thinkwork-cli 0.12.11 → 0.12.15

package/dist/drizzle/0166_company_brain_substrate_contract.sql

@@ -0,0 +1,386 @@
+-- Purpose: add the Company Brain substrate contract tables used to report
+--   storage tier, backend posture, migration state, operational counters, and
+--   replayable artifact manifests.
+-- Plan: docs/plans/2026-06-13-003-feat-company-brain-physical-substrate-plan.md U1
+-- Apply manually (no CI migration runner):
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0166_company_brain_substrate_contract.sql
+-- Pre-flight:
+--   SELECT to_regclass('brain.substrate_states');
+--   SELECT to_regclass('public.managed_applications');
+--   SELECT to_regclass('public.managed_application_deployment_jobs');
+-- creates: brain.substrate_states
+-- creates: brain.substrate_migrations
+-- creates: brain.substrate_events
+-- creates: brain.artifact_manifests
+-- creates: brain.brain_substrate_states_tenant_uidx
+-- creates: brain.brain_substrate_states_tenant_status_idx
+-- creates: brain.brain_substrate_states_managed_app_idx
+-- creates: brain.brain_substrate_states_latest_job_idx
+-- creates: brain.brain_substrate_states_storage_tier_idx
+-- creates: brain.brain_substrate_migrations_tenant_status_idx
+-- creates: brain.brain_substrate_migrations_tenant_phase_idx
+-- creates: brain.brain_substrate_migrations_substrate_created_idx
+-- creates: brain.brain_substrate_migrations_job_idx
+-- creates: brain.brain_substrate_events_tenant_created_idx
+-- creates: brain.brain_substrate_events_substrate_created_idx
+-- creates: brain.brain_substrate_events_migration_idx
+-- creates: brain.brain_substrate_events_deployment_job_idx
+-- creates: brain.brain_artifact_manifests_manifest_uri_uidx
+-- creates: brain.brain_artifact_manifests_tenant_kind_idx
+-- creates: brain.brain_artifact_manifests_substrate_kind_idx
+-- creates: brain.brain_artifact_manifests_migration_idx
+-- creates: brain.brain_artifact_manifests_source_idx
+-- creates-constraint: brain.substrate_states.substrate_states_pkey
+-- creates-constraint: brain.substrate_states.substrate_states_tenant_id_tenants_id_fk
+-- creates-constraint: brain.substrate_states.substrate_states_managed_application_id_fk
+-- creates-constraint: brain.substrate_states.substrate_states_latest_deployment_job_id_fk
+-- creates-constraint: brain.substrate_states.brain_substrate_states_tier_allowed
+-- creates-constraint: brain.substrate_states.brain_substrate_states_backend_allowed
+-- creates-constraint: brain.substrate_states.brain_substrate_states_status_allowed
+-- creates-constraint: brain.substrate_states.brain_substrate_states_health_allowed
+-- creates-constraint: brain.substrate_states.brain_substrate_states_vector_positive
+-- creates-constraint: brain.substrate_states.brain_substrate_states_queue_nonneg
+-- creates-constraint: brain.substrate_states.brain_substrate_states_failed_nonneg
+-- creates-constraint: brain.substrate_states.brain_substrate_states_entity_nonneg
+-- creates-constraint: brain.substrate_states.brain_substrate_states_edge_nonneg
+-- creates-constraint: brain.substrate_states.brain_substrate_states_artifact_nonneg
+-- creates-constraint: brain.substrate_states.brain_substrate_states_projection_nonneg
+-- creates-constraint: brain.substrate_migrations.substrate_migrations_pkey
+-- creates-constraint: brain.substrate_migrations.substrate_migrations_tenant_id_tenants_id_fk
+-- creates-constraint: brain.substrate_migrations.substrate_migrations_substrate_id_fk
+-- creates-constraint: brain.substrate_migrations.substrate_migrations_requested_by_user_id_fk
+-- creates-constraint: brain.substrate_migrations.substrate_migrations_deployment_job_id_fk
+-- creates-constraint: brain.substrate_migrations.brain_substrate_migrations_from_tier_allowed
+-- creates-constraint: brain.substrate_migrations.brain_substrate_migrations_to_tier_allowed
+-- creates-constraint: brain.substrate_migrations.brain_substrate_migrations_phase_allowed
+-- creates-constraint: brain.substrate_migrations.brain_substrate_migrations_status_allowed
+-- creates-constraint: brain.substrate_migrations.brain_substrate_migrations_vector_positive
+-- creates-constraint: brain.substrate_events.substrate_events_pkey
+-- creates-constraint: brain.substrate_events.substrate_events_tenant_id_tenants_id_fk
+-- creates-constraint: brain.substrate_events.substrate_events_substrate_id_fk
+-- creates-constraint: brain.substrate_events.substrate_events_migration_id_fk
+-- creates-constraint: brain.substrate_events.substrate_events_deployment_job_id_fk
+-- creates-constraint: brain.artifact_manifests.artifact_manifests_pkey
+-- creates-constraint: brain.artifact_manifests.artifact_manifests_tenant_id_tenants_id_fk
+-- creates-constraint: brain.artifact_manifests.artifact_manifests_substrate_id_fk
+-- creates-constraint: brain.artifact_manifests.artifact_manifests_migration_id_fk
+-- creates-constraint: brain.artifact_manifests.brain_artifact_manifests_kind_allowed
+-- creates-constraint: brain.artifact_manifests.brain_artifact_manifests_tier_allowed
+-- creates-constraint: brain.artifact_manifests.brain_artifact_manifests_status_allowed
+-- creates-constraint: brain.artifact_manifests.brain_artifact_manifests_object_nonneg
+-- creates-constraint: brain.artifact_manifests.brain_artifact_manifests_source_nonneg
+-- creates-constraint: brain.artifact_manifests.brain_artifact_manifests_vector_positive
+
+\set ON_ERROR_STOP on
+
+SET lock_timeout = '5s';
+SET statement_timeout = '15min';
+
+SELECT pg_advisory_lock(hashtext('migration:0166_company_brain_substrate_contract'));
+
+CREATE SCHEMA IF NOT EXISTS brain;
+
+-- ---------------------------------------------------------------------------
+-- brain.substrate_states — per-tenant Company Brain substrate posture
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS brain.substrate_states (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  managed_application_id uuid,
+  latest_deployment_job_id uuid,
+  storage_tier text NOT NULL DEFAULT 'default',
+  active_backend text NOT NULL DEFAULT 'none',
+  status text NOT NULL DEFAULT 'not_installed',
+  health_status text NOT NULL DEFAULT 'unknown',
+  backend_mode text,
+  graph_provider text,
+  vector_provider text,
+  embedding_model text,
+  vector_dimension integer,
+  cognee_version text,
+  cognee_endpoint text,
+  s3_artifact_root text,
+  s3_manifest_root text,
+  s3_vault_projection_root text,
+  neptune_graph_id text,
+  neptune_endpoint text,
+  efs_file_system_id text,
+  production_posture text,
+  latest_ingest_at timestamptz,
+  latest_projection_at timestamptz,
+  ingestion_queue_depth integer NOT NULL DEFAULT 0,
+  failed_ingest_count integer NOT NULL DEFAULT 0,
+  graph_entity_count integer,
+  graph_edge_count integer,
+  source_artifact_count integer,
+  vault_projection_count integer,
+  ontology_version text,
+  launch_capabilities jsonb NOT NULL DEFAULT '{}'::jsonb,
+  optional_capabilities jsonb NOT NULL DEFAULT '{}'::jsonb,
+  operator_evidence jsonb NOT NULL DEFAULT '{}'::jsonb,
+  last_failure_message text,
+  last_failure_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT substrate_states_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT substrate_states_managed_application_id_fk
+    FOREIGN KEY (managed_application_id)
+    REFERENCES public.managed_applications(id)
+    ON DELETE SET NULL,
+  CONSTRAINT substrate_states_latest_deployment_job_id_fk
+    FOREIGN KEY (latest_deployment_job_id)
+    REFERENCES public.managed_application_deployment_jobs(id)
+    ON DELETE SET NULL,
+  CONSTRAINT brain_substrate_states_tier_allowed
+    CHECK (storage_tier IN ('default', 'production')),
+  CONSTRAINT brain_substrate_states_backend_allowed
+    CHECK (active_backend IN ('none', 'default', 'production', 'legacy_cognee')),
+  CONSTRAINT brain_substrate_states_status_allowed
+    CHECK (status IN (
+      'not_installed',
+      'provisioning',
+      'ready',
+      'degraded',
+      'failed',
+      'migrating',
+      'disabled'
+    )),
+  CONSTRAINT brain_substrate_states_health_allowed
+    CHECK (health_status IN ('unknown', 'healthy', 'degraded', 'failed', 'disabled')),
+  CONSTRAINT brain_substrate_states_vector_positive
+    CHECK (vector_dimension IS NULL OR vector_dimension > 0),
+  CONSTRAINT brain_substrate_states_queue_nonneg
+    CHECK (ingestion_queue_depth >= 0),
+  CONSTRAINT brain_substrate_states_failed_nonneg
+    CHECK (failed_ingest_count >= 0),
+  CONSTRAINT brain_substrate_states_entity_nonneg
+    CHECK (graph_entity_count IS NULL OR graph_entity_count >= 0),
+  CONSTRAINT brain_substrate_states_edge_nonneg
+    CHECK (graph_edge_count IS NULL OR graph_edge_count >= 0),
+  CONSTRAINT brain_substrate_states_artifact_nonneg
+    CHECK (source_artifact_count IS NULL OR source_artifact_count >= 0),
+  CONSTRAINT brain_substrate_states_projection_nonneg
+    CHECK (vault_projection_count IS NULL OR vault_projection_count >= 0)
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS brain_substrate_states_tenant_uidx
+  ON brain.substrate_states (tenant_id);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_states_tenant_status_idx
+  ON brain.substrate_states (tenant_id, status);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_states_managed_app_idx
+  ON brain.substrate_states (managed_application_id);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_states_latest_job_idx
+  ON brain.substrate_states (latest_deployment_job_id);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_states_storage_tier_idx
+  ON brain.substrate_states (storage_tier);
+
+-- ---------------------------------------------------------------------------
+-- brain.substrate_migrations — storage-tier migration/cutover state
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS brain.substrate_migrations (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  substrate_id uuid,
+  from_storage_tier text NOT NULL DEFAULT 'default',
+  to_storage_tier text NOT NULL DEFAULT 'production',
+  phase text NOT NULL DEFAULT 'none',
+  status text NOT NULL DEFAULT 'none',
+  requested_by_user_id uuid,
+  deployment_job_id uuid,
+  embedding_model text,
+  vector_dimension integer,
+  validation_summary jsonb NOT NULL DEFAULT '{}'::jsonb,
+  operator_evidence jsonb NOT NULL DEFAULT '{}'::jsonb,
+  error_message text,
+  requested_at timestamptz NOT NULL DEFAULT now(),
+  started_at timestamptz,
+  completed_at timestamptz,
+  rollback_window_closes_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT substrate_migrations_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT substrate_migrations_substrate_id_fk
+    FOREIGN KEY (substrate_id)
+    REFERENCES brain.substrate_states(id)
+    ON DELETE SET NULL,
+  CONSTRAINT substrate_migrations_requested_by_user_id_fk
+    FOREIGN KEY (requested_by_user_id)
+    REFERENCES public.users(id)
+    ON DELETE SET NULL,
+  CONSTRAINT substrate_migrations_deployment_job_id_fk
+    FOREIGN KEY (deployment_job_id)
+    REFERENCES public.managed_application_deployment_jobs(id)
+    ON DELETE SET NULL,
+  CONSTRAINT brain_substrate_migrations_from_tier_allowed
+    CHECK (from_storage_tier IN ('default', 'production')),
+  CONSTRAINT brain_substrate_migrations_to_tier_allowed
+    CHECK (to_storage_tier IN ('default', 'production')),
+  CONSTRAINT brain_substrate_migrations_phase_allowed
+    CHECK (phase IN (
+      'none',
+      'requested',
+      'snapshotting',
+      'provisioning',
+      'replaying',
+      'validating',
+      'cutover',
+      'completed',
+      'failed',
+      'rolled_back'
+    )),
+  CONSTRAINT brain_substrate_migrations_status_allowed
+    CHECK (status IN (
+      'none',
+      'requested',
+      'running',
+      'completed',
+      'failed',
+      'rolled_back',
+      'canceled'
+    )),
+  CONSTRAINT brain_substrate_migrations_vector_positive
+    CHECK (vector_dimension IS NULL OR vector_dimension > 0)
+);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_migrations_tenant_status_idx
+  ON brain.substrate_migrations (tenant_id, status);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_migrations_tenant_phase_idx
+  ON brain.substrate_migrations (tenant_id, phase);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_migrations_substrate_created_idx
+  ON brain.substrate_migrations (substrate_id, created_at);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_migrations_job_idx
+  ON brain.substrate_migrations (deployment_job_id);
+
+-- ---------------------------------------------------------------------------
+-- brain.substrate_events — operational substrate event log
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS brain.substrate_events (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  substrate_id uuid,
+  migration_id uuid,
+  deployment_job_id uuid,
+  event_type text NOT NULL,
+  message text NOT NULL,
+  payload jsonb NOT NULL DEFAULT '{}'::jsonb,
+  evidence_uri text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT substrate_events_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT substrate_events_substrate_id_fk
+    FOREIGN KEY (substrate_id)
+    REFERENCES brain.substrate_states(id)
+    ON DELETE CASCADE,
+  CONSTRAINT substrate_events_migration_id_fk
+    FOREIGN KEY (migration_id)
+    REFERENCES brain.substrate_migrations(id)
+    ON DELETE SET NULL,
+  CONSTRAINT substrate_events_deployment_job_id_fk
+    FOREIGN KEY (deployment_job_id)
+    REFERENCES public.managed_application_deployment_jobs(id)
+    ON DELETE SET NULL
+);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_events_tenant_created_idx
+  ON brain.substrate_events (tenant_id, created_at);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_events_substrate_created_idx
+  ON brain.substrate_events (substrate_id, created_at);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_events_migration_idx
+  ON brain.substrate_events (migration_id);
+
+CREATE INDEX IF NOT EXISTS brain_substrate_events_deployment_job_idx
+  ON brain.substrate_events (deployment_job_id);
+
+-- ---------------------------------------------------------------------------
+-- brain.artifact_manifests — replayable Brain source/vault manifests
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS brain.artifact_manifests (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  substrate_id uuid,
+  migration_id uuid,
+  manifest_kind text NOT NULL,
+  storage_tier text NOT NULL DEFAULT 'default',
+  source_family text,
+  source_id_hash text,
+  manifest_uri text NOT NULL,
+  artifact_root_uri text,
+  vault_projection_root_uri text,
+  checksum_sha256 text,
+  object_count integer NOT NULL DEFAULT 0,
+  source_count integer NOT NULL DEFAULT 0,
+  embedding_model text,
+  vector_dimension integer,
+  ontology_version text,
+  status text NOT NULL DEFAULT 'active',
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT artifact_manifests_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT artifact_manifests_substrate_id_fk
+    FOREIGN KEY (substrate_id)
+    REFERENCES brain.substrate_states(id)
+    ON DELETE CASCADE,
+  CONSTRAINT artifact_manifests_migration_id_fk
+    FOREIGN KEY (migration_id)
+    REFERENCES brain.substrate_migrations(id)
+    ON DELETE SET NULL,
+  CONSTRAINT brain_artifact_manifests_kind_allowed
+    CHECK (manifest_kind IN (
+      'source_artifact',
+      'ingestion_manifest',
+      'migration_snapshot',
+      'vault_projection',
+      'export'
+    )),
+  CONSTRAINT brain_artifact_manifests_tier_allowed
+    CHECK (storage_tier IN ('default', 'production')),
+  CONSTRAINT brain_artifact_manifests_status_allowed
+    CHECK (status IN ('active', 'superseded', 'deleted', 'failed')),
+  CONSTRAINT brain_artifact_manifests_object_nonneg
+    CHECK (object_count >= 0),
+  CONSTRAINT brain_artifact_manifests_source_nonneg
+    CHECK (source_count >= 0),
+  CONSTRAINT brain_artifact_manifests_vector_positive
+    CHECK (vector_dimension IS NULL OR vector_dimension > 0)
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS brain_artifact_manifests_manifest_uri_uidx
+  ON brain.artifact_manifests (manifest_uri);
+
+CREATE INDEX IF NOT EXISTS brain_artifact_manifests_tenant_kind_idx
+  ON brain.artifact_manifests (tenant_id, manifest_kind);
+
+CREATE INDEX IF NOT EXISTS brain_artifact_manifests_substrate_kind_idx
+  ON brain.artifact_manifests (substrate_id, manifest_kind);
+
+CREATE INDEX IF NOT EXISTS brain_artifact_manifests_migration_idx
+  ON brain.artifact_manifests (migration_id);
+
+CREATE INDEX IF NOT EXISTS brain_artifact_manifests_source_idx
+  ON brain.artifact_manifests (tenant_id, source_family, source_id_hash);
+
+SELECT pg_advisory_unlock(hashtext('migration:0166_company_brain_substrate_contract'));

package/dist/drizzle/0167_company_brain_artifact_manifest_runtime.sql

@@ -0,0 +1,85 @@
+-- Purpose: extend brain.artifact_manifests with runtime provenance needed for
+--   replayable Company Brain source artifacts and Knowledge Graph ingest links.
+-- Plan: docs/plans/2026-06-14-001-feat-company-brain-artifact-manifests-plan.md U2
+-- Apply manually (no CI migration runner):
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0167_company_brain_artifact_manifest_runtime.sql
+-- Pre-flight:
+--   SELECT to_regclass('brain.artifact_manifests');
+--   SELECT to_regclass('public.knowledge_graph_ingest_runs');
+-- creates-column: brain.artifact_manifests.ingest_run_id
+-- creates-column: brain.artifact_manifests.source_kind
+-- creates-column: brain.artifact_manifests.source_type
+-- creates-column: brain.artifact_manifests.source_ids
+-- creates-column: brain.artifact_manifests.object_version_id
+-- creates-column: brain.artifact_manifests.content_type
+-- creates-column: brain.artifact_manifests.content_encoding
+-- creates-column: brain.artifact_manifests.byte_length
+-- creates-column: brain.artifact_manifests.ontology_mechanism
+-- creates-column: brain.artifact_manifests.metadata
+-- creates: brain.brain_artifact_manifests_ingest_run_idx
+-- creates: brain.brain_artifact_manifests_source_kind_idx
+-- creates-constraint: brain.artifact_manifests.artifact_manifests_ingest_run_id_fk
+-- creates-constraint: brain.artifact_manifests.brain_artifact_manifests_source_kind_allowed
+-- creates-constraint: brain.artifact_manifests.brain_artifact_manifests_byte_nonneg
+
+\set ON_ERROR_STOP on
+
+SET lock_timeout = '5s';
+SET statement_timeout = '15min';
+
+SELECT pg_advisory_lock(hashtext('migration:0167_company_brain_artifact_manifest_runtime'));
+
+ALTER TABLE brain.artifact_manifests
+  ADD COLUMN IF NOT EXISTS ingest_run_id uuid,
+  ADD COLUMN IF NOT EXISTS source_kind text,
+  ADD COLUMN IF NOT EXISTS source_type text,
+  ADD COLUMN IF NOT EXISTS source_ids text[] NOT NULL DEFAULT ARRAY[]::text[],
+  ADD COLUMN IF NOT EXISTS object_version_id text,
+  ADD COLUMN IF NOT EXISTS content_type text,
+  ADD COLUMN IF NOT EXISTS content_encoding text,
+  ADD COLUMN IF NOT EXISTS byte_length integer,
+  ADD COLUMN IF NOT EXISTS ontology_mechanism text,
+  ADD COLUMN IF NOT EXISTS metadata jsonb NOT NULL DEFAULT '{}'::jsonb;
+
+DO $$
+BEGIN
+  ALTER TABLE brain.artifact_manifests
+    ADD CONSTRAINT artifact_manifests_ingest_run_id_fk
+    FOREIGN KEY (ingest_run_id)
+    REFERENCES public.knowledge_graph_ingest_runs(id)
+    ON DELETE SET NULL;
+EXCEPTION
+  WHEN duplicate_object THEN NULL;
+END
+$$;
+
+DO $$
+BEGIN
+  ALTER TABLE brain.artifact_manifests
+    ADD CONSTRAINT brain_artifact_manifests_source_kind_allowed
+    CHECK (
+      source_kind IS NULL
+      OR source_kind IN ('thread', 'wiki', 'brain', 'observations')
+    );
+EXCEPTION
+  WHEN duplicate_object THEN NULL;
+END
+$$;
+
+DO $$
+BEGIN
+  ALTER TABLE brain.artifact_manifests
+    ADD CONSTRAINT brain_artifact_manifests_byte_nonneg
+    CHECK (byte_length IS NULL OR byte_length >= 0);
+EXCEPTION
+  WHEN duplicate_object THEN NULL;
+END
+$$;
+
+CREATE INDEX IF NOT EXISTS brain_artifact_manifests_ingest_run_idx
+  ON brain.artifact_manifests (ingest_run_id);
+
+CREATE INDEX IF NOT EXISTS brain_artifact_manifests_source_kind_idx
+  ON brain.artifact_manifests (tenant_id, source_kind, source_id_hash);
+
+SELECT pg_advisory_unlock(hashtext('migration:0167_company_brain_artifact_manifest_runtime'));

package/dist/drizzle/0168_eval_skill_gate.sql

@@ -0,0 +1,44 @@
+-- Purpose: add the per-tenant skill-update gate threshold (Skill Tests &
+--          Evals U6). A skill UPDATE whose candidate version scores below
+--          this threshold is HELD (the workspace swap is deferred) until an
+--          operator applies it once the candidate passes, or overrides. A
+--          row's PRESENCE = the gate is enabled for the tenant; no row = no
+--          gate (nothing blocks). Initial install is never gated; unrated
+--          skills (no bundled cases) are never gated.
+-- Plan: docs/plans/2026-06-13-003-feat-skill-tests-and-evals-plan.md (U6)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0168_eval_skill_gate.sql
+--
+-- Hand-rolled (NOT registered in meta/_journal.json — the journal snapshot
+-- stopped at 0020; repo convention is psql-applied files gated by the
+-- db:migrate-manual drift reporter). Renumbered 0166 → 0168 after rebasing
+-- onto main, which landed 0166/0167 (company-brain); the table was already
+-- applied to dev under the old name (rename is file-only, no DB change).
+--
+-- Semantics:
+--   * Per-tenant single threshold (v1) — tenant_id is the PRIMARY KEY, so
+--     a tenant has at most one gate row. Per-skill thresholds are deferred
+--     (this locks the migration shape).
+--   * threshold is a fraction in [0, 1] (same scale as eval_runs.pass_rate)
+--     guarded by a CHECK so a stray write can't smuggle an out-of-range gate.
+--   * No row = no gate; setting null in the API DELETEs the row.
+--
+-- creates: public.eval_skill_gate
+-- creates-constraint: public.eval_skill_gate.eval_skill_gate_tenant_id_tenants_id_fk
+-- creates-constraint: public.eval_skill_gate.eval_skill_gate_threshold_check
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+
+CREATE TABLE IF NOT EXISTS public.eval_skill_gate (
+  tenant_id uuid PRIMARY KEY
+    CONSTRAINT eval_skill_gate_tenant_id_tenants_id_fk REFERENCES public.tenants(id),
+  threshold numeric(5, 4) NOT NULL
+    CONSTRAINT eval_skill_gate_threshold_check CHECK (threshold >= 0 AND threshold <= 1),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+COMMIT;

package/dist/drizzle/0169_release_update_jobs.sql

@@ -0,0 +1,67 @@
+-- Release update deployment job domain.
+--
+-- creates: public.release_update_jobs
+-- creates: public.release_update_events
+-- creates: public.release_update_jobs_tenant_idempotency_uidx
+-- creates: public.release_update_jobs_tenant_status_idx
+-- creates: public.release_update_jobs_tenant_target_idx
+-- creates: public.release_update_events_job_created_idx
+-- creates: public.release_update_events_idempotency_uidx
+
+CREATE TABLE IF NOT EXISTS "release_update_jobs" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "tenant_id" uuid NOT NULL REFERENCES "tenants"("id") ON DELETE cascade,
+  "status" text NOT NULL DEFAULT 'preflight_pending',
+  "idempotency_key" text NOT NULL,
+  "requested_by_user_id" uuid,
+  "target_release_version" text NOT NULL,
+  "current_release_version" text,
+  "manifest_url" text NOT NULL,
+  "manifest_sha256" text NOT NULL,
+  "manifest_signed" boolean NOT NULL DEFAULT false,
+  "manifest_trust_policy" text,
+  "terraform_module_version" text,
+  "preflight_summary" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "preserved_config_summary" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "remediation_summary" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "state_machine_arn" text,
+  "execution_arn" text,
+  "codebuild_build_arn" text,
+  "evidence_bucket" text,
+  "evidence_prefix" text,
+  "status_pointer_bucket" text,
+  "status_pointer_key" text,
+  "final_status" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "failure_category" text,
+  "failure_message" text,
+  "recovery_action" text,
+  "created_at" timestamp with time zone NOT NULL DEFAULT now(),
+  "updated_at" timestamp with time zone NOT NULL DEFAULT now()
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "release_update_jobs_tenant_idempotency_uidx"
+  ON "release_update_jobs" ("tenant_id", "idempotency_key");
+
+CREATE INDEX IF NOT EXISTS "release_update_jobs_tenant_status_idx"
+  ON "release_update_jobs" ("tenant_id", "status");
+
+CREATE INDEX IF NOT EXISTS "release_update_jobs_tenant_target_idx"
+  ON "release_update_jobs" ("tenant_id", "target_release_version");
+
+CREATE TABLE IF NOT EXISTS "release_update_events" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "tenant_id" uuid NOT NULL REFERENCES "tenants"("id") ON DELETE cascade,
+  "job_id" uuid NOT NULL REFERENCES "release_update_jobs"("id") ON DELETE cascade,
+  "event_type" text NOT NULL,
+  "message" text NOT NULL,
+  "payload" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "idempotency_key" text,
+  "created_at" timestamp with time zone NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS "release_update_events_job_created_idx"
+  ON "release_update_events" ("job_id", "created_at");
+
+CREATE UNIQUE INDEX IF NOT EXISTS "release_update_events_idempotency_uidx"
+  ON "release_update_events" ("job_id", "idempotency_key")
+  WHERE "idempotency_key" IS NOT NULL;