thinkwork-cli 0.12.12 → 0.12.15

package/dist/drizzle/0148_user_cost_attribution.sql

@@ -0,0 +1,171 @@
+-- Purpose: add user-level cost attribution and user budget policy support.
+-- Plan: docs/plans/2026-06-05-002-feat-user-cost-budgets-plan.md U1
+-- Apply manually (no CI migration runner):
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0148_user_cost_attribution.sql
+-- Pre-flight:
+--   SELECT scope, count(*) FROM public.budget_policies GROUP BY scope;
+--   SELECT count(*) FROM public.cost_events WHERE user_id IS NULL;
+--   SELECT column_name FROM information_schema.columns WHERE table_schema = 'public' AND table_name = 'cost_events' AND column_name = 'user_id';
+--   SELECT column_name FROM information_schema.columns WHERE table_schema = 'public' AND table_name = 'budget_policies' AND column_name = 'user_id';
+--   SELECT column_name FROM information_schema.columns WHERE table_schema = 'public' AND table_name = 'scheduled_jobs' AND column_name = 'budget_paused';
+-- creates-column: public.cost_events.user_id
+-- creates-column: public.budget_policies.user_id
+-- creates-column: public.scheduled_jobs.budget_paused
+-- creates-column: public.scheduled_jobs.budget_paused_at
+-- creates-column: public.scheduled_jobs.budget_paused_reason
+-- creates: public.idx_cost_events_user_created
+-- creates: public.idx_budget_policies_user
+-- creates: public.idx_scheduled_jobs_budget_paused
+-- creates-constraint: public.cost_events.cost_events_user_id_users_id_fk
+-- creates-constraint: public.budget_policies.budget_policies_user_id_users_id_fk
+-- creates-constraint: public.budget_policies.budget_policies_scope_check
+-- creates-constraint: public.budget_policies.budget_policies_scope_shape_check
+
+\set ON_ERROR_STOP on
+
+SET lock_timeout = '5s';
+SET statement_timeout = '15min';
+
+SELECT pg_advisory_lock(hashtext('migration:0148_user_cost_attribution'));
+
+ALTER TABLE public.cost_events
+  ADD COLUMN IF NOT EXISTS user_id uuid;
+
+ALTER TABLE public.budget_policies
+  ADD COLUMN IF NOT EXISTS user_id uuid;
+
+ALTER TABLE public.scheduled_jobs
+  ADD COLUMN IF NOT EXISTS budget_paused boolean NOT NULL DEFAULT false,
+  ADD COLUMN IF NOT EXISTS budget_paused_at timestamptz,
+  ADD COLUMN IF NOT EXISTS budget_paused_reason text;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'cost_events_user_id_users_id_fk'
+      AND conrelid = 'public.cost_events'::regclass
+  ) THEN
+    ALTER TABLE public.cost_events
+      ADD CONSTRAINT cost_events_user_id_users_id_fk
+      FOREIGN KEY (user_id)
+      REFERENCES public.users(id)
+      NOT VALID;
+  END IF;
+END $$;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'budget_policies_user_id_users_id_fk'
+      AND conrelid = 'public.budget_policies'::regclass
+  ) THEN
+    ALTER TABLE public.budget_policies
+      ADD CONSTRAINT budget_policies_user_id_users_id_fk
+      FOREIGN KEY (user_id)
+      REFERENCES public.users(id)
+      NOT VALID;
+  END IF;
+END $$;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'budget_policies_scope_check'
+      AND conrelid = 'public.budget_policies'::regclass
+  ) THEN
+    ALTER TABLE public.budget_policies
+      ADD CONSTRAINT budget_policies_scope_check
+      CHECK (scope IN ('tenant', 'agent', 'user'))
+      NOT VALID;
+  END IF;
+END $$;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'budget_policies_scope_shape_check'
+      AND conrelid = 'public.budget_policies'::regclass
+  ) THEN
+    ALTER TABLE public.budget_policies
+      ADD CONSTRAINT budget_policies_scope_shape_check
+      CHECK (
+        (scope = 'tenant' AND agent_id IS NULL AND user_id IS NULL)
+        OR (scope = 'agent' AND agent_id IS NOT NULL AND user_id IS NULL)
+        OR (scope = 'user' AND agent_id IS NULL AND user_id IS NOT NULL)
+      )
+      NOT VALID;
+  END IF;
+END $$;
+
+DROP PROCEDURE IF EXISTS public.backfill_cost_events_user_id_0148(integer);
+
+CREATE PROCEDURE public.backfill_cost_events_user_id_0148(batch_size integer)
+LANGUAGE plpgsql
+AS $$
+DECLARE
+  updated_count integer;
+BEGIN
+  LOOP
+    WITH batch AS (
+      SELECT ce.id, t.user_id
+      FROM public.cost_events ce
+      JOIN public.threads t
+        ON t.id = ce.thread_id
+       AND t.tenant_id = ce.tenant_id
+      WHERE ce.user_id IS NULL
+        AND t.user_id IS NOT NULL
+      ORDER BY ce.created_at, ce.id
+      LIMIT batch_size
+      FOR UPDATE OF ce SKIP LOCKED
+    )
+    UPDATE public.cost_events ce
+    SET user_id = batch.user_id
+    FROM batch
+    WHERE ce.id = batch.id;
+
+    GET DIAGNOSTICS updated_count = ROW_COUNT;
+    RAISE NOTICE '0148_user_cost_attribution: backfilled % cost_events rows', updated_count;
+    EXIT WHEN updated_count = 0;
+
+    COMMIT;
+  END LOOP;
+END;
+$$;
+
+CALL public.backfill_cost_events_user_id_0148(5000);
+
+DROP PROCEDURE IF EXISTS public.backfill_cost_events_user_id_0148(integer);
+
+CREATE INDEX CONCURRENTLY IF NOT EXISTS idx_cost_events_user_created
+  ON public.cost_events (tenant_id, user_id, created_at);
+
+CREATE INDEX CONCURRENTLY IF NOT EXISTS idx_budget_policies_user
+  ON public.budget_policies (tenant_id, user_id);
+
+CREATE INDEX CONCURRENTLY IF NOT EXISTS idx_scheduled_jobs_budget_paused
+  ON public.scheduled_jobs (tenant_id, budget_paused);
+
+ALTER TABLE public.cost_events
+  VALIDATE CONSTRAINT cost_events_user_id_users_id_fk;
+
+ALTER TABLE public.budget_policies
+  VALIDATE CONSTRAINT budget_policies_user_id_users_id_fk;
+
+ALTER TABLE public.budget_policies
+  VALIDATE CONSTRAINT budget_policies_scope_check;
+
+ALTER TABLE public.budget_policies
+  VALIDATE CONSTRAINT budget_policies_scope_shape_check;
+
+SELECT pg_advisory_unlock(hashtext('migration:0148_user_cost_attribution'));
+
+RESET statement_timeout;
+RESET lock_timeout;

package/dist/drizzle/0149_managed_mcp_servers.sql

@@ -0,0 +1,64 @@
+-- Purpose: add explicit ownership metadata for ThinkWork-managed MCP servers.
+-- Plan: docs/plans/2026-06-06-003-feat-twenty-crm-mcp-oauth-plan.md U1
+-- Apply manually (no CI migration runner):
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0149_managed_mcp_servers.sql
+-- Pre-flight:
+--   SELECT column_name FROM information_schema.columns WHERE table_schema = 'public' AND table_name = 'tenant_mcp_servers' AND column_name IN ('management_source', 'managed_application_key');
+--   SELECT to_regclass('public.uq_tenant_mcp_servers_managed_application');
+-- creates-column: public.tenant_mcp_servers.management_source
+-- creates-column: public.tenant_mcp_servers.managed_application_key
+-- creates: public.uq_tenant_mcp_servers_managed_application
+-- creates-constraint: public.tenant_mcp_servers.tenant_mcp_servers_management_source_check_v2
+-- creates-constraint: public.tenant_mcp_servers.tenant_mcp_servers_managed_application_shape_check_v2
+
+\set ON_ERROR_STOP on
+
+SET lock_timeout = '5s';
+SET statement_timeout = '15min';
+
+BEGIN;
+
+SELECT pg_advisory_xact_lock(hashtext('migration:0149_managed_mcp_servers'));
+
+ALTER TABLE public.tenant_mcp_servers
+  ADD COLUMN IF NOT EXISTS management_source text NOT NULL DEFAULT 'manual',
+  ADD COLUMN IF NOT EXISTS managed_application_key text;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'tenant_mcp_servers_management_source_check'
+      AND conrelid = 'public.tenant_mcp_servers'::regclass
+  ) THEN
+    ALTER TABLE public.tenant_mcp_servers
+      ADD CONSTRAINT tenant_mcp_servers_management_source_check
+      CHECK (management_source IN ('manual', 'managed_application'))
+      NOT VALID;
+  END IF;
+END $$;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM pg_constraint
+    WHERE conname = 'tenant_mcp_servers_managed_application_shape_check'
+      AND conrelid = 'public.tenant_mcp_servers'::regclass
+  ) THEN
+    ALTER TABLE public.tenant_mcp_servers
+      ADD CONSTRAINT tenant_mcp_servers_managed_application_shape_check
+      CHECK (
+        (management_source = 'manual' AND managed_application_key IS NULL)
+        OR (management_source = 'managed_application' AND managed_application_key IS NOT NULL)
+      )
+      NOT VALID;
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_tenant_mcp_servers_managed_application
+  ON public.tenant_mcp_servers (tenant_id, managed_application_key)
+  WHERE managed_application_key IS NOT NULL;
+
+COMMIT;

package/dist/drizzle/0149_user_model_approvals.sql

@@ -0,0 +1,89 @@
+-- Purpose: allow tenant admins to approve the model catalog per user.
+-- Plan: docs/plans/2026-06-06-004-feat-model-stacking-tool-routing-plan.md U1
+-- Apply manually (no CI migration runner):
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0149_user_model_approvals.sql
+-- Pre-flight:
+--   SELECT count(*) FROM public.users WHERE tenant_id IS NOT NULL;
+--   SELECT model_id, is_available FROM public.model_catalog ORDER BY display_name;
+-- creates: public.user_model_approvals
+-- creates: public.uq_user_model_approvals_tenant_user_model
+-- creates: public.idx_user_model_approvals_tenant_user
+-- creates: public.idx_user_model_approvals_model
+-- creates-constraint: public.user_model_approvals.user_model_approvals_tenant_id_tenants_id_fk
+-- creates-constraint: public.user_model_approvals.user_model_approvals_user_id_users_id_fk
+-- creates-constraint: public.user_model_approvals.user_model_approvals_model_id_model_catalog_model_id_fk
+
+\set ON_ERROR_STOP on
+
+SET lock_timeout = '5s';
+SET statement_timeout = '15min';
+
+SELECT pg_advisory_lock(hashtext('migration:0149_user_model_approvals'));
+
+CREATE TABLE IF NOT EXISTS public.user_model_approvals (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  user_id uuid NOT NULL,
+  model_id text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT user_model_approvals_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT user_model_approvals_user_id_users_id_fk
+    FOREIGN KEY (user_id)
+    REFERENCES public.users(id)
+    ON DELETE CASCADE,
+  CONSTRAINT user_model_approvals_model_id_model_catalog_model_id_fk
+    FOREIGN KEY (model_id)
+    REFERENCES public.model_catalog(model_id)
+    ON DELETE CASCADE
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_user_model_approvals_tenant_user_model
+  ON public.user_model_approvals (tenant_id, user_id, model_id);
+
+CREATE INDEX IF NOT EXISTS idx_user_model_approvals_tenant_user
+  ON public.user_model_approvals (tenant_id, user_id);
+
+CREATE INDEX IF NOT EXISTS idx_user_model_approvals_model
+  ON public.user_model_approvals (model_id);
+
+WITH default_models AS (
+  SELECT tenant_id, default_model AS model_id
+  FROM public.tenant_settings
+  WHERE default_model IS NOT NULL
+
+  UNION
+
+  SELECT tenant_id, model AS model_id
+  FROM public.agents
+  WHERE model IS NOT NULL
+    AND status <> 'archived'
+
+  UNION
+
+  SELECT tenant_id, model AS model_id
+  FROM public.agent_templates
+  WHERE model IS NOT NULL
+),
+available_defaults AS (
+  SELECT DISTINCT
+    u.tenant_id,
+    u.id AS user_id,
+    d.model_id
+  FROM public.users u
+  JOIN default_models d
+    ON d.tenant_id = u.tenant_id
+  JOIN public.model_catalog mc
+    ON mc.model_id = d.model_id
+   AND mc.is_available IS TRUE
+  WHERE u.tenant_id IS NOT NULL
+)
+INSERT INTO public.user_model_approvals (tenant_id, user_id, model_id)
+SELECT tenant_id, user_id, model_id
+FROM available_defaults
+ON CONFLICT (tenant_id, user_id, model_id) DO NOTHING;
+
+SELECT pg_advisory_unlock(hashtext('migration:0149_user_model_approvals'));

package/dist/drizzle/0150_bootstrap_first_admin_claim.sql

@@ -0,0 +1,11 @@
+-- Bootstrap first-admin claim markers.
+--
+-- creates-column: public.tenants.first_admin_claim_required
+-- creates-column: public.tenants.first_admin_claimed_at
+-- creates-column: public.tenants.first_admin_claimed_user_id
+
+ALTER TABLE "tenants"
+  ADD COLUMN IF NOT EXISTS "first_admin_claim_required" boolean NOT NULL DEFAULT false,
+  ADD COLUMN IF NOT EXISTS "first_admin_claimed_at" timestamp with time zone,
+  ADD COLUMN IF NOT EXISTS "first_admin_claimed_user_id" uuid;
+

package/dist/drizzle/0151_managed_deployments.sql

@@ -0,0 +1,91 @@
+-- Managed application deployment job domain.
+--
+-- creates: public.managed_applications
+-- creates: public.managed_application_deployment_jobs
+-- creates: public.managed_application_deployment_events
+-- creates: public.managed_applications_tenant_key_uidx
+-- creates: public.managed_applications_tenant_status_idx
+-- creates: public.managed_deployment_jobs_tenant_idempotency_uidx
+-- creates: public.managed_deployment_jobs_tenant_app_idx
+-- creates: public.managed_deployment_jobs_status_idx
+-- creates: public.managed_deployment_events_job_created_idx
+-- creates: public.managed_deployment_events_idempotency_uidx
+
+CREATE TABLE IF NOT EXISTS "managed_applications" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "tenant_id" uuid NOT NULL REFERENCES "tenants"("id") ON DELETE cascade,
+  "key" text NOT NULL,
+  "display_name" text NOT NULL,
+  "desired_status" text NOT NULL DEFAULT 'disabled',
+  "current_status" text NOT NULL DEFAULT 'unknown',
+  "desired_config" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "selected_release_version" text,
+  "selected_manifest_digest" text,
+  "last_job_id" uuid,
+  "created_at" timestamp with time zone NOT NULL DEFAULT now(),
+  "updated_at" timestamp with time zone NOT NULL DEFAULT now()
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "managed_applications_tenant_key_uidx"
+  ON "managed_applications" ("tenant_id", "key");
+
+CREATE INDEX IF NOT EXISTS "managed_applications_tenant_status_idx"
+  ON "managed_applications" ("tenant_id", "current_status");
+
+CREATE TABLE IF NOT EXISTS "managed_application_deployment_jobs" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "tenant_id" uuid NOT NULL REFERENCES "tenants"("id") ON DELETE cascade,
+  "application_id" uuid REFERENCES "managed_applications"("id") ON DELETE set null,
+  "app_key" text NOT NULL,
+  "operation" text NOT NULL,
+  "status" text NOT NULL DEFAULT 'planning',
+  "idempotency_key" text NOT NULL,
+  "requested_by_user_id" uuid,
+  "release_version" text NOT NULL,
+  "manifest_digest" text NOT NULL,
+  "desired_config_version" text NOT NULL,
+  "state_machine_arn" text,
+  "plan_execution_arn" text,
+  "apply_execution_arn" text,
+  "codebuild_build_arn" text,
+  "plan_digest" text,
+  "plan_summary" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "data_impact" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "evidence_bucket" text,
+  "evidence_prefix" text,
+  "approval_required" boolean NOT NULL DEFAULT true,
+  "approved_by_user_id" uuid,
+  "approved_at" timestamp with time zone,
+  "rejected_by_user_id" uuid,
+  "rejected_at" timestamp with time zone,
+  "error_message" text,
+  "created_at" timestamp with time zone NOT NULL DEFAULT now(),
+  "updated_at" timestamp with time zone NOT NULL DEFAULT now()
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "managed_deployment_jobs_tenant_idempotency_uidx"
+  ON "managed_application_deployment_jobs" ("tenant_id", "idempotency_key");
+
+CREATE INDEX IF NOT EXISTS "managed_deployment_jobs_tenant_app_idx"
+  ON "managed_application_deployment_jobs" ("tenant_id", "app_key");
+
+CREATE INDEX IF NOT EXISTS "managed_deployment_jobs_status_idx"
+  ON "managed_application_deployment_jobs" ("status");
+
+CREATE TABLE IF NOT EXISTS "managed_application_deployment_events" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "tenant_id" uuid NOT NULL REFERENCES "tenants"("id") ON DELETE cascade,
+  "job_id" uuid NOT NULL REFERENCES "managed_application_deployment_jobs"("id") ON DELETE cascade,
+  "event_type" text NOT NULL,
+  "message" text NOT NULL,
+  "payload" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "idempotency_key" text,
+  "created_at" timestamp with time zone NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS "managed_deployment_events_job_created_idx"
+  ON "managed_application_deployment_events" ("job_id", "created_at");
+
+CREATE UNIQUE INDEX IF NOT EXISTS "managed_deployment_events_idempotency_uidx"
+  ON "managed_application_deployment_events" ("job_id", "idempotency_key")
+  WHERE "idempotency_key" IS NOT NULL;

package/dist/drizzle/0152_agent_profiles.sql

@@ -0,0 +1,81 @@
+-- Purpose: add tenant-global Agent Profiles for Pi subagent delegation.
+-- Plan: docs/plans/2026-06-07-002-feat-agent-profiles-pi-subagents-plan.md U1
+-- Apply manually (no CI migration runner):
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0152_agent_profiles.sql
+-- creates: public.agent_profiles
+-- creates: public.agent_profile_space_assignments
+-- creates: public.uq_agent_profiles_tenant_slug
+-- creates: public.uq_agent_profiles_tenant_built_in_key
+-- creates: public.idx_agent_profiles_tenant_enabled
+-- creates: public.uq_agent_profile_space_assignments
+-- creates: public.idx_agent_profile_space_assignments_space
+-- creates-constraint: public.agent_profiles.agent_profiles_tenant_id_tenants_id_fk
+-- creates-constraint: public.agent_profile_space_assignments.agent_profile_space_assignments_profile_id_agent_profiles_id_fk
+-- creates-constraint: public.agent_profile_space_assignments.agent_profile_space_assignments_tenant_id_tenants_id_fk
+-- creates-constraint: public.agent_profile_space_assignments.agent_profile_space_assignments_space_id_spaces_id_fk
+
+\set ON_ERROR_STOP on
+
+SET lock_timeout = '5s';
+SET statement_timeout = '15min';
+
+SELECT pg_advisory_lock(hashtext('migration:0152_agent_profiles'));
+
+CREATE TABLE IF NOT EXISTS public.agent_profiles (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  slug text NOT NULL,
+  name text NOT NULL,
+  description text,
+  routing_guidance text,
+  instructions text NOT NULL DEFAULT '',
+  model_id text NOT NULL,
+  enabled boolean NOT NULL DEFAULT true,
+  built_in_key text,
+  tool_policy jsonb NOT NULL DEFAULT '{}'::jsonb,
+  skill_policy jsonb NOT NULL DEFAULT '{}'::jsonb,
+  execution_controls jsonb NOT NULL DEFAULT '{}'::jsonb,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT agent_profiles_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_agent_profiles_tenant_slug
+  ON public.agent_profiles (tenant_id, slug);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_agent_profiles_tenant_built_in_key
+  ON public.agent_profiles (tenant_id, built_in_key)
+  WHERE built_in_key IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_agent_profiles_tenant_enabled
+  ON public.agent_profiles (tenant_id, enabled);
+
+CREATE TABLE IF NOT EXISTS public.agent_profile_space_assignments (
+  profile_id uuid NOT NULL,
+  tenant_id uuid NOT NULL,
+  space_id uuid NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT agent_profile_space_assignments_profile_id_agent_profiles_id_fk
+    FOREIGN KEY (profile_id)
+    REFERENCES public.agent_profiles(id)
+    ON DELETE CASCADE,
+  CONSTRAINT agent_profile_space_assignments_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT agent_profile_space_assignments_space_id_spaces_id_fk
+    FOREIGN KEY (space_id)
+    REFERENCES public.spaces(id)
+    ON DELETE CASCADE
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_agent_profile_space_assignments
+  ON public.agent_profile_space_assignments (profile_id, space_id);
+
+CREATE INDEX IF NOT EXISTS idx_agent_profile_space_assignments_space
+  ON public.agent_profile_space_assignments (tenant_id, space_id);
+
+SELECT pg_advisory_unlock(hashtext('migration:0152_agent_profiles'));

package/dist/drizzle/0153_message_mentions_agent_profile.sql

@@ -0,0 +1,9 @@
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0153_message_mentions_agent_profile.sql
+-- creates-constraint: public.message_mentions.message_mentions_target_type_allowed
+
+ALTER TABLE public.message_mentions
+  DROP CONSTRAINT IF EXISTS message_mentions_target_type_allowed;
+
+ALTER TABLE public.message_mentions
+  ADD CONSTRAINT message_mentions_target_type_allowed
+  CHECK (target_type IN ('user', 'agent', 'agent_profile'));

package/dist/drizzle/0154_customer_deployment_sessions.sql

@@ -0,0 +1,61 @@
+-- Browser-first customer deployment session state.
+--
+-- creates: public.customer_deployment_sessions
+-- creates: public.customer_deployment_session_events
+-- creates: public.customer_deployment_sessions_status_idx
+-- creates: public.customer_deployment_sessions_account_region_idx
+-- creates: public.customer_deployment_sessions_tenant_idx
+-- creates: public.customer_deployment_session_events_session_created_idx
+-- creates: public.customer_deployment_session_events_idempotency_uidx
+
+CREATE TABLE IF NOT EXISTS "customer_deployment_sessions" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "tenant_id" uuid REFERENCES "tenants"("id") ON DELETE set null,
+  "status" text NOT NULL DEFAULT 'collecting_inputs',
+  "current_step_key" text NOT NULL DEFAULT 'intake',
+  "requested_action" text NOT NULL DEFAULT 'deploy',
+  "client_token_hash" text NOT NULL,
+  "source" text NOT NULL DEFAULT 'browser',
+  "customer_name" text NOT NULL,
+  "environment_name" text NOT NULL,
+  "aws_account_id" text NOT NULL,
+  "aws_region" text NOT NULL,
+  "availability_zones" jsonb NOT NULL DEFAULT '[]'::jsonb,
+  "admin_name" text NOT NULL,
+  "admin_email" text NOT NULL,
+  "credentials_status" text NOT NULL DEFAULT 'not_connected',
+  "runner_mode" text NOT NULL DEFAULT 'hosted',
+  "terraform_backend" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "session_config" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "error_message" text,
+  "expires_at" timestamp with time zone,
+  "created_at" timestamp with time zone NOT NULL DEFAULT now(),
+  "updated_at" timestamp with time zone NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS "customer_deployment_sessions_status_idx"
+  ON "customer_deployment_sessions" ("status");
+
+CREATE INDEX IF NOT EXISTS "customer_deployment_sessions_account_region_idx"
+  ON "customer_deployment_sessions" ("aws_account_id", "aws_region");
+
+CREATE INDEX IF NOT EXISTS "customer_deployment_sessions_tenant_idx"
+  ON "customer_deployment_sessions" ("tenant_id");
+
+CREATE TABLE IF NOT EXISTS "customer_deployment_session_events" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  "session_id" uuid NOT NULL REFERENCES "customer_deployment_sessions"("id") ON DELETE cascade,
+  "event_type" text NOT NULL,
+  "step_key" text,
+  "message" text NOT NULL,
+  "payload" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  "idempotency_key" text,
+  "created_at" timestamp with time zone NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS "customer_deployment_session_events_session_created_idx"
+  ON "customer_deployment_session_events" ("session_id", "created_at");
+
+CREATE UNIQUE INDEX IF NOT EXISTS "customer_deployment_session_events_idempotency_uidx"
+  ON "customer_deployment_session_events" ("session_id", "idempotency_key")
+  WHERE "idempotency_key" IS NOT NULL;