A worktree that's ready to use the moment it boots.

00Overview & goal

One sentence: extend the existing dev seed so that every fresh worktree DB lands as a fully usable account — not an empty shell you have to hand-configure before you can test anything.

01What a seed gives you today

The current seed binary creates the bones and nothing else. Critically, two things are quietly missing or wrong:

02Architecture & constraints

The migration crate is standalone — it does not depend on the main loquent crate, so the seed binaries can only use raw SQL + reqwest. They cannot call services like clone_system_agent_for_user or create_message.

Two properties hold across every block:

• Idempotent. Each block guards with email-exists checks, NOT EXISTS, or ON CONFLICT DO NOTHING. Re-running the seed is safe.
• Config-driven, zero shell changes. worktree.sh already copies seed.env into each new worktree and worktree-db.sh already runs just seed. Putting the shared Twilio creds + flags in the root seed.env propagates them to every worktree automatically.
• Refactor for legibility. seed.rs roughly doubles in size, so it gets split into named async fn sections (one per block below) rather than one long main.

031 · Shared Twilio account replace

Today the seed POSTs a brand-new Twilio subaccount on every run — dozens of throwaway subaccounts over a worktree's life. Instead, reference one shared account you configured once (with its numbers and an event sink already pointed at your constant ngrok).

Behavior

• New seed.env vars: TWILIO_WORKTREE_SUBACCOUNT_SID / _TOKEN (plus optional _EVENT_SINK_SID, _SMS_SUBSCRIPTION_SID, _CALL_SUBSCRIPTION_SID, _TWIML_APP_SID, _API_KEY_SID, _API_KEY_SECRET).
• When set → insert one organization_twilio_settings row pointing at the shared account: is_byo=false, the event-sink SIDs, sms_events_active=true, call_events_active=true, connected_at=now(). No create-subaccount API call.
• When absent → fall back to the existing behavior (so nothing breaks for non-worktree use).

042 · Import phone numbers new

With the shared account connected, pull its real numbers into Loquent so the org owns callable numbers from the first boot.

• GET /2010-04-01/Accounts/{SID}/IncomingPhoneNumbers.json with the shared creds (reqwest already a dependency).
• Insert one phone_number row per number — number, twilio_sid, friendly_name, capability flags (ai_agent_sms_enabled / ai_agent_call_enabled), routing_mode, voice_webhook_active — guarded by ON CONFLICT (number) DO NOTHING.
• Bind the cloned Text Reply agent to the first imported number (phone_number.ai_agent_id) so inbound SMS routes to the agent out of the box.

053 · Clone the base AI agents new · high value

The fix for the silent breakage. Mirror clone_system_agent_for_user in idempotent SQL for the four DEFAULT_USER_AGENT_SOURCES.

For each source, the clone copies, with NOT EXISTS guards:

• the ai_agent row — overriding organization_id, user_id, system_source_id, and setting is_unedited_clone=true;
• an empty ai_agent_memory row;
• the ai_agent_skill links (preserving enabled state);
• the can-invoke edges (the permission allowlist).

064 · MAX plan + Stripe sandbox new

Plan gating is 100% DB-driven — check_tier_feature_service reads the organization_subscription → subscription_tier join, never Stripe. So the MAX plan is just two rows.

• organization_subscription → the Enterprise tier (slug='enterprise', highest sort_order=30, all feature flags on), status='active', period now()..+1yr, stripe_subscription_id=NULL.
• org_budget via INSERT…SELECT from the Enterprise tier, mirroring reset_cycle_budget: included_credits = credits_per_seat × seats, every *_included NULL→0, initial_included_credits = gross allowance.

Stripe sandbox

Ensure core_conf.stripe_secret_key / stripe_webhook_secret hold the sandbox keys (already read from STRIPE_SECRET_KEY / STRIPE_WEBHOOK_SECRET at migrate-time — added to seed.env.example), and set tiers' stripe_product_id if provided. The billing UI then renders and talks to the sandbox.

075 · Second staff member new

One non-owner teammate makes presence, transfers, and assignment testable.

• user + email_password_account (staff@… / password) + member(is_owner=false) + staff_presence(status='available').
• Credentials appended to .local-credentials alongside the owner's. Idempotent by email.
• is_owner=false with no role row = base staff permissions, which is the realistic default for a teammate.

086 · Sample data new

Small and realistic — the opposite of seed_preview's 5,000×500 stress set. Ten contacts; one of them fully populated.

• 9 bare contacts — names from the existing seed_preview pools; a few get default tags applied so list/filter UIs show real state.
• 1 rich contact gets all four: an SMS thread (message rows tied to an imported phone_number), two task rows (one open + one completed, with priority/due), two contact_note rows (manual + AI-summary area), and one call (status='completed', transcription + recording_url stub, duration_secs, contact_id linked).

tables touched · contact · contact_phone · contact_tag(link) · message · task · contact_note · call

09Build order & data flow

Ordered so every FK target exists before it's referenced. Existing bootstrap (user · account · org · owner · tags · prefs) runs first, unchanged.

10seed.env additions

New keys added to seed.env.example. Filling them in the root seed.env propagates to every future worktree.

# Shared Twilio account reused across all worktrees (replaces per-seed subaccount)
TWILIO_WORKTREE_SUBACCOUNT_SID=
TWILIO_WORKTREE_SUBACCOUNT_TOKEN=
# Optional — its already-wired event sink (live inbound via your constant ngrok)
TWILIO_WORKTREE_EVENT_SINK_SID=
TWILIO_WORKTREE_SMS_SUBSCRIPTION_SID=
TWILIO_WORKTREE_CALL_SUBSCRIPTION_SID=
TWILIO_WORKTREE_TWIML_APP_SID=
TWILIO_WORKTREE_API_KEY_SID=
TWILIO_WORKTREE_API_KEY_SECRET=

# Stripe sandbox (read at migrate-time into core_conf)
STRIPE_SECRET_KEY=
STRIPE_WEBHOOK_SECRET=

# Sample-data toggles (sensible defaults; rarely changed)
SEED_SAMPLE_DATA=1          # 1 = create the 10 contacts + rich contact
SEED_SECOND_STAFF_EMAIL=staff@example.com

11Open decisions & scope

Out of scope YAGNI

• A real Stripe subscription object per seed (unless Confirm B flips).
• Per-worktree Twilio webhook reconfiguration — unneeded with a constant ngrok.
• High-volume data — that remains seed_preview's job.
• Moving the seed into the main crate — explicitly not chosen.