thinkwork-cli 0.12.11 → 0.12.15

package/dist/drizzle/0119_space_knowledge_bases.sql

@@ -0,0 +1,126 @@
+-- Purpose: add Space-to-knowledge-base assignments for the admin Space Memory tab.
+-- Plan: docs/plans/2026-05-21-005-feat-admin-space-studio-simplification-plan.md (U3)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0119_space_knowledge_bases.sql
+-- creates: public.space_knowledge_bases
+-- creates: public.uq_space_kb
+-- creates: public.idx_space_kbs_space
+-- creates: public.idx_space_kbs_knowledge_base
+-- creates-trigger: public.space_knowledge_bases.space_knowledge_bases_tenant_guard
+-- creates-constraint: public.space_knowledge_bases.space_knowledge_bases_tenant_id_tenants_id_fk
+-- creates-constraint: public.space_knowledge_bases.space_knowledge_bases_space_id_spaces_id_fk
+-- creates-constraint: public.space_knowledge_bases.space_knowledge_bases_knowledge_base_id_knowledge_bases_id_fk
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+CREATE TABLE IF NOT EXISTS public.space_knowledge_bases (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  space_id uuid NOT NULL,
+  knowledge_base_id uuid NOT NULL,
+  enabled boolean NOT NULL DEFAULT true,
+  search_config jsonb,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT space_knowledge_bases_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT space_knowledge_bases_space_id_spaces_id_fk
+    FOREIGN KEY (space_id)
+    REFERENCES public.spaces(id)
+    ON DELETE CASCADE,
+  CONSTRAINT space_knowledge_bases_knowledge_base_id_knowledge_bases_id_fk
+    FOREIGN KEY (knowledge_base_id)
+    REFERENCES public.knowledge_bases(id)
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_space_kb
+  ON public.space_knowledge_bases (space_id, knowledge_base_id);
+
+CREATE INDEX IF NOT EXISTS idx_space_kbs_space
+  ON public.space_knowledge_bases (tenant_id, space_id);
+
+CREATE INDEX IF NOT EXISTS idx_space_kbs_knowledge_base
+  ON public.space_knowledge_bases (tenant_id, knowledge_base_id);
+
+CREATE OR REPLACE FUNCTION public.enforce_space_child_tenant()
+RETURNS trigger
+LANGUAGE plpgsql
+AS $$
+DECLARE
+  target_tenant_id uuid;
+BEGIN
+  SELECT tenant_id INTO target_tenant_id
+  FROM public.spaces
+  WHERE id = NEW.space_id;
+
+  IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+    RAISE EXCEPTION 'space child tenant mismatch for space %', NEW.space_id
+      USING ERRCODE = '23514';
+  END IF;
+
+  IF TG_TABLE_NAME = 'space_members' THEN
+    SELECT tenant_id INTO target_tenant_id
+    FROM public.users
+    WHERE id = NEW.user_id;
+
+    IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+      RAISE EXCEPTION 'space member tenant mismatch for user %', NEW.user_id
+        USING ERRCODE = '23514';
+    END IF;
+  ELSIF TG_TABLE_NAME = 'space_agent_assignments' THEN
+    SELECT tenant_id INTO target_tenant_id
+    FROM public.agents
+    WHERE id = NEW.agent_id;
+
+    IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+      RAISE EXCEPTION 'space agent assignment tenant mismatch for agent %', NEW.agent_id
+        USING ERRCODE = '23514';
+    END IF;
+  ELSIF TG_TABLE_NAME = 'space_checklist_items' THEN
+    SELECT tenant_id INTO target_tenant_id
+    FROM public.space_checklist_templates
+    WHERE id = NEW.template_id;
+
+    IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+      RAISE EXCEPTION 'space checklist item tenant mismatch for template %', NEW.template_id
+        USING ERRCODE = '23514';
+    END IF;
+  ELSIF TG_TABLE_NAME = 'space_mcp_servers' THEN
+    SELECT tenant_id INTO target_tenant_id
+    FROM public.tenant_mcp_servers
+    WHERE id = NEW.mcp_server_id;
+
+    IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+      RAISE EXCEPTION 'space MCP server tenant mismatch for MCP server %', NEW.mcp_server_id
+        USING ERRCODE = '23514';
+    END IF;
+  ELSIF TG_TABLE_NAME = 'space_knowledge_bases' THEN
+    SELECT tenant_id INTO target_tenant_id
+    FROM public.knowledge_bases
+    WHERE id = NEW.knowledge_base_id;
+
+    IF target_tenant_id IS NULL OR target_tenant_id <> NEW.tenant_id THEN
+      RAISE EXCEPTION 'space knowledge base tenant mismatch for knowledge base %', NEW.knowledge_base_id
+        USING ERRCODE = '23514';
+    END IF;
+  END IF;
+
+  RETURN NEW;
+END;
+$$;
+
+DROP TRIGGER IF EXISTS space_knowledge_bases_tenant_guard
+  ON public.space_knowledge_bases;
+
+CREATE TRIGGER space_knowledge_bases_tenant_guard
+  BEFORE INSERT OR UPDATE
+  ON public.space_knowledge_bases
+  FOR EACH ROW
+  EXECUTE FUNCTION public.enforce_space_child_tenant();
+
+COMMIT;

package/dist/drizzle/0120_space_automations.sql

@@ -0,0 +1,58 @@
+-- Purpose: scope scheduled jobs and webhooks to Spaces for the admin Space Automations tab.
+-- Plan: docs/plans/2026-05-21-005-feat-admin-space-studio-simplification-plan.md (U5)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0120_space_automations.sql
+-- creates-column: public.scheduled_jobs.space_id
+-- creates-column: public.webhooks.space_id
+-- creates: public.idx_scheduled_jobs_space
+-- creates: public.idx_webhooks_space
+-- creates-constraint: public.scheduled_jobs.scheduled_jobs_space_id_spaces_id_fk
+-- creates-constraint: public.webhooks.webhooks_space_id_spaces_id_fk
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.scheduled_jobs
+  ADD COLUMN IF NOT EXISTS space_id uuid;
+
+ALTER TABLE public.webhooks
+  ADD COLUMN IF NOT EXISTS space_id uuid;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'scheduled_jobs_space_id_spaces_id_fk'
+      AND conrelid = 'public.scheduled_jobs'::regclass
+  ) THEN
+    ALTER TABLE public.scheduled_jobs
+      ADD CONSTRAINT scheduled_jobs_space_id_spaces_id_fk
+      FOREIGN KEY (space_id)
+      REFERENCES public.spaces(id);
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'webhooks_space_id_spaces_id_fk'
+      AND conrelid = 'public.webhooks'::regclass
+  ) THEN
+    ALTER TABLE public.webhooks
+      ADD CONSTRAINT webhooks_space_id_spaces_id_fk
+      FOREIGN KEY (space_id)
+      REFERENCES public.spaces(id);
+  END IF;
+END;
+$$;
+
+CREATE INDEX IF NOT EXISTS idx_scheduled_jobs_space
+  ON public.scheduled_jobs (tenant_id, space_id);
+
+CREATE INDEX IF NOT EXISTS idx_webhooks_space
+  ON public.webhooks (tenant_id, space_id);
+
+COMMIT;

package/dist/drizzle/0121_drop_computer_runbooks.sql

@@ -0,0 +1,26 @@
+-- Drop the computer-runbook tables introduced in 0083_computer_runbooks.sql.
+-- Runbooks are being retired as a platform feature — the runbook-shaped
+-- skills (crm-dashboard, research-dashboard, map-artifact) have been
+-- rewritten as regular agentskills.io skills that compose with the
+-- platform artifact-builder skill, and the runbook orchestration
+-- machinery in the runtime + the API resolvers + legacy runbook code paths
+-- have all been removed.
+-- See refactor commit "drop runbook functionality entirely (L3)".
+--
+-- The dev tenant has no production data in these tables that needs
+-- preserving; this is a destructive drop. The indexes drop with the
+-- tables via CASCADE-on-drop-table.
+--
+-- drops: public.tenant_runbook_catalog
+-- drops: public.computer_runbook_runs
+-- drops: public.computer_runbook_tasks
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+DROP TABLE IF EXISTS public.computer_runbook_tasks;
+DROP TABLE IF EXISTS public.computer_runbook_runs;
+DROP TABLE IF EXISTS public.tenant_runbook_catalog;
+
+COMMIT;

package/dist/drizzle/0122_space_email_triggers.sql

@@ -0,0 +1,24 @@
+-- Purpose: add per-Space cold-contact email trigger opt-in.
+-- Plan: docs/plans/2026-05-22-002-feat-spaces-runtime-renderer-and-channels-plan.md (U4)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0122_space_email_triggers.sql
+-- creates-column: public.spaces.email_triggers_enabled
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.spaces
+  ADD COLUMN IF NOT EXISTS email_triggers_enabled boolean;
+
+UPDATE public.spaces
+SET email_triggers_enabled = false
+WHERE email_triggers_enabled IS NULL;
+
+ALTER TABLE public.spaces
+  ALTER COLUMN email_triggers_enabled SET DEFAULT false,
+  ALTER COLUMN email_triggers_enabled SET NOT NULL;
+
+COMMIT;

package/dist/drizzle/0123_single_platform_agent_and_overrides.sql

@@ -0,0 +1,58 @@
+-- Purpose: add the single-platform-agent marker and typed per-Space runtime override columns.
+-- Plan: docs/plans/2026-05-22-005-refactor-single-platform-agent-and-space-runtime-overrides-plan.md (U1a)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0123_single_platform_agent_and_overrides.sql
+-- creates-column: public.agents.is_platform_default
+-- creates: public.uq_agents_platform_default_per_tenant
+-- creates-column: public.spaces.model_override
+-- creates-column: public.spaces.guardrail_id_override
+-- creates-column: public.spaces.budget_monthly_cents_override
+-- creates-column: public.spaces.budget_paused_override
+-- creates-column: public.spaces.sandbox_override
+-- creates-constraint: public.spaces.spaces_guardrail_id_override_guardrails_id_fk
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.agents
+  ADD COLUMN IF NOT EXISTS is_platform_default boolean;
+
+UPDATE public.agents
+SET is_platform_default = false
+WHERE is_platform_default IS NULL;
+
+ALTER TABLE public.agents
+  ALTER COLUMN is_platform_default SET DEFAULT false,
+  ALTER COLUMN is_platform_default SET NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_agents_platform_default_per_tenant
+  ON public.agents (tenant_id)
+  WHERE is_platform_default IS TRUE;
+
+ALTER TABLE public.spaces
+  ADD COLUMN IF NOT EXISTS model_override text,
+  ADD COLUMN IF NOT EXISTS guardrail_id_override uuid,
+  ADD COLUMN IF NOT EXISTS budget_monthly_cents_override integer,
+  ADD COLUMN IF NOT EXISTS budget_paused_override boolean,
+  ADD COLUMN IF NOT EXISTS sandbox_override boolean;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'spaces_guardrail_id_override_guardrails_id_fk'
+      AND conrelid = 'public.spaces'::regclass
+  ) THEN
+    ALTER TABLE public.spaces
+      ADD CONSTRAINT spaces_guardrail_id_override_guardrails_id_fk
+      FOREIGN KEY (guardrail_id_override)
+      REFERENCES public.guardrails(id);
+  END IF;
+END;
+$$;
+
+COMMIT;

package/dist/drizzle/0124_thread_turns_finalized_at.sql

@@ -0,0 +1,17 @@
+-- creates-column: public.thread_turns.finalized_at
+--
+-- chat-agent-invoke direct-callback finalize architecture (plan
+-- 2026-05-22-006). The new chat-agent-finalize Lambda handler keys on
+-- thread_turns.finalized_at to enforce idempotency: when the Strands runtime
+-- POSTs the same turn_id twice (transient network failure → retry), the
+-- second call detects finalized_at IS NOT NULL and returns
+-- {idempotent: true} without re-running the cost / message-insert /
+-- notify side-effects.
+
+\set ON_ERROR_STOP on
+BEGIN;
+
+ALTER TABLE public.thread_turns
+  ADD COLUMN IF NOT EXISTS finalized_at TIMESTAMPTZ;
+
+COMMIT;

package/dist/drizzle/0125_drop_space_agent_assignments.sql

@@ -0,0 +1,42 @@
+-- 0125_drop_space_agent_assignments.sql
+--
+-- Drops the retired Space-agent assignment table after the platform-agent
+-- collapse and GraphQL/admin consumer rewrites have shipped.
+--
+-- Plan: docs/plans/2026-05-22-005-refactor-single-platform-agent-and-space-runtime-overrides-plan.md (U1b)
+-- Dependencies:
+--   - U3 merged: cold-contact no longer resolves agents through assignments.
+--   - U5/U7 merged: GraphQL/admin/API consumers no longer read assignments.
+--   - U6 merged: legacy email paths no longer need assignment-era agent email state.
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0125_drop_space_agent_assignments.sql
+-- Then verify:
+--   bash scripts/db-migrate-manual.sh packages/database-pg/drizzle/0125_drop_space_agent_assignments.sql
+--
+-- The table's local_instructions values were backfilled into spaces.prompt
+-- by the U2 collapse migration before this drop. The remaining columns
+-- (local_role, auto_subscribe, allowed_capabilities, allowed_tools, status)
+-- are retired with the per-Space agent assignment model.
+--
+-- drops: public.space_agent_assignments
+-- drops: public.uq_space_agent_assignments_agent
+-- drops: public.idx_space_agent_assignments_agent
+-- drops: public.idx_space_agent_assignments_space
+-- drops-constraint: public.space_agent_assignments.space_agent_assignments_tenant_id_tenants_id_fk
+-- drops-constraint: public.space_agent_assignments.space_agent_assignments_space_id_spaces_id_fk
+-- drops-constraint: public.space_agent_assignments.space_agent_assignments_agent_id_agents_id_fk
+-- drops-constraint: public.space_agent_assignments.space_agent_assignments_status_allowed
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '60s';
+
+SELECT pg_advisory_xact_lock(hashtext('drop_space_agent_assignments'));
+
+DROP TABLE IF EXISTS public.space_agent_assignments CASCADE;
+
+COMMIT;

package/dist/drizzle/0126_migrate_flue_to_pi.sql

@@ -0,0 +1,42 @@
+-- Runtime selector rename: flue -> pi.
+--
+-- creates-constraint: public.agents.agents_runtime_check
+-- creates-constraint: public.agent_templates.agent_templates_runtime_check
+
+\echo '== runtime selector rename: flue -> pi =='
+
+\echo '-- allowing strands, pi, and legacy flue during backfill --'
+
+ALTER TABLE agents DROP CONSTRAINT IF EXISTS agents_runtime_check;
+ALTER TABLE agents
+  ADD CONSTRAINT agents_runtime_check
+  CHECK (runtime IN ('strands', 'pi', 'flue'));
+
+ALTER TABLE agent_templates DROP CONSTRAINT IF EXISTS agent_templates_runtime_check;
+ALTER TABLE agent_templates
+  ADD CONSTRAINT agent_templates_runtime_check
+  CHECK (runtime IN ('strands', 'pi', 'flue'));
+
+\echo '-- updating agents.runtime: flue -> pi --'
+
+UPDATE agents
+SET runtime = 'pi', updated_at = NOW()
+WHERE runtime = 'flue';
+
+\echo '-- updating agent_templates.runtime: flue -> pi --'
+
+UPDATE agent_templates
+SET runtime = 'pi', updated_at = NOW()
+WHERE runtime = 'flue';
+
+\echo '-- tightening runtime CHECK constraints to strands/pi --'
+
+ALTER TABLE agents DROP CONSTRAINT IF EXISTS agents_runtime_check;
+ALTER TABLE agents
+  ADD CONSTRAINT agents_runtime_check
+  CHECK (runtime IN ('strands', 'pi'));
+
+ALTER TABLE agent_templates DROP CONSTRAINT IF EXISTS agent_templates_runtime_check;
+ALTER TABLE agent_templates
+  ADD CONSTRAINT agent_templates_runtime_check
+  CHECK (runtime IN ('strands', 'pi'));

package/dist/drizzle/0127_runtime_type_observability.sql

@@ -0,0 +1,28 @@
+-- Runtime observability for thread turns and usage/cost events.
+--
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0127_runtime_type_observability.sql
+-- creates-column: public.thread_turns.runtime_type
+-- creates: public.idx_thread_turns_runtime
+-- creates-column: public.cost_events.runtime_type
+-- creates: public.idx_cost_events_runtime
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.thread_turns
+  ADD COLUMN IF NOT EXISTS runtime_type text;
+
+CREATE INDEX IF NOT EXISTS idx_thread_turns_runtime
+  ON public.thread_turns (tenant_id, runtime_type);
+
+ALTER TABLE public.cost_events
+  ADD COLUMN IF NOT EXISTS runtime_type text;
+
+CREATE INDEX IF NOT EXISTS idx_cost_events_runtime
+  ON public.cost_events (tenant_id, runtime_type);
+
+COMMIT;

package/dist/drizzle/0128_drop_eval_test_cases_agent_id.sql

@@ -0,0 +1,37 @@
+-- 0128_drop_eval_test_cases_agent_id.sql
+--
+-- Drops the per-case Agent override column on eval_test_cases. Under the
+-- one-platform-agent model, evals always run against the tenant's
+-- is_platform_default=true row; a per-test-case agent target has no
+-- meaning. The matching GraphQL fields (EvalTestCase.agentId,
+-- CreateEvalTestCaseInput.agentId, UpdateEvalTestCaseInput.agentId) were
+-- removed in the same PR set; this drops the underlying column once the
+-- resolver no longer reads or writes it.
+--
+-- Plan: docs/plans/2026-05-23-006-refactor-evaluations-tenant-platform-agent-plan.md (U3)
+-- Dependencies:
+--   - U1 merged: every eval call site resolves through resolveTenantPlatformAgent.
+--   - U2 merged: GraphQL surface no longer exposes per-case agentId; resolver
+--     no longer reads or writes the column.
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0128_drop_eval_test_cases_agent_id.sql
+-- Then verify:
+--   bash scripts/db-migrate-manual.sh packages/database-pg/drizzle/0128_drop_eval_test_cases_agent_id.sql
+--
+-- drops-column: public.eval_test_cases.agent_id
+-- drops-constraint: public.eval_test_cases.eval_test_cases_agent_id_agents_id_fk
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '60s';
+
+SELECT pg_advisory_xact_lock(hashtext('drop_eval_test_cases_agent_id'));
+
+ALTER TABLE public.eval_test_cases
+  DROP COLUMN IF EXISTS agent_id;
+
+COMMIT;

package/dist/drizzle/0129_drop_code_factory_tables.sql

@@ -0,0 +1,43 @@
+-- 0129_drop_code_factory_tables.sql
+--
+-- Drops the three code_factory_* tables and their indexes.
+--
+-- Origin: docs/brainstorms/2026-05-24-codebase-and-database-simplification-cleanup-requirements.md
+-- Plan:   docs/plans/2026-05-24-002-refactor-p0-zombie-sweep-cleanup-plan.md (T8 — Code Factory)
+--
+-- Context: code_factory was an OSS feature shipped alongside the retired
+-- Symphony connectors. The Lambda handlers (code-factory.ts, github-repos.ts),
+-- mobile settings screen (code-factory-repos.tsx), agent-detail UI blocks, and
+-- create-hosted-agent-modal "code_factory" runtime profile are removed in the
+-- same PR as this migration. github-app-webhook.ts retains its workspace-sync
+-- skeleton but the tenant-slug lookup that depended on code_factory_repos now
+-- always returns null until a replacement mapping is wired.
+--
+-- All three tables are 0 rows in dev. No inbound FKs from non-code_factory
+-- tables (verified via pg_constraint query). CASCADE handles internal FK
+-- ordering between code_factory_runs → code_factory_jobs → code_factory_repos.
+--
+-- Apply manually after merge:
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0129_drop_code_factory_tables.sql
+-- Then verify:
+--   bash scripts/db-migrate-manual.sh packages/database-pg/drizzle/0129_drop_code_factory_tables.sql
+--
+-- drops: public.code_factory_jobs
+-- drops: public.code_factory_repos
+-- drops: public.code_factory_runs
+-- drops: public.uq_code_factory_repos_owner_repo
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '60s';
+
+SELECT pg_advisory_xact_lock(hashtext('drop_code_factory_tables'));
+
+DROP TABLE IF EXISTS public.code_factory_runs CASCADE;
+DROP TABLE IF EXISTS public.code_factory_jobs CASCADE;
+DROP TABLE IF EXISTS public.code_factory_repos CASCADE;
+
+COMMIT;

package/dist/drizzle/0129_eval_results_system_prompt.sql

@@ -0,0 +1,30 @@
+-- 0129_eval_results_system_prompt.sql
+--
+-- Adds a nullable text column capturing the system prompt the agent loop
+-- ran against during an eval invocation. Populated by the eval-worker from
+-- the Pi runtime's `composed_system_prompt` response field; surfaced in the
+-- admin "View System Prompt" sheet on the eval result detail.
+--
+-- Plan: docs/plans/2026-05-23-006-refactor-evaluations-tenant-platform-agent-plan.md
+-- (post-merge feature follow-up from ce-debug session 2026-05-24)
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0129_eval_results_system_prompt.sql
+-- Then verify:
+--   bash scripts/db-migrate-manual.sh packages/database-pg/drizzle/0129_eval_results_system_prompt.sql
+--
+-- creates-column: public.eval_results.system_prompt
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '60s';
+
+SELECT pg_advisory_xact_lock(hashtext('add_eval_results_system_prompt'));
+
+ALTER TABLE public.eval_results
+  ADD COLUMN IF NOT EXISTS system_prompt text;
+
+COMMIT;

package/dist/drizzle/0130_drop_teams_and_team_id_columns.sql

@@ -0,0 +1,54 @@
+-- 0130_drop_teams_and_team_id_columns.sql
+--
+-- Drops the teams feature end-to-end.
+--
+-- Origin: docs/brainstorms/2026-05-24-codebase-and-database-simplification-cleanup-requirements.md
+--
+-- Removes the three team tables (teams, team_users, team_agents) and the
+-- four orphan team_id columns left on routines/scheduled_jobs/workflow_configs/
+-- cost_events after the teams feature was retired in this PR. The
+-- computer_assignments.team_id column is intentionally NOT dropped here —
+-- computer_assignments goes away entirely in the P3 Computer-residual sweep,
+-- and dropping the column requires invalidating the multi-CHECK constraint
+-- that distinguishes user vs team subject types. Cleanup of that column
+-- ships with T4.
+--
+-- Apply manually after merge:
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0130_drop_teams_and_team_id_columns.sql
+-- Then verify:
+--   bash scripts/db-migrate-manual.sh packages/database-pg/drizzle/0130_drop_teams_and_team_id_columns.sql
+--
+-- drops: public.teams
+-- drops: public.team_users
+-- drops: public.team_agents
+-- drops-column: public.routines.team_id
+-- drops-column: public.scheduled_jobs.team_id
+-- drops-column: public.workflow_configs.team_id
+-- drops-column: public.cost_events.team_id
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '60s';
+
+SELECT pg_advisory_xact_lock(hashtext('drop_teams_and_team_id_columns'));
+
+-- Drop the workflow_configs team index that referenced team_id
+DROP INDEX IF EXISTS public.workflow_configs_tenant_team_idx;
+
+-- Drop team_id columns from alive tables
+ALTER TABLE public.routines DROP COLUMN IF EXISTS team_id;
+ALTER TABLE public.scheduled_jobs DROP COLUMN IF EXISTS team_id;
+ALTER TABLE public.workflow_configs DROP COLUMN IF EXISTS team_id;
+ALTER TABLE public.cost_events DROP COLUMN IF EXISTS team_id;
+
+-- Drop the teams tables themselves. CASCADE handles any incidental FKs
+-- (the only internal FKs are team_users.team_id and team_agents.team_id
+-- pointing back at teams, which CASCADE removes implicitly via table drop).
+DROP TABLE IF EXISTS public.team_users CASCADE;
+DROP TABLE IF EXISTS public.team_agents CASCADE;
+DROP TABLE IF EXISTS public.teams CASCADE;
+
+COMMIT;

package/dist/drizzle/0131_drop_skill_catalog_and_tenant_skills.sql

@@ -0,0 +1,33 @@
+-- 0131_drop_skill_catalog_and_tenant_skills.sql
+--
+-- Drops the retired database-backed skill catalog tables.
+--
+-- Origin: docs/plans/2026-05-24-003-feat-pi-skill-catalog-and-workspace-install-plan.md
+--
+-- Context: skills are now cataloged in S3 under
+-- tenants/<tenant_slug>/skill-catalog/<skill_slug>/ and installed by copying
+-- skill folders into agent/Space workspace `skills/` directories. U15 retired
+-- the GraphQL customize skill surface and U16a retired the remaining REST,
+-- runtime, plugin-install, bootstrap, and tenant-inventory table consumers.
+--
+-- Apply manually after merge:
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0131_drop_skill_catalog_and_tenant_skills.sql
+-- Then verify:
+--   bash scripts/db-migrate-manual.sh packages/database-pg/drizzle/0131_drop_skill_catalog_and_tenant_skills.sql
+--
+-- drops: public.tenant_skills
+-- drops: public.skill_catalog
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '60s';
+
+SELECT pg_advisory_xact_lock(hashtext('drop_skill_catalog_and_tenant_skills'));
+
+DROP TABLE IF EXISTS public.tenant_skills CASCADE;
+DROP TABLE IF EXISTS public.skill_catalog CASCADE;
+
+COMMIT;

package/dist/drizzle/0132_drop_computer_tables.sql

@@ -0,0 +1,31 @@
+-- 0131_drop_computer_tables.sql
+-- drops: public.computer_events
+-- drops: public.computer_tasks
+-- drops: public.computer_assignments
+-- drops: public.computer_snapshots
+-- drops: public.computers
+--
+-- Kill the legacy Computer feature. All product surfaces (admin, Spaces,
+-- mobile, CLI), Lambda handlers (computer-runtime, computer-manager,
+-- computer-runtime-reconciler, computer-terminal-start, slack-dispatch,
+-- workspace-files-efs, migrate-agents-to-computers), GraphQL resolvers,
+-- and Terraform modules for the Computer concept are removed in this
+-- same PR. After this migration applies, the 5 tables drop and ~2.6 GB
+-- of dead data is reclaimed.
+--
+-- Order: child tables first to satisfy FK chains.
+--   computer_events.task_id → computer_tasks.id
+--   computer_tasks.computer_id → computers.id
+--   computer_assignments.computer_id → computers.id
+--   computer_snapshots.computer_id → computers.id
+--
+-- Apply AFTER merge + deploy of this PR so the live Lambda functions
+-- have already shipped without computer_* reads/writes. Applying before
+-- the deploy will crash chat-agent, scheduled jobs, and admin queries
+-- with PG 42P01 (relation does not exist).
+
+DROP TABLE IF EXISTS public.computer_events CASCADE;
+DROP TABLE IF EXISTS public.computer_tasks CASCADE;
+DROP TABLE IF EXISTS public.computer_assignments CASCADE;
+DROP TABLE IF EXISTS public.computer_snapshots CASCADE;
+DROP TABLE IF EXISTS public.computers CASCADE;