feat(providers,schema,engine,workbench): retire the default model — user-selected model sets from provider model lists

AGENTS.md

@@ -92,6 +92,7 @@ Large rewrites are encouraged when they're the right fix — replace subsystems
 - Keep table-definition / schema modules free of hooks and browser APIs so they stay importable anywhere.
 - Directory names must describe responsibility, not incidental data. For example, a sidebar footer belongs with sidebar/workbench presentation, not in a `host/` folder just because it displays host state; a layout adapter belongs under layout, not a one-file pseudo-subsystem.
 - Terminology: the product term **Thread** is the code/wire term **`session`** — the rename is UI/i18n-only. Never rename `session` in wire or code identifiers.
+- Terminology: **"provider" means the account/service** (DeepSeek, OpenRouter) — never the agent. The agent is a **Harness**, so client-side UI text and identifiers use that (`selectableHarnesses`, `onHarnessChange`, `lastHarness`); `AgentKind` and every wire/daemon term stay as they are. The two meanings used to collide in adjacent UI — the composer's "provider" picker chose the *agent* while the Providers settings page meant accounts. `groupModelsByProvider` is the genuine exception: it groups by *model* provider.
 
 ## Tooling And Aliases
 

apps/daemon/AGENTS.md

@@ -86,6 +86,11 @@ Runs via `tsx` in dev (`pnpm -F @linkcode/daemon dev`) and a `tsup` bundle in pr
   tables in `src/db/schema.ts`). The zod `SessionRecordSchema` is the contract: rows are re-validated
   through it on load; the table is just storage. After editing `src/db/schema.ts`, run
   `pnpm -F @linkcode/daemon exec drizzle-kit generate` and commit `drizzle/` — migrations run at boot.
+  - **A record field with no column is dropped in silence.** The store enumerates columns on write and
+    rebuilds the record on read, so an `.optional()` field added to the schema alone survives until the
+    next boot and then parses cleanly as `undefined`. Adding one is three edits (column, write, read)
+    plus a migration, and the engine's `InMemorySessionStore` cannot catch a missed one — only a
+    round-trip through this store can (`__tests__/session-store.test.ts`).
 - **`runtime.json`** — endpoint discovery (`{name,pid,startedAt,listeners:[{type,url}]}`), written
   `0600` only AFTER every listener binds and removed on graceful `SIGINT`/`SIGTERM` shutdown.
 

apps/daemon/drizzle/0009_add_session_run_pin.sql

@@ -0,0 +1,4 @@
+ALTER TABLE `session_runs` ADD `account_id` text;--> statement-breakpoint
+ALTER TABLE `session_runs` ADD `model` text;--> statement-breakpoint
+ALTER TABLE `session_runs` ADD `effort` text;--> statement-breakpoint
+ALTER TABLE `session_runs` ADD `approval_policy_id` text;