feat(ai-session): add Phase 2 PSA integration, escalation handoff, and session management

Phase 2 of the FlowPilot-First Pivot connecting AI sessions to ConnectWise PSA:

Slice 1 — PSA Ticket Intake:
- FlowPilotEngine accepts psa_ticket intake with graceful CW API fallback
- Ticket picker on intake screen (refactored TicketPickerModal for dual-mode)
- Ticket context card in session sidebar

Slice 2 — Auto Documentation Push:
- PSA documentation service with resolution/escalation note formatting
- Time entry creation via new ConnectWise provider method
- Automatic retry scheduler (APScheduler, 5min interval, 3 retries)
- PSA push status indicators in frontend with manual retry button
- Member mapping warning when CW member not mapped

Slice 3 — Session Pause/Resume & Escalation Handoff:
- Pause/resume endpoints for same-engineer session bookmarking
- Escalation flow: requesting_escalation status, self-escalation blocked
- Enhanced escalation package with LLM-generated hypotheses/suggestions
- Pickup endpoint with continue/fresh resume modes and briefing step
- Escalation queue (sidebar nav + dedicated page)
- SessionBriefing component with continue/fresh choice UI
- EscalateModal with PSA-aware button text

Slice 4 — Mid-Session Ticket Linking:
- Link ticket retroactively with context injection into system prompt
- Link Ticket button in session sidebar

Slice 5 — FlowPilot PSA Settings:
- Settings tab on IntegrationsPage with 7 configurable options
- Stored as flowpilot_settings JSONB on PsaConnection

Database: 2 migrations (flowpilot_settings, psa_post_log changes, status constraint)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

backend/app/models/ai_session.py

@@ -35,7 +35,7 @@ class AISession(Base):
             name="ck_ai_sessions_intake_type",
         ),
         CheckConstraint(
-            "status IN ('active', 'paused', 'resolved', 'escalated', 'abandoned')",
+            "status IN ('active', 'paused', 'resolved', 'escalated', 'requesting_escalation', 'abandoned')",
             name="ck_ai_sessions_status",
         ),
         CheckConstraint(

backend/app/models/psa_connection.py

@@ -1,11 +1,11 @@
 """PSA connection model — one per account."""
 import uuid
 from datetime import datetime, timezone
-from typing import Optional
+from typing import Optional, Any
 
 from sqlalchemy import String, DateTime, Boolean, Text, ForeignKey
 from sqlalchemy.orm import Mapped, mapped_column, relationship
-from sqlalchemy.dialects.postgresql import UUID
+from sqlalchemy.dialects.postgresql import UUID, JSONB
 
 from app.core.database import Base
 
@@ -43,6 +43,10 @@ class PsaConnection(Base):
         default=lambda: datetime.now(timezone.utc),
         onupdate=lambda: datetime.now(timezone.utc),
     )
+    flowpilot_settings: Mapped[Optional[dict[str, Any]]] = mapped_column(
+        JSONB, nullable=True, server_default="{}",
+        comment="FlowPilot-specific settings: auto_push, time_rounding, note_visibility, etc.",
+    )
 
     # Relationships
     account = relationship("Account", back_populates="psa_connection")

backend/app/models/psa_post_log.py

@@ -3,7 +3,7 @@ import uuid
 from datetime import datetime, timezone
 from typing import Optional
 
-from sqlalchemy import String, DateTime, Text, ForeignKey
+from sqlalchemy import String, DateTime, Text, Integer, ForeignKey
 from sqlalchemy.orm import Mapped, mapped_column, relationship
 from sqlalchemy.dialects.postgresql import UUID
 
@@ -16,10 +16,18 @@ class PsaPostLog(Base):
     id: Mapped[uuid.UUID] = mapped_column(
         UUID(as_uuid=True), primary_key=True, default=uuid.uuid4
     )
-    session_id: Mapped[uuid.UUID] = mapped_column(
+    # Legacy sessions FK (nullable for AI sessions)
+    session_id: Mapped[Optional[uuid.UUID]] = mapped_column(
         UUID(as_uuid=True),
         ForeignKey("sessions.id", ondelete="CASCADE"),
-        nullable=False,
+        nullable=True,
+        index=True,
+    )
+    # AI sessions FK (Phase 2)
+    ai_session_id: Mapped[Optional[uuid.UUID]] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("ai_sessions.id", ondelete="CASCADE"),
+        nullable=True,
         index=True,
     )
     psa_connection_id: Mapped[Optional[uuid.UUID]] = mapped_column(
@@ -35,8 +43,16 @@ class PsaPostLog(Base):
     )
     status: Mapped[str] = mapped_column(
         String(20), nullable=False
-    )  # 'success' or 'failed'
+    )  # 'success', 'failed', 'pending_retry'
     error_message: Mapped[Optional[str]] = mapped_column(Text, nullable=True)
+    retry_count: Mapped[int] = mapped_column(
+        Integer, nullable=False, default=0,
+        comment="Number of retry attempts for failed PSA pushes",
+    )
+    next_retry_at: Mapped[Optional[datetime]] = mapped_column(
+        DateTime(timezone=True), nullable=True,
+        comment="When to attempt the next retry",
+    )
     status_changed_from: Mapped[Optional[str]] = mapped_column(
         String(100), nullable=True
     )
@@ -54,5 +70,6 @@ class PsaPostLog(Base):
 
     # Relationships
     session = relationship("Session", foreign_keys=[session_id])
+    ai_session = relationship("AISession", foreign_keys=[ai_session_id])
     psa_connection = relationship("PsaConnection", foreign_keys=[psa_connection_id])
     user = relationship("User", foreign_keys=[posted_by])