thinkwork-cli 0.12.11 → 0.12.15

package/dist/drizzle/0109_space_owned_threads.sql

@@ -0,0 +1,217 @@
+-- Purpose: make Spaces the required parent container for every Thread.
+-- Plan: docs/plans/2026-05-19-003-feat-spaces-customer-onboarding-v1-plan.md (U13 follow-up)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0109_space_owned_threads.sql
+-- creates-constraint: public.threads.threads_space_id_required
+-- creates-constraint: public.thread_participants.thread_participants_space_id_required
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+INSERT INTO public.spaces (
+  tenant_id,
+  slug,
+  name,
+  description,
+  prompt,
+  status,
+  kind,
+  template_key,
+  config
+)
+SELECT
+  t.id,
+  'general',
+  'General',
+  'Default Space for conversations that are not part of a configured workflow.',
+  'Use this Space for general collaboration, ad hoc questions, and Threads that do not belong to a specialized workflow.',
+  'active',
+  'custom',
+  'general',
+  '{"workflow":"general","version":1,"source":"space_owned_threads_migration"}'::jsonb
+FROM public.tenants t
+ON CONFLICT (tenant_id, slug)
+DO UPDATE SET
+  name = EXCLUDED.name,
+  description = EXCLUDED.description,
+  prompt = EXCLUDED.prompt,
+  status = 'active',
+  kind = EXCLUDED.kind,
+  template_key = EXCLUDED.template_key,
+  config = EXCLUDED.config,
+  updated_at = now();
+
+INSERT INTO public.spaces (
+  tenant_id,
+  slug,
+  name,
+  description,
+  prompt,
+  status,
+  kind,
+  template_key,
+  config
+)
+SELECT
+  t.id,
+  'customer-onboarding',
+  'Customer Onboarding',
+  'Closed-won customer onboarding cases, checklist coordination, and LastMile task links.',
+  'Coordinate customer onboarding after a closed-won opportunity. Keep the Thread factual, ask humans for missing source information, and keep required checklist tasks moving.',
+  'active',
+  'customer_onboarding',
+  'customer_onboarding',
+  '{"workflow":"customer_onboarding","version":1,"source":"space_owned_threads_migration"}'::jsonb
+FROM public.tenants t
+ON CONFLICT (tenant_id, slug)
+DO UPDATE SET
+  name = EXCLUDED.name,
+  description = EXCLUDED.description,
+  prompt = COALESCE(public.spaces.prompt, EXCLUDED.prompt),
+  status = 'active',
+  kind = EXCLUDED.kind,
+  template_key = EXCLUDED.template_key,
+  config = COALESCE(public.spaces.config, EXCLUDED.config),
+  updated_at = now();
+
+INSERT INTO public.space_members (
+  tenant_id,
+  space_id,
+  user_id,
+  role,
+  notification_preference
+)
+SELECT
+  u.tenant_id,
+  s.id,
+  u.id,
+  'member',
+  'subscribed'
+FROM public.users u
+JOIN public.spaces s
+  ON s.tenant_id = u.tenant_id
+WHERE u.tenant_id IS NOT NULL
+  AND s.slug IN ('general', 'customer-onboarding')
+ON CONFLICT (tenant_id, space_id, user_id)
+DO NOTHING;
+
+UPDATE public.threads t
+SET
+  space_id = CASE
+    WHEN t.metadata ? 'customerOnboarding' THEN onboarding.id
+    ELSE general.id
+  END,
+  updated_at = now()
+FROM public.spaces general
+JOIN public.spaces onboarding
+  ON onboarding.tenant_id = general.tenant_id
+ AND onboarding.slug = 'customer-onboarding'
+WHERE general.tenant_id = t.tenant_id
+  AND general.slug = 'general'
+  AND t.space_id IS NULL;
+
+UPDATE public.thread_participants tp
+SET
+  space_id = t.space_id,
+  updated_at = now()
+FROM public.threads t
+WHERE tp.thread_id = t.id
+  AND tp.space_id IS NULL
+  AND t.space_id IS NOT NULL;
+
+INSERT INTO public.thread_participants (
+  tenant_id,
+  thread_id,
+  space_id,
+  participant_type,
+  user_id,
+  role,
+  source,
+  notification_preference
+)
+SELECT
+  t.tenant_id,
+  t.id,
+  t.space_id,
+  'user',
+  t.user_id,
+  CASE WHEN t.created_by_id = t.user_id::text THEN 'requester' ELSE 'member' END,
+  'space_owned_threads_backfill',
+  'subscribed'
+FROM public.threads t
+WHERE t.space_id IS NOT NULL
+  AND t.user_id IS NOT NULL
+ON CONFLICT DO NOTHING;
+
+INSERT INTO public.thread_participants (
+  tenant_id,
+  thread_id,
+  space_id,
+  participant_type,
+  agent_id,
+  role,
+  source,
+  notification_preference
+)
+SELECT
+  t.tenant_id,
+  t.id,
+  t.space_id,
+  'agent',
+  t.agent_id,
+  'agent',
+  'space_owned_threads_backfill',
+  'mentions'
+FROM public.threads t
+WHERE t.space_id IS NOT NULL
+  AND t.agent_id IS NOT NULL
+ON CONFLICT DO NOTHING;
+
+ALTER TABLE public.threads
+  DROP CONSTRAINT IF EXISTS threads_space_id_spaces_id_fk;
+
+ALTER TABLE public.threads
+  DROP CONSTRAINT IF EXISTS threads_space_id_required;
+
+ALTER TABLE public.threads
+  ALTER COLUMN space_id SET NOT NULL;
+
+ALTER TABLE public.threads
+  ADD CONSTRAINT threads_space_id_spaces_id_fk
+  FOREIGN KEY (space_id)
+  REFERENCES public.spaces(id)
+  ON DELETE RESTRICT;
+
+ALTER TABLE public.threads
+  ADD CONSTRAINT threads_space_id_required
+  CHECK (space_id IS NOT NULL) NOT VALID;
+
+ALTER TABLE public.threads
+  VALIDATE CONSTRAINT threads_space_id_required;
+
+ALTER TABLE public.thread_participants
+  DROP CONSTRAINT IF EXISTS thread_participants_space_id_spaces_id_fk;
+
+ALTER TABLE public.thread_participants
+  DROP CONSTRAINT IF EXISTS thread_participants_space_id_required;
+
+ALTER TABLE public.thread_participants
+  ALTER COLUMN space_id SET NOT NULL;
+
+ALTER TABLE public.thread_participants
+  ADD CONSTRAINT thread_participants_space_id_spaces_id_fk
+  FOREIGN KEY (space_id)
+  REFERENCES public.spaces(id)
+  ON DELETE RESTRICT;
+
+ALTER TABLE public.thread_participants
+  ADD CONSTRAINT thread_participants_space_id_required
+  CHECK (space_id IS NOT NULL) NOT VALID;
+
+ALTER TABLE public.thread_participants
+  VALIDATE CONSTRAINT thread_participants_space_id_required;
+
+COMMIT;

package/dist/drizzle/0110_thread_participant_read_state.sql

@@ -0,0 +1,21 @@
+-- Purpose: add participant-scoped read state for collaborative Space Threads.
+-- Plan: docs/plans/2026-05-19-005-feat-spaces-collaborative-chat-ui-plan.md (U1)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0110_thread_participant_read_state.sql
+-- creates-column: public.thread_participants.last_read_at
+-- creates: public.idx_thread_participants_user_unread
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.thread_participants
+  ADD COLUMN IF NOT EXISTS last_read_at timestamptz;
+
+CREATE INDEX IF NOT EXISTS idx_thread_participants_user_unread
+  ON public.thread_participants (tenant_id, user_id, last_read_at)
+  WHERE participant_type = 'user' AND user_id IS NOT NULL;
+
+COMMIT;

package/dist/drizzle/0111_agents_tenant_name_unique.sql

@@ -0,0 +1,38 @@
+-- Purpose: make agent names tenant-unique so they can serve as mention identities.
+-- Plan: docs/plans/2026-05-20-001-fix-agent-mentions-and-unread-routing-plan.md (U1)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0111_agents_tenant_name_unique.sql
+-- creates: public.uq_agents_tenant_name_active
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+DO $$
+DECLARE
+  duplicate_count integer;
+BEGIN
+  SELECT COUNT(*)::integer
+  INTO duplicate_count
+  FROM (
+    SELECT tenant_id, lower(trim(name)) AS normalized_name
+    FROM public.agents
+    WHERE status <> 'archived'
+    GROUP BY tenant_id, lower(trim(name))
+    HAVING COUNT(*) > 1
+  ) duplicates;
+
+  IF duplicate_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot create uq_agents_tenant_name_active: % active tenant/name duplicate group(s) exist',
+      duplicate_count;
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_agents_tenant_name_active
+  ON public.agents (tenant_id, lower(trim(name)))
+  WHERE status <> 'archived';
+
+COMMIT;

package/dist/drizzle/0112_recast_spaces_as_contextual_workrooms.sql

@@ -0,0 +1,138 @@
+-- Purpose: recast Spaces as contextual workrooms with context/tool/MCP policy surfaces.
+-- Plan: docs/plans/2026-05-20-003-spaces-as-agent-contextual-workrooms-template-removal-plan.md (U3)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0112_recast_spaces_as_contextual_workrooms.sql
+-- creates-column: public.spaces.icon
+-- creates-column: public.spaces.category
+-- creates-column: public.spaces.context_config
+-- creates-column: public.spaces.connected_data_config
+-- creates-column: public.spaces.tool_policy
+-- creates-column: public.spaces.mcp_policy
+-- creates-column: public.spaces.agent_availability_policy
+-- creates-column: public.spaces.trigger_config
+-- creates-column: public.spaces.render_diagnostics
+-- creates: public.space_mcp_servers
+-- creates: public.uq_space_mcp_servers
+-- creates: public.idx_space_mcp_servers_space
+-- creates: public.idx_space_mcp_servers_server
+-- creates-trigger: public.space_mcp_servers.space_mcp_servers_tenant_guard
+-- creates-constraint: public.space_mcp_servers.space_mcp_servers_tenant_id_tenants_id_fk
+-- creates-constraint: public.space_mcp_servers.space_mcp_servers_space_id_spaces_id_fk
+-- creates-constraint: public.space_mcp_servers.space_mcp_servers_mcp_server_id_tenant_mcp_servers_id_fk
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.spaces
+  ADD COLUMN IF NOT EXISTS icon text,
+  ADD COLUMN IF NOT EXISTS category text,
+  ADD COLUMN IF NOT EXISTS context_config jsonb,
+  ADD COLUMN IF NOT EXISTS connected_data_config jsonb,
+  ADD COLUMN IF NOT EXISTS tool_policy jsonb,
+  ADD COLUMN IF NOT EXISTS mcp_policy jsonb,
+  ADD COLUMN IF NOT EXISTS agent_availability_policy jsonb,
+  ADD COLUMN IF NOT EXISTS trigger_config jsonb,
+  ADD COLUMN IF NOT EXISTS render_diagnostics jsonb;
+
+CREATE TABLE IF NOT EXISTS public.space_mcp_servers (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  space_id uuid NOT NULL,
+  mcp_server_id uuid NOT NULL,
+  enabled boolean NOT NULL DEFAULT true,
+  config jsonb,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT space_mcp_servers_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT space_mcp_servers_space_id_spaces_id_fk
+    FOREIGN KEY (space_id)
+    REFERENCES public.spaces(id)
+    ON DELETE CASCADE,
+  CONSTRAINT space_mcp_servers_mcp_server_id_tenant_mcp_servers_id_fk
+    FOREIGN KEY (mcp_server_id)
+    REFERENCES public.tenant_mcp_servers(id)
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_space_mcp_servers
+  ON public.space_mcp_servers (space_id, mcp_server_id);
+
+CREATE INDEX IF NOT EXISTS idx_space_mcp_servers_space
+  ON public.space_mcp_servers (tenant_id, space_id);
+
+CREATE INDEX IF NOT EXISTS idx_space_mcp_servers_server
+  ON public.space_mcp_servers (tenant_id, mcp_server_id);
+
+CREATE OR REPLACE FUNCTION public.enforce_space_child_tenant()
+RETURNS trigger
+LANGUAGE plpgsql
+AS $$
+DECLARE
+  target_tenant_id uuid;
+BEGIN
+  SELECT tenant_id INTO target_tenant_id
+  FROM public.spaces
+  WHERE id = NEW.space_id;
+
+  IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+    RAISE EXCEPTION 'space child tenant mismatch for space %', NEW.space_id
+      USING ERRCODE = '23514';
+  END IF;
+
+  IF TG_TABLE_NAME = 'space_members' THEN
+    SELECT tenant_id INTO target_tenant_id
+    FROM public.users
+    WHERE id = NEW.user_id;
+
+    IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+      RAISE EXCEPTION 'space member tenant mismatch for user %', NEW.user_id
+        USING ERRCODE = '23514';
+    END IF;
+  ELSIF TG_TABLE_NAME = 'space_agent_assignments' THEN
+    SELECT tenant_id INTO target_tenant_id
+    FROM public.agents
+    WHERE id = NEW.agent_id;
+
+    IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+      RAISE EXCEPTION 'space agent assignment tenant mismatch for agent %', NEW.agent_id
+        USING ERRCODE = '23514';
+    END IF;
+  ELSIF TG_TABLE_NAME = 'space_checklist_items' THEN
+    SELECT tenant_id INTO target_tenant_id
+    FROM public.space_checklist_templates
+    WHERE id = NEW.template_id;
+
+    IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+      RAISE EXCEPTION 'space checklist item tenant mismatch for template %', NEW.template_id
+        USING ERRCODE = '23514';
+    END IF;
+  ELSIF TG_TABLE_NAME = 'space_mcp_servers' THEN
+    SELECT tenant_id INTO target_tenant_id
+    FROM public.tenant_mcp_servers
+    WHERE id = NEW.mcp_server_id;
+
+    IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+      RAISE EXCEPTION 'space MCP server tenant mismatch for MCP server %', NEW.mcp_server_id
+        USING ERRCODE = '23514';
+    END IF;
+  END IF;
+
+  RETURN NEW;
+END;
+$$;
+
+DROP TRIGGER IF EXISTS space_mcp_servers_tenant_guard
+  ON public.space_mcp_servers;
+
+CREATE TRIGGER space_mcp_servers_tenant_guard
+  BEFORE INSERT OR UPDATE
+  ON public.space_mcp_servers
+  FOR EACH ROW
+  EXECUTE FUNCTION public.enforce_space_child_tenant();
+
+COMMIT;

package/dist/drizzle/0113_agents_own_runtime_fields.sql

@@ -0,0 +1,48 @@
+-- Purpose: move durable runtime and operational policy fields from Templates onto Agents.
+-- Plan: docs/plans/2026-05-20-003-spaces-as-agent-contextual-workrooms-template-removal-plan.md (U4)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0113_agents_own_runtime_fields.sql
+-- creates-column: public.agents.model
+-- creates-column: public.agents.guardrail_id
+-- creates-column: public.agents.blocked_tools
+-- creates-column: public.agents.sandbox
+-- creates-column: public.agents.browser
+-- creates-column: public.agents.web_search
+-- creates-column: public.agents.send_email
+-- creates-column: public.agents.context_engine
+-- creates-constraint: public.agents.agents_guardrail_id_guardrails_id_fk
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.agents
+  ADD COLUMN IF NOT EXISTS model text,
+  ADD COLUMN IF NOT EXISTS guardrail_id uuid,
+  ADD COLUMN IF NOT EXISTS blocked_tools jsonb,
+  ADD COLUMN IF NOT EXISTS sandbox jsonb,
+  ADD COLUMN IF NOT EXISTS browser jsonb,
+  ADD COLUMN IF NOT EXISTS web_search jsonb DEFAULT '{"enabled": true}'::jsonb,
+  ADD COLUMN IF NOT EXISTS send_email jsonb DEFAULT '{"enabled": true}'::jsonb,
+  ADD COLUMN IF NOT EXISTS context_engine jsonb DEFAULT '{"enabled": true}'::jsonb,
+  ALTER COLUMN template_id DROP NOT NULL;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'agents_guardrail_id_guardrails_id_fk'
+      AND conrelid = 'public.agents'::regclass
+  ) THEN
+    ALTER TABLE public.agents
+      ADD CONSTRAINT agents_guardrail_id_guardrails_id_fk
+      FOREIGN KEY (guardrail_id)
+      REFERENCES public.guardrails(id);
+  END IF;
+END
+$$;
+
+COMMIT;