thinkwork-cli 0.12.11 → 0.12.15

package/dist/drizzle/0133_drop_seed_view_tombstones.sql

@@ -0,0 +1,79 @@
+-- 0133_drop_seed_view_tombstones.sql
+--
+-- Drops the 11 sentinel/invariant-check views left behind by historical
+-- seed and repair migrations. Each view was created by its owning
+-- migration as a saved "did this work land?" query — operator-facing
+-- introspection sugar that was useful at the time those migrations
+-- applied, but is now dead schema noise.
+--
+-- None of these views are read by application code (verified via grep
+-- across packages/api, packages/lambda, apps/*, scripts/, and the
+-- Python Strands runtime). The drift reporter does its work via the
+-- `-- creates:` and `-- drops:` markers in migration headers, not by
+-- reading view contents — so dropping these views does not weaken the
+-- migration-verification regime.
+--
+-- Companion edit: the 11 original migrations have their now-stale
+-- `-- creates: public.view_*` markers removed in this same PR so the
+-- drift reporter stays clean. The view SQL bodies in those files are
+-- left in place — replaying any of those migrations on a fresh DB
+-- still recreates its view, after which 0133 cleans it up again.
+--
+-- Apply manually (AFTER merge + deploy, per
+-- feedback_migration_deploy_ordering):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0133_drop_seed_view_tombstones.sql
+--
+-- Then verify:
+--   pnpm db:migrate-manual packages/database-pg/drizzle/0133_drop_seed_view_tombstones.sql
+--   psql -c "\dv public.view_*"  -- 0 views expected
+--
+-- Rollback: re-run each source migration's CREATE VIEW statement. See
+-- the inverse SQL in each of:
+--   0022, 0030, 0085, 0086, 0089 (remove_maniflow_eval_seeds),
+--   0096, 0102, 0103, 0104, 0106, 0116
+--
+-- Markers (consumed by scripts/db-migrate-manual.sh):
+--
+-- drops: public.view_brain_section_source_trigger_repaired
+-- drops: public.view_composition_primitives_retired
+-- drops: public.view_default_template_models_updated_0086
+-- drops: public.view_eval_seed_maniflow_cleanup_0089
+-- drops: public.view_eval_seed_true_redteam_cleanup_0096
+-- drops: public.view_seed_ontology_triples_expanded
+-- drops: public.view_seed_ontology_user_memory_expanded
+-- drops: public.view_thinkwork_admin_permissions_seeded
+-- drops: public.view_thinkwork_computer_default_template_seeded
+-- drops: public.view_thread_participants_access_backfilled
+-- drops: public.view_wiki_brain_owner_repaired
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '60s';
+
+-- Serialize concurrent application attempts.
+SELECT pg_advisory_xact_lock(hashtext('drop_seed_view_tombstones'));
+
+-- Refuse to apply against an unexpected DB.
+DO $$
+BEGIN
+  IF current_database() != 'thinkwork' THEN
+    RAISE EXCEPTION 'wrong database: %, expected thinkwork', current_database();
+  END IF;
+END $$;
+
+DROP VIEW IF EXISTS public.view_brain_section_source_trigger_repaired;
+DROP VIEW IF EXISTS public.view_composition_primitives_retired;
+DROP VIEW IF EXISTS public.view_default_template_models_updated_0086;
+DROP VIEW IF EXISTS public.view_eval_seed_maniflow_cleanup_0089;
+DROP VIEW IF EXISTS public.view_eval_seed_true_redteam_cleanup_0096;
+DROP VIEW IF EXISTS public.view_seed_ontology_triples_expanded;
+DROP VIEW IF EXISTS public.view_seed_ontology_user_memory_expanded;
+DROP VIEW IF EXISTS public.view_thinkwork_admin_permissions_seeded;
+DROP VIEW IF EXISTS public.view_thinkwork_computer_default_template_seeded;
+DROP VIEW IF EXISTS public.view_thread_participants_access_backfilled;
+DROP VIEW IF EXISTS public.view_wiki_brain_owner_repaired;
+
+COMMIT;

package/dist/drizzle/0133_thread_turns_system_prompt.sql

@@ -0,0 +1,22 @@
+-- 0133_thread_turns_system_prompt.sql
+-- Store the composed system prompt captured for normal thread turns so the
+-- admin Thread Detail view can audit the prompt used by the runtime.
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0133_thread_turns_system_prompt.sql
+-- Verify:
+--   bash scripts/db-migrate-manual.sh packages/database-pg/drizzle/0133_thread_turns_system_prompt.sql
+--
+-- creates-column: public.thread_turns.system_prompt
+
+BEGIN;
+
+SELECT pg_advisory_xact_lock(hashtext('add_thread_turns_system_prompt'));
+
+ALTER TABLE public.thread_turns
+  ADD COLUMN IF NOT EXISTS system_prompt text;
+
+COMMENT ON COLUMN public.thread_turns.system_prompt IS
+  'Composed system prompt captured from the agent runtime for this turn.';
+
+COMMIT;

package/dist/drizzle/0134_drop_dead_agent_runtime_tables.sql

@@ -0,0 +1,53 @@
+-- 0134_drop_dead_agent_runtime_tables.sql
+--
+-- Drops three agent_* tables that were schema-only across the codebase
+-- with zero rows in production:
+--
+--   - agent_runtime_state    — declared but never written to
+--   - agent_task_sessions    — declared but never written to;
+--                              FKs to agent_runtime_state
+--   - agent_workspace_waits  — declared but only re-exported in
+--                              graphql/utils.ts; no SELECT/INSERT
+--                              from any handler or resolver
+--
+-- Pre-merge consumer survey (per feedback_grep_must_match_import_form):
+-- grep across apps/, packages/api/src, packages/lambda,
+-- packages/database-pg/src (excluding drizzle/ and the table's own
+-- schema declaration), packages/agentcore-pi, and scripts/ returned only the schema definitions + the utils.ts
+-- re-exports. The companion code commit removes those.
+--
+-- Order matters: agent_task_sessions has a FK to agent_runtime_state,
+-- so it must drop first.
+--
+-- Apply manually AFTER merge+deploy per feedback_migration_deploy_ordering.
+-- (Risk in practice is zero — no code reads these — but consistent
+-- with the ordering rule.)
+--
+-- Markers (consumed by scripts/db-migrate-manual.sh):
+--
+-- drops: public.agent_task_sessions
+-- drops: public.agent_runtime_state
+-- drops: public.agent_workspace_waits
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '60s';
+
+SELECT pg_advisory_xact_lock(hashtext('drop_dead_agent_runtime_tables'));
+
+DO $$
+BEGIN
+  IF current_database() != 'thinkwork' THEN
+    RAISE EXCEPTION 'wrong database: %, expected thinkwork', current_database();
+  END IF;
+END $$;
+
+-- Drop child first (FK to agent_runtime_state).
+DROP TABLE IF EXISTS public.agent_task_sessions;
+DROP TABLE IF EXISTS public.agent_runtime_state;
+DROP TABLE IF EXISTS public.agent_workspace_waits;
+
+COMMIT;

package/dist/drizzle/0135_native_checklist_linked_tasks.sql

@@ -0,0 +1,48 @@
+-- Purpose: allow ThinkWork-native checklist rows in linked task compatibility storage.
+-- Plan: docs/plans/2026-05-25-004-feat-customer-onboarding-native-checklist-plan.md (U2)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0135_native_checklist_linked_tasks.sql
+-- creates-constraint: public.linked_tasks.linked_tasks_provider_allowed
+-- creates-constraint: public.linked_tasks.linked_tasks_status_allowed
+-- creates-constraint: public.linked_task_events.linked_task_events_provider_allowed
+-- creates-constraint: public.linked_task_events.linked_task_events_type_allowed
+-- creates-constraint: public.linked_task_events.linked_task_events_previous_status_allowed
+-- creates-constraint: public.linked_task_events.linked_task_events_new_status_allowed
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.linked_tasks
+  DROP CONSTRAINT IF EXISTS linked_tasks_provider_allowed,
+  ADD CONSTRAINT linked_tasks_provider_allowed
+    CHECK (provider IN ('lastmile', 'thinkwork'));
+
+ALTER TABLE public.linked_tasks
+  DROP CONSTRAINT IF EXISTS linked_tasks_status_allowed,
+  ADD CONSTRAINT linked_tasks_status_allowed
+    CHECK (status IN ('unknown', 'todo', 'in_progress', 'completed', 'blocked', 'cancelled', 'not_applicable'));
+
+ALTER TABLE public.linked_task_events
+  DROP CONSTRAINT IF EXISTS linked_task_events_provider_allowed,
+  ADD CONSTRAINT linked_task_events_provider_allowed
+    CHECK (provider IN ('lastmile', 'thinkwork'));
+
+ALTER TABLE public.linked_task_events
+  DROP CONSTRAINT IF EXISTS linked_task_events_type_allowed,
+  ADD CONSTRAINT linked_task_events_type_allowed
+    CHECK (event_type IN ('created', 'status_changed', 'completed', 'blocked', 'reassigned', 'due_date_changed', 'sync_failed', 'writeback_posted'));
+
+ALTER TABLE public.linked_task_events
+  DROP CONSTRAINT IF EXISTS linked_task_events_previous_status_allowed,
+  ADD CONSTRAINT linked_task_events_previous_status_allowed
+    CHECK (previous_status IS NULL OR previous_status IN ('unknown', 'todo', 'in_progress', 'completed', 'blocked', 'cancelled', 'not_applicable'));
+
+ALTER TABLE public.linked_task_events
+  DROP CONSTRAINT IF EXISTS linked_task_events_new_status_allowed,
+  ADD CONSTRAINT linked_task_events_new_status_allowed
+    CHECK (new_status IS NULL OR new_status IN ('unknown', 'todo', 'in_progress', 'completed', 'blocked', 'cancelled', 'not_applicable'));
+
+COMMIT;

package/dist/drizzle/0136_goal_ledger.sql

@@ -0,0 +1,55 @@
+-- Purpose: add explicit Goal ledger rows for promoted Thread workflows.
+-- Plan: docs/plans/2026-05-27-003-feat-folder-native-goals-plan.md
+-- Apply manually (no CI migration runner):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0136_goal_ledger.sql
+-- Pre-flight:
+--   SELECT to_regclass('public.goals');
+--   SELECT to_regclass('public.uq_goals_thread_non_terminal');
+-- creates: public.goals
+-- creates: public.idx_goals_tenant_thread
+-- creates: public.idx_goals_tenant_space_status
+-- creates: public.idx_goals_folder_s3_prefix
+-- creates: public.uq_goals_thread_non_terminal
+-- creates-constraint: public.goals.goals_mode_allowed
+-- creates-constraint: public.goals.goals_status_allowed
+
+CREATE TABLE IF NOT EXISTS goals (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
+  space_id uuid NOT NULL REFERENCES spaces(id) ON DELETE CASCADE,
+  thread_id uuid NOT NULL REFERENCES threads(id) ON DELETE CASCADE,
+  template_key text,
+  outcome text NOT NULL,
+  owner_type text,
+  owner_id text,
+  mode text NOT NULL DEFAULT 'collaborate',
+  status text NOT NULL DEFAULT 'active',
+  progress_model text NOT NULL DEFAULT 'linked_tasks',
+  completion_rule jsonb,
+  review_policy jsonb,
+  folder_s3_prefix text NOT NULL,
+  reviewer_type text,
+  reviewer_id text,
+  started_at timestamptz NOT NULL DEFAULT now(),
+  reviewed_at timestamptz,
+  completed_at timestamptz,
+  cancelled_at timestamptz,
+  metadata jsonb,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT goals_mode_allowed CHECK (mode IN ('delegate','collaborate')),
+  CONSTRAINT goals_status_allowed CHECK (status IN ('active','in_review','completed','cancelled'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_goals_tenant_thread
+  ON goals (tenant_id, thread_id);
+
+CREATE INDEX IF NOT EXISTS idx_goals_tenant_space_status
+  ON goals (tenant_id, space_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_goals_folder_s3_prefix
+  ON goals (folder_s3_prefix);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_goals_thread_non_terminal
+  ON goals (tenant_id, thread_id)
+  WHERE status IN ('active','in_review');

package/dist/drizzle/0136_space_email_trigger_status.sql

@@ -0,0 +1,66 @@
+-- creates-column: public.spaces.email_trigger_status
+-- creates-constraint: public.spaces.spaces_email_trigger_status_allowed
+-- creates-function: public.sync_space_email_trigger_status
+-- creates-trigger: public.spaces.spaces_email_trigger_status_sync
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.spaces
+  ADD COLUMN IF NOT EXISTS email_trigger_status text;
+
+UPDATE public.spaces
+   SET email_trigger_status = CASE
+     WHEN email_triggers_enabled IS TRUE THEN 'enabled'
+     ELSE 'none'
+   END
+ WHERE email_trigger_status IS NULL;
+
+ALTER TABLE public.spaces
+  ALTER COLUMN email_trigger_status SET DEFAULT 'none';
+
+ALTER TABLE public.spaces
+  ALTER COLUMN email_trigger_status SET NOT NULL;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+      FROM pg_constraint
+     WHERE conname = 'spaces_email_trigger_status_allowed'
+       AND conrelid = 'public.spaces'::regclass
+  ) THEN
+    ALTER TABLE public.spaces
+      ADD CONSTRAINT spaces_email_trigger_status_allowed
+      CHECK (email_trigger_status IN ('none','disabled','enabled'));
+  END IF;
+END $$;
+
+CREATE OR REPLACE FUNCTION public.sync_space_email_trigger_status()
+RETURNS trigger
+LANGUAGE plpgsql
+AS $$
+BEGIN
+  IF NEW.email_trigger_status IS NOT DISTINCT FROM OLD.email_trigger_status
+     AND NEW.email_triggers_enabled IS DISTINCT FROM OLD.email_triggers_enabled THEN
+    NEW.email_trigger_status := CASE
+      WHEN NEW.email_triggers_enabled IS TRUE THEN 'enabled'
+      ELSE 'disabled'
+    END;
+  END IF;
+  RETURN NEW;
+END;
+$$;
+
+DROP TRIGGER IF EXISTS spaces_email_trigger_status_sync ON public.spaces;
+
+CREATE TRIGGER spaces_email_trigger_status_sync
+BEFORE UPDATE OF email_triggers_enabled ON public.spaces
+FOR EACH ROW
+EXECUTE FUNCTION public.sync_space_email_trigger_status();
+
+COMMIT;

package/dist/drizzle/0137_thread_participant_pins.sql

@@ -0,0 +1,25 @@
+-- Purpose: persist per-user saved Thread pins across Spaces clients.
+-- Plan: docs/plans/2026-05-28-002-feat-server-thread-pins-plan.md (U1)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0137_thread_participant_pins.sql
+-- creates-column: public.thread_participants.pinned_at
+-- creates-column: public.thread_participants.pin_order
+-- creates: public.idx_thread_participants_user_pins
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.thread_participants
+  ADD COLUMN IF NOT EXISTS pinned_at timestamptz,
+  ADD COLUMN IF NOT EXISTS pin_order integer;
+
+CREATE INDEX IF NOT EXISTS idx_thread_participants_user_pins
+  ON public.thread_participants (tenant_id, user_id, pin_order)
+  WHERE participant_type = 'user'
+    AND user_id IS NOT NULL
+    AND pinned_at IS NOT NULL;
+
+COMMIT;

package/dist/drizzle/0138_users_cognito_sub.sql

@@ -0,0 +1,30 @@
+-- creates-column: public.users.cognito_sub
+-- creates: public.idx_users_cognito_sub
+--
+-- Plan: docs/plans/2026-05-29-006-fix-google-federated-identity-resolution-plan.md (U1)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0138_users_cognito_sub.sql
+--
+-- Durable identity link for Google-federated Cognito users. Native users have
+-- users.id == Cognito sub; Google-federated users get a fresh-UUID id and were
+-- linked only by the optional ID-token `email` claim, so a refreshed token that
+-- drops `email` broke identity resolution. Storing the always-present, stable
+-- Cognito `sub` here lets resolveCallerFromAuth resolve by sub first
+-- (resolvers/core/resolve-auth-user.ts) instead of depending on `email`.
+-- Nullable: existing rows have no sub yet (they self-heal via opportunistic
+-- backfill, and bootstrapUser stamps it for new users). Postgres treats NULLs
+-- as distinct in a unique index, so many un-backfilled rows coexist.
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.users
+  ADD COLUMN IF NOT EXISTS cognito_sub text;
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_users_cognito_sub
+  ON public.users (cognito_sub);
+
+COMMIT;

package/dist/drizzle/0139_mobile_turn_client_id.sql

@@ -0,0 +1,23 @@
+-- creates: public.uq_thread_turns_mobile_client_turn
+--
+-- Plan: docs/plans/2026-05-31-001-feat-mobile-pi-agentcore-background-handoff-plan.md (U1)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0139_mobile_turn_client_id.sql
+--
+-- Mobile Pi starts a durable thread_turn before local execution begins. The
+-- clientTurnId is an idempotency token, not authorization, and is stored in
+-- thread_turns.external_run_id. Scope the unique key narrowly to mobile Pi
+-- turns so existing AgentCore/desktop uses of external_run_id are unchanged.
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_thread_turns_mobile_client_turn
+  ON public.thread_turns (tenant_id, thread_id, external_run_id)
+  WHERE invocation_source = 'mobile_pi'
+    AND external_run_id IS NOT NULL;
+
+COMMIT;

package/dist/drizzle/0140_workspace_folder_names.sql

@@ -0,0 +1,36 @@
+-- creates-column: public.agents.workspace_folder_name
+-- creates-column: public.spaces.workspace_folder_name
+-- creates-column: public.users.workspace_folder_name
+-- creates-column: public.threads.workspace_folder_name
+-- creates-column: public.goals.workspace_folder_name
+-- creates: public.uq_agents_tenant_workspace_folder_name
+-- creates: public.uq_spaces_tenant_workspace_folder_name
+-- creates: public.uq_users_tenant_workspace_folder_name
+-- creates: public.uq_threads_tenant_workspace_folder_name
+-- creates: public.uq_goals_tenant_workspace_folder_name
+
+ALTER TABLE agents ADD COLUMN IF NOT EXISTS workspace_folder_name text;
+ALTER TABLE spaces ADD COLUMN IF NOT EXISTS workspace_folder_name text;
+ALTER TABLE users ADD COLUMN IF NOT EXISTS workspace_folder_name text;
+ALTER TABLE threads ADD COLUMN IF NOT EXISTS workspace_folder_name text;
+ALTER TABLE goals ADD COLUMN IF NOT EXISTS workspace_folder_name text;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_agents_tenant_workspace_folder_name
+  ON agents (tenant_id, workspace_folder_name)
+  WHERE workspace_folder_name IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_spaces_tenant_workspace_folder_name
+  ON spaces (tenant_id, workspace_folder_name)
+  WHERE workspace_folder_name IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_users_tenant_workspace_folder_name
+  ON users (tenant_id, workspace_folder_name)
+  WHERE workspace_folder_name IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_threads_tenant_workspace_folder_name
+  ON threads (tenant_id, workspace_folder_name)
+  WHERE workspace_folder_name IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_goals_tenant_workspace_folder_name
+  ON goals (tenant_id, workspace_folder_name)
+  WHERE workspace_folder_name IS NOT NULL;

package/dist/drizzle/0141_eval_runs_desktop_pi_provenance.sql

@@ -0,0 +1,31 @@
+-- 0141_eval_runs_desktop_pi_provenance.sql
+--
+-- Adds provenance and explicit selection tracking for desktop-local Pi eval
+-- runs. Existing cloud/AgentCore rows backfill to the default values so
+-- historical dashboards continue to read as AgentCore-backed runs.
+--
+-- Plan: docs/plans/2026-06-01-004-feat-desktop-pi-redteam-evals-plan.md (U2)
+--
+-- creates-column: public.eval_runs.execution_target
+-- creates-column: public.eval_runs.runtime_host
+-- creates-column: public.eval_runs.selected_test_case_ids
+-- creates: public.idx_eval_runs_tenant_execution_target_created
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '120s';
+
+SELECT pg_advisory_xact_lock(hashtext('eval_runs_desktop_pi_provenance'));
+
+ALTER TABLE public.eval_runs
+  ADD COLUMN IF NOT EXISTS execution_target text NOT NULL DEFAULT 'agentcore',
+  ADD COLUMN IF NOT EXISTS runtime_host text NOT NULL DEFAULT 'aws-agentcore',
+  ADD COLUMN IF NOT EXISTS selected_test_case_ids uuid[] NOT NULL DEFAULT '{}'::uuid[];
+
+CREATE INDEX IF NOT EXISTS idx_eval_runs_tenant_execution_target_created
+  ON public.eval_runs (tenant_id, execution_target, created_at);
+
+COMMIT;

package/dist/drizzle/0142_pi_only_agent_runtime.sql

@@ -0,0 +1,61 @@
+-- Retire legacy active Agent runtime values and make Pi the only stored runtime.
+--
+-- creates-constraint: public.agents.agents_runtime_check
+-- creates-constraint: public.agent_templates.agent_templates_runtime_check
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '120s';
+
+SELECT pg_advisory_xact_lock(hashtext('pi_only_agent_runtime'));
+
+\echo '-- allowing legacy runtime values during backfill --'
+
+ALTER TABLE public.agents DROP CONSTRAINT IF EXISTS agents_runtime_check;
+ALTER TABLE public.agents
+  ADD CONSTRAINT agents_runtime_check
+  CHECK (runtime IN ('strands', 'pi', 'flue'));
+
+ALTER TABLE public.agent_templates DROP CONSTRAINT IF EXISTS agent_templates_runtime_check;
+ALTER TABLE public.agent_templates
+  ADD CONSTRAINT agent_templates_runtime_check
+  CHECK (runtime IN ('strands', 'pi', 'flue'));
+
+\echo '-- backfilling agents.runtime to pi --'
+
+UPDATE public.agents
+SET runtime = 'pi',
+    updated_at = NOW()
+WHERE runtime IN ('strands', 'flue');
+
+\echo '-- backfilling agent_templates.runtime to pi --'
+
+UPDATE public.agent_templates
+SET runtime = 'pi',
+    updated_at = NOW()
+WHERE runtime IN ('strands', 'flue');
+
+\echo '-- setting pi runtime defaults --'
+
+ALTER TABLE public.agents
+  ALTER COLUMN runtime SET DEFAULT 'pi';
+
+ALTER TABLE public.agent_templates
+  ALTER COLUMN runtime SET DEFAULT 'pi';
+
+\echo '-- tightening runtime CHECK constraints to pi-only --'
+
+ALTER TABLE public.agents DROP CONSTRAINT IF EXISTS agents_runtime_check;
+ALTER TABLE public.agents
+  ADD CONSTRAINT agents_runtime_check
+  CHECK (runtime = 'pi');
+
+ALTER TABLE public.agent_templates DROP CONSTRAINT IF EXISTS agent_templates_runtime_check;
+ALTER TABLE public.agent_templates
+  ADD CONSTRAINT agent_templates_runtime_check
+  CHECK (runtime = 'pi');
+
+COMMIT;

package/dist/drizzle/0143_add_web_extract_builtin_config.sql

@@ -0,0 +1,28 @@
+-- Purpose: add Firecrawl-backed Web Extraction opt-in fields for agents and templates.
+-- Plan: docs/plans/2026-06-04-002-feat-firecrawl-web-extraction-plan.md (U1)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0143_add_web_extract_builtin_config.sql
+-- creates-column: public.agents.web_extract
+-- creates-column: public.agent_templates.web_extract
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.agents
+  ADD COLUMN IF NOT EXISTS web_extract jsonb DEFAULT '{"enabled": true}'::jsonb;
+
+ALTER TABLE public.agent_templates
+  ADD COLUMN IF NOT EXISTS web_extract jsonb DEFAULT '{"enabled": true}'::jsonb;
+
+UPDATE public.agents
+SET web_extract = '{"enabled": true}'::jsonb
+WHERE web_extract IS NULL;
+
+UPDATE public.agent_templates
+SET web_extract = '{"enabled": true}'::jsonb
+WHERE web_extract IS NULL;
+
+COMMIT;

package/dist/drizzle/0144_skill_catalog_index.sql

@@ -0,0 +1,40 @@
+-- Purpose: re-add a per-tenant index of the S3 skill catalog so the Skills
+--   settings list reads one query instead of scanning S3 + reading every file.
+--   Derived read cache; S3 stays source of truth. Per-tenant (the dropped
+--   global skill_catalog from 0131 was not tenant-scoped).
+-- Plan: docs/plans/2026-06-04-002-feat-skills-catalog-db-index-plan.md U1
+-- Apply manually (no CI migration runner):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0144_skill_catalog_index.sql
+-- Pre-flight:
+--   SELECT to_regclass('public.skill_catalog');
+--   SELECT to_regclass('public.uq_skill_catalog_tenant_slug');
+-- creates: public.skill_catalog
+-- creates: public.uq_skill_catalog_tenant_slug
+-- creates: public.idx_skill_catalog_tenant
+-- creates-constraint: public.skill_catalog.skill_catalog_tenant_id_fkey
+
+BEGIN;
+
+SELECT pg_advisory_xact_lock(hashtext('migration:0144_skill_catalog_index'));
+
+CREATE TABLE IF NOT EXISTS skill_catalog (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
+  slug text NOT NULL,
+  display_name text,
+  description text,
+  category text,
+  icon text,
+  tags text[],
+  content_sha text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_skill_catalog_tenant_slug
+  ON skill_catalog (tenant_id, slug);
+
+CREATE INDEX IF NOT EXISTS idx_skill_catalog_tenant
+  ON skill_catalog (tenant_id);
+
+COMMIT;