thinkwork-cli 0.13.0 → 0.13.1

package/dist/drizzle/0251_brain_stragglers.sql

@@ -0,0 +1,242 @@
+-- 0251_brain_stragglers.sql
+--
+-- Phase A of the brain-straggler move (THINK-290 U3). Moves the three
+-- remaining public brain-domain tables into the existing `brain.*` Postgres
+-- schema, drops the redundant prefixes from table, index, and constraint
+-- names, and creates compat views in public.* so old bundled Lambda code
+-- keeps reading during the deploy bridge window.
+--
+-- Tables moved:
+--   public.brain_dream_runs       → brain.dream_runs
+--   public.brain_dream_actions    → brain.dream_actions
+--   public.memory_retain_attempts → brain.retain_attempts
+--
+-- Unlike the kg tables (whose idx_kg_* names were already schema-shorthand),
+-- these indexes embed the old table names, so they are renamed to the new
+-- stems. FK constraint names keep their original prefixes — cosmetic cleanup
+-- deferred, same as the 0089/0090/0250 precedent.
+--
+-- Writers that cannot go through compat views (ON CONFLICT is rejected at
+-- parse time): the dream ledger (raw ON CONFLICT on dream_runs.dedupe_key
+-- and dream_actions (run_id, ordinal)) and memory-retain's
+-- onConflictDoUpdate on retain_attempts. The apply runbook pauses the
+-- brain-dream-state schedule AND the memory-retain Lambda (reserved
+-- concurrency 0) for the apply→redeploy window — see the PR body.
+--
+-- Analyst surface: these tables leave SCHEMA.md and the 0227/0230 generated
+-- grant/RLS blocks (analyst model is public-only by design, THINK-283).
+--
+-- Plan reference: docs/plans/2026-07-14-001-refactor-kg-schema-extraction-and-brain-cleanup-plan.md
+-- Pattern doc:    docs/solutions/database-issues/feature-schema-extraction-pattern.md
+--
+-- Apply manually (pause the dream schedule + memory-retain first):
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0251_brain_stragglers.sql
+-- Then verify:
+--   bash scripts/db-migrate-manual.sh packages/database-pg/drizzle/0251_brain_stragglers.sql
+--   psql -c "\dt brain.dream_runs brain.dream_actions brain.retain_attempts"
+--   psql -c "\dv public.brain_dream_* public.memory_retain_attempts"  -- 3 compat views
+--
+-- Inverse runbook (rollback): drop the 3 views, SET SCHEMA back, RENAME
+-- tables/indexes/constraints back to the prefixed names (leaf-first:
+-- dream_actions before dream_runs), then nothing else — no functions
+-- reference these tables.
+--
+-- Markers (consumed by scripts/db-migrate-manual.sh):
+--
+-- creates: brain.dream_runs
+-- creates: brain.dream_actions
+-- creates: brain.retain_attempts
+-- creates: brain.dream_runs_dedupe_key_uidx
+-- creates: brain.dream_runs_tenant_bank_idx
+-- creates: brain.dream_runs_tenant_status_idx
+-- creates: brain.dream_actions_run_ordinal_uidx
+-- creates: brain.dream_actions_run_status_idx
+-- creates: brain.retain_attempts_source_event_uidx
+-- creates: brain.retain_attempts_due_idx
+-- creates: brain.retain_attempts_tenant_status_idx
+-- creates: brain.retain_attempts_thread_idx
+-- creates: brain.retain_attempts_user_idx
+-- creates: brain.retain_attempts_space_idx
+-- creates: brain.retain_attempts_turn_idx
+-- creates-constraint: brain.dream_runs.dream_runs_status_check
+-- creates-constraint: brain.dream_actions.dream_actions_type_check
+-- creates-constraint: brain.dream_actions.dream_actions_status_check
+-- creates-constraint: brain.retain_attempts.retain_attempts_status_allowed
+-- creates-constraint: brain.retain_attempts.retain_attempts_attempt_count_nonnegative
+-- creates-constraint: brain.retain_attempts.retain_attempts_max_attempts_positive
+-- creates: public.brain_dream_runs
+-- creates: public.brain_dream_actions
+-- creates: public.memory_retain_attempts
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '300s';
+
+SELECT pg_advisory_xact_lock(hashtext('brain_stragglers_extraction'));
+
+DO $$
+BEGIN
+  IF current_database() != 'thinkwork' THEN
+    RAISE EXCEPTION 'wrong database: %, expected thinkwork', current_database();
+  END IF;
+END $$;
+
+-- Pre-flight: the brain schema itself must exist (created by 0090).
+DO $$
+BEGIN
+  IF to_regnamespace('brain') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain schema does not exist — apply 0090 first';
+  END IF;
+END $$;
+
+-- Pre-flight invariants, with a clean short-circuit when already applied so
+-- the customer runner's unattended re-sweep is a no-op.
+DO $$
+BEGIN
+  IF to_regclass('brain.dream_runs') IS NOT NULL
+     AND to_regclass('brain.dream_actions') IS NOT NULL
+     AND to_regclass('brain.retain_attempts') IS NOT NULL
+     AND to_regclass('public.brain_dream_runs') IS NOT NULL THEN
+    RETURN;  -- already applied (views present at the old names)
+  END IF;
+
+  IF to_regclass('public.brain_dream_runs') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: public.brain_dream_runs does not exist';
+  END IF;
+  IF to_regclass('brain.dream_runs') IS NOT NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain.dream_runs already exists — refusing to re-apply';
+  END IF;
+  IF to_regclass('public.brain_dream_actions') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: public.brain_dream_actions does not exist';
+  END IF;
+  IF to_regclass('brain.dream_actions') IS NOT NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain.dream_actions already exists — refusing to re-apply';
+  END IF;
+  IF to_regclass('public.memory_retain_attempts') IS NULL THEN
+    RAISE EXCEPTION 'pre-flight: public.memory_retain_attempts does not exist';
+  END IF;
+  IF to_regclass('brain.retain_attempts') IS NOT NULL THEN
+    RAISE EXCEPTION 'pre-flight: brain.retain_attempts already exists — refusing to re-apply';
+  END IF;
+END $$;
+
+-- ── Move and rename tables (leaf-first: dream_actions FKs dream_runs) ────
+
+DO $$
+BEGIN
+  IF to_regclass('public.brain_dream_actions') IS NOT NULL
+     AND to_regclass('brain.dream_actions') IS NULL THEN
+    ALTER TABLE public.brain_dream_actions SET SCHEMA brain;
+    ALTER TABLE brain.brain_dream_actions RENAME TO dream_actions;
+  END IF;
+
+  IF to_regclass('public.brain_dream_runs') IS NOT NULL
+     AND to_regclass('brain.dream_runs') IS NULL THEN
+    ALTER TABLE public.brain_dream_runs SET SCHEMA brain;
+    ALTER TABLE brain.brain_dream_runs RENAME TO dream_runs;
+  END IF;
+
+  IF to_regclass('public.memory_retain_attempts') IS NOT NULL
+     AND to_regclass('brain.retain_attempts') IS NULL THEN
+    ALTER TABLE public.memory_retain_attempts SET SCHEMA brain;
+    ALTER TABLE brain.memory_retain_attempts RENAME TO retain_attempts;
+  END IF;
+END $$;
+
+-- ── Rename indexes to the new stems ─────────────────────────────────────
+
+DO $$
+DECLARE
+  pair record;
+BEGIN
+  FOR pair IN
+    SELECT * FROM (VALUES
+      ('brain_dream_runs_dedupe_key_uidx',            'dream_runs_dedupe_key_uidx'),
+      ('brain_dream_runs_tenant_bank_idx',            'dream_runs_tenant_bank_idx'),
+      ('brain_dream_runs_tenant_status_idx',          'dream_runs_tenant_status_idx'),
+      ('brain_dream_actions_run_ordinal_uidx',        'dream_actions_run_ordinal_uidx'),
+      ('brain_dream_actions_run_status_idx',          'dream_actions_run_status_idx'),
+      ('memory_retain_attempts_source_event_uidx',    'retain_attempts_source_event_uidx'),
+      ('memory_retain_attempts_due_idx',              'retain_attempts_due_idx'),
+      ('memory_retain_attempts_tenant_status_idx',    'retain_attempts_tenant_status_idx'),
+      ('memory_retain_attempts_thread_idx',           'retain_attempts_thread_idx'),
+      ('memory_retain_attempts_user_idx',             'retain_attempts_user_idx'),
+      ('memory_retain_attempts_space_idx',            'retain_attempts_space_idx'),
+      ('memory_retain_attempts_turn_idx',             'retain_attempts_turn_idx')
+    ) AS v(old_name, new_name)
+  LOOP
+    IF EXISTS (
+      SELECT 1 FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
+      WHERE n.nspname = 'brain' AND c.relname = pair.old_name
+    ) THEN
+      EXECUTE format('ALTER INDEX brain.%I RENAME TO %I',
+                     pair.old_name, pair.new_name);
+    END IF;
+  END LOOP;
+END $$;
+
+-- ── Rename CHECK constraints to the new stems ───────────────────────────
+
+DO $$
+DECLARE
+  pair record;
+BEGIN
+  FOR pair IN
+    SELECT * FROM (VALUES
+      ('brain.dream_runs',      'brain_dream_runs_status_check',                     'dream_runs_status_check'),
+      ('brain.dream_actions',   'brain_dream_actions_type_check',                    'dream_actions_type_check'),
+      ('brain.dream_actions',   'brain_dream_actions_status_check',                  'dream_actions_status_check'),
+      ('brain.retain_attempts', 'memory_retain_attempts_status_allowed',             'retain_attempts_status_allowed'),
+      ('brain.retain_attempts', 'memory_retain_attempts_attempt_count_nonnegative',  'retain_attempts_attempt_count_nonnegative'),
+      ('brain.retain_attempts', 'memory_retain_attempts_max_attempts_positive',      'retain_attempts_max_attempts_positive')
+    ) AS v(tbl, old_name, new_name)
+  LOOP
+    IF EXISTS (
+      SELECT 1 FROM pg_constraint
+      WHERE conrelid = to_regclass(pair.tbl) AND conname = pair.old_name
+    ) THEN
+      EXECUTE format('ALTER TABLE %s RENAME CONSTRAINT %I TO %I',
+                     pair.tbl, pair.old_name, pair.new_name);
+    END IF;
+  END LOOP;
+END $$;
+
+-- ── Compat views in public.* ────────────────────────────────────────────
+-- Column-enumerated per R6. No generated columns on any of the three
+-- tables. The dream ledger's raw ON CONFLICT and memory-retain's
+-- onConflictDoUpdate cannot pass through views — both writers are paused
+-- for the window per the runbook. The U4 PR drops these.
+
+DO $$
+BEGIN
+  IF to_regclass('public.brain_dream_runs') IS NULL THEN
+    CREATE VIEW public.brain_dream_runs AS
+      SELECT id, tenant_id, bank_id, dedupe_key, status, planned_counts,
+             applied_counts, error_message, started_at, finished_at,
+             created_at, updated_at
+      FROM brain.dream_runs;
+  END IF;
+
+  IF to_regclass('public.brain_dream_actions') IS NULL THEN
+    CREATE VIEW public.brain_dream_actions AS
+      SELECT id, run_id, ordinal, action_type, status, target, reason,
+             applied_at, error_message, created_at
+      FROM brain.dream_actions;
+  END IF;
+
+  IF to_regclass('public.memory_retain_attempts') IS NULL THEN
+    CREATE VIEW public.memory_retain_attempts AS
+      SELECT id, tenant_id, user_id, space_id, thread_id, thread_turn_id,
+             source_event_key, source_event_type, provider, status,
+             attempt_count, max_attempts, next_retry_at, locked_at,
+             locked_by, started_at, finished_at, backend_latency_ms,
+             provider_document_id, provider_result, error_class,
+             error_message, metadata, created_at, updated_at
+      FROM brain.retain_attempts;
+  END IF;
+END $$;
+
+COMMIT;

package/dist/drizzle/0252_drop_kg_and_straggler_compat_views.sql

@@ -0,0 +1,100 @@
+-- 0252_drop_kg_and_straggler_compat_views.sql
+--
+-- Phase C of the THINK-290 arc. Drops the 8 compatibility views in
+-- `public.*` that 0250 (kg extraction) and 0251 (brain stragglers) created
+-- as a deploy bridge. The views protected old bundled Lambda READ paths
+-- during the window between psql apply and Lambda redeploy; once every
+-- deployed stage has recorded 0250 + 0251 as applied AND redeployed its
+-- Lambdas, no consumer reads through these names and the views come down.
+--
+-- Views dropped:
+--   public.knowledge_graph_ingest_runs, public.knowledge_graph_entities,
+--   public.knowledge_graph_relationships, public.knowledge_graph_evidence,
+--   public.knowledge_graph_observation_cursors,
+--   public.brain_dream_runs, public.brain_dream_actions,
+--   public.memory_retain_attempts
+--
+-- Merge gate (recorded in the PR body): per-stage scoped
+-- `db:migrate-manual` output showing 0250/0251 applied on every deployed
+-- stage, plus a pg_stat_statements (or short-window statement-log) check
+-- that no statements reference the old names. Views do not appear in
+-- pg_stat_user_tables, so table-stat checks are not usable here.
+--
+-- Plan reference: docs/plans/2026-07-14-001-refactor-kg-schema-extraction-and-brain-cleanup-plan.md
+-- Pattern doc:    docs/solutions/database-issues/feature-schema-extraction-pattern.md
+-- kg PR (merged): #3757
+-- Stragglers PR:  #3760
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0252_drop_kg_and_straggler_compat_views.sql
+-- Then verify:
+--   bash scripts/db-migrate-manual.sh packages/database-pg/drizzle/0252_drop_kg_and_straggler_compat_views.sql
+--   psql -c "\dv public.knowledge_graph_*"   -- 0 views expected
+--   psql -c "\dv public.brain_dream_*"       -- 0 views expected
+--   psql -c "\dv public.memory_retain_*"     -- 0 views expected
+--   psql -c "\dt kg.*"                       -- 5 tables still present
+--
+-- Inverse runbook (rollback): re-create each view — mirror of the CREATE
+-- VIEW statements in 0250/0251 (column-enumerated; see those files).
+--
+-- Markers (consumed by scripts/db-migrate-manual.sh):
+--
+-- drops: public.knowledge_graph_ingest_runs
+-- drops: public.knowledge_graph_entities
+-- drops: public.knowledge_graph_relationships
+-- drops: public.knowledge_graph_evidence
+-- drops: public.knowledge_graph_observation_cursors
+-- drops: public.brain_dream_runs
+-- drops: public.brain_dream_actions
+-- drops: public.memory_retain_attempts
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '300s';
+
+SELECT pg_advisory_xact_lock(hashtext('drop_kg_and_straggler_compat_views'));
+
+DO $$
+BEGIN
+  IF current_database() != 'thinkwork' THEN
+    RAISE EXCEPTION 'wrong database: %, expected thinkwork', current_database();
+  END IF;
+END $$;
+
+-- Pre-flight: refuse to run if any old name still resolves to a TABLE
+-- (i.e., 0250/0251 were never applied here) — dropping would then be data
+-- loss, not view cleanup. A missing view (already dropped) is fine.
+DO $$
+DECLARE
+  name text;
+BEGIN
+  FOREACH name IN ARRAY ARRAY[
+    'knowledge_graph_ingest_runs', 'knowledge_graph_entities',
+    'knowledge_graph_relationships', 'knowledge_graph_evidence',
+    'knowledge_graph_observation_cursors', 'brain_dream_runs',
+    'brain_dream_actions', 'memory_retain_attempts'
+  ] LOOP
+    IF EXISTS (
+      SELECT 1 FROM pg_class c
+      JOIN pg_namespace n ON n.oid = c.relnamespace
+      WHERE n.nspname = 'public' AND c.relname = name AND c.relkind = 'r'
+    ) THEN
+      RAISE EXCEPTION 'pre-flight: public.% is still a TABLE — apply 0250/0251 first', name;
+    END IF;
+  END LOOP;
+END $$;
+
+DROP VIEW IF EXISTS
+  public.knowledge_graph_ingest_runs,
+  public.knowledge_graph_entities,
+  public.knowledge_graph_relationships,
+  public.knowledge_graph_evidence,
+  public.knowledge_graph_observation_cursors,
+  public.brain_dream_runs,
+  public.brain_dream_actions,
+  public.memory_retain_attempts;
+
+COMMIT;

package/dist/drizzle/0253_drop_brain_substrate.sql

@@ -0,0 +1,91 @@
+-- 0253_drop_brain_substrate.sql
+--
+-- THINK-290 U5 PR B. Drops the retired graph-substrate residue:
+-- `brain.substrate_states`, `brain.substrate_migrations`,
+-- `brain.substrate_events`, and the dead `substrate_id` / `migration_id`
+-- columns on `brain.artifact_manifests` (verified all-NULL across every
+-- row on dev; no readers or writers remain — the Drizzle defs, relations,
+-- enum constants, and tests were removed in U5 PR A, #3761, which is
+-- deployed everywhere this migration may run).
+--
+-- ARCHIVE FIRST (procedural, per-stage, recorded in the PR body before
+-- that stage applies this file):
+--   pg_dump --no-owner --no-privileges --table='brain.substrate_*' \
+--     -f substrate-archive-<stage>-<date>.sql
+--   aws s3 cp substrate-archive-<stage>-<date>.sql \
+--     s3://thinkwork-<stage>-backups/think-290/
+--
+-- Idempotent: every statement is guarded, so re-apply (including the
+-- unattended runner sweep) is a clean no-op. Column drops cascade their
+-- FK constraints (artifact_manifests_substrate_id_fk / _migration_id_fk)
+-- and column-local indexes (brain_artifact_manifests_substrate_kind_idx /
+-- brain_artifact_manifests_migration_idx) automatically.
+--
+-- Plan reference: docs/plans/2026-07-14-001-refactor-kg-schema-extraction-and-brain-cleanup-plan.md (U5)
+-- PR A (code removal, merged): #3761
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0253_drop_brain_substrate.sql
+-- Then verify:
+--   bash scripts/db-migrate-manual.sh packages/database-pg/drizzle/0253_drop_brain_substrate.sql
+--
+-- Inverse runbook (rollback): restore from the stage's archival dump
+-- (schema + data), then re-add the two artifact_manifests columns and
+-- FKs from the dump's DDL.
+--
+-- Markers (consumed by scripts/db-migrate-manual.sh):
+--
+-- drops: brain.substrate_events
+-- drops: brain.substrate_migrations
+-- drops: brain.substrate_states
+-- drops-column: brain.artifact_manifests.substrate_id
+-- drops-column: brain.artifact_manifests.migration_id
+-- drops-constraint: brain.artifact_manifests.artifact_manifests_substrate_id_fk
+-- drops-constraint: brain.artifact_manifests.artifact_manifests_migration_id_fk
+
+\set ON_ERROR_STOP on
+
+BEGIN;
+
+SET LOCAL lock_timeout = '30s';
+SET LOCAL statement_timeout = '300s';
+
+SELECT pg_advisory_xact_lock(hashtext('drop_brain_substrate'));
+
+DO $$
+BEGIN
+  IF current_database() != 'thinkwork' THEN
+    RAISE EXCEPTION 'wrong database: %, expected thinkwork', current_database();
+  END IF;
+END $$;
+
+-- Visibility: record what is being dropped in the apply log. Archival is
+-- enforced procedurally (PR-body checklist per stage), not here — a header
+-- note cannot constrain the unattended runner, so the two-PR split plus
+-- idempotent guards carry the safety instead.
+DO $$
+DECLARE
+  t text;
+  n bigint;
+BEGIN
+  FOREACH t IN ARRAY ARRAY['substrate_states', 'substrate_migrations', 'substrate_events'] LOOP
+    IF to_regclass('brain.' || t) IS NOT NULL THEN
+      EXECUTE format('SELECT count(*) FROM brain.%I', t) INTO n;
+      RAISE NOTICE 'dropping brain.% (% rows)', t, n;
+    ELSE
+      RAISE NOTICE 'brain.% already absent — skipping', t;
+    END IF;
+  END LOOP;
+END $$;
+
+-- FK dependency order: artifact_manifests references states + migrations
+-- (columns must go first, taking their FKs and indexes with them); events
+-- references states + migrations; migrations references states.
+ALTER TABLE brain.artifact_manifests DROP COLUMN IF EXISTS substrate_id;
+ALTER TABLE brain.artifact_manifests DROP COLUMN IF EXISTS migration_id;
+
+DROP TABLE IF EXISTS brain.substrate_events;
+DROP TABLE IF EXISTS brain.substrate_migrations;
+DROP TABLE IF EXISTS brain.substrate_states;
+
+COMMIT;

package/dist/drizzle/0254_capability_autonomous_admission.sql

@@ -0,0 +1,29 @@
+-- Autonomous capability self-extension — admission provenance.
+--
+-- Adds two columns to capability_definition_versions so an agent-admitted
+-- (autonomous) version is distinguishable from an operator-admitted one and
+-- stays fully attributable:
+--
+--   * admission_mode      — 'operator' (human admitted, the default for every
+--     existing row) | 'autonomous' (an agent self-admitted an auto-tier
+--     public/read-only/no-credential capability with no human).
+--   * admitted_by_agent_id — the composing agent for autonomous admissions;
+--     null for operator admissions.
+--
+-- Hand-rolled (additive, nullable/defaulted — safe on live rows). Applied to
+-- dev via psql; the deploy migration-drift gate checks the markers below.
+--
+-- creates-column: public.capability_definition_versions.admission_mode
+-- creates-column: public.capability_definition_versions.admitted_by_agent_id
+
+ALTER TABLE public.capability_definition_versions
+  ADD COLUMN IF NOT EXISTS admission_mode text NOT NULL DEFAULT 'operator';
+
+ALTER TABLE public.capability_definition_versions
+  ADD COLUMN IF NOT EXISTS admitted_by_agent_id uuid;
+
+ALTER TABLE public.capability_definition_versions
+  DROP CONSTRAINT IF EXISTS capability_definition_versions_admission_mode_check;
+ALTER TABLE public.capability_definition_versions
+  ADD CONSTRAINT capability_definition_versions_admission_mode_check
+  CHECK (admission_mode IN ('operator', 'autonomous'));

package/dist/drizzle/0255_capability_autonomous_approval_mode.sql

@@ -0,0 +1,16 @@
+-- Governed autonomy U3 follow-up: the autonomous self-promotion path stamps
+-- approval_mode='autonomous', but 0247's CHECK only allowed
+-- ('operator','repair') — every live self_promote_routine failed with a
+-- check-constraint violation (first observed dev 2026-07-15, proposal
+-- 88225e66). Recreate the CHECK with the autonomous mode included.
+--
+-- Hand-rolled (constraint recreation): apply via
+--   psql "$DATABASE_URL" -f drizzle/0255_capability_autonomous_approval_mode.sql
+-- creates-constraint: public.capability_routine_proposals.capability_routine_proposals_approval_mode_check
+
+ALTER TABLE public.capability_routine_proposals
+  DROP CONSTRAINT IF EXISTS capability_routine_proposals_approval_mode_check;
+
+ALTER TABLE public.capability_routine_proposals
+  ADD CONSTRAINT capability_routine_proposals_approval_mode_check
+  CHECK (approval_mode IS NULL OR approval_mode IN ('operator', 'repair', 'autonomous'));

package/dist/drizzle/0256_agent_profile_manifest_authority.sql

@@ -0,0 +1,18 @@
+-- 0256_agent_profile_manifest_authority.sql
+--
+-- Subagent-folders plan 2026-07-15-001 U10 (R17 flip half): per-agent
+-- authority flip mirroring capability_folder_dispatch. When true, the
+-- compiled capabilities manifest (agent entries + synced agents/<slug>/
+-- folders) is the sub-agent profile truth: the dispatch payload carries
+-- only space-local profiles in full and Pi assembles central profiles
+-- from the manifest. Flipped per agent after the dual-read soak's
+-- two-sided gate passes.
+--
+-- Hand-rolled (not in meta/_journal.json): drizzle-kit generate is
+-- blocked on an unrelated interactive table-conflict prompt. Apply with:
+--   psql "$DATABASE_URL" -f packages/database-pg/drizzle/0256_agent_profile_manifest_authority.sql
+--
+-- creates-column: public.agents.agent_profile_manifest_authority
+
+ALTER TABLE "agents"
+  ADD COLUMN IF NOT EXISTS "agent_profile_manifest_authority" boolean NOT NULL DEFAULT false;

package/dist/drizzle/0257_capability_approvals.sql

@@ -0,0 +1,53 @@
+-- THINK-302 U1: capability approval registry — scope-qualified bindings.
+--
+-- A row authorizes SPECIFIC definition bytes (marker sha + whole-folder
+-- content-sha attestation) at ONE scope_ref (agent:<id>, agent:<id>/sub:<slug>,
+-- space:<id>, or user:<id>). Identical bytes at any other scope are
+-- unauthorized until separately bound (AE10 — copy-to-root escalation stays
+-- inert). Append-only history: re-approval inserts a new row; compile trusts
+-- the latest binding per (tenant, scope_ref, class, slug).
+--
+-- Ships inert: no production code path consults the table until compile v6
+-- (THINK-302 U3) wires it behind the per-tenant registry-trust flag.
+--
+-- Hand-rolled (CHECK constraint); not in meta/_journal.json. Apply with:
+--   psql "$DATABASE_URL" -f drizzle/0257_capability_approvals.sql
+-- creates: public.capability_approvals
+
+BEGIN;
+
+CREATE TABLE IF NOT EXISTS public.capability_approvals (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  -- Binding location. Part of the key: approval at one scope authorizes
+  -- nothing anywhere else.
+  scope_ref text NOT NULL,
+  -- Capability class segment: 'skill' | 'tool' | 'connection' | 'mcp'.
+  class text NOT NULL,
+  slug text NOT NULL,
+  -- sha256 hex of the marker file bytes (frontmatter + body).
+  marker_sha text NOT NULL,
+  -- Deterministic whole-folder manifest hash: sha256 over the sorted
+  -- (folder-relative path, per-file content sha256) pairs.
+  folder_attestation_sha text NOT NULL,
+  -- Zero-read fast-path snapshot: the script-trust-style digest over sorted
+  -- (path, S3 ETag) pairs at binding time. Nullable — content shas are the
+  -- approval authority; this only lets compile skip re-reading bytes.
+  files_etag_signature text,
+  definition_id uuid REFERENCES public.capability_definitions(id) ON DELETE SET NULL,
+  -- CapabilitySignedBy provenance: operator:<id> | autonomous:<agentId> | backfill | ...
+  signed_by text NOT NULL,
+  signed_at timestamptz NOT NULL DEFAULT now(),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT capability_approvals_scope_ref_check
+    CHECK (scope_ref ~ '^(agent:[^/]+(/sub:[^/]+)?|space:[^/]+|user:[^/]+)$'),
+  CONSTRAINT capability_approvals_sha_check
+    CHECK (marker_sha ~ '^[0-9a-f]{64}$' AND folder_attestation_sha ~ '^[0-9a-f]{64}$')
+);
+
+CREATE INDEX IF NOT EXISTS idx_capability_approvals_lookup
+  ON public.capability_approvals (tenant_id, scope_ref, class, slug);
+CREATE INDEX IF NOT EXISTS idx_capability_approvals_definition
+  ON public.capability_approvals (definition_id);
+
+COMMIT;

package/dist/drizzle/0258_pending_tool_approvals.sql

@@ -0,0 +1,84 @@
+-- THINK-302 U11: pending_tool_approvals — parked-turn HITL ledger.
+--
+-- A distinct pending kind from pending_user_questions (KTD-5): a gated tool
+-- call parks the turn and this row is the recoverable ledger. Two partial
+-- unique indexes drizzle-kit cannot express live here:
+--   * one `pending` approval per thread (the one-slot invariant, R32) — so
+--     an approval can COEXIST with a pending question (separate tables/slots),
+--     and the intake endpoint returns 409 on a second concurrent park.
+--   * resume-replay uniqueness (thread_turn_id, tool_call_id, manifest
+--     fingerprint) — a stale approval cannot authorize a drifted definition
+--     and a retried intake is idempotent.
+--
+-- Ships INERT: no writer touches this table until U11b; U12 consumes it.
+--
+-- Hand-rolled (partial indices, CHECK constraints); not in meta/_journal.json.
+-- Apply manually:
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f drizzle/0258_pending_tool_approvals.sql
+-- creates: public.pending_tool_approvals
+-- creates: public.pending_tool_approvals_one_pending_per_thread
+-- creates: public.pending_tool_approvals_resume_identity
+-- creates: public.idx_pending_tool_approvals_tenant
+-- creates: public.idx_pending_tool_approvals_thread_status
+-- creates: public.idx_pending_tool_approvals_message
+-- creates: public.idx_pending_tool_approvals_purge
+
+\set ON_ERROR_STOP on
+
+SET lock_timeout = '5s';
+SET statement_timeout = '15min';
+
+SELECT pg_advisory_lock(hashtext('migration:0258_pending_tool_approvals'));
+
+CREATE TABLE IF NOT EXISTS public.pending_tool_approvals (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id uuid NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  thread_id uuid NOT NULL REFERENCES public.threads(id) ON DELETE CASCADE,
+  thread_turn_id uuid NOT NULL REFERENCES public.thread_turns(id),
+  message_id uuid NOT NULL REFERENCES public.messages(id) ON DELETE CASCADE,
+  manifest_fingerprint text NOT NULL,
+  tool_call_id text NOT NULL,
+  class text NOT NULL,
+  slug text NOT NULL,
+  marker_sha text NOT NULL,
+  status text NOT NULL DEFAULT 'pending',
+  requesting_user_id uuid REFERENCES public.users(id) ON DELETE SET NULL,
+  encrypted_payload text,
+  display_summary jsonb NOT NULL,
+  approved_by uuid REFERENCES public.users(id) ON DELETE SET NULL,
+  answered_via text,
+  answered_at timestamptz,
+  payload_purged_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT pending_tool_approvals_status_allowed
+    CHECK (status IN ('pending','approved','denied','cancelled')),
+  CONSTRAINT pending_tool_approvals_answered_via_allowed
+    CHECK (answered_via IS NULL OR answered_via IN ('card','slack','governance','archive','reaper')),
+  CONSTRAINT pending_tool_approvals_terminal_consistency
+    CHECK ((status = 'pending') = (answered_at IS NULL))
+);
+
+-- One pending approval per thread (the one-slot invariant). Partial so
+-- terminal rows never block a new park, and so it is INDEPENDENT of the
+-- pending_user_questions slot (an approval + a question can both be pending).
+CREATE UNIQUE INDEX IF NOT EXISTS pending_tool_approvals_one_pending_per_thread
+  ON public.pending_tool_approvals (thread_id)
+  WHERE status = 'pending';
+
+-- Resume-replay identity: a park is unique per (turn, tool call, pinned
+-- manifest) so a retried intake is idempotent and a stale approval cannot
+-- authorize a drifted definition.
+CREATE UNIQUE INDEX IF NOT EXISTS pending_tool_approvals_resume_identity
+  ON public.pending_tool_approvals (thread_turn_id, tool_call_id, manifest_fingerprint);
+
+CREATE INDEX IF NOT EXISTS idx_pending_tool_approvals_tenant
+  ON public.pending_tool_approvals (tenant_id);
+CREATE INDEX IF NOT EXISTS idx_pending_tool_approvals_thread_status
+  ON public.pending_tool_approvals (thread_id, status);
+CREATE INDEX IF NOT EXISTS idx_pending_tool_approvals_message
+  ON public.pending_tool_approvals (message_id);
+-- Reaper scan: terminal rows whose payload is not yet purged, by age.
+CREATE INDEX IF NOT EXISTS idx_pending_tool_approvals_purge
+  ON public.pending_tool_approvals (status, payload_purged_at);
+
+SELECT pg_advisory_unlock(hashtext('migration:0258_pending_tool_approvals'));

package/dist/drizzle/0259_tenant_capability_registry_trust.sql

@@ -0,0 +1,19 @@
+-- THINK-302 U3b: per-tenant capability registry-trust gate (KTD-8).
+--
+-- Off for every tenant at migration time; flipped on per tenant
+-- (dev → TEI → McPherson) as the capability approval registry replaces
+-- per-folder sidecar signatures. Read by the workspace renderer
+-- (compose-tuple) to decide registry-trust vs legacy sidecar admission.
+--
+-- Additive, idempotent column add. Hand-rolled only so it carries a
+-- drift-gate marker alongside the sibling hand-rolled capability migrations;
+-- db:push would also add it from the ORM definition.
+--
+-- Apply manually:
+--   psql "$DATABASE_URL" -v ON_ERROR_STOP=1 -f drizzle/0259_tenant_capability_registry_trust.sql
+-- creates-column: public.tenants.capability_registry_trust
+
+\set ON_ERROR_STOP on
+
+ALTER TABLE public.tenants
+  ADD COLUMN IF NOT EXISTS capability_registry_trust boolean NOT NULL DEFAULT false;