thinkwork-cli 0.12.12 → 0.12.16

package/dist/drizzle/0074_compliance_event_hash_index.sql

@@ -0,0 +1,49 @@
+-- 0074_compliance_event_hash_index.sql
+--
+-- Phase 3 U10 of the System Workflows revert + Compliance reframe.
+-- Adds a single-column index on `compliance.audit_events(event_hash)`
+-- to support the new `complianceEventByHash` GraphQL query introduced
+-- in U10. Without this index, the chain-position panel's prev_hash
+-- click-through devolves to a heap scan; with it, lookups are
+-- index-served at O(log n).
+--
+-- Why hand-rolled (not Drizzle-generated):
+--   The compliance migrations are intentionally hand-rolled so the
+--   plan-time SQL exactly matches what Aurora executes. The
+--   compliance schema in this repo has been hand-rolled since 0069;
+--   keeping additions in the same form avoids mixed-mode confusion.
+--
+-- Why not in 0069's original schema:
+--   The forward-walking chain semantics (compliance.audit_events
+--   chained via prev_hash → previous row's event_hash) was originally
+--   designed to be walked sequentially with the (tenant_id,
+--   occurred_at DESC) index. The "look up an event by its hash"
+--   access pattern was added in U10 to power the admin Compliance
+--   detail page's prev_hash navigation. Different access pattern →
+--   different index.
+--
+-- Operator pre-merge step:
+--   This migration is not picked up by the drainer's drift-gate
+--   reconciler automatically — it must be applied to dev via:
+--     psql "$DATABASE_URL" \
+--       -f packages/database-pg/drizzle/0074_compliance_event_hash_index.sql
+--   BEFORE the merge-to-main pipeline runs the post-deploy drift
+--   check. The PR body should surface this requirement; the U8a / U8b
+--   PRs followed the same pattern.
+
+-- creates: compliance.idx_audit_events_event_hash
+
+BEGIN;
+
+-- Single-column btree on event_hash. Primary access pattern:
+-- "given a prev_hash, find the row whose event_hash matches it."
+-- Tenant-scoped lookups still use the existing (tenant_id, occurred_at
+-- DESC) index for ordered enumeration; this index supports unordered
+-- lookup-by-hash only.
+--
+-- IF NOT EXISTS so the migration is idempotent — re-running on dev
+-- after a partial apply doesn't error.
+CREATE INDEX IF NOT EXISTS idx_audit_events_event_hash
+  ON compliance.audit_events (event_hash);
+
+COMMIT;

package/dist/drizzle/0075_scheduled_jobs_computer_ownership.sql

@@ -0,0 +1,27 @@
+-- Add nullable Computer ownership to Scheduled Jobs.
+--
+-- Mirrors `threads.computer_id` from drizzle/0072 — Computers are the
+-- durable per-user workplace; agent_id stays as the runtime-firing key,
+-- computer_id is the new ownership/filter key.
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0075_scheduled_jobs_computer_ownership.sql
+--
+-- creates-column: public.scheduled_jobs.computer_id
+-- creates: public.idx_scheduled_jobs_computer
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.scheduled_jobs
+  ADD COLUMN IF NOT EXISTS computer_id uuid REFERENCES public.computers(id);
+
+CREATE INDEX IF NOT EXISTS idx_scheduled_jobs_computer
+  ON public.scheduled_jobs (tenant_id, computer_id)
+  WHERE computer_id IS NOT NULL;
+
+COMMIT;

package/dist/drizzle/0076_scheduled_jobs_marco_backfill.sql

@@ -0,0 +1,69 @@
+-- Backfill: scheduled_jobs.computer_id for the two known Marco jobs (dev-only).
+--
+-- Resolves the target Computer UUID from a psql variable (no PII in the
+-- committed file) and stage-guards against accidentally running on the
+-- wrong database — if no Computer with the given id exists we RAISE
+-- EXCEPTION rather than silently no-op or corrupt foreign tenant data.
+--
+-- Operator workflow (run from repo root with dev DATABASE_URL set):
+--
+--   COMPUTER_ID=$(psql "$DATABASE_URL" -tA -c \
+--     "SELECT id FROM computers \
+--      WHERE owner_user_id = (SELECT id FROM users WHERE email = '<owner-email>') \
+--        AND status = 'active' \
+--      LIMIT 1")
+--   psql "$DATABASE_URL" \
+--     -v computer_id="$COMPUTER_ID" \
+--     -f packages/database-pg/drizzle/0076_scheduled_jobs_marco_backfill.sql
+--
+-- Idempotent: re-running with the same :computer_id is a no-op.
+--
+-- This is a data backfill, not a schema change — no creates: markers.
+
+\set ON_ERROR_STOP on
+
+-- Fail fast if the operator forgot to pass -v computer_id
+\if :{?computer_id}
+\else
+  \echo 'ERROR: -v computer_id=<uuid> is required'
+  \quit 1
+\endif
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+-- Stage guard: assert the target Computer actually exists in this DB.
+-- A wrong-stage apply (staging/prod where the Marco Computer row
+-- doesn't exist) raises here rather than silently affecting nothing or
+-- corrupting tenant scoping on the two job rows.
+--
+-- psql -v variables don't expand inside dollar-quoted DO blocks, so we
+-- pass the target id through a server-side custom GUC and read it back
+-- with current_setting() inside the block.
+SET LOCAL thinkwork.backfill_computer_id = :'computer_id';
+
+DO $$
+DECLARE
+  target_id uuid := current_setting('thinkwork.backfill_computer_id')::uuid;
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM public.computers WHERE id = target_id
+  ) THEN
+    RAISE EXCEPTION 'Computer % not found — wrong stage or wrong UUID', target_id;
+  END IF;
+END $$;
+
+UPDATE public.scheduled_jobs
+   SET computer_id = :'computer_id'::uuid,
+       updated_at = now()
+ WHERE id IN (
+         'd8a56ed5-c504-4c62-b3c8-2152bc6fc7a1'::uuid,
+         'e2429872-71ee-47fb-a084-431a302e4b35'::uuid
+       )
+   AND tenant_id = (
+         SELECT tenant_id FROM public.computers WHERE id = :'computer_id'::uuid
+       );
+
+COMMIT;

package/dist/drizzle/0077_computers_primary_agent_id.sql

@@ -0,0 +1,38 @@
+-- Add the Customize-page anchor agent column on computers, plus a backfill
+-- pass for existing rows. Greenfield Computer creation should set this
+-- column at insert time; the backfill is a safety net for pre-existing
+-- rows that were created before this column existed.
+--
+-- Plan:
+--   docs/plans/2026-05-09-006-feat-computer-customization-page-plan.md
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0077_computers_primary_agent_id.sql
+--
+-- creates-column: public.computers.primary_agent_id
+-- creates: public.idx_computers_primary_agent
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.computers
+  ADD COLUMN IF NOT EXISTS primary_agent_id uuid REFERENCES public.agents(id) ON DELETE SET NULL;
+
+CREATE INDEX IF NOT EXISTS idx_computers_primary_agent
+  ON public.computers (primary_agent_id)
+  WHERE primary_agent_id IS NOT NULL;
+
+-- Backfill from migrated_from_agent_id where set. The fallback lookup
+-- (single agent matching tenant_id + owner_user_id + template_id) is
+-- handled in application code (primary-agent-resolver.ts) because it
+-- requires conflict-aware error handling that doesn't fit a SQL backfill.
+UPDATE public.computers
+   SET primary_agent_id = migrated_from_agent_id
+ WHERE primary_agent_id IS NULL
+   AND migrated_from_agent_id IS NOT NULL;
+
+COMMIT;

package/dist/drizzle/0078_tenant_customize_catalog.sql

@@ -0,0 +1,46 @@
+-- Per-tenant catalog table backing the apps/computer Customize page's
+-- Available / Discover sections for Workflows. Skills and MCP servers reuse
+-- the existing `tenant_skills` and `tenant_mcp_servers` tables.
+--
+-- Plan:
+--   docs/plans/2026-05-09-006-feat-computer-customization-page-plan.md
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0078_tenant_customize_catalog.sql
+--
+-- creates: public.tenant_workflow_catalog
+-- creates: public.uq_tenant_workflow_catalog_slug
+-- creates: public.idx_tenant_workflow_catalog_tenant_status
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+CREATE TABLE IF NOT EXISTS public.tenant_workflow_catalog (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  slug text NOT NULL,
+  display_name text NOT NULL,
+  description text,
+  category text,
+  icon text,
+  default_config jsonb NOT NULL DEFAULT '{}'::jsonb,
+  default_schedule text,
+  status text NOT NULL DEFAULT 'active',
+  enabled boolean NOT NULL DEFAULT true,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT tenant_workflow_catalog_status_enum
+    CHECK (status IN ('active','draft','archived'))
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_tenant_workflow_catalog_slug
+  ON public.tenant_workflow_catalog (tenant_id, slug);
+
+CREATE INDEX IF NOT EXISTS idx_tenant_workflow_catalog_tenant_status
+  ON public.tenant_workflow_catalog (tenant_id, status);
+
+COMMIT;

package/dist/drizzle/0079_seed_tenant_customize_catalog.sql

@@ -0,0 +1,53 @@
+-- Seed every tenant's `tenant_workflow_catalog` with the v1 baseline catalog
+-- so the apps/computer Customize page has real Available rows to render.
+-- Idempotent via ON CONFLICT(tenant_id, slug) DO NOTHING — re-running this
+-- script never duplicates.
+--
+-- Plan:
+--   docs/plans/2026-05-09-006-feat-computer-customization-page-plan.md (U10)
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0079_seed_tenant_customize_catalog.sql
+--
+-- The data mirrors the workflow fixture catalog that previously lived in
+-- apps/computer/src/components/customize/customize-fixtures.ts so the live
+-- queries (U4 / U6) render the same shape the user already saw on the
+-- inert page. Per-tenant variation can be added by INSERTing rows with a
+-- specific tenant_id; the SELECT-from-tenants below is the convenient
+-- "every tenant gets the v1 baseline" path.
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+-- ─── Workflows ─────────────────────────────────────────────────────────────
+
+WITH baseline_workflows(slug, display_name, description, category) AS (
+  VALUES
+    ('daily-standup-digest',         'Daily standup digest',         'Summarize yesterday''s work and today''s plan from assigned work sources.', 'Engineering'),
+    ('customer-health-refresh',      'Customer health refresh',      'Recompute health scores nightly across the active book of business.', 'Customer Success'),
+    ('renewal-pipeline-sweep',       'Renewal pipeline sweep',       'Surface upcoming renewals every Monday with risk callouts.',         'Sales'),
+    ('new-lead-triage',              'New lead triage',              'Score and route inbound leads to the right account exec.',           'Sales'),
+    ('weekly-sales-brief',           'Weekly sales brief',           'Friday wrap-up: pipeline movement, wins, blocked deals.',            'Sales'),
+    ('support-incident-postmortem',  'Support incident postmortem',  'Draft a postmortem after every P0/P1 support escalation.',           'Customer Success'),
+    ('weekly-product-changelog',     'Weekly product changelog',     'Generate a customer-facing changelog from merged PRs.',              'Product')
+)
+INSERT INTO public.tenant_workflow_catalog
+  (tenant_id, slug, display_name, description, category, default_config, status, enabled)
+SELECT
+  t.id,
+  bw.slug,
+  bw.display_name,
+  bw.description,
+  bw.category,
+  '{}'::jsonb,
+  'active',
+  true
+FROM public.tenants t
+CROSS JOIN baseline_workflows bw
+ON CONFLICT (tenant_id, slug) DO NOTHING;
+
+COMMIT;

package/dist/drizzle/0081_routines_catalog_slug.sql

@@ -0,0 +1,42 @@
+-- Add a stable pointer from `routines` rows back to the
+-- `tenant_workflow_catalog.slug` they represent, so the apps/computer
+-- Customize Workflows tab (plan 010 U6) can match Connected items
+-- unambiguously and the enableWorkflow / disableWorkflow mutations can
+-- upsert idempotently.
+--
+-- Plan:
+--   docs/plans/2026-05-09-010-feat-customize-workflows-live-plan.md (U6-1)
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0081_routines_catalog_slug.sql
+--
+-- creates-column: public.routines.catalog_slug
+-- creates: public.uq_routines_catalog_slug_per_agent
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.routines
+  ADD COLUMN IF NOT EXISTS catalog_slug text;
+
+-- No backfill: unlike `connectors.type`, `routines.name` is free-form
+-- user-authored text with no structural alignment to any catalog
+-- display_name. Existing routines stay with catalog_slug=NULL and
+-- remain invisible to the Customize bindings query (which filters
+-- `catalog_slug IS NOT NULL`); they're still functional via their
+-- existing schedule/triggers, just not surfaced on the Workflows tab.
+-- New Customize-driven enables get catalog_slug populated by the
+-- enableWorkflow resolver.
+
+-- Partial unique index: at most one routines row per
+-- (agent, catalog slug). Excludes legacy / user-authored rows where
+-- agent_id IS NULL or catalog_slug IS NULL.
+CREATE UNIQUE INDEX IF NOT EXISTS uq_routines_catalog_slug_per_agent
+  ON public.routines (agent_id, catalog_slug)
+  WHERE agent_id IS NOT NULL AND catalog_slug IS NOT NULL;
+
+COMMIT;

package/dist/drizzle/0082_messages_parts_jsonb.sql

@@ -0,0 +1,52 @@
+-- messages.parts — typed UIMessage parts persisted at turn-finalize.
+--
+-- Plan-012 U7 (docs/plans/2026-05-09-012-feat-computer-ai-elements-adoption-plan.md).
+-- Contract: docs/specs/computer-ai-elements-contract-v1.md (§Persistence boundary).
+--
+-- For new Computer assistant messages, the writer persists the post-stream
+-- UIMessage.parts array into this column at turn-finalize. The legacy
+-- messages.content text column also continues to populate as a flattened
+-- text representation (text-typed parts only) so internal callers that
+-- still read `content` keep working.
+--
+-- Render-path precedence (locked in contract v1): `parts IS NOT NULL`
+-- wins over `content`. Half-migrated rows with both populated are
+-- expected and deliberate.
+--
+-- Why hand-rolled (not Drizzle codegen):
+--   1. We need the explicit `-- creates-column:` marker so the
+--      pnpm db:migrate-manual drift gate (CLAUDE.md, the Aurora drift
+--      reporter wired into deploy.yml) can confirm the column landed
+--      after `psql -f` is applied to dev.
+--   2. The author runs `psql "$DATABASE_URL" -f
+--      packages/database-pg/drizzle/0082_messages_parts_jsonb.sql`
+--      against dev right after merge per
+--      feedback_handrolled_migrations_apply_to_dev.
+--
+-- Apply:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0082_messages_parts_jsonb.sql
+--
+-- Drift detection:
+--   pnpm db:migrate-manual
+--
+-- Pre-migration invariants:
+--   - public.messages exists (created by drizzle/0000_petite_marvel_apes.sql).
+--   - public.messages.parts does not exist yet.
+--
+-- Post-migration invariants:
+--   - public.messages.parts is jsonb NULL with no default.
+--   - existing rows have parts IS NULL (no backfill).
+--   - the legacy messages.content text column is unchanged.
+--
+-- Tenant scoping for the new field is the U7 P0 audit, documented in
+-- the PR description: every read path that selects Message.parts must
+-- scope by resolveCallerTenantId(ctx) (per
+-- feedback_oauth_tenant_resolver) AND the same thread/computer
+-- ownership gate already enforced on Message.content. The audit and
+-- regression test live alongside the resolver in
+-- packages/api/src/graphql/resolvers/messages/.
+--
+-- creates-column: public.messages.parts
+
+ALTER TABLE "messages"
+	ADD COLUMN IF NOT EXISTS "parts" jsonb;

package/dist/drizzle/0083_computer_runbooks.sql

@@ -0,0 +1,103 @@
+-- Computer runbook catalog and execution state.
+-- creates: public.tenant_runbook_catalog
+-- creates: public.computer_runbook_runs
+-- creates: public.computer_runbook_tasks
+
+CREATE TABLE IF NOT EXISTS public.tenant_runbook_catalog (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  slug text NOT NULL,
+  source_version text NOT NULL,
+  display_name text NOT NULL,
+  description text NOT NULL,
+  category text NOT NULL,
+  status text NOT NULL DEFAULT 'active',
+  enabled boolean NOT NULL DEFAULT true,
+  definition jsonb NOT NULL,
+  operator_overrides jsonb,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT tenant_runbook_catalog_status_allowed
+    CHECK (status IN ('active','unavailable','archived'))
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS tenant_runbook_catalog_tenant_slug_uq
+  ON public.tenant_runbook_catalog (tenant_id, slug);
+
+CREATE INDEX IF NOT EXISTS idx_tenant_runbook_catalog_tenant_status
+  ON public.tenant_runbook_catalog (tenant_id, status);
+
+CREATE TABLE IF NOT EXISTS public.computer_runbook_runs (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  computer_id uuid NOT NULL REFERENCES public.computers(id) ON DELETE CASCADE,
+  thread_id uuid REFERENCES public.threads(id) ON DELETE SET NULL,
+  catalog_id uuid REFERENCES public.tenant_runbook_catalog(id) ON DELETE SET NULL,
+  runbook_slug text NOT NULL,
+  runbook_version text NOT NULL,
+  status text NOT NULL DEFAULT 'awaiting_confirmation',
+  invocation_mode text NOT NULL DEFAULT 'auto',
+  selected_by_message_id uuid REFERENCES public.messages(id) ON DELETE SET NULL,
+  approved_by_user_id uuid REFERENCES public.users(id) ON DELETE SET NULL,
+  rejected_by_user_id uuid REFERENCES public.users(id) ON DELETE SET NULL,
+  cancelled_by_user_id uuid REFERENCES public.users(id) ON DELETE SET NULL,
+  definition_snapshot jsonb NOT NULL,
+  inputs jsonb NOT NULL DEFAULT '{}'::jsonb,
+  output jsonb,
+  error jsonb,
+  idempotency_key text,
+  approved_at timestamptz,
+  rejected_at timestamptz,
+  cancelled_at timestamptz,
+  started_at timestamptz,
+  completed_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT computer_runbook_runs_status_allowed
+    CHECK (status IN ('awaiting_confirmation','queued','running','completed','failed','cancelled','rejected')),
+  CONSTRAINT computer_runbook_runs_invocation_mode_allowed
+    CHECK (invocation_mode IN ('auto','explicit','ad_hoc'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_computer_runbook_runs_tenant_status
+  ON public.computer_runbook_runs (tenant_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_computer_runbook_runs_computer_created
+  ON public.computer_runbook_runs (computer_id, created_at);
+
+CREATE UNIQUE INDEX IF NOT EXISTS computer_runbook_runs_tenant_computer_idempotency_uq
+  ON public.computer_runbook_runs (tenant_id, computer_id, idempotency_key)
+  WHERE idempotency_key IS NOT NULL;
+
+CREATE TABLE IF NOT EXISTS public.computer_runbook_tasks (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  run_id uuid NOT NULL REFERENCES public.computer_runbook_runs(id) ON DELETE CASCADE,
+  phase_id text NOT NULL,
+  phase_title text NOT NULL,
+  task_key text NOT NULL,
+  title text NOT NULL,
+  summary text,
+  status text NOT NULL DEFAULT 'pending',
+  depends_on jsonb NOT NULL DEFAULT '[]'::jsonb,
+  capability_roles jsonb NOT NULL DEFAULT '[]'::jsonb,
+  sort_order integer NOT NULL,
+  details jsonb,
+  output jsonb,
+  error jsonb,
+  started_at timestamptz,
+  completed_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT computer_runbook_tasks_status_allowed
+    CHECK (status IN ('pending','running','completed','failed','skipped','cancelled'))
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS computer_runbook_tasks_run_task_key_uq
+  ON public.computer_runbook_tasks (run_id, task_key);
+
+CREATE INDEX IF NOT EXISTS idx_computer_runbook_tasks_run_order
+  ON public.computer_runbook_tasks (run_id, sort_order);
+
+CREATE INDEX IF NOT EXISTS idx_computer_runbook_tasks_tenant_status
+  ON public.computer_runbook_tasks (tenant_id, status);

package/dist/drizzle/0084_artifacts_favorited_at.sql

@@ -0,0 +1,32 @@
+-- Add `favorited_at` to artifacts so users can star artifacts and the
+-- apps/computer sidebar can show a Favorites section.
+--
+-- Plan:
+--   docs/plans/2026-05-10-005-feat-computer-ui-updates-plan.md (U3)
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0084_artifacts_favorited_at.sql
+--
+-- creates-column: public.artifacts.favorited_at
+-- creates: public.idx_artifacts_favorited_at
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+ALTER TABLE public.artifacts
+  ADD COLUMN IF NOT EXISTS favorited_at timestamptz;
+
+-- Partial index covers the sidebar query
+-- (favorited_at IS NOT NULL, ORDER BY favorited_at DESC) without
+-- bloating the table-wide index footprint for the un-favorited common
+-- case. Tenant_id leads so the same query stays fast under multi-tenant
+-- access patterns.
+CREATE INDEX IF NOT EXISTS idx_artifacts_favorited_at
+  ON public.artifacts (tenant_id, favorited_at DESC)
+  WHERE favorited_at IS NOT NULL;
+
+COMMIT;

package/dist/drizzle/0085_seed_thinkwork_computer_default_template.sql

@@ -0,0 +1,46 @@
+-- creates: public.view_thinkwork_computer_default_template_seeded
+--
+-- Seed the platform-default Computer template used by the shared Computer
+-- creation dialog. Tenant-id NULL = platform-wide; every tenant can resolve it
+-- because `requireComputerTemplate` accepts NULL-tenant rows.
+--
+-- See docs/plans/2026-05-11-003-feat-computer-admin-crud-plan.md (U1).
+--
+-- The marker view exists solely to give scripts/db-migrate-manual.sh
+-- something to verify — the drift reporter cannot probe for data rows. The
+-- view returns 1 row when the seed has been applied. Same pattern as
+-- 0022_seed_thinkwork_admin_permissions.sql.
+--
+-- Apply manually (matches the 0019/0020/0022 convention):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0085_seed_thinkwork_computer_default_template.sql
+--
+-- This file is frozen. If the default template's attributes need to change
+-- (e.g., model upgrade), ship a new migration that UPDATEs the row — do not
+-- edit this one.
+
+-- Guarded insert. The unique index uq_agent_templates_tenant_slug is on
+-- (tenant_id, slug), but Postgres treats NULL values as distinct in unique
+-- indexes by default — so ON CONFLICT against a NULL tenant_id row will
+-- never match. Use WHERE NOT EXISTS for idempotency instead.
+INSERT INTO agent_templates (tenant_id, name, slug, template_kind, source, model, config)
+SELECT
+  NULL,
+  'Thinkwork Computer',
+  'thinkwork-computer-default',
+  'computer',
+  'system',
+  'us.anthropic.claude-sonnet-4-20250514-v1:0',
+  '{}'::jsonb
+WHERE NOT EXISTS (
+  SELECT 1 FROM agent_templates
+   WHERE slug = 'thinkwork-computer-default'
+     AND tenant_id IS NULL
+     AND template_kind = 'computer'
+);
+
+CREATE OR REPLACE VIEW public.view_thinkwork_computer_default_template_seeded AS
+SELECT id, slug, template_kind, source
+  FROM agent_templates
+ WHERE slug = 'thinkwork-computer-default'
+   AND tenant_id IS NULL
+   AND template_kind = 'computer';

package/dist/drizzle/0086_update_default_template_models.sql

@@ -0,0 +1,19 @@
+-- creates: public.view_default_template_models_updated_0086
+--
+-- Move seeded platform/default templates off the dated Sonnet inference
+-- profile that now fails Bedrock runtime access in dev AgentCore.
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0086_update_default_template_models.sql
+
+UPDATE agent_templates
+   SET model = 'us.anthropic.claude-sonnet-4-6',
+       updated_at = now()
+ WHERE slug IN ('thinkwork-computer-default', 'default')
+   AND model = 'us.anthropic.claude-sonnet-4-20250514-v1:0';
+
+CREATE OR REPLACE VIEW public.view_default_template_models_updated_0086 AS
+SELECT id, slug, template_kind, source, model
+  FROM agent_templates
+ WHERE slug IN ('thinkwork-computer-default', 'default')
+   AND model = 'us.anthropic.claude-sonnet-4-6';

package/dist/drizzle/0087_retire_oss_connectors.sql

@@ -0,0 +1,77 @@
+-- Retire the OSS connector framework.
+--
+-- ⚠️  SUPERSEDED by 0090 + 0092. Do NOT apply this file directly anymore —
+-- the ALTER TABLE public.tenant_entity_external_refs statements below
+-- will fail because 0090 (brain schema extraction) moved that table to
+-- brain.external_refs. 0090 absorbed this migration's tracker DELETE +
+-- constraint work, and 0092_finish_oss_connector_retirement.sql does
+-- the DROP TABLE portion. The markers below have been updated to point
+-- at the post-0090 location so the drift reporter resolves cleanly.
+--
+-- Removes the connector data model now that the private extension runtime
+-- is moving out of OSS Thinkwork. Workflow Customize catalog, OAuth
+-- credentials, MCP state, Computers, and Threads remain.
+--
+-- Plan:
+--   docs/plans/2026-05-14-001-refactor-retire-oss-symphony-connectors-plan.md
+--
+-- Apply manually: DO NOT APPLY DIRECTLY — see superseded note above.
+--   Original command (now broken):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0087_retire_oss_connectors.sql
+--
+-- drops: public.computer_delegations
+-- drops: public.connector_executions
+-- drops: public.connectors
+-- drops: public.tenant_connector_catalog
+-- drops: public.uq_connector_executions_active_external_ref
+-- drops: public.idx_connector_executions_tenant_state
+-- drops: public.idx_connector_executions_connector_started
+-- drops: public.idx_connector_executions_state_machine_arn
+-- drops: public.idx_connector_executions_external_ref
+-- drops: public.uq_connectors_tenant_name
+-- drops: public.idx_connectors_tenant_status
+-- drops: public.idx_connectors_tenant_type
+-- drops: public.idx_connectors_enabled
+-- drops: public.uq_connectors_catalog_slug_per_computer
+-- drops: public.uq_tenant_connector_catalog_slug
+-- drops: public.idx_tenant_connector_catalog_tenant_status
+-- drops: public.idx_computer_delegations_computer_status
+-- drops: public.idx_computer_delegations_agent
+-- Constraint location updated post-0090 (brain schema extraction moved the
+-- table to brain.external_refs and renamed the constraint).
+-- creates-constraint: brain.external_refs.external_refs_kind_allowed
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+DELETE FROM public.tenant_entity_external_refs
+ WHERE source_kind IN ('tracker_issue', 'tracker_ticket');
+
+ALTER TABLE public.tenant_entity_external_refs
+  DROP CONSTRAINT IF EXISTS tenant_entity_external_refs_kind_allowed_v2;
+
+ALTER TABLE public.tenant_entity_external_refs
+  DROP CONSTRAINT IF EXISTS tenant_entity_external_refs_kind_allowed;
+
+ALTER TABLE public.tenant_entity_external_refs
+  ADD CONSTRAINT tenant_entity_external_refs_kind_allowed CHECK (
+    source_kind IN (
+      'erp_customer',
+      'crm_opportunity',
+      'erp_order',
+      'crm_person',
+      'support_case',
+      'bedrock_kb'
+    )
+  );
+
+DROP TABLE IF EXISTS public.computer_delegations CASCADE;
+DROP TABLE IF EXISTS public.connector_executions CASCADE;
+DROP TABLE IF EXISTS public.connectors CASCADE;
+DROP TABLE IF EXISTS public.tenant_connector_catalog CASCADE;
+
+COMMIT;