. automatic_tools 1 lets workspaces run extension tools
+-- without approval on this host, where they set an extension's tools to automatic.
+CREATE TABLE connector_extension_settings (
+  connector_id TEXT PRIMARY KEY REFERENCES connectors(id) ON DELETE CASCADE,
+  automatic_tools BIGINT NOT NULL DEFAULT 0 CHECK (automatic_tools IN (0, 1)),
+  updated_by TEXT NOT NULL REFERENCES users(id),
+  updated_at TEXT NOT NULL
+);
+-- Installs and removals the host's owner asked for in Pikibun; its connector carries them out when it next syncs and
+-- reports how they went.
+CREATE TABLE connector_extension_requests (
+  id TEXT PRIMARY KEY,
+  connector_id TEXT NOT NULL REFERENCES connectors(id) ON DELETE CASCADE,
+  action TEXT NOT NULL CHECK (action IN ('install', 'remove')),
+  source TEXT NOT NULL,
+  requested_by TEXT NOT NULL REFERENCES users(id),
+  requested_at TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'done', 'failed')),
+  error TEXT,
+  finished_at TEXT
+);
+CREATE INDEX connector_extension_requests_pending ON connector_extension_requests (connector_id, status, requested_at);
+-- Another member's extension tool call a host said ran automatically, which the control plane couldn't confirm the first
+-- time it saw it (the workspace didn't run that extension's tools automatically on that host): shown as a plain record,
+-- never reviewed, even once the setting allows it.
+CREATE TABLE approval_unconfirmed_automatic (
+  session_id TEXT NOT NULL REFERENCES sessions(id),
+  approval_id TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  PRIMARY KEY (session_id, approval_id)
+);

package/dist/migrations/postgres/0040_child_session_settings.sql

@@ -0,0 +1,12 @@
+-- Postgres translation of sqlite/0047_child_session_settings.sql.
+
+-- Sessions started by an agent (apps/server/src/cross-session.ts, docs/design/cross-session.md).
+-- A workspace's settings for them, as its owners and admins chose them; no row: the defaults (on).
+-- child_models 1: an agent that starts a session for a sub-task may choose the model and reasoning level it runs on.
+-- 0: every such session runs on its parent's current model and reasoning level.
+CREATE TABLE workspace_child_session_settings (
+  workspace_id TEXT PRIMARY KEY REFERENCES workspaces(id) ON DELETE CASCADE,
+  child_models BIGINT NOT NULL DEFAULT 1 CHECK (child_models IN (0, 1)),
+  updated_by TEXT NOT NULL REFERENCES users(id),
+  updated_at TEXT NOT NULL
+);

package/dist/migrations/postgres/0040_host_builtin_extensions.sql

@@ -0,0 +1,5 @@
+-- Postgres translation of sqlite/0047_host_builtin_extensions.sql.
+
+-- Pi's built-in extensions every session on a host runs with, as its owner and admins set it in Pikibun
+-- (HostConfig.builtinExtensions in packages/shared/src/host-config.ts): their names, as a JSON array. '[]' runs none.
+ALTER TABLE connector_configs ADD COLUMN builtin_extensions_json TEXT NOT NULL DEFAULT '[]';

package/dist/migrations/postgres/0040_notifications.sql

@@ -0,0 +1,47 @@
+-- Postgres translation of sqlite/0047_notifications.sql.
+
+-- Notifications (docs/notifications.md, apps/server/src/notifications.ts).
+-- Which notifications each person gets; no row: the defaults (everything on, with session titles).
+CREATE TABLE notification_preferences (
+  user_id TEXT PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  approvals BIGINT NOT NULL DEFAULT 1 CHECK (approvals IN (0, 1)),
+  finished BIGINT NOT NULL DEFAULT 1 CHECK (finished IN (0, 1)),
+  failed BIGINT NOT NULL DEFAULT 1 CHECK (failed IN (0, 1)),
+  details BIGINT NOT NULL DEFAULT 1 CHECK (details IN (0, 1)),
+  updated_at TEXT NOT NULL
+);
+-- The devices that get a person's notifications: a browser's Web Push subscription (endpoint, p256dh and auth keys) or
+-- the app's Expo push token (in endpoint). Each belongs to the sign-in that registered it, and goes with it: signing
+-- out, or signing an app out from the web, stops its notifications.
+CREATE TABLE notification_devices (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  auth_token_hash TEXT NOT NULL REFERENCES auth_sessions(token_hash) ON DELETE CASCADE,
+  kind TEXT NOT NULL CHECK (kind IN ('web', 'expo')),
+  endpoint TEXT NOT NULL UNIQUE,
+  p256dh TEXT,
+  auth TEXT,
+  name TEXT,
+  created_at TEXT NOT NULL,
+  CHECK ((kind = 'web') = (p256dh IS NOT NULL AND auth IS NOT NULL))
+);
+CREATE INDEX notification_devices_user ON notification_devices(user_id);
+CREATE INDEX notification_devices_auth ON notification_devices(auth_token_hash);
+-- Each person's recent notifications, which open web pages and desktop windows poll (GET /api/notifications/feed).
+-- Ids sort in the order they were made; rows older than a day are removed as new ones come.
+CREATE TABLE notifications (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  session_id TEXT REFERENCES sessions(id) ON DELETE CASCADE,
+  kind TEXT NOT NULL CHECK (kind IN ('approval', 'finished', 'failed', 'test')),
+  title TEXT NOT NULL,
+  body TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+CREATE INDEX notifications_user ON notifications(user_id, id);
+-- Keys the server makes for itself once; the Web Push (VAPID) key pair, its private half sealed with VAULT_KEY.
+CREATE TABLE server_keys (
+  name TEXT PRIMARY KEY,
+  value TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);

package/dist/migrations/postgres/0041_piki_extensions.sql

@@ -0,0 +1,32 @@
+-- Postgres translation of sqlite/0048_piki_extensions.sql.
+
+-- Pikibun extensions (docs/design/piki-extensions.md, apps/server/src/extensions.ts).
+-- piki:<name> sources come with the connector; their package_key is the source itself. A workspace that binds its
+-- first repository on GitHub (github.com or Enterprise Server), GitLab or Azure DevOps gets the extension of that forge's
+-- command-line tool (gh, glab, az): its tools wait for approval, and owners and admins turn it off or remove it like any
+-- other. Workspaces that already have such a repository get it here, as their owner, unless they use 32 extensions.
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+SELECT w.id, 'piki:gh', 'piki:gh', COALESCE((SELECT MAX(e.position) FROM workspace_extensions e WHERE e.workspace_id = w.id), 0) + 1, 1, 'approval', '{}', w.owner_id,
+  to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')
+FROM workspaces w
+WHERE EXISTS (SELECT 1 FROM workspace_repositories r WHERE r.workspace_id = w.id AND r.provider IN ('github', 'github-enterprise'))
+  AND NOT EXISTS (SELECT 1 FROM workspace_extensions e WHERE e.workspace_id = w.id AND e.package_key = 'piki:gh')
+  AND (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32;
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+SELECT w.id, 'piki:glab', 'piki:glab', COALESCE((SELECT MAX(e.position) FROM workspace_extensions e WHERE e.workspace_id = w.id), 0) + 1, 1, 'approval', '{}', w.owner_id,
+  to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')
+FROM workspaces w
+WHERE EXISTS (SELECT 1 FROM workspace_repositories r WHERE r.workspace_id = w.id AND r.provider IN ('gitlab'))
+  AND NOT EXISTS (SELECT 1 FROM workspace_extensions e WHERE e.workspace_id = w.id AND e.package_key = 'piki:glab')
+  AND (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32;
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+SELECT w.id, 'piki:azure-cli', 'piki:azure-cli', COALESCE((SELECT MAX(e.position) FROM workspace_extensions e WHERE e.workspace_id = w.id), 0) + 1, 1, 'approval', '{}', w.owner_id,
+  to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')
+FROM workspaces w
+WHERE EXISTS (SELECT 1 FROM workspace_repositories r WHERE r.workspace_id = w.id AND r.provider IN ('azure-devops'))
+  AND NOT EXISTS (SELECT 1 FROM workspace_extensions e WHERE e.workspace_id = w.id AND e.package_key = 'piki:azure-cli')
+  AND (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32;
+-- Pi's built-in extensions a host's configuration turns on are named pi:<name> (packages/shared/src/host-config.ts),
+-- beside Pikibun's own piki:<name>; configurations saved before named them bare. Reads accept those too.
+UPDATE connector_configs SET builtin_extensions_json = REPLACE(builtin_extensions_json, '"codemode"', '"pi:codemode"')
+  WHERE builtin_extensions_json LIKE '%"codemode"%';

package/dist/migrations/postgres/0042_default_extensions.sql

@@ -0,0 +1,23 @@
+-- Postgres translation of sqlite/0049_default_extensions.sql.
+-- Popular Pi extensions for every existing workspace (docs/extensions.md), turned off and with tools on approval, after
+-- the ones it has: its owners and admins turn on the ones they want. New workspaces get the same ones when they are
+-- created (defaultWorkspaceExtensions in packages/shared/src/host-extensions.ts, which lists the same sources). A
+-- workspace that already uses a package, any version of it, keeps its own; one at the limit of 32 gets no more.
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+  SELECT w.id, 'npm:pi-web-access', 'npm:pi-web-access@0.46.0', (SELECT COALESCE(MAX(e.position), 0) + 1 FROM workspace_extensions e WHERE e.workspace_id = w.id),
+    0, 'approval', '{}', w.owner_id, to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')
+  FROM workspaces w
+  WHERE (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32
+  ON CONFLICT (workspace_id, package_key) DO NOTHING;
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+  SELECT w.id, 'npm:pi-web-search', 'npm:pi-web-search@1.7.0', (SELECT COALESCE(MAX(e.position), 0) + 1 FROM workspace_extensions e WHERE e.workspace_id = w.id),
+    0, 'approval', '{}', w.owner_id, to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')
+  FROM workspaces w
+  WHERE (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32
+  ON CONFLICT (workspace_id, package_key) DO NOTHING;
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+  SELECT w.id, 'npm:cc-safety-net', 'npm:cc-safety-net@2.7.2', (SELECT COALESCE(MAX(e.position), 0) + 1 FROM workspace_extensions e WHERE e.workspace_id = w.id),
+    0, 'approval', '{}', w.owner_id, to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')
+  FROM workspaces w
+  WHERE (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32
+  ON CONFLICT (workspace_id, package_key) DO NOTHING;

package/dist/migrations/postgres/0043_host_required_extensions.sql

@@ -0,0 +1,6 @@
+-- Postgres translation of sqlite/0050_host_required_extensions.sql.
+
+-- The extensions a host's owner requires of every session on it, whatever its workspace chose (HostConfig.requiredExtensions
+-- in packages/shared/src/host-config.ts): each one's source and settings, as JSON, in the order sessions run them.
+-- '[]' requires none.
+ALTER TABLE connector_configs ADD COLUMN required_extensions_json TEXT NOT NULL DEFAULT '[]';

package/dist/migrations/sqlite/0045_workspace_attachments.sql

@@ -0,0 +1,9 @@
+-- Files attached to messages (apps/server/src/file-uploads.ts).
+-- A workspace's attachment settings, as its owners and admins chose them; no row: the defaults (10 MiB a file).
+-- max_file_bytes: the largest file a message here may carry, uploaded into the session's worktree.
+CREATE TABLE workspace_attachment_settings (
+  workspace_id TEXT PRIMARY KEY REFERENCES workspaces(id) ON DELETE CASCADE,
+  max_file_bytes INTEGER NOT NULL CHECK (max_file_bytes BETWEEN 1048576 AND 52428800),
+  updated_by TEXT NOT NULL REFERENCES users(id),
+  updated_at TEXT NOT NULL
+);

package/dist/migrations/sqlite/0046_extensions.sql

@@ -0,0 +1,52 @@
+-- Extensions (docs/design/host-extensions.md, apps/server/src/extensions.ts).
+-- The Pi extensions a workspace's sessions use, one version of each package, in order; its owners and admins choose them.
+-- package_key is npm:<name> or git:<url>; source pins the version (npm:<name>@<version>, git:<url>@<commit>).
+CREATE TABLE workspace_extensions (
+  workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  package_key TEXT NOT NULL,
+  source TEXT NOT NULL,
+  position INTEGER NOT NULL,
+  enabled INTEGER NOT NULL DEFAULT 1 CHECK (enabled IN (0, 1)),
+  tools_mode TEXT NOT NULL DEFAULT 'approval' CHECK (tools_mode IN ('approval', 'automatic')),
+  settings_json TEXT NOT NULL DEFAULT '{}',
+  updated_by TEXT NOT NULL REFERENCES users(id),
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (workspace_id, package_key)
+);
+-- What each host last reported it has installed (HostExtensionsReport), on each sync of its connector.
+CREATE TABLE connector_extensions (
+  connector_id TEXT PRIMARY KEY REFERENCES connectors(id) ON DELETE CASCADE,
+  report_json TEXT NOT NULL,
+  reported_at TEXT NOT NULL
+);
+-- The host owner's own extension settings; no row: the defaults. automatic_tools 1 lets workspaces run extension tools
+-- without approval on this host, where they set an extension's tools to automatic.
+CREATE TABLE connector_extension_settings (
+  connector_id TEXT PRIMARY KEY REFERENCES connectors(id) ON DELETE CASCADE,
+  automatic_tools INTEGER NOT NULL DEFAULT 0 CHECK (automatic_tools IN (0, 1)),
+  updated_by TEXT NOT NULL REFERENCES users(id),
+  updated_at TEXT NOT NULL
+);
+-- Installs and removals the host's owner asked for in Pikibun; its connector carries them out when it next syncs and
+-- reports how they went.
+CREATE TABLE connector_extension_requests (
+  id TEXT PRIMARY KEY,
+  connector_id TEXT NOT NULL REFERENCES connectors(id) ON DELETE CASCADE,
+  action TEXT NOT NULL CHECK (action IN ('install', 'remove')),
+  source TEXT NOT NULL,
+  requested_by TEXT NOT NULL REFERENCES users(id),
+  requested_at TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'done', 'failed')),
+  error TEXT,
+  finished_at TEXT
+);
+CREATE INDEX connector_extension_requests_pending ON connector_extension_requests (connector_id, status, requested_at);
+-- Another member's extension tool call a host said ran automatically, which the control plane couldn't confirm the first
+-- time it saw it (the workspace didn't run that extension's tools automatically on that host): shown as a plain record,
+-- never reviewed, even once the setting allows it.
+CREATE TABLE approval_unconfirmed_automatic (
+  session_id TEXT NOT NULL REFERENCES sessions(id),
+  approval_id TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  PRIMARY KEY (session_id, approval_id)
+);

package/dist/migrations/sqlite/0047_child_session_settings.sql

@@ -0,0 +1,10 @@
+-- Sessions started by an agent (apps/server/src/cross-session.ts, docs/design/cross-session.md).
+-- A workspace's settings for them, as its owners and admins chose them; no row: the defaults (on).
+-- child_models 1: an agent that starts a session for a sub-task may choose the model and reasoning level it runs on.
+-- 0: every such session runs on its parent's current model and reasoning level.
+CREATE TABLE workspace_child_session_settings (
+  workspace_id TEXT PRIMARY KEY REFERENCES workspaces(id) ON DELETE CASCADE,
+  child_models INTEGER NOT NULL DEFAULT 1 CHECK (child_models IN (0, 1)),
+  updated_by TEXT NOT NULL REFERENCES users(id),
+  updated_at TEXT NOT NULL
+);

package/dist/migrations/sqlite/0047_host_builtin_extensions.sql

@@ -0,0 +1,3 @@
+-- Pi's built-in extensions every session on a host runs with, as its owner and admins set it in Pikibun
+-- (HostConfig.builtinExtensions in packages/shared/src/host-config.ts): their names, as a JSON array. '[]' runs none.
+ALTER TABLE connector_configs ADD COLUMN builtin_extensions_json TEXT NOT NULL DEFAULT '[]';

package/dist/migrations/sqlite/0047_notifications.sql

@@ -0,0 +1,45 @@
+-- Notifications (docs/notifications.md, apps/server/src/notifications.ts).
+-- Which notifications each person gets; no row: the defaults (everything on, with session titles).
+CREATE TABLE notification_preferences (
+  user_id TEXT PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  approvals INTEGER NOT NULL DEFAULT 1 CHECK (approvals IN (0, 1)),
+  finished INTEGER NOT NULL DEFAULT 1 CHECK (finished IN (0, 1)),
+  failed INTEGER NOT NULL DEFAULT 1 CHECK (failed IN (0, 1)),
+  details INTEGER NOT NULL DEFAULT 1 CHECK (details IN (0, 1)),
+  updated_at TEXT NOT NULL
+);
+-- The devices that get a person's notifications: a browser's Web Push subscription (endpoint, p256dh and auth keys) or
+-- the app's Expo push token (in endpoint). Each belongs to the sign-in that registered it, and goes with it: signing
+-- out, or signing an app out from the web, stops its notifications.
+CREATE TABLE notification_devices (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  auth_token_hash TEXT NOT NULL REFERENCES auth_sessions(token_hash) ON DELETE CASCADE,
+  kind TEXT NOT NULL CHECK (kind IN ('web', 'expo')),
+  endpoint TEXT NOT NULL UNIQUE,
+  p256dh TEXT,
+  auth TEXT,
+  name TEXT,
+  created_at TEXT NOT NULL,
+  CHECK ((kind = 'web') = (p256dh IS NOT NULL AND auth IS NOT NULL))
+);
+CREATE INDEX notification_devices_user ON notification_devices(user_id);
+CREATE INDEX notification_devices_auth ON notification_devices(auth_token_hash);
+-- Each person's recent notifications, which open web pages and desktop windows poll (GET /api/notifications/feed).
+-- Ids sort in the order they were made; rows older than a day are removed as new ones come.
+CREATE TABLE notifications (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  session_id TEXT REFERENCES sessions(id) ON DELETE CASCADE,
+  kind TEXT NOT NULL CHECK (kind IN ('approval', 'finished', 'failed', 'test')),
+  title TEXT NOT NULL,
+  body TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+CREATE INDEX notifications_user ON notifications(user_id, id);
+-- Keys the server makes for itself once; the Web Push (VAPID) key pair, its private half sealed with VAULT_KEY.
+CREATE TABLE server_keys (
+  name TEXT PRIMARY KEY,
+  value TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);

package/dist/migrations/sqlite/0048_piki_extensions.sql

@@ -0,0 +1,30 @@
+-- Pikibun extensions (docs/design/piki-extensions.md, apps/server/src/extensions.ts).
+-- piki:<name> sources come with the connector; their package_key is the source itself. A workspace that binds its
+-- first repository on GitHub (github.com or Enterprise Server), GitLab or Azure DevOps gets the extension of that forge's
+-- command-line tool (gh, glab, az): its tools wait for approval, and owners and admins turn it off or remove it like any
+-- other. Workspaces that already have such a repository get it here, as their owner, unless they use 32 extensions.
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+SELECT w.id, 'piki:gh', 'piki:gh', COALESCE((SELECT MAX(e.position) FROM workspace_extensions e WHERE e.workspace_id = w.id), 0) + 1, 1, 'approval', '{}', w.owner_id,
+  strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+FROM workspaces w
+WHERE EXISTS (SELECT 1 FROM workspace_repositories r WHERE r.workspace_id = w.id AND r.provider IN ('github', 'github-enterprise'))
+  AND NOT EXISTS (SELECT 1 FROM workspace_extensions e WHERE e.workspace_id = w.id AND e.package_key = 'piki:gh')
+  AND (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32;
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+SELECT w.id, 'piki:glab', 'piki:glab', COALESCE((SELECT MAX(e.position) FROM workspace_extensions e WHERE e.workspace_id = w.id), 0) + 1, 1, 'approval', '{}', w.owner_id,
+  strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+FROM workspaces w
+WHERE EXISTS (SELECT 1 FROM workspace_repositories r WHERE r.workspace_id = w.id AND r.provider IN ('gitlab'))
+  AND NOT EXISTS (SELECT 1 FROM workspace_extensions e WHERE e.workspace_id = w.id AND e.package_key = 'piki:glab')
+  AND (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32;
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+SELECT w.id, 'piki:azure-cli', 'piki:azure-cli', COALESCE((SELECT MAX(e.position) FROM workspace_extensions e WHERE e.workspace_id = w.id), 0) + 1, 1, 'approval', '{}', w.owner_id,
+  strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+FROM workspaces w
+WHERE EXISTS (SELECT 1 FROM workspace_repositories r WHERE r.workspace_id = w.id AND r.provider IN ('azure-devops'))
+  AND NOT EXISTS (SELECT 1 FROM workspace_extensions e WHERE e.workspace_id = w.id AND e.package_key = 'piki:azure-cli')
+  AND (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32;
+-- Pi's built-in extensions a host's configuration turns on are named pi:<name> (packages/shared/src/host-config.ts),
+-- beside Pikibun's own piki:<name>; configurations saved before named them bare. Reads accept those too.
+UPDATE connector_configs SET builtin_extensions_json = REPLACE(builtin_extensions_json, '"codemode"', '"pi:codemode"')
+  WHERE builtin_extensions_json LIKE '%"codemode"%';

package/dist/migrations/sqlite/0049_default_extensions.sql

@@ -0,0 +1,22 @@
+-- Popular Pi extensions for every existing workspace (docs/extensions.md), turned off and with tools on approval, after
+-- the ones it has: its owners and admins turn on the ones they want. New workspaces get the same ones when they are
+-- created (defaultWorkspaceExtensions in packages/shared/src/host-extensions.ts, which lists the same sources). A
+-- workspace that already uses a package, any version of it, keeps its own; one at the limit of 32 gets no more.
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+  SELECT w.id, 'npm:pi-web-access', 'npm:pi-web-access@0.46.0', (SELECT COALESCE(MAX(e.position), 0) + 1 FROM workspace_extensions e WHERE e.workspace_id = w.id),
+    0, 'approval', '{}', w.owner_id, strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+  FROM workspaces w
+  WHERE (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32
+  ON CONFLICT (workspace_id, package_key) DO NOTHING;
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+  SELECT w.id, 'npm:pi-web-search', 'npm:pi-web-search@1.7.0', (SELECT COALESCE(MAX(e.position), 0) + 1 FROM workspace_extensions e WHERE e.workspace_id = w.id),
+    0, 'approval', '{}', w.owner_id, strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+  FROM workspaces w
+  WHERE (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32
+  ON CONFLICT (workspace_id, package_key) DO NOTHING;
+INSERT INTO workspace_extensions (workspace_id, package_key, source, position, enabled, tools_mode, settings_json, updated_by, updated_at)
+  SELECT w.id, 'npm:cc-safety-net', 'npm:cc-safety-net@2.7.2', (SELECT COALESCE(MAX(e.position), 0) + 1 FROM workspace_extensions e WHERE e.workspace_id = w.id),
+    0, 'approval', '{}', w.owner_id, strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+  FROM workspaces w
+  WHERE (SELECT COUNT(*) FROM workspace_extensions e WHERE e.workspace_id = w.id) < 32
+  ON CONFLICT (workspace_id, package_key) DO NOTHING;

package/dist/migrations/sqlite/0050_host_required_extensions.sql

@@ -0,0 +1,4 @@
+-- The extensions a host's owner requires of every session on it, whatever its workspace chose (HostConfig.requiredExtensions
+-- in packages/shared/src/host-config.ts): each one's source and settings, as JSON, in the order sessions run them.
+-- '[]' requires none.
+ALTER TABLE connector_configs ADD COLUMN required_extensions_json TEXT NOT NULL DEFAULT '[]';