thinkwork-cli 0.12.11 → 0.12.15

package/dist/drizzle/0022_stripe_billing_indexes.sql

@@ -0,0 +1,48 @@
+-- Hand-rolled indexes for Stripe billing tables that drizzle-kit cannot
+-- express (partial unique indexes + CHECK constraints).
+--
+-- Apply manually (matches 0018/0019/0020/0021 convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0022_stripe_billing_indexes.sql
+--
+-- Drift detection:
+--   pnpm db:migrate-manual
+--
+-- Pre-migration invariants:
+--   - 0022_add_billing_tables.sql has been applied (tenants.pending_owner_email
+--     exists; stripe_subscriptions exists).
+--   - No collisions: a pre-existing partial unique index with the same name
+--     would cause this script to fail (safe — intent is clear).
+--
+-- What this script enforces:
+--   1. At most one tenant per pending_owner_email (only rows where the column
+--      is non-null participate — freshly-claimed tenants don't collide).
+--   2. At most one "active-ish" subscription per tenant. active / trialing /
+--      past_due all count as active-ish; canceled/unpaid/incomplete do not.
+--   3. stripe_subscriptions.status is one of the Stripe-documented values.
+--      Kept as a CHECK (not an enum) so Stripe API changes don't require a
+--      migration — the set is wide enough to cover all current states.
+--
+-- creates: public.tenants_pending_owner_email_uidx
+-- creates: public.stripe_subscriptions_active_uidx
+-- creates-check: public.stripe_subscriptions.status
+
+CREATE UNIQUE INDEX IF NOT EXISTS "tenants_pending_owner_email_uidx"
+  ON "tenants" (lower("pending_owner_email"))
+  WHERE "pending_owner_email" IS NOT NULL;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "stripe_subscriptions_active_uidx"
+  ON "stripe_subscriptions" ("tenant_id")
+  WHERE "status" IN ('active', 'trialing', 'past_due');
+
+ALTER TABLE "stripe_subscriptions"
+  ADD CONSTRAINT "stripe_subscriptions_status_allowed"
+  CHECK ("status" IN (
+    'incomplete',
+    'incomplete_expired',
+    'trialing',
+    'active',
+    'past_due',
+    'canceled',
+    'unpaid',
+    'paused'
+  ));

package/dist/drizzle/0023_tenants_deactivation.sql

@@ -0,0 +1,27 @@
+-- Tenant soft-delete columns.
+--
+-- Set by the stripe-webhook Lambda when customer.subscription.deleted
+-- fires. A separate scheduled sweeper (future PR) hard-deletes rows where
+-- deactivated_at < now() - 30 days.
+--
+-- See docs/plans/2026-04-23-001-feat-stripe-upgrade-and-cancel-soft-delete-plan.md
+-- (Unit 1).
+--
+-- Apply manually (matches the 0018+ hand-rolled convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0023_tenants_deactivation.sql
+--
+-- Drift detection:
+--   pnpm db:migrate-manual
+--
+-- Pre-migration invariants:
+--   - tenants exists.
+--   - tenants.deactivated_at + tenants.deactivation_reason do not yet exist.
+--
+-- creates-column: public.tenants.deactivated_at
+-- creates-column: public.tenants.deactivation_reason
+
+ALTER TABLE "tenants"
+  ADD COLUMN IF NOT EXISTS "deactivated_at" timestamp with time zone;
+
+ALTER TABLE "tenants"
+  ADD COLUMN IF NOT EXISTS "deactivation_reason" text;

package/dist/drizzle/0024_tenant_mcp_admin_keys.sql

@@ -0,0 +1,63 @@
+-- tenant_mcp_admin_keys — per-tenant Bearer tokens for the admin-ops MCP server.
+--
+-- Replaces the shared API_AUTH_SECRET for MCP admin-ops calls. Each tenant
+-- has one or more tokens; the admin-ops Lambda hashes the incoming Bearer
+-- with SHA-256 and looks it up here to resolve the caller's tenant. Raw
+-- tokens are never stored — only the hash + metadata.
+--
+-- See docs/plans/2026-04-22-shared-admin-ops-library-requirements.md and
+-- PR following up on #480 (admin-ops shared package + MCP Lambda).
+--
+-- Apply manually (matches the 0018+ hand-rolled convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0024_tenant_mcp_admin_keys.sql
+--
+-- Drift detection:
+--   pnpm db:migrate-manual
+--
+-- Pre-migration invariants:
+--   - tenants exists.
+--   - tenant_mcp_admin_keys does not yet exist.
+--     SELECT to_regclass('public.tenant_mcp_admin_keys'); -- must be NULL
+--
+-- creates: public.tenant_mcp_admin_keys
+-- creates: public.uq_tenant_mcp_admin_keys_hash
+-- creates: public.uq_tenant_mcp_admin_keys_active_name
+-- creates: public.idx_tenant_mcp_admin_keys_tenant
+
+CREATE TABLE "tenant_mcp_admin_keys" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"tenant_id" uuid NOT NULL REFERENCES "tenants"("id") ON DELETE CASCADE,
+	-- SHA-256 hex digest of the raw token. 64 chars; bytea would be smaller
+	-- but text keeps psql/Postgres tooling friendly and there are few rows.
+	"key_hash" text NOT NULL,
+	-- Human label ("default", "ci", "ops-laptop-eric"). Unique per tenant
+	-- among non-revoked rows so operators can re-create a revoked "default".
+	"name" text NOT NULL,
+	"created_at" timestamptz NOT NULL DEFAULT now(),
+	-- Who created the key. Nullable for break-glass bootstrap via apikey
+	-- where no human-user row is attributable.
+	"created_by_user_id" uuid,
+	-- Bumped on every successful auth by the admin-ops Lambda. Async,
+	-- best-effort (failure to update does not block the request).
+	"last_used_at" timestamptz,
+	-- Soft-delete. NULL = active. Set to now() on revoke; row retained for
+	-- audit + to prevent hash reuse. A scheduled GC (future PR) hard-deletes
+	-- rows with revoked_at < now() - 90 days.
+	"revoked_at" timestamptz
+);
+
+-- Global uniqueness on hash — different tenants cannot share a token value
+-- (collision probability with SHA-256 is negligible, but makes the lookup
+-- path a single-row read regardless of how tenants are partitioned).
+CREATE UNIQUE INDEX "uq_tenant_mcp_admin_keys_hash"
+	ON "tenant_mcp_admin_keys" ("key_hash");
+
+-- Per-tenant uniqueness on name among active rows. Partial index so a
+-- revoked "default" does not block creating a fresh "default".
+CREATE UNIQUE INDEX "uq_tenant_mcp_admin_keys_active_name"
+	ON "tenant_mcp_admin_keys" ("tenant_id", "name")
+	WHERE "revoked_at" IS NULL;
+
+-- Supports listing a tenant's keys ordered by created_at.
+CREATE INDEX "idx_tenant_mcp_admin_keys_tenant"
+	ON "tenant_mcp_admin_keys" ("tenant_id", "created_at" DESC);

package/dist/drizzle/0025_v1_agent_architecture.sql

@@ -0,0 +1,182 @@
+-- V1 agent-architecture — additive schema (U3 of plan #007).
+--
+-- Ships the persistence layer the V1 plan needs in Phase 1. Strictly additive:
+-- no column drops, no existing-data rewrites (except column defaults on new
+-- columns). U6 drops `skill_catalog.execution` + `mode` via a separate later
+-- migration once the runtime cutover is complete.
+--
+-- See docs/plans/2026-04-23-007-feat-v1-agent-architecture-final-call-plan.md
+-- §Implementation Units → U3.
+--
+-- Apply manually (matches the 0018+ hand-rolled convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0025_v1_agent_architecture.sql
+--
+-- Drift detection:
+--   pnpm db:migrate-manual
+--
+-- Pre-migration invariants (enforced by the to_regclass guards below):
+--   - tenants exists
+--   - tenant_mcp_servers exists
+--   - plugin_uploads does NOT yet exist
+--     SELECT to_regclass('public.plugin_uploads'); -- must be NULL
+--
+-- creates: public.plugin_uploads
+-- creates: public.idx_plugin_uploads_tenant
+-- creates: public.idx_plugin_uploads_status
+-- creates-column: public.plugin_uploads.id
+-- creates-column: public.tenant_mcp_servers.status
+-- creates-column: public.tenant_mcp_servers.url_hash
+-- creates-column: public.tenant_mcp_servers.approved_by
+-- creates-column: public.tenant_mcp_servers.approved_at
+-- creates-column: public.tenants.disabled_builtin_tools
+
+-- ---------------------------------------------------------------------------
+-- Pre-flight: fail loudly on missing pre-state. Without these guards a
+-- partially-migrated DB can silently absorb a migration meant for a later
+-- snapshot. Pattern mirrors 0023 / 0024.
+-- ---------------------------------------------------------------------------
+
+DO $$
+BEGIN
+  IF to_regclass('public.tenants') IS NULL THEN
+    RAISE EXCEPTION '0025: public.tenants is missing — refusing to apply';
+  END IF;
+  IF to_regclass('public.tenant_mcp_servers') IS NULL THEN
+    RAISE EXCEPTION '0025: public.tenant_mcp_servers is missing — refusing to apply';
+  END IF;
+END
+$$;
+
+-- ---------------------------------------------------------------------------
+-- tenants.disabled_builtin_tools — per-tenant kill switches (plan R6, R7).
+--
+-- JSONB array of built-in tool slugs the tenant has disabled globally. Empty
+-- array = all built-ins available (subject to template blocks). Runtime
+-- honors at session construction; template blocks intersect (narrow-only) —
+-- a template cannot unblock what the tenant disabled.
+--
+-- Admin UI to edit this column defers per §Scope Boundaries → Deferred to
+-- Follow-Up Work; until then operators flip the column via DB mutation.
+-- ---------------------------------------------------------------------------
+
+ALTER TABLE "tenants"
+  ADD COLUMN IF NOT EXISTS "disabled_builtin_tools" jsonb NOT NULL DEFAULT '[]'::jsonb;
+
+-- ---------------------------------------------------------------------------
+-- tenant_mcp_servers — admin-approval gate for bundled MCP endpoints (plan R8).
+--
+-- Mirrors the existing user_mcp_tokens.status pattern: an MCP server shipped
+-- inside an uploaded plugin registers as 'pending' and requires admin action
+-- before any agent can invoke it. Existing rows default to 'approved' so this
+-- migration cannot accidentally revoke working integrations (plan: "No
+-- existing agent loses MCP").
+--
+-- url_hash pins (url, auth_config) at approval time; any mutation to either
+-- field MUST revert status to 'pending' (enforced in the API resolver in
+-- U11, not at the DB layer — keeps the invariant debuggable from the
+-- application).
+-- ---------------------------------------------------------------------------
+
+ALTER TABLE "tenant_mcp_servers"
+  ADD COLUMN IF NOT EXISTS "status" text NOT NULL DEFAULT 'approved';
+
+ALTER TABLE "tenant_mcp_servers"
+  ADD COLUMN IF NOT EXISTS "url_hash" text;
+
+ALTER TABLE "tenant_mcp_servers"
+  ADD COLUMN IF NOT EXISTS "approved_by" uuid;
+
+ALTER TABLE "tenant_mcp_servers"
+  ADD COLUMN IF NOT EXISTS "approved_at" timestamp with time zone;
+
+-- Narrow the status column domain. CHECK rather than a pgEnum because:
+--   (a) enums ship with their own migration headaches (renames are fiddly),
+--   (b) the set is small and unlikely to grow,
+--   (c) pattern-matches existing text-column invariants in this schema
+--       (compliance_tier, billing statuses, etc).
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'tenant_mcp_servers_status_allowed'
+      AND conrelid = 'public.tenant_mcp_servers'::regclass
+  ) THEN
+    ALTER TABLE "tenant_mcp_servers"
+      ADD CONSTRAINT "tenant_mcp_servers_status_allowed"
+      CHECK ("status" IN ('pending', 'approved', 'rejected'));
+  END IF;
+END
+$$;
+
+-- ---------------------------------------------------------------------------
+-- plugin_uploads — audit of tenant self-serve plugin uploads (plan R1, R2).
+--
+-- Every POST /api/plugins/upload writes a row in phase 1 of the three-phase
+-- saga (plan §U10 Approach). Survives saga failures as the durable audit of
+-- what was attempted; a background sweeper reaps orphaned staging > 1h.
+--
+-- Columns:
+--   - id:                 server-generated PK
+--   - tenant_id:          owning tenant (FK to tenants)
+--   - uploaded_by:        the admin user who initiated the upload
+--   - uploaded_at:        wall-clock timestamp of phase-1 insert
+--   - bundle_sha256:      content hash of the zip; lets the saga detect
+--                         idempotent re-uploads without re-running phases 2/3
+--   - plugin_name:        parsed from plugin.json (`name`)
+--   - plugin_version:     parsed from plugin.json (`version`) when present
+--   - status:             'staging' | 'installed' | 'failed'
+--   - s3_staging_prefix:  intermediate upload key before phase-2 rename
+--   - error_message:      populated on failure, null on success
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS "plugin_uploads" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "tenant_id" uuid NOT NULL REFERENCES "tenants"("id") ON DELETE CASCADE,
+  "uploaded_by" uuid,
+  "uploaded_at" timestamp with time zone NOT NULL DEFAULT now(),
+  "bundle_sha256" text NOT NULL,
+  "plugin_name" text NOT NULL,
+  "plugin_version" text,
+  "status" text NOT NULL DEFAULT 'staging',
+  "s3_staging_prefix" text,
+  "error_message" text
+);
+
+-- Status domain. Same rationale as tenant_mcp_servers above.
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'plugin_uploads_status_allowed'
+      AND conrelid = 'public.plugin_uploads'::regclass
+  ) THEN
+    ALTER TABLE "plugin_uploads"
+      ADD CONSTRAINT "plugin_uploads_status_allowed"
+      CHECK ("status" IN ('staging', 'installed', 'failed'));
+  END IF;
+END
+$$;
+
+CREATE INDEX IF NOT EXISTS "idx_plugin_uploads_tenant"
+  ON "plugin_uploads" ("tenant_id");
+
+-- Partial index on status — the sweeper that reaps orphan staging rows > 1h
+-- old scans `WHERE status = 'staging'`, a tiny fraction of total rows.
+CREATE INDEX IF NOT EXISTS "idx_plugin_uploads_status"
+  ON "plugin_uploads" ("status", "uploaded_at")
+  WHERE "status" = 'staging';
+
+-- ---------------------------------------------------------------------------
+-- Slug renames — per U1 census bucket `needs-explicit-migration`.
+--
+-- The U1 census (docs/plans/2026-04-23-007-feat-v1-agent-architecture-final-
+-- call-plan.census.md) reports zero slugs in this bucket as of 2026-04-24,
+-- so this block is intentionally empty. The comment stays so a future run
+-- that does require slug renames has the pattern documented inline rather
+-- than rediscovered from the plan:
+--
+--   UPDATE "skill_catalog" SET "slug" = "slug" || '-legacy'
+--   WHERE "slug" IN ('<old1>', '<old2>');
+--   UPDATE "agent_skills"  SET "skill_id" = "skill_id" || '-legacy'
+--   WHERE "skill_id" IN ('<old1>', '<old2>');
+-- ---------------------------------------------------------------------------

package/dist/drizzle/0026_thread_turns_add_kind.sql

@@ -0,0 +1,28 @@
+-- thread_turns.kind column.
+--
+-- Adds a `kind` field to distinguish agent-turn rows (default) from
+-- system events (escalate/delegate) that U2 of the thread-detail cleanup
+-- plan writes in place of the dropped thread_comments table. Prerequisite
+-- for U2 — without this column the escalate/delegate refactor can't land.
+--
+-- See docs/plans/2026-04-24-002-refactor-thread-detail-pre-launch-cleanup-plan.md
+-- (Unit U12 — prerequisite migration).
+--
+-- Apply manually (matches the 0018+ hand-rolled convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0026_thread_turns_add_kind.sql
+--
+-- Drift detection:
+--   pnpm db:migrate-manual
+--
+-- Pre-migration invariants:
+--   - thread_turns exists.
+--   - thread_turns.kind does not yet exist.
+--
+-- creates-column: public.thread_turns.kind
+-- creates: public.idx_thread_turns_kind
+
+ALTER TABLE "thread_turns"
+  ADD COLUMN IF NOT EXISTS "kind" text NOT NULL DEFAULT 'agent_turn';
+
+CREATE INDEX IF NOT EXISTS "idx_thread_turns_kind"
+  ON "thread_turns" ("kind");

package/dist/drizzle/0027_capability_catalog_and_manifests.sql

@@ -0,0 +1,219 @@
+-- Resolved Capability Manifest schema — U15 part 1/3 of plan #007.
+--
+-- Lands two tables inert (no runtime capture yet):
+--   capability_catalog           — unified skill / tool / mcp-server registry
+--   resolved_capability_manifests — append-only per-session audit
+--
+-- Plus a conservative backfill:
+--   - Every existing skill_catalog row becomes a capability_catalog row
+--     with type='skill', source='builtin'.
+--   - Six built-in tools are seeded with type='tool', source='builtin'
+--     (execute_code, web_search, recall, reflect, artifacts, Skill).
+--
+-- U15 part 2 wires container-sources/capability_manifest.py + POST to
+-- /api/runtime/manifests. Part 3 flips SI-7 enforcement on at
+-- Agent(tools=...) construction.
+--
+-- Apply manually (matches the 0018+ hand-rolled convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0027_capability_catalog_and_manifests.sql
+--
+-- Drift detection: pnpm db:migrate-manual
+--
+-- creates: public.capability_catalog
+-- creates: public.resolved_capability_manifests
+-- creates: public.uq_capability_catalog_type_source_slug
+-- creates: public.idx_capability_catalog_type
+-- creates: public.idx_capability_catalog_source
+-- creates: public.idx_rcm_tenant
+-- creates: public.idx_rcm_agent
+-- creates: public.idx_rcm_template
+-- creates: public.idx_rcm_created_at
+
+-- ---------------------------------------------------------------------------
+-- Pre-flight guards — fail loudly on a partially-migrated DB.
+-- ---------------------------------------------------------------------------
+
+DO $$
+BEGIN
+  IF to_regclass('public.tenants') IS NULL THEN
+    RAISE EXCEPTION '0027: public.tenants is missing — refusing to apply';
+  END IF;
+  IF to_regclass('public.agents') IS NULL THEN
+    RAISE EXCEPTION '0027: public.agents is missing — refusing to apply';
+  END IF;
+  IF to_regclass('public.skill_catalog') IS NULL THEN
+    RAISE EXCEPTION '0027: public.skill_catalog is missing — refusing to apply (U3 / migration 0025 must land first)';
+  END IF;
+END
+$$;
+
+-- ---------------------------------------------------------------------------
+-- capability_catalog — unified capability registry (plan §U15).
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS "capability_catalog" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "slug" text NOT NULL,
+  "type" text NOT NULL,
+  "source" text NOT NULL,
+  "implementation_ref" jsonb,
+  "spec" jsonb,
+  "created_at" timestamp with time zone NOT NULL DEFAULT now(),
+  "updated_at" timestamp with time zone NOT NULL DEFAULT now()
+);
+
+-- Domain constraint on type. CHECK rather than pgEnum for the same
+-- reasons cited in 0025 (portable, no enum-rename grief, small set).
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'capability_catalog_type_allowed'
+      AND conrelid = 'public.capability_catalog'::regclass
+  ) THEN
+    ALTER TABLE "capability_catalog"
+      ADD CONSTRAINT "capability_catalog_type_allowed"
+      CHECK ("type" IN ('skill', 'tool', 'mcp-server'));
+  END IF;
+END
+$$;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'capability_catalog_source_allowed'
+      AND conrelid = 'public.capability_catalog'::regclass
+  ) THEN
+    ALTER TABLE "capability_catalog"
+      ADD CONSTRAINT "capability_catalog_source_allowed"
+      CHECK ("source" IN ('builtin', 'tenant-library', 'community'));
+  END IF;
+END
+$$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "uq_capability_catalog_type_source_slug"
+  ON "capability_catalog" ("type", "source", "slug");
+
+CREATE INDEX IF NOT EXISTS "idx_capability_catalog_type"
+  ON "capability_catalog" ("type");
+
+CREATE INDEX IF NOT EXISTS "idx_capability_catalog_source"
+  ON "capability_catalog" ("source");
+
+-- ---------------------------------------------------------------------------
+-- resolved_capability_manifests — per-session audit (plan §U15).
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS "resolved_capability_manifests" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "session_id" text NOT NULL,
+  "agent_id" uuid REFERENCES "agents"("id") ON DELETE SET NULL,
+  "template_id" uuid,
+  "user_id" uuid,
+  "tenant_id" uuid NOT NULL REFERENCES "tenants"("id") ON DELETE CASCADE,
+  "manifest_json" jsonb NOT NULL,
+  "created_at" timestamp with time zone NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS "idx_rcm_tenant"
+  ON "resolved_capability_manifests" ("tenant_id");
+
+CREATE INDEX IF NOT EXISTS "idx_rcm_agent"
+  ON "resolved_capability_manifests" ("agent_id");
+
+CREATE INDEX IF NOT EXISTS "idx_rcm_template"
+  ON "resolved_capability_manifests" ("template_id");
+
+-- created_at index powers the 30-day TTL sweep + admin "last N manifests"
+-- queries — both are ORDER BY created_at DESC LIMIT N.
+CREATE INDEX IF NOT EXISTS "idx_rcm_created_at"
+  ON "resolved_capability_manifests" ("created_at" DESC);
+
+-- ---------------------------------------------------------------------------
+-- Backfill: every skill_catalog row becomes a capability_catalog row.
+-- Idempotent via ON CONFLICT on the (type, source, slug) unique index —
+-- re-running the migration is a no-op on already-seeded installations.
+-- ---------------------------------------------------------------------------
+
+INSERT INTO "capability_catalog" ("slug", "type", "source", "implementation_ref", "spec", "created_at", "updated_at")
+SELECT
+  sc."slug",
+  'skill' AS "type",
+  CASE sc."source"
+    WHEN 'builtin'   THEN 'builtin'
+    WHEN 'community' THEN 'community'
+    ELSE 'tenant-library'
+  END AS "source",
+  NULL::jsonb AS "implementation_ref",
+  jsonb_build_object(
+    'display_name', sc."display_name",
+    'description', sc."description",
+    'category', sc."category",
+    'version', sc."version",
+    'execution', sc."execution",
+    'mode', sc."mode"
+  ) AS "spec",
+  sc."created_at",
+  sc."updated_at"
+FROM "skill_catalog" sc
+ON CONFLICT ("type", "source", "slug") DO NOTHING;
+
+-- ---------------------------------------------------------------------------
+-- Seed: six built-in tools the Strands container currently hard-codes.
+-- implementation_ref points at the Python module that owns the tool. U15
+-- part 3 enforces SI-7 — the runtime will refuse to register a built-in
+-- that is not present in this table.
+-- ---------------------------------------------------------------------------
+
+INSERT INTO "capability_catalog" ("slug", "type", "source", "implementation_ref", "spec")
+VALUES
+  (
+    'execute_code', 'tool', 'builtin',
+    jsonb_build_object('module_path', 'sandbox_tool', 'class_name', 'ExecuteCodeTool'),
+    jsonb_build_object(
+      'display_name', 'Execute Code',
+      'description', 'Run Python / bash / node in the per-session AgentCore Code Sandbox.'
+    )
+  ),
+  (
+    'web_search', 'tool', 'builtin',
+    jsonb_build_object('module_path', 'strands_tools', 'class_name', 'web_search'),
+    jsonb_build_object(
+      'display_name', 'Web Search',
+      'description', 'Query the web via the managed Strands search tool.'
+    )
+  ),
+  (
+    'recall', 'tool', 'builtin',
+    jsonb_build_object('module_path', 'memory_tools', 'class_name', 'recall'),
+    jsonb_build_object(
+      'display_name', 'Recall',
+      'description', 'Read from the agent''s memory engine (managed / Hindsight).'
+    )
+  ),
+  (
+    'reflect', 'tool', 'builtin',
+    jsonb_build_object('module_path', 'memory_tools', 'class_name', 'reflect'),
+    jsonb_build_object(
+      'display_name', 'Reflect',
+      'description', 'Write a reflective note into the agent''s memory engine.'
+    )
+  ),
+  (
+    'artifacts', 'tool', 'builtin',
+    jsonb_build_object('module_path', 'artifact_tools', 'class_name', 'ArtifactsTool'),
+    jsonb_build_object(
+      'display_name', 'Artifacts',
+      'description', 'Emit a structured artifact for the admin UI to render.'
+    )
+  ),
+  (
+    'Skill', 'tool', 'builtin',
+    jsonb_build_object('module_path', 'skill_meta_tool', 'class_name', 'Skill'),
+    jsonb_build_object(
+      'display_name', 'Skill (meta-tool)',
+      'description', 'Invoke any skill available in the session allowlist.'
+    )
+  )
+ON CONFLICT ("type", "source", "slug") DO NOTHING;

package/dist/drizzle/0028_aws_s3_extension.sql

@@ -0,0 +1,26 @@
+-- aws_s3 Aurora extension bootstrap.
+--
+-- Enables `aws_s3.query_export_to_s3(...)` and its supporting helpers for
+-- destructive-migration pre-drop snapshots (see U5 of the thread-detail
+-- cleanup plan) and any future caller that wants direct SQL → S3 exports.
+--
+-- Requires: Aurora cluster with an IAM role associated that grants s3
+-- PutObject on the target bucket. The role is provisioned by U13 (see
+-- terraform/modules/data/aurora-postgres — aws_rds_cluster_role_association
+-- with feature_name = "s3Export"). Without the role association this
+-- extension installs successfully but calls to query_export_to_s3 fail at
+-- runtime with an AccessDenied-style error.
+--
+-- Apply manually (matches the 0018+ hand-rolled convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0028_aws_s3_extension.sql
+--
+-- Drift detection:
+--   pnpm db:migrate-manual  (reporter now recognizes `-- creates-extension:`)
+--
+-- Pre-migration invariants:
+--   - Caller has rds_superuser on the cluster (required for CREATE EXTENSION).
+--   - Aurora Postgres engine version supports aws_s3 (14.9+ / 15.2+).
+--
+-- creates-extension: aws_s3
+
+CREATE EXTENSION IF NOT EXISTS aws_s3 CASCADE;

package/dist/drizzle/0029_collapse_execution_types.sql

@@ -0,0 +1,42 @@
+-- V1 agent-architecture — column drop (U6 of plan #007).
+--
+-- Drops the legacy `skill_catalog.execution` and `skill_catalog.mode` columns
+-- plus the `idx_skill_catalog_execution` index. The runtime no longer branches
+-- on these fields: the `composition` + `declarative` execution types were
+-- deleted in U6, and the remaining `script` / `context` distinction is read
+-- from each skill's on-disk `skill.yaml` by the runtime —
+-- never from the catalog table.
+--
+-- See docs/plans/2026-04-23-007-feat-v1-agent-architecture-final-call-plan.md
+-- §Implementation Units → U6.
+--
+-- Apply manually (matches the 0018+ hand-rolled convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0029_collapse_execution_types.sql
+--
+-- Drift detection:
+--   pnpm db:migrate-manual
+--
+-- Pre-migration invariants:
+--   - skill_catalog exists
+--   - no TypeScript / Python code reads the execution or mode columns
+--     on the skill_catalog table (enforced by U6 PR's grep-for-zero
+--     check, see the plan's §U6 verification block).
+--
+-- drops-column: public.skill_catalog.execution
+-- drops-column: public.skill_catalog.mode
+
+DO $$
+BEGIN
+  IF to_regclass('public.skill_catalog') IS NULL THEN
+    RAISE EXCEPTION 'skill_catalog table missing — cannot drop execution/mode columns on a fresh stage';
+  END IF;
+END $$;
+
+-- The runtime cutover (PR #U6) ships before this migration. Once deployed
+-- the columns are unread; the drop is a pure cleanup.
+ALTER TABLE skill_catalog DROP COLUMN IF EXISTS execution;
+ALTER TABLE skill_catalog DROP COLUMN IF EXISTS mode;
+
+-- The execution-keyed index tracked skill_catalog.execution and is dead once
+-- that column is gone. DROP IF EXISTS keeps the migration idempotent.
+DROP INDEX IF EXISTS idx_skill_catalog_execution;