thinkwork-cli 0.12.12 → 0.12.15

package/dist/drizzle/0030_retire_composition_primitives.sql

@@ -0,0 +1,48 @@
+-- Retire composition-era primitive skills (pure-skill-spec cleanup).
+--
+-- Post plan §U6 the composition runner is gone, and every deliverable-shape
+-- skill (sales-prep, account-health-review, renewal-prep, customer-onboarding-
+-- reconciler) has been rewritten as a pure Claude-spec SKILL.md that inlines
+-- framing + synthesis. The four workflow primitives that used to be invoked
+-- between a deliverable's steps -- frame, synthesize, gather, compound -- no
+-- longer have callers. This migration deletes them from every tenant + agent
+-- install so the admin catalog, workspace-map generator, and session
+-- allowlist stop listing stale slugs.
+--
+-- The YAML directories + S3 artifacts for those slugs are removed in the same
+-- PR's commit. The sync-catalog-db.ts script also deletes retired builtin
+-- rows on every deploy as a belt-and-suspenders invariant, but this migration
+-- cleans them up explicitly on the stage that applies it first.
+--
+-- Apply manually (matches the 0018+ hand-rolled convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0030_retire_composition_primitives.sql
+--
+-- Drift detection:
+--   pnpm db:migrate-manual
+--
+-- Idempotency:
+--   DELETEs are naturally idempotent; the marker view uses CREATE OR REPLACE.
+--
+-- creates: public.view_composition_primitives_retired
+
+-- Drop any agent-level installs first so no agent keeps pointing at a slug
+-- the catalog no longer exposes. agent_skills.skill_id is the slug text,
+-- no FK -- direct DELETE is safe.
+DELETE FROM agent_skills
+WHERE skill_id IN ('frame', 'synthesize', 'gather', 'compound');
+
+-- Tenant-level installs next.
+DELETE FROM tenant_skills
+WHERE skill_id IN ('frame', 'synthesize', 'gather', 'compound');
+
+-- Finally drop the catalog rows themselves.
+DELETE FROM skill_catalog
+WHERE slug IN ('frame', 'synthesize', 'gather', 'compound');
+
+-- Marker view — lets the db-migrate-manual drift reporter confirm this
+-- migration applied. Cheap and isolated; the view returns the apply time
+-- so operators can also audit when retirement happened on each stage.
+CREATE OR REPLACE VIEW public.view_composition_primitives_retired AS
+SELECT
+  NOW() AS retired_at,
+  ARRAY['frame', 'synthesize', 'gather', 'compound']::text[] AS retired_slugs;

package/dist/drizzle/0031_thread_cleanup_drops.sql

@@ -0,0 +1,131 @@
+-- U5 (narrowed): drop retired thread_comments table + two orphan indices.
+--
+-- Plan reference:
+--   docs/plans/2026-04-24-002-refactor-thread-detail-pre-launch-cleanup-plan.md
+--   (U5 destructive migration; original scope also listed `artifacts` and
+--   `message_artifacts`, but a fresh survey found those tables are still
+--   load-bearing — `Artifact` GraphQL type, full CRUD resolvers, and mobile
+--   `Message.durableArtifact` rendering are all live. Narrowed scope here.)
+--
+-- What this drops:
+--   1. public.thread_comments — retired by U2 (escalateThread/delegateThread
+--      refactored onto thread_turns kind=system_event). Live writes are
+--      gone; tests assert no inserts; only retired-comment doc strings
+--      remain in the resolvers.
+--   2. public.idx_threads_tenant_status — orphaned. Admin U7 retired the
+--      list-view filter that used this index; no other call site reads it.
+--      The `thread.status` column itself remains (Strands
+--      `update_thread_status` skill still writes it).
+--   3. public.idx_threads_parent_id — orphaned. Parent/child thread
+--      queries were retired with the GraphQL `Thread.parent` /
+--      `Thread.children` fields; the `parent_id` column remains for now
+--      (no consumer reads it but it's recoverable from row data if needed).
+--
+-- What this preserves:
+--   - public.thread.status column (still mutated by the Strands skill).
+--   - public.thread.parent_id column (orphan but cheap to keep).
+--   - public.artifacts and public.message_artifacts tables and all their
+--     CRUD resolvers + Drizzle declarations.
+--
+-- Recoverability:
+--   Pre-drop, this migration uses `aws_s3.query_export_to_s3` to snapshot
+--   `thread_comments` rows to s3://thinkwork-${stage}-backups/pre-drop/.
+--   Provisioned by U13 (terraform/modules/data/s3-backups-bucket +
+--   terraform/modules/data/aurora-postgres aws_s3 IAM role). The
+--   `aws_s3` extension itself is enabled by drizzle/0028_aws_s3_extension.sql.
+--   Required role association feature_name = "s3Export" must already be
+--   attached (operator confirms via the post-deploy runbook before
+--   applying this migration).
+--
+-- Apply manually (matches the 0018+ hand-rolled convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0031_thread_cleanup_drops.sql
+--
+-- The `${stage}` literal in the S3 URI below must be substituted at
+-- apply time (psql does not expand env vars in SQL literals). Replace
+-- with the target deploy stage before running, or use psql variables:
+--   psql "$DATABASE_URL" -v stage=dev -f .../0031_thread_cleanup_drops.sql
+-- and reference `:'stage'` in the snapshot lines (see SET BLOCK below).
+--
+-- Drift detection:
+--   pnpm db:migrate-manual reports `drops:` markers as DROPPED (target
+--   table/index absent) or STILL_PRESENT (target still in DB). After
+--   apply, the markers below should report DROPPED.
+--
+-- Pre-migration invariants:
+--   - aws_s3 extension installed (\dx aws_s3).
+--   - Aurora cluster has the `feature_name = "s3Export"` role association
+--     to a role that grants s3:PutObject on
+--     thinkwork-${stage}-backups/pre-drop/*.
+--   - Caller has rds_superuser (required for cross-schema DROP CASCADE
+--     paths and aws_s3 calls).
+--
+-- Rollback runbook:
+--   1. Recover thread_comments rows from
+--      s3://thinkwork-${stage}-backups/pre-drop/thread_comments_<date>.csv.
+--   2. Recreate the table from the prior schema definition (see
+--      packages/database-pg/src/schema/threads.ts at commit before this
+--      migration; threadComments table block).
+--   3. `\copy public.thread_comments FROM '<csv>' WITH (FORMAT csv, HEADER true);`
+--   4. Re-add `idx_threads_tenant_status` and `idx_threads_parent_id`
+--      with `CREATE INDEX CONCURRENTLY ...` if needed (rare — the
+--      indices weren't read by any production path).
+--
+-- drops: public.thread_comments
+-- drops: public.idx_threads_tenant_status
+-- drops: public.idx_threads_parent_id
+
+\set ON_ERROR_STOP on
+
+-- Default stage to 'dev' so accidental copy/paste runs don't write to a
+-- mis-named bucket. Override with `psql -v stage=prod ...`.
+\if :{?stage}
+\else
+\set stage dev
+\endif
+
+BEGIN;
+
+-- Fail fast on lock contention rather than wedging the cluster behind
+-- long-held locks. thread_comments has no production traffic post-U2 so
+-- a 5s wait is more than sufficient.
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '60s';
+
+-- ---------------------------------------------------------------------------
+-- Pre-drop snapshot to S3 (recoverable forever; lifecycle policy on the
+-- bucket expires pre-drop/ objects after 90 days).
+-- ---------------------------------------------------------------------------
+
+SELECT aws_s3.query_export_to_s3(
+  'SELECT * FROM public.thread_comments',
+  aws_commons.create_s3_uri(
+    'thinkwork-' || :'stage' || '-backups',
+    'pre-drop/thread_comments_2026_04_24.csv',
+    current_setting('cluster_region', true)
+  ),
+  options := 'format csv, header true'
+);
+
+-- ---------------------------------------------------------------------------
+-- Drop the orphan indices first. DROP INDEX is metadata-only on Aurora
+-- Postgres so it's nearly free; doing it before the table drop keeps the
+-- transaction's order-of-operations explicit.
+-- ---------------------------------------------------------------------------
+
+DROP INDEX IF EXISTS public.idx_threads_tenant_status;
+DROP INDEX IF EXISTS public.idx_threads_parent_id;
+
+-- ---------------------------------------------------------------------------
+-- Drop thread_comments. CASCADE removes any incidental FKs from other
+-- tables that referenced thread_comments (none expected at this point —
+-- the U2 refactor moved all callers off this table).
+-- ---------------------------------------------------------------------------
+
+DROP TABLE IF EXISTS public.thread_comments CASCADE;
+
+COMMIT;
+
+-- Post-apply verification (run as a separate statement, outside the txn):
+--   \dt public.thread_comments     -- should report no relation found
+--   \d  public.threads             -- should not list idx_threads_tenant_status or idx_threads_parent_id
+--   pnpm db:migrate-manual         -- the three `drops:` markers above should report DROPPED

package/dist/drizzle/0032_add_browser_automation_template_config.sql

@@ -0,0 +1,24 @@
+-- 0032_add_browser_automation_template_config.sql
+-- Add template-level Browser Automation opt-in metadata and catalog entry.
+--
+-- Manual migration marker for drift reporter:
+-- creates-column: public.agent_templates.browser
+
+ALTER TABLE "agent_templates"
+  ADD COLUMN IF NOT EXISTS "browser" jsonb;
+
+INSERT INTO "capability_catalog" ("slug", "type", "source", "implementation_ref", "spec")
+VALUES
+  (
+    'browser_automation', 'tool', 'builtin',
+    jsonb_build_object('module_path', 'browser_automation_tool', 'class_name', 'BrowserAutomationTool'),
+    jsonb_build_object(
+      'display_name', 'Browser Automation',
+      'description', 'Control a managed AgentCore Browser session with Nova Act for website workflows.'
+    )
+  )
+ON CONFLICT ("type", "source", "slug") DO UPDATE
+SET
+  "implementation_ref" = EXCLUDED."implementation_ref",
+  "spec" = EXCLUDED."spec",
+  "updated_at" = now();

package/dist/drizzle/0033_agent_operation_leases.sql

@@ -0,0 +1,32 @@
+-- Agent operation leases for fat-folder import/swap serialization.
+-- creates: public.agent_operation_leases
+-- creates: public.idx_agent_operation_leases_agent_expires
+-- creates: public.idx_agent_operation_leases_kind
+-- creates: public.folder_bundle_import_rate_limits
+
+CREATE TABLE IF NOT EXISTS "agent_operation_leases" (
+	"agent_id" uuid NOT NULL REFERENCES "agents"("id") ON DELETE cascade,
+	"lease_id" uuid NOT NULL DEFAULT gen_random_uuid(),
+	"lease_kind" text NOT NULL,
+	"owner_kind" text NOT NULL,
+	"owner_id" text,
+	"acquired_at" timestamp with time zone NOT NULL DEFAULT now(),
+	"last_heartbeat_at" timestamp with time zone NOT NULL DEFAULT now(),
+	"expires_at" timestamp with time zone NOT NULL,
+	CONSTRAINT "agent_operation_leases_pkey" PRIMARY KEY ("agent_id", "lease_id"),
+	CONSTRAINT "agent_operation_leases_kind_check" CHECK ("lease_kind" IN ('shared', 'exclusive'))
+);
+
+CREATE INDEX IF NOT EXISTS "idx_agent_operation_leases_agent_expires"
+	ON "agent_operation_leases" ("agent_id", "expires_at");
+
+CREATE INDEX IF NOT EXISTS "idx_agent_operation_leases_kind"
+	ON "agent_operation_leases" ("agent_id", "lease_kind");
+
+CREATE TABLE IF NOT EXISTS "folder_bundle_import_rate_limits" (
+	"tenant_id" uuid NOT NULL REFERENCES "tenants"("id") ON DELETE cascade,
+	"utc_hour" timestamp with time zone NOT NULL,
+	"import_count" integer NOT NULL DEFAULT 0,
+	"updated_at" timestamp with time zone NOT NULL DEFAULT now(),
+	CONSTRAINT "folder_bundle_import_rate_limits_pkey" PRIMARY KEY ("tenant_id", "utc_hour")
+);

package/dist/drizzle/0034_agent_workspace_events.sql

@@ -0,0 +1,116 @@
+-- creates: public.agent_workspace_runs
+-- creates: public.agent_workspace_events
+-- creates: public.agent_workspace_waits
+-- creates-column: public.tenants.workspace_orchestration_enabled
+
+ALTER TABLE public.tenants
+ADD COLUMN IF NOT EXISTS workspace_orchestration_enabled boolean NOT NULL DEFAULT false;
+
+CREATE TABLE IF NOT EXISTS public.agent_workspace_runs (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id),
+  agent_id uuid NOT NULL REFERENCES public.agents(id),
+  target_path text NOT NULL DEFAULT '',
+  status text NOT NULL DEFAULT 'pending',
+  source_object_key text,
+  request_object_key text,
+  current_wakeup_request_id uuid REFERENCES public.agent_wakeup_requests(id),
+  current_thread_turn_id uuid REFERENCES public.thread_turns(id),
+  parent_run_id uuid REFERENCES public.agent_workspace_runs(id),
+  depth integer NOT NULL DEFAULT 0,
+  inbox_write_count integer NOT NULL DEFAULT 0,
+  wakeup_retry_count integer NOT NULL DEFAULT 0,
+  last_event_at timestamptz NOT NULL DEFAULT now(),
+  completed_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT agent_workspace_runs_status_check CHECK (
+    status IN (
+      'pending',
+      'claimed',
+      'processing',
+      'completed',
+      'failed',
+      'awaiting_review',
+      'awaiting_subrun',
+      'cancelled',
+      'expired'
+    )
+  )
+);
+
+CREATE INDEX IF NOT EXISTS idx_agent_workspace_runs_agent_target_status
+  ON public.agent_workspace_runs (tenant_id, agent_id, target_path, status);
+CREATE INDEX IF NOT EXISTS idx_agent_workspace_runs_status_last_event
+  ON public.agent_workspace_runs (status, last_event_at);
+CREATE INDEX IF NOT EXISTS idx_agent_workspace_runs_parent
+  ON public.agent_workspace_runs (parent_run_id);
+
+CREATE TABLE IF NOT EXISTS public.agent_workspace_events (
+  id bigserial PRIMARY KEY,
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id),
+  agent_id uuid REFERENCES public.agents(id),
+  run_id uuid REFERENCES public.agent_workspace_runs(id),
+  event_type text NOT NULL,
+  idempotency_key text NOT NULL,
+  bucket text NOT NULL,
+  source_object_key text NOT NULL,
+  audit_object_key text,
+  object_etag text,
+  object_version_id text,
+  sequencer text NOT NULL,
+  mirror_status text NOT NULL DEFAULT 'ok',
+  reason text,
+  payload jsonb,
+  actor_type text,
+  actor_id text,
+  parent_event_id bigint REFERENCES public.agent_workspace_events(id),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT agent_workspace_events_type_check CHECK (
+    event_type IN (
+      'work.requested',
+      'run.started',
+      'run.blocked',
+      'run.completed',
+      'run.failed',
+      'review.requested',
+      'memory.changed',
+      'event.rejected'
+    )
+  ),
+  CONSTRAINT agent_workspace_events_mirror_status_check CHECK (
+    mirror_status IN ('ok', 'failed')
+  )
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_agent_workspace_events_tenant_idempotency
+  ON public.agent_workspace_events (tenant_id, idempotency_key);
+CREATE INDEX IF NOT EXISTS idx_agent_workspace_events_run_created
+  ON public.agent_workspace_events (run_id, created_at);
+CREATE INDEX IF NOT EXISTS idx_agent_workspace_events_pending
+  ON public.agent_workspace_events (tenant_id, event_type, created_at);
+CREATE INDEX IF NOT EXISTS idx_agent_workspace_events_parent
+  ON public.agent_workspace_events (parent_event_id);
+
+CREATE TABLE IF NOT EXISTS public.agent_workspace_waits (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id),
+  waiting_run_id uuid NOT NULL REFERENCES public.agent_workspace_runs(id),
+  wait_for_run_id uuid REFERENCES public.agent_workspace_runs(id),
+  wait_for_target_path text,
+  status text NOT NULL DEFAULT 'waiting',
+  created_at timestamptz NOT NULL DEFAULT now(),
+  satisfied_at timestamptz,
+  CONSTRAINT agent_workspace_waits_status_check CHECK (
+    status IN ('waiting', 'satisfied', 'cancelled', 'expired')
+  ),
+  CONSTRAINT agent_workspace_waits_single_wait_shape CHECK (
+    wait_for_run_id IS NOT NULL OR wait_for_target_path IS NOT NULL
+  )
+);
+
+CREATE INDEX IF NOT EXISTS idx_agent_workspace_waits_waiting
+  ON public.agent_workspace_waits (tenant_id, waiting_run_id, status);
+CREATE INDEX IF NOT EXISTS idx_agent_workspace_waits_wait_for
+  ON public.agent_workspace_waits (tenant_id, wait_for_run_id, status);
+

package/dist/drizzle/0035_workspace_review_decisions.sql

@@ -0,0 +1,19 @@
+-- creates-constraint: public.agent_workspace_events.agent_workspace_events_type_check
+
+ALTER TABLE public.agent_workspace_events
+DROP CONSTRAINT IF EXISTS agent_workspace_events_type_check;
+
+ALTER TABLE public.agent_workspace_events
+ADD CONSTRAINT agent_workspace_events_type_check CHECK (
+  event_type IN (
+    'work.requested',
+    'run.started',
+    'run.blocked',
+    'run.completed',
+    'run.failed',
+    'review.requested',
+    'review.responded',
+    'memory.changed',
+    'event.rejected'
+  )
+);

package/dist/drizzle/0036_user_scoped_memory_wiki.sql

@@ -0,0 +1,152 @@
+-- User-scoped memory/wiki migration.
+--
+-- Plan:
+--   docs/plans/2026-04-24-001-refactor-user-scope-memory-and-hindsight-ingest-plan.md
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0036_user_scoped_memory_wiki.sql
+--
+-- This is hand-rolled because ordering matters:
+--   - validate user-owned threads can be backfilled from agents.human_pair_id
+--   - add threads.user_id while keeping threads.agent_id
+--   - truncate rebuildable wiki data before switching owner_id FKs
+--   - skip that truncate on re-run once the old agent-owned FKs are gone
+--   - add per-user external compile opt-in
+--
+-- creates-column: public.threads.user_id
+-- creates-column: public.users.wiki_compile_external_enabled
+-- creates: public.idx_threads_tenant_user
+-- creates-constraint: public.threads.threads_user_id_users_id_fk
+-- Wiki FK constraints below: schema/table paths updated post-0089. FK constraint
+-- names retain their original 'wiki_<table>_owner_id_users_id_fk' form (0089 did not
+-- rename FK constraints), but their pg_constraint namespace path moved to wiki.* when
+-- their parent tables moved. Old `public.wiki_*` paths would report MISSING from the
+-- drift reporter after 0089 applies.
+-- creates-constraint: wiki.pages.wiki_pages_owner_id_users_id_fk
+-- creates-constraint: wiki.unresolved_mentions.wiki_unresolved_mentions_owner_id_users_id_fk
+-- creates-constraint: wiki.compile_jobs.wiki_compile_jobs_owner_id_users_id_fk
+-- creates-constraint: wiki.compile_cursors.wiki_compile_cursors_owner_id_users_id_fk
+-- creates-constraint: wiki.places.wiki_places_owner_id_users_id_fk
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+DO $$
+DECLARE
+  orphan_count integer;
+BEGIN
+  SELECT COUNT(*)
+    INTO orphan_count
+  FROM public.threads t
+  JOIN public.agents a ON a.id = t.agent_id
+  WHERE a.source = 'user'
+    AND a.human_pair_id IS NULL;
+
+  IF orphan_count > 0 THEN
+    RAISE EXCEPTION
+      'Cannot backfill public.threads.user_id: % user-owned agent thread(s) lack agents.human_pair_id',
+      orphan_count;
+  END IF;
+END $$;
+
+ALTER TABLE public.threads
+  ADD COLUMN IF NOT EXISTS user_id uuid;
+
+UPDATE public.threads t
+SET user_id = a.human_pair_id
+FROM public.agents a
+WHERE a.id = t.agent_id
+  AND a.source = 'user'
+  AND t.user_id IS NULL;
+
+ALTER TABLE public.threads
+  DROP CONSTRAINT IF EXISTS threads_user_id_users_id_fk;
+
+ALTER TABLE public.threads
+  ADD CONSTRAINT threads_user_id_users_id_fk
+  FOREIGN KEY (user_id) REFERENCES public.users(id);
+
+CREATE INDEX IF NOT EXISTS idx_threads_tenant_user
+  ON public.threads (tenant_id, user_id);
+
+ALTER TABLE public.users
+  ADD COLUMN IF NOT EXISTS wiki_compile_external_enabled boolean NOT NULL DEFAULT false;
+
+DO $$
+DECLARE
+  old_wiki_owner_fk_count integer;
+BEGIN
+  SELECT COUNT(*)
+    INTO old_wiki_owner_fk_count
+  FROM pg_catalog.pg_constraint c
+  JOIN pg_catalog.pg_class r ON r.oid = c.conrelid
+  JOIN pg_catalog.pg_namespace n ON n.oid = r.relnamespace
+  WHERE n.nspname = 'public'
+    AND c.conname IN (
+      'wiki_pages_owner_id_agents_id_fk',
+      'wiki_unresolved_mentions_owner_id_agents_id_fk',
+      'wiki_compile_jobs_owner_id_agents_id_fk',
+      'wiki_compile_cursors_owner_id_agents_id_fk',
+      'wiki_places_owner_id_agents_id_fk'
+    );
+
+  IF old_wiki_owner_fk_count > 0 THEN
+    TRUNCATE TABLE
+      public.wiki_pages,
+      public.wiki_unresolved_mentions,
+      public.wiki_compile_jobs,
+      public.wiki_compile_cursors,
+      public.wiki_places
+    CASCADE;
+  END IF;
+END $$;
+
+ALTER TABLE public.wiki_pages
+  DROP CONSTRAINT IF EXISTS wiki_pages_owner_id_agents_id_fk;
+ALTER TABLE public.wiki_unresolved_mentions
+  DROP CONSTRAINT IF EXISTS wiki_unresolved_mentions_owner_id_agents_id_fk;
+ALTER TABLE public.wiki_compile_jobs
+  DROP CONSTRAINT IF EXISTS wiki_compile_jobs_owner_id_agents_id_fk;
+ALTER TABLE public.wiki_compile_cursors
+  DROP CONSTRAINT IF EXISTS wiki_compile_cursors_owner_id_agents_id_fk;
+ALTER TABLE public.wiki_places
+  DROP CONSTRAINT IF EXISTS wiki_places_owner_id_agents_id_fk;
+
+ALTER TABLE public.wiki_pages
+  DROP CONSTRAINT IF EXISTS wiki_pages_owner_id_users_id_fk;
+ALTER TABLE public.wiki_unresolved_mentions
+  DROP CONSTRAINT IF EXISTS wiki_unresolved_mentions_owner_id_users_id_fk;
+ALTER TABLE public.wiki_compile_jobs
+  DROP CONSTRAINT IF EXISTS wiki_compile_jobs_owner_id_users_id_fk;
+ALTER TABLE public.wiki_compile_cursors
+  DROP CONSTRAINT IF EXISTS wiki_compile_cursors_owner_id_users_id_fk;
+ALTER TABLE public.wiki_places
+  DROP CONSTRAINT IF EXISTS wiki_places_owner_id_users_id_fk;
+
+ALTER TABLE public.wiki_pages
+  ADD CONSTRAINT wiki_pages_owner_id_users_id_fk
+  FOREIGN KEY (owner_id) REFERENCES public.users(id);
+ALTER TABLE public.wiki_unresolved_mentions
+  ADD CONSTRAINT wiki_unresolved_mentions_owner_id_users_id_fk
+  FOREIGN KEY (owner_id) REFERENCES public.users(id);
+ALTER TABLE public.wiki_compile_jobs
+  ADD CONSTRAINT wiki_compile_jobs_owner_id_users_id_fk
+  FOREIGN KEY (owner_id) REFERENCES public.users(id);
+ALTER TABLE public.wiki_compile_cursors
+  ADD CONSTRAINT wiki_compile_cursors_owner_id_users_id_fk
+  FOREIGN KEY (owner_id) REFERENCES public.users(id);
+ALTER TABLE public.wiki_places
+  ADD CONSTRAINT wiki_places_owner_id_users_id_fk
+  FOREIGN KEY (owner_id) REFERENCES public.users(id);
+
+COMMIT;
+
+-- Post-apply verification:
+--   SELECT COUNT(*) FROM public.threads t JOIN public.agents a ON a.id = t.agent_id
+--    WHERE a.source = 'user' AND t.user_id IS NULL; -- should be 0
+--   SELECT COUNT(*) FROM public.wiki_pages;          -- should be 0 before journal reload
+--   \d public.wiki_pages                             -- owner_id FK should reference users(id)

package/dist/drizzle/0037_user_profile_operating_model.sql

@@ -0,0 +1,34 @@
+-- Activation Agent operating-model profile columns.
+--
+-- Plan:
+--   docs/plans/2026-04-26-001-feat-agent-activation-operating-model-plan.md
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0037_user_profile_operating_model.sql
+--
+-- Purely additive nullable/defaulted columns on user_profiles.
+--
+-- creates-column: public.user_profiles.operating_model
+-- creates-column: public.user_profiles.operating_model_history
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+DO $$
+BEGIN
+  IF to_regclass('public.user_profiles') IS NULL THEN
+    RAISE EXCEPTION 'public.user_profiles does not exist';
+  END IF;
+END $$;
+
+ALTER TABLE public.user_profiles
+  ADD COLUMN IF NOT EXISTS operating_model jsonb;
+
+ALTER TABLE public.user_profiles
+  ADD COLUMN IF NOT EXISTS operating_model_history jsonb[] NOT NULL DEFAULT '{}'::jsonb[];
+
+COMMIT;

package/dist/drizzle/0042_agent_runtime_selector.sql

@@ -0,0 +1,41 @@
+-- Agent runtime selector for parallel AgentCore runtimes.
+--
+-- Plan:
+--   docs/plans/2026-04-26-009-feat-pi-agent-runtime-parallel-substrate-plan.md
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0042_agent_runtime_selector.sql
+--
+-- creates-column: public.agents.runtime
+-- creates-column: public.agent_templates.runtime
+-- creates-constraint: public.agents.agents_runtime_check
+-- creates-constraint: public.agent_templates.agent_templates_runtime_check
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.agents
+  ADD COLUMN IF NOT EXISTS runtime text NOT NULL DEFAULT 'strands';
+
+ALTER TABLE public.agent_templates
+  ADD COLUMN IF NOT EXISTS runtime text NOT NULL DEFAULT 'strands';
+
+ALTER TABLE public.agents
+  DROP CONSTRAINT IF EXISTS agents_runtime_check;
+
+ALTER TABLE public.agents
+  ADD CONSTRAINT agents_runtime_check
+  CHECK (runtime IN ('strands', 'pi'));
+
+ALTER TABLE public.agent_templates
+  DROP CONSTRAINT IF EXISTS agent_templates_runtime_check;
+
+ALTER TABLE public.agent_templates
+  ADD CONSTRAINT agent_templates_runtime_check
+  CHECK (runtime IN ('strands', 'pi'));
+
+COMMIT;

package/dist/drizzle/0043_wiki_search_tsv_tokenization.sql

@@ -0,0 +1,48 @@
+-- Normalize wiki_pages.search_tsv tokenization for punctuation-separated terms.
+--
+-- Plan:
+--   docs/plans/2026-04-27-001-fix-mobile-wiki-search-tsv-plan.md
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0043_wiki_search_tsv_tokenization.sql
+--
+-- This is hand-rolled because generated column expressions cannot be changed
+-- in place on all supported Postgres/Aurora versions. search_tsv is derived
+-- data, so rebuilding the column and its GIN index is safe.
+--
+-- Schema/index paths updated post-0089 (wiki schema extraction renamed the column's
+-- parent table to wiki.pages and renamed the index to idx_pages_search_tsv).
+-- creates-column: wiki.pages.search_tsv
+-- creates: wiki.idx_pages_search_tsv
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+DROP INDEX IF EXISTS public.idx_wiki_pages_search_tsv;
+
+ALTER TABLE public.wiki_pages
+  DROP COLUMN IF EXISTS search_tsv;
+
+ALTER TABLE public.wiki_pages
+  ADD COLUMN search_tsv tsvector
+  GENERATED ALWAYS AS (
+    to_tsvector(
+      'english'::regconfig,
+      regexp_replace(
+        coalesce(title, '') || ' ' || coalesce(summary, '') || ' ' || coalesce(body_md, ''),
+        '[^[:alnum:]]+',
+        ' ',
+        'g'
+      )
+    )
+  ) STORED;
+
+CREATE INDEX idx_wiki_pages_search_tsv
+  ON public.wiki_pages
+  USING gin (search_tsv);
+
+COMMIT;

package/dist/drizzle/0044_add_web_search_template_config.sql

@@ -0,0 +1,7 @@
+-- creates-column: public.agent_templates.web_search
+ALTER TABLE "agent_templates"
+  ADD COLUMN IF NOT EXISTS "web_search" jsonb DEFAULT '{"enabled": true}'::jsonb;
+
+UPDATE "agent_templates"
+SET "web_search" = '{"enabled": true}'::jsonb
+WHERE "web_search" IS NULL;

package/dist/drizzle/0045_add_send_email_template_config.sql

@@ -0,0 +1,7 @@
+-- creates-column: public.agent_templates.send_email
+ALTER TABLE "agent_templates"
+  ADD COLUMN IF NOT EXISTS "send_email" jsonb DEFAULT '{"enabled": true}'::jsonb;
+
+UPDATE "agent_templates"
+SET "send_email" = '{"enabled": true}'::jsonb
+WHERE "send_email" IS NULL;