whipped 0.0.1 → 0.1.1

package/dist/migrations/001_initial.sql

@@ -0,0 +1,101 @@
+-- =====================================================================
+-- 001 initial — core state (workspaces, workflows, configs)
+--
+-- Replaces:
+--   ~/.whipped/config.json
+--   ~/.whipped/projects-layout.json
+--   ~/.whipped/workspaces/index.json
+--   ~/.whipped/workspaces/<id>/project-config.json
+--
+-- Board state (board.json + meta.json) moves in 002.
+-- Memory subsystem (banks, memories, pending) is a later migration.
+-- =====================================================================
+
+-- =====================================================================
+-- WORKSPACES
+-- =====================================================================
+-- ID matches existing format: randomBytes(4).toString("hex") → 8 hex chars.
+-- settings_json holds the rest of runtimeProjectConfigSchema (autonomousModeEnabled,
+-- autoPR, autoCommit, defaultAgent, gitInstructions, systemPrompt, previewUrl, etc.).
+CREATE TABLE workspaces (
+  id              TEXT PRIMARY KEY,
+  repo_path       TEXT NOT NULL UNIQUE,
+  name            TEXT NOT NULL,
+  git_remote_url  TEXT,
+  settings_json   TEXT NOT NULL DEFAULT '{}',
+  archived_at     INTEGER,
+  created_at      INTEGER NOT NULL,
+  updated_at      INTEGER NOT NULL
+);
+
+-- =====================================================================
+-- WORKSPACE INTEGRATIONS (github, jira, slack)
+-- =====================================================================
+-- config_json shape per type matches existing zod schemas
+-- (runtimeGithubConfigSchema, runtimeJiraConfigSchema, slack pieces).
+-- Tokens currently live here inline; future migration may move them to
+-- workspace_secrets with encryption.
+CREATE TABLE workspace_integrations (
+  workspace_id  TEXT NOT NULL,
+  type          TEXT NOT NULL CHECK (type IN ('github', 'jira', 'slack')),
+  enabled       INTEGER NOT NULL DEFAULT 0,
+  config_json   TEXT NOT NULL DEFAULT '{}',
+  updated_at    INTEGER NOT NULL,
+  PRIMARY KEY (workspace_id, type),
+  FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE
+);
+
+-- =====================================================================
+-- WORKSPACE SECRETS (matches existing runtimeProjectSecretSchema)
+-- =====================================================================
+CREATE TABLE workspace_secrets (
+  workspace_id  TEXT NOT NULL,
+  key           TEXT NOT NULL,
+  value         TEXT NOT NULL,
+  PRIMARY KEY (workspace_id, key),
+  FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE
+);
+
+-- =====================================================================
+-- WORKFLOWS (per-workspace, multiple named; for_story distinguishes
+-- task-mode workflows from story-mode workflows)
+-- =====================================================================
+CREATE TABLE workflows (
+  id            TEXT PRIMARY KEY,
+  workspace_id  TEXT NOT NULL,
+  name          TEXT NOT NULL,
+  is_default    INTEGER NOT NULL DEFAULT 0,
+  for_story     INTEGER NOT NULL DEFAULT 0,
+  slots_json    TEXT NOT NULL,
+  created_at    INTEGER NOT NULL,
+  updated_at    INTEGER NOT NULL,
+  UNIQUE (workspace_id, name),
+  FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE
+);
+
+CREATE INDEX idx_workflows_workspace_default
+  ON workflows(workspace_id, is_default, for_story);
+
+-- =====================================================================
+-- GLOBAL CONFIG (singleton; parsed via runtimeGlobalConfigSchema)
+-- =====================================================================
+CREATE TABLE global_config (
+  id          INTEGER PRIMARY KEY CHECK (id = 1),
+  config_json TEXT NOT NULL DEFAULT '{}',
+  updated_at  INTEGER NOT NULL
+);
+
+INSERT INTO global_config (id, config_json, updated_at)
+VALUES (1, '{}', strftime('%s', 'now') * 1000);
+
+-- =====================================================================
+-- PROJECTS LAYOUT (singleton; sidebar folder/order; parsed via projectsLayoutSchema)
+-- =====================================================================
+CREATE TABLE projects_layout (
+  id          INTEGER PRIMARY KEY CHECK (id = 1),
+  layout_json TEXT NOT NULL DEFAULT '{"version":1,"topLevel":[],"folders":{}}',
+  updated_at  INTEGER NOT NULL
+);
+
+INSERT INTO projects_layout (id, layout_json, updated_at)
+VALUES (1, '{"version":1,"topLevel":[],"folders":{}}', strftime('%s', 'now') * 1000);

package/dist/migrations/002_board_state.sql

@@ -0,0 +1,134 @@
+-- =====================================================================
+-- 002 board state — cards, dependencies, activity, reviews, sessions
+--
+-- Replaces:
+--   ~/.whipped/workspaces/<id>/board.json
+--   ~/.whipped/workspaces/<id>/meta.json
+--
+-- Terminal buffers (.ansi files) and attachments stay as files.
+-- =====================================================================
+
+-- =====================================================================
+-- Add board_revision to workspaces (was meta.json's `revision` field for
+-- optimistic concurrency on full-board saves).
+-- =====================================================================
+ALTER TABLE workspaces ADD COLUMN board_revision INTEGER NOT NULL DEFAULT 0;
+
+-- =====================================================================
+-- CARDS (matches runtimeBoardCardSchema)
+-- =====================================================================
+-- column_position is an integer; reorder by renumbering within (workspace_id, column_id).
+-- Small N per column makes renumbering cheap; sparse-int / lexorank is overkill.
+--
+-- JSON columns are used for nested shapes we never query independently:
+--   description_attachments_json, pr_json, github_comment_ids_json.
+-- Activity log, review comments, terminal sessions are normalized below.
+CREATE TABLE cards (
+  id                              TEXT PRIMARY KEY,
+  workspace_id                    TEXT NOT NULL,
+  description                     TEXT NOT NULL,
+  description_attachments_json    TEXT NOT NULL DEFAULT '[]',
+  column_id                       TEXT NOT NULL CHECK (column_id IN (
+                                    'todo','in_progress','reopened',
+                                    'ready_for_review','blocked','done'
+                                  )),
+  column_position                 INTEGER NOT NULL,
+  type                            TEXT NOT NULL DEFAULT 'task' CHECK (type IN ('task','story','subtask')),
+  ready_for_dev                   INTEGER NOT NULL DEFAULT 0,
+  agent_id                        TEXT CHECK (agent_id IN ('claude','codex','opencode','cursor')),
+  priority                        TEXT CHECK (priority IN ('urgent','high','medium','low')),
+  auto_fix_attempts               INTEGER NOT NULL DEFAULT 0,
+  base_ref                        TEXT NOT NULL,
+  workflow_id                     TEXT,
+  github_issue_url                TEXT,
+  pr_json                         TEXT,
+  jira_key                        TEXT,
+  jira_url                        TEXT,
+  github_comment_ids_json         TEXT NOT NULL DEFAULT '[]',
+  worktree_path                   TEXT,
+  branch_name                     TEXT,
+  shared_worktree_id              TEXT,
+  slack_message_ts                TEXT,
+  slack_channel_id                TEXT,
+  created_at                      INTEGER NOT NULL,
+  updated_at                      INTEGER NOT NULL,
+  FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE,
+  FOREIGN KEY (workflow_id)  REFERENCES workflows(id)  ON DELETE SET NULL
+);
+
+CREATE INDEX idx_cards_workspace_column
+  ON cards(workspace_id, column_id, column_position);
+CREATE INDEX idx_cards_workflow ON cards(workflow_id);
+
+-- =====================================================================
+-- CARD DEPENDENCIES (was cards.dependsOn array)
+-- =====================================================================
+CREATE TABLE card_dependencies (
+  card_id         TEXT NOT NULL,
+  depends_on_id   TEXT NOT NULL,
+  PRIMARY KEY (card_id, depends_on_id),
+  FOREIGN KEY (card_id)       REFERENCES cards(id) ON DELETE CASCADE,
+  FOREIGN KEY (depends_on_id) REFERENCES cards(id) ON DELETE CASCADE
+);
+
+CREATE INDEX idx_card_deps_dep ON card_dependencies(depends_on_id);
+
+-- =====================================================================
+-- ACTIVITY LOG (was cards.activityLog array, runtimeActivityEntrySchema)
+-- =====================================================================
+CREATE TABLE activity_log (
+  id            INTEGER PRIMARY KEY AUTOINCREMENT,
+  card_id       TEXT NOT NULL,
+  timestamp     INTEGER NOT NULL,
+  message       TEXT NOT NULL,
+  FOREIGN KEY (card_id) REFERENCES cards(id) ON DELETE CASCADE
+);
+
+CREATE INDEX idx_activity_card_time ON activity_log(card_id, timestamp);
+
+-- =====================================================================
+-- REVIEW COMMENTS (was cards.reviewComments, runtimeReviewCommentSchema)
+-- Existing schema has no comment id; uses createdAt for lookup
+-- (see linkCommentToSession in workspace-state.ts). Composite PK
+-- (card_id, created_at) preserves that.
+-- issues / attachments / metadata are JSON because they're small arrays/objects
+-- that aren't queried independently.
+-- =====================================================================
+CREATE TABLE review_comments (
+  card_id           TEXT NOT NULL,
+  created_at        INTEGER NOT NULL,
+  type              TEXT NOT NULL,
+  actor_type        TEXT NOT NULL CHECK (actor_type IN ('ai', 'human', 'external')),
+  actor_id          TEXT NOT NULL,
+  actor_source      TEXT,
+  status            TEXT CHECK (status IN ('pass', 'fail', 'warning', 'skipped')),
+  stream_id         TEXT,
+  summary           TEXT NOT NULL,
+  issues_json       TEXT NOT NULL DEFAULT '[]',
+  attachments_json  TEXT NOT NULL DEFAULT '[]',
+  metadata_json     TEXT NOT NULL DEFAULT '{}',
+  PRIMARY KEY (card_id, created_at),
+  FOREIGN KEY (card_id) REFERENCES cards(id) ON DELETE CASCADE
+);
+
+CREATE INDEX idx_review_comments_stream
+  ON review_comments(stream_id)
+  WHERE stream_id IS NOT NULL;
+
+-- =====================================================================
+-- TERMINAL SESSIONS (was cards.terminalSessions, runtimeTerminalSessionEntrySchema)
+-- Buffers themselves stay as .ansi files under workspaces/<id>/buffers/.
+-- =====================================================================
+CREATE TABLE terminal_sessions (
+  card_id      TEXT NOT NULL,
+  stream_id    TEXT NOT NULL,
+  type         TEXT NOT NULL,
+  started_at   INTEGER NOT NULL,
+  ended_at     INTEGER,
+  agent_id     TEXT CHECK (agent_id IN ('claude','codex','opencode','cursor')),
+  state        TEXT CHECK (state IN ('running','stopped','completed','failed','killed')),
+  PRIMARY KEY (card_id, stream_id),
+  FOREIGN KEY (card_id) REFERENCES cards(id) ON DELETE CASCADE
+);
+
+CREATE INDEX idx_terminal_sessions_card ON terminal_sessions(card_id);

package/dist/migrations/003_workflow_pk_fix.sql

@@ -0,0 +1,81 @@
+-- =====================================================================
+-- 003 fix workflow PK (and cards → workflows FK)
+--
+-- workflows.id was incorrectly defined as a global PRIMARY KEY in 001, but
+-- workflow IDs like "wf_default" / "wf_story_default" are canonical per-workspace
+-- identifiers and repeat across workspaces. Importing legacy project-config.json
+-- files surfaces this — saving workspace B's "wf_default" after workspace A's
+-- triggers a UNIQUE constraint failure.
+--
+-- Fix: change workflows PRIMARY KEY to (workspace_id, id).
+-- Side effect: cards.workflow_id FK → workflows.id is no longer valid (workflows.id
+-- is no longer a standalone unique column). Drop the FK; workflow integrity is
+-- enforced by app code instead.
+-- =====================================================================
+
+PRAGMA defer_foreign_keys = ON;
+
+-- ── workflows: rebuild with compound PK ─────────────────────────────────────
+CREATE TABLE workflows_new (
+  id            TEXT NOT NULL,
+  workspace_id  TEXT NOT NULL,
+  name          TEXT NOT NULL,
+  is_default    INTEGER NOT NULL DEFAULT 0,
+  for_story     INTEGER NOT NULL DEFAULT 0,
+  slots_json    TEXT NOT NULL,
+  created_at    INTEGER NOT NULL,
+  updated_at    INTEGER NOT NULL,
+  PRIMARY KEY (workspace_id, id),
+  UNIQUE (workspace_id, name),
+  FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE
+);
+
+INSERT INTO workflows_new (id, workspace_id, name, is_default, for_story, slots_json, created_at, updated_at)
+  SELECT id, workspace_id, name, is_default, for_story, slots_json, created_at, updated_at FROM workflows;
+
+DROP INDEX IF EXISTS idx_workflows_workspace_default;
+DROP TABLE workflows;
+ALTER TABLE workflows_new RENAME TO workflows;
+CREATE INDEX idx_workflows_workspace_default ON workflows(workspace_id, is_default, for_story);
+
+-- ── cards: rebuild without FK to workflows ──────────────────────────────────
+CREATE TABLE cards_new (
+  id                              TEXT PRIMARY KEY,
+  workspace_id                    TEXT NOT NULL,
+  description                     TEXT NOT NULL,
+  description_attachments_json    TEXT NOT NULL DEFAULT '[]',
+  column_id                       TEXT NOT NULL CHECK (column_id IN (
+                                    'todo','in_progress','reopened',
+                                    'ready_for_review','blocked','done'
+                                  )),
+  column_position                 INTEGER NOT NULL,
+  type                            TEXT NOT NULL DEFAULT 'task' CHECK (type IN ('task','story','subtask')),
+  ready_for_dev                   INTEGER NOT NULL DEFAULT 0,
+  agent_id                        TEXT CHECK (agent_id IN ('claude','codex','opencode','cursor')),
+  priority                        TEXT CHECK (priority IN ('urgent','high','medium','low')),
+  auto_fix_attempts               INTEGER NOT NULL DEFAULT 0,
+  base_ref                        TEXT NOT NULL,
+  workflow_id                     TEXT,
+  github_issue_url                TEXT,
+  pr_json                         TEXT,
+  jira_key                        TEXT,
+  jira_url                        TEXT,
+  github_comment_ids_json         TEXT NOT NULL DEFAULT '[]',
+  worktree_path                   TEXT,
+  branch_name                     TEXT,
+  shared_worktree_id              TEXT,
+  slack_message_ts                TEXT,
+  slack_channel_id                TEXT,
+  created_at                      INTEGER NOT NULL,
+  updated_at                      INTEGER NOT NULL,
+  FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE
+);
+
+INSERT INTO cards_new SELECT * FROM cards;
+
+DROP INDEX IF EXISTS idx_cards_workspace_column;
+DROP INDEX IF EXISTS idx_cards_workflow;
+DROP TABLE cards;
+ALTER TABLE cards_new RENAME TO cards;
+CREATE INDEX idx_cards_workspace_column ON cards(workspace_id, column_id, column_position);
+CREATE INDEX idx_cards_workflow ON cards(workflow_id);

package/dist/migrations/004_review_comments_id_pk.sql

@@ -0,0 +1,50 @@
+-- =====================================================================
+-- 004 review_comments PK fix
+--
+-- 002 defined review_comments with PRIMARY KEY (card_id, created_at), which
+-- assumed createdAt is unique per card. In practice two PR comments can land
+-- on the same millisecond (or the poller can merge in a duplicate), tripping
+-- the UNIQUE constraint:
+--
+--   SqliteError: UNIQUE constraint failed: review_comments.card_id, review_comments.created_at
+--
+-- Replace the composite PK with a synthetic AUTOINCREMENT id. Keep
+-- (card_id, created_at) as a non-unique index so the linkCommentToSession
+-- lookup stays fast (it updates all rows matching the timestamp, which is
+-- the correct behaviour when duplicates do exist).
+-- =====================================================================
+
+PRAGMA defer_foreign_keys = ON;
+
+CREATE TABLE review_comments_new (
+  id                INTEGER PRIMARY KEY AUTOINCREMENT,
+  card_id           TEXT NOT NULL,
+  created_at        INTEGER NOT NULL,
+  type              TEXT NOT NULL,
+  actor_type        TEXT NOT NULL CHECK (actor_type IN ('ai', 'human', 'external')),
+  actor_id          TEXT NOT NULL,
+  actor_source      TEXT,
+  status            TEXT CHECK (status IN ('pass', 'fail', 'warning', 'skipped')),
+  stream_id         TEXT,
+  summary           TEXT NOT NULL,
+  issues_json       TEXT NOT NULL DEFAULT '[]',
+  attachments_json  TEXT NOT NULL DEFAULT '[]',
+  metadata_json     TEXT NOT NULL DEFAULT '{}',
+  FOREIGN KEY (card_id) REFERENCES cards(id) ON DELETE CASCADE
+);
+
+INSERT INTO review_comments_new
+  (card_id, created_at, type, actor_type, actor_id, actor_source,
+   status, stream_id, summary, issues_json, attachments_json, metadata_json)
+  SELECT card_id, created_at, type, actor_type, actor_id, actor_source,
+         status, stream_id, summary, issues_json, attachments_json, metadata_json
+  FROM review_comments;
+
+DROP INDEX IF EXISTS idx_review_comments_stream;
+DROP TABLE review_comments;
+ALTER TABLE review_comments_new RENAME TO review_comments;
+
+CREATE INDEX idx_review_comments_card_time ON review_comments(card_id, created_at);
+CREATE INDEX idx_review_comments_stream
+  ON review_comments(stream_id)
+  WHERE stream_id IS NOT NULL;

package/dist/migrations/005_card_dep_no_self.sql

@@ -0,0 +1,28 @@
+-- =====================================================================
+-- 005 forbid self-referential card dependencies
+--
+-- card_dependencies allowed (card_id = depends_on_id) — a card depending
+-- on itself. The DB wouldn't fail but the semantics are broken. Add a
+-- CHECK constraint by recreating the table.
+-- =====================================================================
+
+PRAGMA defer_foreign_keys = ON;
+
+CREATE TABLE card_dependencies_new (
+  card_id         TEXT NOT NULL,
+  depends_on_id   TEXT NOT NULL,
+  PRIMARY KEY (card_id, depends_on_id),
+  CHECK (card_id != depends_on_id),
+  FOREIGN KEY (card_id)       REFERENCES cards(id) ON DELETE CASCADE,
+  FOREIGN KEY (depends_on_id) REFERENCES cards(id) ON DELETE CASCADE
+);
+
+-- Skip any pre-existing self-references when copying (shouldn't happen, but
+-- be defensive in case any slipped in before the check existed).
+INSERT INTO card_dependencies_new (card_id, depends_on_id)
+  SELECT card_id, depends_on_id FROM card_dependencies WHERE card_id != depends_on_id;
+
+DROP INDEX IF EXISTS idx_card_deps_dep;
+DROP TABLE card_dependencies;
+ALTER TABLE card_dependencies_new RENAME TO card_dependencies;
+CREATE INDEX idx_card_deps_dep ON card_dependencies(depends_on_id);

package/dist/migrations/006_memory.sql

@@ -0,0 +1,76 @@
+-- =====================================================================
+-- 006 memory — scoped agent memory + project state
+--
+-- Two scopes: 'global' (cross-project, workspace_id NULL) and 'project'
+-- (one workspace). SQLite is the source of truth. Pending proposals live
+-- in the same table via the status column; rows whose origin card is
+-- deleted cascade away.
+-- =====================================================================
+
+CREATE TABLE memories (
+  id              TEXT PRIMARY KEY,
+  scope           TEXT NOT NULL CHECK (scope IN ('global', 'project')),
+  workspace_id    TEXT,
+  type            TEXT NOT NULL CHECK (type IN (
+                    'fact', 'convention', 'decision', 'preference', 'rule', 'lesson', 'sharp_edge'
+                  )),
+  title           TEXT NOT NULL,
+  content         TEXT NOT NULL,
+  source_type     TEXT NOT NULL CHECK (source_type IN (
+                    'user_correction', 'explicit_save', 'task_lesson', 'manual_human'
+                  )),
+  importance      INTEGER NOT NULL DEFAULT 1,    -- 1-3, drives injection priority when filtering
+  always_inject   INTEGER NOT NULL DEFAULT 0,    -- pin into every prompt
+  origin_card_id  TEXT,                           -- provenance (nullable)
+  origin_agent    TEXT,                           -- JSON {agent, model}
+  status          TEXT NOT NULL DEFAULT 'approved' CHECK (status IN ('pending', 'approved')),
+  created_at      INTEGER NOT NULL,
+  updated_at      INTEGER NOT NULL,
+  FOREIGN KEY (workspace_id)   REFERENCES workspaces(id) ON DELETE CASCADE,
+  -- SET NULL (not CASCADE): deleting a card keeps approved memories it produced,
+  -- just dropping the provenance link. Pending proposals are cleaned up
+  -- explicitly via deletePendingMemoriesForCard() in the card lifecycle hooks.
+  FOREIGN KEY (origin_card_id) REFERENCES cards(id)      ON DELETE SET NULL,
+  CHECK (
+    (scope = 'project' AND workspace_id IS NOT NULL) OR
+    (scope = 'global'  AND workspace_id IS NULL)
+  )
+);
+
+CREATE INDEX idx_memories_scope  ON memories(scope, workspace_id, status);
+CREATE INDEX idx_memories_origin ON memories(origin_card_id);
+
+-- FTS5 over title + content (external-content table mirrors `memories`).
+CREATE VIRTUAL TABLE memories_fts USING fts5(
+  title, content,
+  content='memories',
+  content_rowid='rowid',
+  tokenize='porter unicode61'
+);
+
+CREATE TRIGGER memories_ai AFTER INSERT ON memories BEGIN
+  INSERT INTO memories_fts(rowid, title, content) VALUES (new.rowid, new.title, new.content);
+END;
+
+CREATE TRIGGER memories_ad AFTER DELETE ON memories BEGIN
+  INSERT INTO memories_fts(memories_fts, rowid, title, content)
+  VALUES ('delete', old.rowid, old.title, old.content);
+END;
+
+CREATE TRIGGER memories_au AFTER UPDATE ON memories BEGIN
+  INSERT INTO memories_fts(memories_fts, rowid, title, content)
+  VALUES ('delete', old.rowid, old.title, old.content);
+  INSERT INTO memories_fts(rowid, title, content) VALUES (new.rowid, new.title, new.content);
+END;
+
+-- =====================================================================
+-- PROJECT STATE — one row per workspace, injected wholesale into prompts.
+-- =====================================================================
+CREATE TABLE project_state (
+  workspace_id TEXT PRIMARY KEY,
+  tech_stack   TEXT,        -- free text / JSON
+  constraints  TEXT,        -- e.g. "no Redis in MVP"
+  goals        TEXT,
+  updated_at   INTEGER NOT NULL,
+  FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE
+);

package/dist/migrations/007_drop_always_inject_project_state.sql

@@ -0,0 +1,10 @@
+-- =====================================================================
+-- 007 drop always_inject + project_state
+--
+-- always_inject only controlled prompt placement, not inclusion — confusing
+-- and not worth keeping. project_state (tech_stack/constraints/goals) duplicated
+-- the per-project system prompt, so it's removed in favour of one place.
+-- =====================================================================
+
+DROP TABLE IF EXISTS project_state;
+ALTER TABLE memories DROP COLUMN always_inject;

package/dist/migrations/008_memory_tags.sql

@@ -0,0 +1,52 @@
+-- =====================================================================
+-- 007 memory tags — tag-routed global memory
+--
+-- Global memory is no longer injected into every project. It carries tags;
+-- projects subscribe to tags; a global memory reaches a project when they
+-- share a tag, when the project is the memory's origin, or when a human
+-- explicitly binds the memory to the project by id. See docs/memory-tags.md.
+-- =====================================================================
+
+-- Origin workspace for the safety net: a global memory is always visible in
+-- the repo that produced it, regardless of tag match. SET NULL on delete so
+-- the memory survives if its origin workspace is removed (it then routes by
+-- tag/binding only).
+ALTER TABLE memories ADD COLUMN origin_workspace_id TEXT
+  REFERENCES workspaces(id) ON DELETE SET NULL;
+
+-- Canonical tag vocabulary — one spelling per concept. Both join tables FK
+-- into this, so a tag must exist before it can be attached (reuse-first).
+CREATE TABLE tags (
+  name TEXT PRIMARY KEY            -- normalised lowercase kebab-case
+);
+
+-- memory ↔ tag
+CREATE TABLE memory_tags (
+  memory_id TEXT NOT NULL,
+  tag       TEXT NOT NULL,
+  PRIMARY KEY (memory_id, tag),
+  FOREIGN KEY (memory_id) REFERENCES memories(id) ON DELETE CASCADE,
+  FOREIGN KEY (tag)       REFERENCES tags(name)   ON DELETE CASCADE
+);
+
+-- project's subscribed tags (human-curated in project settings)
+CREATE TABLE workspace_tags (
+  workspace_id TEXT NOT NULL,
+  tag          TEXT NOT NULL,
+  PRIMARY KEY (workspace_id, tag),
+  FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE,
+  FOREIGN KEY (tag)          REFERENCES tags(name)     ON DELETE CASCADE
+);
+
+-- explicit by-id binding of a global memory to a project (human-curated)
+CREATE TABLE memory_workspace_bindings (
+  memory_id    TEXT NOT NULL,
+  workspace_id TEXT NOT NULL,
+  PRIMARY KEY (memory_id, workspace_id),
+  FOREIGN KEY (memory_id)    REFERENCES memories(id)   ON DELETE CASCADE,
+  FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE
+);
+
+CREATE INDEX idx_memory_tags_tag   ON memory_tags(tag);
+CREATE INDEX idx_workspace_tags_ws ON workspace_tags(workspace_id);
+CREATE INDEX idx_memories_origin_ws ON memories(origin_workspace_id);

package/dist/migrations/009_card_relations.sql

@@ -0,0 +1,44 @@
+-- =====================================================================
+-- 009 card relations
+--
+-- Splits the overloaded card_dependencies many-to-many table into three
+-- explicit relations:
+--   cards.depends_on_id : single-parent stacking. The child continues in the
+--                         parent's worktree/branch and starts once the parent
+--                         reaches ready_for_review.
+--   card_waits_for      : many-parent gate (tasks only). The card starts only
+--                         once ALL listed cards are done (merged), in a fresh
+--                         worktree branched from baseRef.
+--   card_subtasks       : story -> its subtasks. The story triggers its
+--                         orchestrator workflow once every subtask is ready.
+--
+-- Worktree ownership is now resolved at runtime by walking these relations,
+-- so the persisted shared_worktree_id column is removed.
+-- =====================================================================
+
+DROP TABLE IF EXISTS card_dependencies;
+
+ALTER TABLE cards DROP COLUMN shared_worktree_id;
+ALTER TABLE cards ADD COLUMN depends_on_id TEXT REFERENCES cards(id) ON DELETE SET NULL;
+
+CREATE TABLE card_waits_for (
+  card_id       TEXT NOT NULL,
+  waits_for_id  TEXT NOT NULL,
+  PRIMARY KEY (card_id, waits_for_id),
+  CHECK (card_id != waits_for_id),
+  FOREIGN KEY (card_id)      REFERENCES cards(id) ON DELETE CASCADE,
+  FOREIGN KEY (waits_for_id) REFERENCES cards(id) ON DELETE CASCADE
+);
+
+CREATE INDEX idx_card_waits_for_dep ON card_waits_for(waits_for_id);
+
+CREATE TABLE card_subtasks (
+  story_id    TEXT NOT NULL,
+  subtask_id  TEXT NOT NULL,
+  PRIMARY KEY (story_id, subtask_id),
+  CHECK (story_id != subtask_id),
+  FOREIGN KEY (story_id)   REFERENCES cards(id) ON DELETE CASCADE,
+  FOREIGN KEY (subtask_id) REFERENCES cards(id) ON DELETE CASCADE
+);
+
+CREATE INDEX idx_card_subtasks_sub ON card_subtasks(subtask_id);

package/dist/migrations/010_review_comment_stable_id.sql

@@ -0,0 +1,17 @@
+-- =====================================================================
+-- 010 review_comments stable application id
+--
+-- The integer `id` PK from 004 is AUTOINCREMENT and gets regenerated on
+-- every card save (updateCard wipes + re-inserts all of a card's comments),
+-- so it can't be used as a stable handle by the API/UI. Add a separate
+-- `comment_id` TEXT that is generated once at creation and carried on the
+-- in-memory comment, so it survives the delete+reinsert save cycle and gives
+-- callers a stable id to address (e.g. DELETE a single comment).
+-- =====================================================================
+
+ALTER TABLE review_comments ADD COLUMN comment_id TEXT;
+
+-- Backfill existing rows with a random 16-hex-char id (matches generateTaskId).
+UPDATE review_comments SET comment_id = lower(hex(randomblob(8))) WHERE comment_id IS NULL;
+
+CREATE INDEX idx_review_comments_comment_id ON review_comments(comment_id);

package/dist/migrations/011_card_plan_model_config.sql

@@ -0,0 +1,14 @@
+-- =====================================================================
+-- 011 card plan + per-ticket model config
+--
+-- plan              — text written by the one-shot plan agent, injected into
+--                     the dev agent's prompt.
+-- active_level      — workflow-wide capability level; every slot resolves it to
+--                     its own model pair (see resolvePair in api-contract).
+-- model_config_json — snapshot of each slot's model pairs, copied from the
+--                     workflow at card creation and editable per ticket.
+-- =====================================================================
+
+ALTER TABLE cards ADD COLUMN plan TEXT;
+ALTER TABLE cards ADD COLUMN active_level TEXT NOT NULL DEFAULT 'medium';
+ALTER TABLE cards ADD COLUMN model_config_json TEXT;

package/dist/migrations/012_recurring_agents.sql

@@ -0,0 +1,54 @@
+-- =====================================================================
+-- 012 recurring agents
+--
+-- Scheduled, one-shot agents created by the assistant (they can never create
+-- themselves). They observe the board and report (no code-write tools) and keep
+-- a private `journal` text column that carries state across runs — read at the
+-- start of a run, rewritten at the end. Distinct from the project memory system.
+--
+-- schedule_kind     — 'interval' (run every N seconds) or 'calendar' (cron_expr
+--                     in timezone, e.g. "0 9 * * 1" = every Monday 09:00).
+-- agent_id/model/effort — a single fixed model pick (no level resolution, unlike
+--                     workflow slots — see AgentModelChoice in api-contract).
+-- next_run_at       — epoch ms of the next due run; the daemon's recurring-agent
+--                     scheduler polls for enabled agents whose next_run_at <= now.
+-- =====================================================================
+
+CREATE TABLE recurring_agents (
+	id TEXT PRIMARY KEY,
+	workspace_id TEXT NOT NULL,
+	name TEXT NOT NULL,
+	instructions TEXT NOT NULL DEFAULT '',
+	schedule_kind TEXT NOT NULL DEFAULT 'interval',
+	interval_seconds INTEGER,
+	cron_expr TEXT,
+	timezone TEXT,
+	agent_id TEXT NOT NULL DEFAULT 'claude',
+	model TEXT,
+	effort TEXT,
+	enabled INTEGER NOT NULL DEFAULT 1,
+	last_run_at INTEGER,
+	next_run_at INTEGER,
+	journal TEXT NOT NULL DEFAULT '',
+	created_at INTEGER NOT NULL,
+	updated_at INTEGER NOT NULL
+);
+
+CREATE INDEX idx_recurring_agents_workspace ON recurring_agents(workspace_id);
+CREATE INDEX idx_recurring_agents_due ON recurring_agents(enabled, next_run_at);
+
+CREATE TABLE recurring_agent_runs (
+	id TEXT PRIMARY KEY,
+	recurring_agent_id TEXT NOT NULL,
+	workspace_id TEXT NOT NULL,
+	stream_id TEXT,
+	started_at INTEGER NOT NULL,
+	ended_at INTEGER,
+	status TEXT NOT NULL DEFAULT 'running',
+	summary TEXT,
+	tokens INTEGER,
+	trigger TEXT NOT NULL DEFAULT 'schedule',
+	FOREIGN KEY (recurring_agent_id) REFERENCES recurring_agents(id) ON DELETE CASCADE
+);
+
+CREATE INDEX idx_recurring_agent_runs_agent ON recurring_agent_runs(recurring_agent_id, started_at);