thinkwork-cli 0.12.12 → 0.12.16

package/dist/drizzle/0090_brain_schema_extraction.sql

@@ -0,0 +1,274 @@
+-- 0090_brain_schema_extraction.sql
+--
+-- Phase B of the wiki + brain schema extraction (PR 2 of 3-PR arc).
+-- Moves 6 brain tables from public.* into the new `brain.*` Postgres schema,
+-- drops the redundant `tenant_entity_` prefix from internal table names,
+-- renames indexes/constraints to match, and creates compat views in public.*
+-- so old bundled Lambda code keeps reading during the deploy bridge window.
+--
+-- Tables moved:
+--   public.tenant_entity_pages           → brain.pages
+--   public.tenant_entity_page_sections   → brain.page_sections
+--   public.tenant_entity_page_links      → brain.page_links
+--   public.tenant_entity_page_aliases    → brain.page_aliases
+--   public.tenant_entity_section_sources → brain.section_sources
+--   public.tenant_entity_external_refs   → brain.external_refs
+--
+-- FK constraints follow their parent tables automatically (Postgres preserves
+-- them across SET SCHEMA). Cross-schema FKs to public.tenants continue to
+-- work — see Key Technical Decisions in the wiki+brain plan for the rationale.
+-- FK constraint names retain their original tenant_entity_* prefix — a
+-- cosmetic cleanup can come later. No FK-rename markers below.
+--
+-- Compat views: each table also gets a view in public.* aliasing the new
+-- location. Old bundled Lambdas continue reading via public.tenant_entity_*
+-- during the deploy bridge window; new Lambdas read brain.* directly. PR 3
+-- (cleanup) drops the views once deploys stabilize. The brain.pages compat
+-- view enumerates columns explicitly, omitting the GENERATED ALWAYS
+-- search_tsv (mirror of 0089's wiki.pages view fix from PR 1 review).
+--
+-- Note on external_refs_kind_allowed_v2: the constraint name retains the
+-- _v2 suffix from the public-schema days (0088 renamed it; 0087 is queued
+-- to rename it back and tighten the value set). This migration only moves
+-- the constraint with the table — no name/definition changes. The follow-up
+-- cleanup migration can rename and tighten in lock step with 0087.
+--
+-- Plan reference:    docs/plans/2026-05-16-001-refactor-wiki-brain-schema-extraction-plan.md
+-- Origin brainstorm: docs/brainstorms/2026-05-16-wiki-brain-schema-extraction-requirements.md
+-- Pattern doc:       docs/solutions/database-issues/feature-schema-extraction-pattern.md
+-- Prior PR:          0089_wiki_schema_extraction.sql (wiki side, PR 1 of 3)
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0090_brain_schema_extraction.sql
+-- Then verify:
+--   pnpm db:migrate-manual
+--   psql -c "\dt brain.*"           -- 6 tables expected
+--   psql -c "\dv public.tenant_entity_*"  -- 6 compat views expected
+--   psql -c "\dt public.tenant_entity_*"  -- 0 tables expected
+--
+-- Inverse runbook (rollback): drop the views, then SET SCHEMA back, then
+-- RENAME back. Indexes and constraints follow their parent table's schema
+-- automatically. After SET SCHEMA moves the table to public, its indexes
+-- live in public — so ALTER INDEX statements must qualify with `public.`,
+-- not `brain.`.
+--   DROP VIEW IF EXISTS public.tenant_entity_pages, public.tenant_entity_page_sections, ...;
+--   ALTER TABLE brain.pages SET SCHEMA public;   -- indexes move to public too
+--   ALTER TABLE public.pages RENAME TO tenant_entity_pages;
+--   ALTER INDEX public.idx_pages_tenant_type_status RENAME TO idx_tenant_entity_pages_tenant_type_status;  -- × 19 indexes
+--   ... (× 6 tables, parent-last)
+--   DROP SCHEMA brain;
+--
+-- Markers (consumed by scripts/db-migrate-manual.sh):
+--
+-- creates: brain.pages
+-- creates: brain.page_sections
+-- creates: brain.page_links
+-- creates: brain.page_aliases
+-- creates: brain.section_sources
+-- creates: brain.external_refs
+-- creates: brain.uq_pages_tenant_type_subtype_slug
+-- creates: brain.idx_pages_tenant_type_status
+-- creates: brain.idx_pages_subtype
+-- creates: brain.idx_pages_last_compiled
+-- creates: brain.idx_pages_search_tsv
+-- creates: brain.idx_pages_parent
+-- creates: brain.idx_pages_title_trgm
+-- creates: brain.uq_page_sections_page_slug
+-- creates: brain.idx_page_sections_page_position
+-- creates: brain.uq_page_links_from_to_kind
+-- creates: brain.idx_page_links_to
+-- creates: brain.idx_page_links_kind
+-- creates: brain.uq_page_aliases_page_alias
+-- creates: brain.idx_page_aliases_alias
+-- creates: brain.idx_page_aliases_alias_trgm
+-- creates: brain.uq_section_sources_section_kind_ref
+-- creates: brain.idx_section_sources_tenant_kind_ref
+-- creates: brain.uq_external_refs_source
+-- creates: brain.idx_external_refs_tenant_source
+-- creates-constraint: brain.pages.pages_type_allowed
+-- creates-constraint: brain.pages.pages_entity_subtype_allowed
+-- creates-constraint: brain.page_sections.page_sections_facet_type_allowed
+-- creates-constraint: brain.external_refs.external_refs_kind_allowed
+-- creates-constraint: brain.external_refs.external_refs_ttl_positive
+-- creates: public.tenant_entity_pages
+-- creates: public.tenant_entity_page_sections
+-- creates: public.tenant_entity_page_links
+-- creates: public.tenant_entity_page_aliases
+-- creates: public.tenant_entity_section_sources
+-- creates: public.tenant_entity_external_refs
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+-- Set timeouts BEFORE acquiring the advisory lock so the lock acquisition
+-- itself is bounded. Mirror of 0089's pattern.
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '300s';
+
+-- Serialize concurrent application attempts.
+SELECT pg_advisory_xact_lock(hashtext('brain_schema_extraction'));
+
+-- Refuse to apply against an unexpected DB.
+DO $$
+BEGIN
+  IF current_database() != 'thinkwork' THEN
+    RAISE EXCEPTION 'wrong database: %, expected thinkwork', current_database();
+  END IF;
+END $$;
+
+-- Dev-state-verification: 0090 depends on 0089's state. If dev was reseeded
+-- after 0089 but before 0090, refuse to proceed — re-apply 0089 first.
+DO $$
+BEGIN
+  IF to_regclass('wiki.pages') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: wiki.pages does not exist — 0089 (wiki schema extraction) must be applied first';
+  END IF;
+END $$;
+
+-- Pre-flight invariants: symmetric checks for all 6 tables.
+DO $$
+BEGIN
+  IF to_regclass('public.tenant_entity_pages') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: public.tenant_entity_pages does not exist';
+  END IF;
+  IF to_regclass('brain.pages') IS NOT NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain.pages already exists — refusing to re-apply';
+  END IF;
+  IF to_regclass('public.tenant_entity_page_sections') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: public.tenant_entity_page_sections does not exist';
+  END IF;
+  IF to_regclass('brain.page_sections') IS NOT NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain.page_sections already exists — refusing to re-apply';
+  END IF;
+  IF to_regclass('public.tenant_entity_page_links') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: public.tenant_entity_page_links does not exist';
+  END IF;
+  IF to_regclass('brain.page_links') IS NOT NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain.page_links already exists — refusing to re-apply';
+  END IF;
+  IF to_regclass('public.tenant_entity_page_aliases') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: public.tenant_entity_page_aliases does not exist';
+  END IF;
+  IF to_regclass('brain.page_aliases') IS NOT NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain.page_aliases already exists — refusing to re-apply';
+  END IF;
+  IF to_regclass('public.tenant_entity_section_sources') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: public.tenant_entity_section_sources does not exist';
+  END IF;
+  IF to_regclass('brain.section_sources') IS NOT NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain.section_sources already exists — refusing to re-apply';
+  END IF;
+  IF to_regclass('public.tenant_entity_external_refs') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: public.tenant_entity_external_refs does not exist';
+  END IF;
+  IF to_regclass('brain.external_refs') IS NOT NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain.external_refs already exists — refusing to re-apply';
+  END IF;
+END $$;
+
+CREATE SCHEMA IF NOT EXISTS brain;
+COMMENT ON SCHEMA brain IS 'Tenant-shared structured-knowledge entity pages (Customer/Opportunity/Order/Person) and their provenance. Extracted from public.* on 2026-05-16 as PR 2 of the wiki+brain schema extraction arc.';
+
+-- ── Move and rename tables ─────────────────────────────────────────────
+-- FK-leaf-first ordering. Postgres preserves FKs across SET SCHEMA
+-- automatically; ordering matters only for operator mental model.
+
+ALTER TABLE public.tenant_entity_external_refs SET SCHEMA brain;
+ALTER TABLE brain.tenant_entity_external_refs RENAME TO external_refs;
+
+ALTER TABLE public.tenant_entity_section_sources SET SCHEMA brain;
+ALTER TABLE brain.tenant_entity_section_sources RENAME TO section_sources;
+
+ALTER TABLE public.tenant_entity_page_links SET SCHEMA brain;
+ALTER TABLE brain.tenant_entity_page_links RENAME TO page_links;
+
+ALTER TABLE public.tenant_entity_page_aliases SET SCHEMA brain;
+ALTER TABLE brain.tenant_entity_page_aliases RENAME TO page_aliases;
+
+ALTER TABLE public.tenant_entity_page_sections SET SCHEMA brain;
+ALTER TABLE brain.tenant_entity_page_sections RENAME TO page_sections;
+
+ALTER TABLE public.tenant_entity_pages SET SCHEMA brain;
+ALTER TABLE brain.tenant_entity_pages RENAME TO pages;
+
+-- ── Rename indexes to drop tenant_entity_ prefix ───────────────────────
+
+ALTER INDEX brain.uq_tenant_entity_pages_tenant_type_subtype_slug RENAME TO uq_pages_tenant_type_subtype_slug;
+ALTER INDEX brain.idx_tenant_entity_pages_tenant_type_status RENAME TO idx_pages_tenant_type_status;
+ALTER INDEX brain.idx_tenant_entity_pages_subtype RENAME TO idx_pages_subtype;
+ALTER INDEX brain.idx_tenant_entity_pages_last_compiled RENAME TO idx_pages_last_compiled;
+ALTER INDEX brain.idx_tenant_entity_pages_search_tsv RENAME TO idx_pages_search_tsv;
+ALTER INDEX brain.idx_tenant_entity_pages_parent RENAME TO idx_pages_parent;
+ALTER INDEX brain.idx_tenant_entity_pages_title_trgm RENAME TO idx_pages_title_trgm;
+
+ALTER INDEX brain.uq_tenant_entity_page_sections_page_slug RENAME TO uq_page_sections_page_slug;
+ALTER INDEX brain.idx_tenant_entity_page_sections_page_position RENAME TO idx_page_sections_page_position;
+
+ALTER INDEX brain.uq_tenant_entity_page_links_from_to_kind RENAME TO uq_page_links_from_to_kind;
+ALTER INDEX brain.idx_tenant_entity_page_links_to RENAME TO idx_page_links_to;
+ALTER INDEX brain.idx_tenant_entity_page_links_kind RENAME TO idx_page_links_kind;
+
+ALTER INDEX brain.uq_tenant_entity_page_aliases_page_alias RENAME TO uq_page_aliases_page_alias;
+ALTER INDEX brain.idx_tenant_entity_page_aliases_alias RENAME TO idx_page_aliases_alias;
+ALTER INDEX brain.idx_tenant_entity_page_aliases_alias_trgm RENAME TO idx_page_aliases_alias_trgm;
+
+ALTER INDEX brain.uq_tenant_entity_section_sources_section_kind_ref RENAME TO uq_section_sources_section_kind_ref;
+ALTER INDEX brain.idx_tenant_entity_section_sources_tenant_kind_ref RENAME TO idx_section_sources_tenant_kind_ref;
+
+ALTER INDEX brain.uq_tenant_entity_external_refs_source RENAME TO uq_external_refs_source;
+ALTER INDEX brain.idx_tenant_entity_external_refs_tenant_source RENAME TO idx_external_refs_tenant_source;
+
+-- ── Rename named CHECK constraints to drop tenant_entity_ prefix ───────
+
+ALTER TABLE brain.pages RENAME CONSTRAINT tenant_entity_pages_type_allowed TO pages_type_allowed;
+ALTER TABLE brain.pages RENAME CONSTRAINT tenant_entity_pages_entity_subtype_allowed TO pages_entity_subtype_allowed;
+ALTER TABLE brain.page_sections RENAME CONSTRAINT tenant_entity_page_sections_facet_type_allowed TO page_sections_facet_type_allowed;
+
+-- external_refs constraint: absorb 0087's tracker cleanup. Whatever the
+-- existing constraint name is (_v2 or _kind_allowed — depends on whether
+-- 0087 has applied yet), delete tracker rows and replace with the final
+-- constraint named external_refs_kind_allowed (no _v2) excluding tracker_*.
+-- This matches what brain.ts declares as the canonical Drizzle source.
+DELETE FROM brain.external_refs
+ WHERE source_kind IN ('tracker_issue', 'tracker_ticket');
+
+ALTER TABLE brain.external_refs
+  DROP CONSTRAINT IF EXISTS tenant_entity_external_refs_kind_allowed_v2;
+ALTER TABLE brain.external_refs
+  DROP CONSTRAINT IF EXISTS tenant_entity_external_refs_kind_allowed;
+
+ALTER TABLE brain.external_refs
+  ADD CONSTRAINT external_refs_kind_allowed CHECK (
+    source_kind IN (
+      'erp_customer',
+      'crm_opportunity',
+      'erp_order',
+      'crm_person',
+      'support_case',
+      'bedrock_kb'
+    )
+  );
+
+ALTER TABLE brain.external_refs RENAME CONSTRAINT tenant_entity_external_refs_ttl_positive TO external_refs_ttl_positive;
+
+-- ── Compat views in public.* ────────────────────────────────────────────
+-- Old bundled Lambda code references public.tenant_entity_*. The views
+-- resolve to the new schema-qualified tables. brain.pages has a
+-- GENERATED ALWAYS search_tsv column, so its compat view enumerates
+-- columns explicitly to allow INSERTs that don't name search_tsv to
+-- succeed (Postgres regenerates search_tsv on write through the view).
+-- The remaining 5 tables have no generated columns; SELECT * is fine.
+
+CREATE VIEW public.tenant_entity_pages AS
+  SELECT id, tenant_id, type, entity_subtype, slug, title, summary,
+         body_md, status, parent_page_id, hubness_score, tags,
+         last_compiled_at, created_at, updated_at
+  FROM brain.pages;
+CREATE VIEW public.tenant_entity_page_sections AS SELECT * FROM brain.page_sections;
+CREATE VIEW public.tenant_entity_page_links AS SELECT * FROM brain.page_links;
+CREATE VIEW public.tenant_entity_page_aliases AS SELECT * FROM brain.page_aliases;
+CREATE VIEW public.tenant_entity_section_sources AS SELECT * FROM brain.section_sources;
+CREATE VIEW public.tenant_entity_external_refs AS SELECT * FROM brain.external_refs;
+
+COMMIT;

package/dist/drizzle/0091_drop_wiki_brain_compat_views.sql

@@ -0,0 +1,118 @@
+-- 0091_drop_wiki_brain_compat_views.sql
+--
+-- Phase C / PR 3 of 3 in the wiki+brain schema extraction arc. Drops the
+-- 15 compatibility views in `public.*` that 0089 (wiki) and 0090 (brain)
+-- created as a deploy bridge. The views protected old bundled Lambda
+-- READ paths during the brief window between psql apply and Lambda
+-- redeploy completing; now that both PRs have merged + stabilized in
+-- prod, no consumer reads through these names anymore and the views
+-- can come down.
+--
+-- Views dropped:
+--   public.wiki_pages, public.wiki_page_sections, public.wiki_page_links,
+--   public.wiki_page_aliases, public.wiki_unresolved_mentions,
+--   public.wiki_section_sources, public.wiki_compile_jobs,
+--   public.wiki_compile_cursors, public.wiki_places,
+--   public.tenant_entity_pages, public.tenant_entity_page_sections,
+--   public.tenant_entity_page_links, public.tenant_entity_page_aliases,
+--   public.tenant_entity_section_sources, public.tenant_entity_external_refs
+--
+-- Pre-merge consumer survey: verified zero production code references
+-- these names (excludes the legitimate test fixture in
+-- packages/database-pg/__tests__/schema-customize-retirement.test.ts
+-- which only grep-checks 0087's literal text, and excludes historical
+-- migration files 0036/0051/0087 which document past state).
+--
+-- Plan reference:    docs/plans/2026-05-16-001-refactor-wiki-brain-schema-extraction-plan.md
+-- Origin brainstorm: docs/brainstorms/2026-05-16-wiki-brain-schema-extraction-requirements.md
+-- Pattern doc:       docs/solutions/database-issues/feature-schema-extraction-pattern.md
+-- Wiki PR (merged):  #1251
+-- Brain PR (merged): #1259
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0091_drop_wiki_brain_compat_views.sql
+-- Then verify:
+--   pnpm db:migrate-manual packages/database-pg/drizzle/0091_drop_wiki_brain_compat_views.sql
+--   psql -c "\dv public.wiki_*"           -- 0 views expected
+--   psql -c "\dv public.tenant_entity_*"  -- 0 views expected
+--   psql -c "\dt wiki.*"                  -- 9 tables still present
+--   psql -c "\dt brain.*"                 -- 6 tables still present
+--
+-- Inverse runbook (rollback): re-create each view. Mirror of 0089/0090's
+-- CREATE VIEW statements — see those migration headers for the column
+-- enumeration on public.wiki_pages and public.tenant_entity_pages views
+-- (both omit the GENERATED ALWAYS search_tsv column).
+--
+-- Markers (consumed by scripts/db-migrate-manual.sh):
+--
+-- drops: public.wiki_pages
+-- drops: public.wiki_page_sections
+-- drops: public.wiki_page_links
+-- drops: public.wiki_page_aliases
+-- drops: public.wiki_unresolved_mentions
+-- drops: public.wiki_section_sources
+-- drops: public.wiki_compile_jobs
+-- drops: public.wiki_compile_cursors
+-- drops: public.wiki_places
+-- drops: public.tenant_entity_pages
+-- drops: public.tenant_entity_page_sections
+-- drops: public.tenant_entity_page_links
+-- drops: public.tenant_entity_page_aliases
+-- drops: public.tenant_entity_section_sources
+-- drops: public.tenant_entity_external_refs
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+-- Set timeouts before any potentially blocking operation. DROP VIEW is
+-- fast but takes ACCESS EXCLUSIVE on the view's name — and any query in
+-- flight against the view holds an ACCESS SHARE that briefly blocks the
+-- DROP. Bounded waits ensure the migration fails fast if a long-running
+-- query holds a lock.
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '60s';
+
+-- Serialize concurrent application attempts.
+SELECT pg_advisory_xact_lock(hashtext('drop_wiki_brain_compat_views'));
+
+-- Refuse to apply against an unexpected DB.
+DO $$
+BEGIN
+  IF current_database() != 'thinkwork' THEN
+    RAISE EXCEPTION 'wrong database: %, expected thinkwork', current_database();
+  END IF;
+END $$;
+
+-- Pre-flight: wiki.* and brain.* must exist (0089 + 0090 must have applied)
+-- before it makes sense to drop their compat views.
+DO $$
+BEGIN
+  IF to_regclass('wiki.pages') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: wiki.pages does not exist — 0089 must apply before 0091';
+  END IF;
+  IF to_regclass('brain.pages') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain.pages does not exist — 0090 must apply before 0091';
+  END IF;
+END $$;
+
+-- Drop the wiki compat views (9). IF EXISTS so re-running is safe.
+DROP VIEW IF EXISTS public.wiki_pages;
+DROP VIEW IF EXISTS public.wiki_page_sections;
+DROP VIEW IF EXISTS public.wiki_page_links;
+DROP VIEW IF EXISTS public.wiki_page_aliases;
+DROP VIEW IF EXISTS public.wiki_unresolved_mentions;
+DROP VIEW IF EXISTS public.wiki_section_sources;
+DROP VIEW IF EXISTS public.wiki_compile_jobs;
+DROP VIEW IF EXISTS public.wiki_compile_cursors;
+DROP VIEW IF EXISTS public.wiki_places;
+
+-- Drop the brain compat views (6).
+DROP VIEW IF EXISTS public.tenant_entity_pages;
+DROP VIEW IF EXISTS public.tenant_entity_page_sections;
+DROP VIEW IF EXISTS public.tenant_entity_page_links;
+DROP VIEW IF EXISTS public.tenant_entity_page_aliases;
+DROP VIEW IF EXISTS public.tenant_entity_section_sources;
+DROP VIEW IF EXISTS public.tenant_entity_external_refs;
+
+COMMIT;

package/dist/drizzle/0092_finish_oss_connector_retirement.sql

@@ -0,0 +1,97 @@
+-- 0092_finish_oss_connector_retirement.sql
+--
+-- Finishes the OSS connector framework retirement that 0087 started.
+-- 0087 was authored but never applied to dev — the code-side retirement
+-- (Drizzle schemas removed, lib/connectors/* deleted, handler retired,
+-- resolvers gone) shipped via separate PRs, but the DROP TABLE side
+-- never ran because 0087 had downstream-rendered itself unable to apply
+-- as-written after 0090 moved tenant_entity_external_refs into the
+-- brain schema (0087's ALTER TABLE public.tenant_entity_external_refs
+-- statements would now fail because that table no longer exists in
+-- public.*).
+--
+-- This migration does ONLY the table-drop portion of 0087. The
+-- tenant_entity_external_refs constraint work (DELETE tracker rows +
+-- DROP + re-ADD constraint) is already done by 0090's bundled
+-- cleanup — see 0090's header for that history.
+--
+-- Tables dropped (4):
+--   public.connector_executions  (33 rows in dev as of 2026-05-16, all stale)
+--   public.connectors            (1 row in dev, stale)
+--   public.tenant_connector_catalog  (20 rows, stale)
+--   public.computer_delegations  (10 rows, stale)
+--
+-- Indexes drop automatically with their parent tables (CASCADE). The
+-- 14 index-drop markers in 0087's header resolve to DROPPED naturally
+-- once the parent tables are gone.
+--
+-- The only inbound FK to any of these tables is
+-- connector_executions.connector_id -> connectors.id, which is in the
+-- drop set itself. No external tables reference these — DROP CASCADE is
+-- safe.
+--
+-- Plan reference:    docs/plans/2026-05-14-001-refactor-retire-oss-symphony-connectors-plan.md
+-- Prior migration:   0087_retire_oss_connectors.sql (authored but never applied to dev — superseded by this file's table-drop scope)
+-- Wiki+brain arc:    PRs #1251, #1259, #1264
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0092_finish_oss_connector_retirement.sql
+-- Then verify:
+--   pnpm db:migrate-manual packages/database-pg/drizzle/0092_finish_oss_connector_retirement.sql
+--   psql -c "\dt public.connectors"            -- 0 rows expected
+--   psql -c "\dt public.connector_executions"  -- 0 rows expected
+--   psql -c "\dt public.tenant_connector_catalog"  -- 0 rows expected
+--   psql -c "\dt public.computer_delegations"  -- 0 rows expected
+--
+-- No rollback documented — the OSS connector framework is retired in
+-- application code (origin/main has no schema files, no lib code, no
+-- handlers, no resolvers referencing these tables). Recreating the
+-- tables without recreating the framework would leave dead schema
+-- behind. If a true rollback is needed, revert at the application
+-- layer first.
+--
+-- Markers (consumed by scripts/db-migrate-manual.sh):
+--
+-- drops: public.connector_executions
+-- drops: public.connectors
+-- drops: public.tenant_connector_catalog
+-- drops: public.computer_delegations
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+-- Timeouts before any potentially blocking operation. DROP TABLE takes
+-- ACCESS EXCLUSIVE on the table; bounded waits ensure the migration
+-- fails fast if anything is actively reading.
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '60s';
+
+SELECT pg_advisory_xact_lock(hashtext('finish_oss_connector_retirement'));
+
+-- Refuse to apply against an unexpected DB.
+DO $$
+BEGIN
+  IF current_database() != 'thinkwork' THEN
+    RAISE EXCEPTION 'wrong database: %, expected thinkwork', current_database();
+  END IF;
+END $$;
+
+-- Pre-flight: confirm we're on a DB that still has the tables.
+-- (Idempotent — if a re-run finds the tables already gone, the
+-- DROP TABLE IF EXISTS statements will no-op cleanly.)
+DO $$
+BEGIN
+  IF to_regclass('public.tenant_entity_external_refs') IS NOT NULL THEN
+    RAISE EXCEPTION 'pre-flight: public.tenant_entity_external_refs still exists — 0090 (brain schema extraction) must apply first';
+  END IF;
+END $$;
+
+-- Leaf-first DROP order: connector_executions references connectors via
+-- FK, so drop it first. CASCADE handles internal index drops + the FK.
+DROP TABLE IF EXISTS public.connector_executions CASCADE;
+DROP TABLE IF EXISTS public.connectors CASCADE;
+DROP TABLE IF EXISTS public.tenant_connector_catalog CASCADE;
+DROP TABLE IF EXISTS public.computer_delegations CASCADE;
+
+COMMIT;

package/dist/drizzle/0093_eval_runs_scheduled_job_id.sql

@@ -0,0 +1,23 @@
+-- Purpose: link scheduled evaluation runs back to the scheduled job that created them.
+-- Plan: docs/plans/2026-05-16-002-feat-evals-overhaul-redteam-library-and-substrate-fix-plan.md (U11)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0093_eval_runs_scheduled_job_id.sql
+-- creates-column: public.eval_runs.scheduled_job_id
+-- creates-constraint: public.eval_runs.eval_runs_scheduled_job_id_scheduled_jobs_id_fk
+-- creates: public.idx_eval_runs_scheduled_job_id
+
+ALTER TABLE public.eval_runs
+  ADD COLUMN IF NOT EXISTS scheduled_job_id uuid;
+
+DO $$
+BEGIN
+  ALTER TABLE public.eval_runs
+    ADD CONSTRAINT eval_runs_scheduled_job_id_scheduled_jobs_id_fk
+    FOREIGN KEY (scheduled_job_id)
+    REFERENCES public.scheduled_jobs(id)
+    ON DELETE SET NULL;
+EXCEPTION
+  WHEN duplicate_object THEN NULL;
+END $$;
+
+CREATE INDEX IF NOT EXISTS idx_eval_runs_scheduled_job_id
+  ON public.eval_runs(scheduled_job_id);

package/dist/drizzle/0094_slack_workspace_app.sql

@@ -0,0 +1,140 @@
+-- Purpose: add Slack workspace app persistence for installs, user links, and Slack thread mapping.
+-- Plan: docs/plans/2026-05-16-004-feat-thinkwork-computer-slack-workspace-app-plan.md (U1)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0094_slack_workspace_app.sql
+-- creates: public.slack_workspaces
+-- creates: public.slack_user_links
+-- creates: public.slack_threads
+-- creates: public.uq_slack_workspaces_team
+-- creates: public.uq_slack_workspaces_tenant_team
+-- creates: public.idx_slack_workspaces_tenant_status
+-- creates: public.uq_slack_user_links_team_user
+-- creates: public.idx_slack_user_links_tenant_user
+-- creates: public.idx_slack_user_links_user
+-- creates: public.uq_slack_threads_team_channel_root
+-- creates: public.idx_slack_threads_thread
+-- creates: public.idx_slack_threads_tenant_team
+-- creates-constraint: public.slack_workspaces.slack_workspaces_tenant_id_tenants_id_fk
+-- creates-constraint: public.slack_workspaces.slack_workspaces_installed_by_user_id_users_id_fk
+-- creates-constraint: public.slack_workspaces.slack_workspaces_status_allowed
+-- creates-constraint: public.slack_user_links.slack_user_links_tenant_id_tenants_id_fk
+-- creates-constraint: public.slack_user_links.slack_user_links_slack_team_id_slack_workspaces_slack_team_id_fk
+-- creates-constraint: public.slack_user_links.slack_user_links_user_id_users_id_fk
+-- creates-constraint: public.slack_user_links.slack_user_links_status_allowed
+-- creates-constraint: public.slack_threads.slack_threads_tenant_id_tenants_id_fk
+-- creates-constraint: public.slack_threads.slack_threads_slack_team_id_slack_workspaces_slack_team_id_fk
+-- creates-constraint: public.slack_threads.slack_threads_thread_id_threads_id_fk
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '5s';
+SET LOCAL statement_timeout = '120s';
+
+CREATE TABLE IF NOT EXISTS public.slack_workspaces (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  slack_team_id text NOT NULL,
+  slack_team_name text,
+  bot_user_id text NOT NULL,
+  bot_token_secret_path text NOT NULL,
+  app_id text NOT NULL,
+  installed_by_user_id uuid,
+  status text NOT NULL DEFAULT 'active',
+  installed_at timestamptz NOT NULL DEFAULT now(),
+  uninstalled_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT slack_workspaces_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT slack_workspaces_installed_by_user_id_users_id_fk
+    FOREIGN KEY (installed_by_user_id)
+    REFERENCES public.users(id)
+    ON DELETE SET NULL,
+  CONSTRAINT slack_workspaces_status_allowed
+    CHECK (status IN ('active','uninstalled','revoked'))
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_slack_workspaces_team
+  ON public.slack_workspaces (slack_team_id);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_slack_workspaces_tenant_team
+  ON public.slack_workspaces (tenant_id, slack_team_id);
+
+CREATE INDEX IF NOT EXISTS idx_slack_workspaces_tenant_status
+  ON public.slack_workspaces (tenant_id, status);
+
+CREATE TABLE IF NOT EXISTS public.slack_user_links (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  slack_team_id text NOT NULL,
+  slack_user_id text NOT NULL,
+  user_id uuid NOT NULL,
+  slack_user_name text,
+  slack_user_email text,
+  status text NOT NULL DEFAULT 'active',
+  linked_at timestamptz NOT NULL DEFAULT now(),
+  unlinked_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT slack_user_links_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT slack_user_links_slack_team_id_slack_workspaces_slack_team_id_fk
+    FOREIGN KEY (slack_team_id)
+    REFERENCES public.slack_workspaces(slack_team_id)
+    ON DELETE RESTRICT,
+  CONSTRAINT slack_user_links_user_id_users_id_fk
+    FOREIGN KEY (user_id)
+    REFERENCES public.users(id)
+    ON DELETE RESTRICT,
+  CONSTRAINT slack_user_links_status_allowed
+    CHECK (status IN ('active','unlinked','orphaned','suspended'))
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_slack_user_links_team_user
+  ON public.slack_user_links (slack_team_id, slack_user_id);
+
+CREATE INDEX IF NOT EXISTS idx_slack_user_links_tenant_user
+  ON public.slack_user_links (tenant_id, user_id);
+
+CREATE INDEX IF NOT EXISTS idx_slack_user_links_user
+  ON public.slack_user_links (user_id);
+
+CREATE TABLE IF NOT EXISTS public.slack_threads (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL,
+  slack_team_id text NOT NULL,
+  channel_id text NOT NULL,
+  root_thread_ts text,
+  thread_id uuid NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT slack_threads_tenant_id_tenants_id_fk
+    FOREIGN KEY (tenant_id)
+    REFERENCES public.tenants(id)
+    ON DELETE CASCADE,
+  CONSTRAINT slack_threads_slack_team_id_slack_workspaces_slack_team_id_fk
+    FOREIGN KEY (slack_team_id)
+    REFERENCES public.slack_workspaces(slack_team_id)
+    ON DELETE RESTRICT,
+  CONSTRAINT slack_threads_thread_id_threads_id_fk
+    FOREIGN KEY (thread_id)
+    REFERENCES public.threads(id)
+    ON DELETE CASCADE
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_slack_threads_team_channel_root
+  ON public.slack_threads (slack_team_id, channel_id, root_thread_ts)
+  NULLS NOT DISTINCT;
+
+CREATE INDEX IF NOT EXISTS idx_slack_threads_thread
+  ON public.slack_threads (thread_id);
+
+CREATE INDEX IF NOT EXISTS idx_slack_threads_tenant_team
+  ON public.slack_threads (tenant_id, slack_team_id);
+
+COMMIT;

package/dist/drizzle/0095_eval_runs_computer_id.sql

@@ -0,0 +1,22 @@
+-- Purpose: persist the running Computer selected for an eval run.
+-- Plan: docs/plans/2026-05-16-002-feat-evals-overhaul-redteam-library-and-substrate-fix-plan.md (follow-up)
+-- Apply manually: psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f packages/database-pg/drizzle/0095_eval_runs_computer_id.sql
+-- creates-column: public.eval_runs.computer_id
+-- creates-constraint: public.eval_runs.eval_runs_computer_id_computers_id_fk
+-- creates: public.idx_eval_runs_tenant_computer_created
+
+ALTER TABLE public.eval_runs
+  ADD COLUMN IF NOT EXISTS computer_id uuid;
+
+DO $$
+BEGIN
+  ALTER TABLE public.eval_runs
+    ADD CONSTRAINT eval_runs_computer_id_computers_id_fk
+    FOREIGN KEY (computer_id)
+    REFERENCES public.computers(id);
+EXCEPTION
+  WHEN duplicate_object THEN NULL;
+END $$;
+
+CREATE INDEX IF NOT EXISTS idx_eval_runs_tenant_computer_created
+  ON public.eval_runs(tenant_id, computer_id, created_at);