Backfill KEY-N refs (projectKey+projectNumber) for all non-deleted items — BWI-21 prerequisite

BWI-22 basquetwi Done urgent

bwi inter-site: Postgres + UTCP migration

BWI-23 basquetwi Done high

└─ Coder: thin HTTP service over Postgres enforcing bwi invariants (event rows, parentId cycle check, payload/updatedAt)

BWI-27 basquetwi Done high

└─ DB: port live data SQLite -> Postgres + cutover (preserve ids/timestamps/events, quiesce writes, verify counts, flip source of truth)

BWI-30 basquetwi Done high

└─ Ops: daemonize wi-http-server on whey (systemd unit, autostart on boot, BWI_HTTP_KEY/env mgmt, bind 127.0.0.1)

BWI-31 basquetwi Done high

└─ DB: port schema SQLite-17 -> Postgres 17 (CHECK/FK kept, payloadJson -> jsonb, event-row invariant preserved)

BWI-24 basquetwi Done high

└─ Coder: UTCP manual at /utcp describing the HTTP service (manual_version, tools, call templates)

BWI-28 basquetwi Done

└─ Ops: make Postgres persistent on whey (unmask postgresql wrapper + enable on boot)

BWI-26 basquetwi Done

└─ Coder: migrate wi CLI + wi-web DB driver sqlite3 -> libpq/psql after schema lands

BWI-29 basquetwi Done

Ship wi-web browsable UI on bwi.pensanta.com:8765 (HTTP-mode -> wi-http -> PG, systemd Restart=always)

BWI-3 basquetwi Done high

wi/wi-web: harden against SQLite-direct fallback post-cutover (stub recreation)

BWI-34 basquetwi Done high

bwi writer migration whey→venus (PG + wi-http authoritative on venus; whey → backup-only)

BWI-11 basquetwi Done high

└─ CUTOVER: whey write-freeze + graft whey's 9 post-fork uniques into venus (venus=authoritative)

BWI-15 basquetwi Done high

└─ reverse replication venus→whey backup + quiesce whey writer (backup-only)

BWI-17 basquetwi Done

└─ venus PG: create db=basquetwi + role basquetwi + grants (greenfield)

BWI-12 basquetwi Done

└─ repoint ZT/loopback clients: BWI_HTTP_BASE (wi CLI, wi-web) + /utcp base whey→venus

BWI-16 basquetwi Done

└─ validate end-to-end: smoke read+write per key + all consumers reachable post-cutover

BWI-18 basquetwi Done

└─ venus: deploy wi-http.service (code + /etc/bwi-http.env → venus-local PG + reissued keys)

BWI-13 basquetwi Done

wi mutators: echo resolved ref+title and warn/refuse on cross-project target

BWI-19 basquetwi Done high

Disable bare global-id handles on all wi mutators — require KEY-N project ref

BWI-21 basquetwi Done high

KPI report generator (phase-1 read-only PG script)

BWI-4 basquetwi Done high

refs-only verification: parent event body

BWI-45 basquetwi Done

wi ask: drop hardcoded assignedTo='elazar' default + retire stale_elazar_questions_gt_7d doctor check (OPS-16 code part)

BWI-10 basquetwi Done

Mandatory title+description + createdOnBehalfOf provenance on WI create (pm-mars spec, 2a)

BWI-39 basquetwi Done

└─ Schema: add createdOnBehalfOf column to workItems (nullable+backfill=createdByAgent; harden NOT NULL only after coder's require+populate is live)

BWI-40 basquetwi Done high

└─ CLI/server/wi-web/offline: require+populate title + description (--desc) + createdOnBehalfOf (--for, with 'self' sugar); reject empty; server 400s on missing

BWI-41 basquetwi Done high

Expose wi-http on tailnet via bwi.pensanta.com (bind 100.85.255.54:8042, FQDN public base)

BWI-32 basquetwi Done

wi rename/edit-title: wi rename <id> "<new title>" (logs titleChanged event)

BWI-5 basquetwi Done

Per-project WI numbering (JIRA key model): KEY-N, additive, forward-only

BWI-36 basquetwi Done

└─ Fleet cleanup: git rm tracked .RETIRED + gitignore; wi/wi-web HARD-ERROR on SQLite-direct post-cutover (BWI_ALLOW_SQLITE opt-in)

BWI-2 basquetwi Done high

└─ Schema: project keys + per-project WI counter

BWI-37 basquetwi Done

└─ Service+CLI+wi-web: assign KEY-N on create, additive response fields, dual lookup

BWI-38 basquetwi Done

venus go-live: place ~/.config/bwi-client.env (venus write-key, delivered out-of-band) so venus agents route wi/wi-web → wi-http:8042. Until then venus hard-fails safe (no stub) per #645.

BWI-35 basquetwi Done

TEST announce ref 1786684174

BWI-44 basquetwi Done low

TEST notify wiring 1785392715

BWI-43 basquetwi Done low

Switch bwi bind + BWI_PUBLIC_BASE from ZT IP 172.27.178.27:8042 back to bwi.pensanta.com:8042 once DNS propagates (relates #636)

BWI-33 basquetwi Done low

Migrate bwi PG + wi-http from whey to venus

BWI-7 basquetwi Done low

Improve 400 error for priority<=1: tell user to pass --agent <name> instead of bare "agent required"

BWI-6 basquetwi Done low

kpi-report.py canonical eventType set is stale vs wi-http SSOT (titleChanged/audit-finding/packet false-flagged OFF-VOCAB). Fix: fetch canonical list from wi-http (or /utcp) instead of hardcoding, so it never drifts

BWI-8 basquetwi Done low