@capybara-hq/kernel 0.0.0-stage → 0.1.0-rc.1

package/src/migrations/0024_skills.sql

@@ -0,0 +1,46 @@
+-- M5 T13：技能库。技能文件在对象存储 kernel/<org_id>/<skill_versions.object_prefix><path>，这里只存元数据。
+-- scope：org（组织技能库，管理员上传，agent 定义里按 id 引用）/ agent（该 agent 自己的技能，自动对它生效，
+--   T15 由 agent 提议、负责人批准后创建）；agent_id 只在 scope='agent' 时有值。
+-- 同一作用域下未删除的技能按 name 唯一：上传同名技能包 = 新增一个版本（current_version + 1）。
+-- 删除为软删除（deleted_at）；版本与对象保留（对象随组织数据清理一并删除）。
+CREATE TABLE IF NOT EXISTS skills (
+  id text PRIMARY KEY,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  scope text NOT NULL CHECK (scope IN ('org', 'agent')),
+  agent_id text REFERENCES agents(id) ON DELETE CASCADE,
+  name text NOT NULL,
+  -- 当前版本 SKILL.md 的 description（列表直接读，不查版本）
+  description text NOT NULL,
+  current_version integer NOT NULL CHECK (current_version >= 1),
+  created_by text NOT NULL REFERENCES accounts(id),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  deleted_at timestamptz,
+  CHECK ((scope = 'agent') = (agent_id IS NOT NULL))
+);
+CREATE UNIQUE INDEX IF NOT EXISTS skills_live_name_uq
+  ON skills (org_id, scope, coalesce(agent_id, ''), name)
+  WHERE deleted_at IS NULL;
+CREATE INDEX IF NOT EXISTS skills_agent_idx
+  ON skills (agent_id)
+  WHERE agent_id IS NOT NULL AND deleted_at IS NULL;
+
+-- 每个版本的清单：manifest = { name, description, files: [{ path, size, sha256 }] }；
+-- object_prefix 是该版本文件在 kernel/<org_id>/ 下的键前缀（以 / 结尾），文件键 = object_prefix || path。
+CREATE TABLE IF NOT EXISTS skill_versions (
+  skill_id text NOT NULL REFERENCES skills(id) ON DELETE CASCADE,
+  version integer NOT NULL CHECK (version >= 1),
+  manifest jsonb NOT NULL,
+  object_prefix text NOT NULL,
+  created_by text NOT NULL REFERENCES accounts(id),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (skill_id, version)
+);
+-- 清理未用上的技能包上传时按前缀判断文件是否已被某个版本引用
+CREATE INDEX IF NOT EXISTS skill_versions_prefix_idx ON skill_versions (object_prefix);
+
+-- 预签名上传的用途：chat（对话附件，可绑定到消息）/ skill-package（技能包 zip，只供 POST /skills 使用，
+-- 不能绑定到消息、不能下载；有自己的待完成上限与过期时间）。已有的行都是对话附件。
+ALTER TABLE attachments
+  ADD COLUMN IF NOT EXISTS purpose text NOT NULL DEFAULT 'chat'
+  CHECK (purpose IN ('chat', 'skill-package'));

package/src/migrations/0025_skills_catalog_idx.sql

@@ -0,0 +1,6 @@
+-- M5 T14：按会话取最新一份技能目录快照（skills_catalog，Ruling M17）。每次运行开始与每步工具执行都要查，
+-- 部分索引让查询不必倒序扫完整个会话的事件。
+-- 不用 CONCURRENTLY：与其他迁移的写法一致（发布前没有需要在线建索引的大表）。
+CREATE INDEX IF NOT EXISTS conversation_events_skills_catalog_idx
+  ON conversation_events (conversation_id, seq)
+  WHERE type = 'skills_catalog';

package/src/migrations/0026_skill_changes.sql

@@ -0,0 +1,34 @@
+-- M5 T15：共享 agent 的技能变更申请（R4）。agent 用 skill_write 改自己的技能时，共享 agent（visibility 不是
+-- private）不直接生成版本，而是在这里记一条申请，等该 agent 的负责人批准。
+-- proposed_version = { skillId, version, manifest: { name, description, files: [{ path, size, sha256 }] } }：
+--   skillId 为已有技能的 id，或新技能预先分配的 id（批准时用它建 skills 行）；version 是批准后预期的版本号。
+-- object_prefix 是草稿文件在 kernel/<org_id>/ 下的键前缀（以 / 结尾），批准后原样成为该版本的 object_prefix；
+--   拒绝 / 取消时删除。
+-- skill_id 为 null 表示新技能。pending 期间只有发起对话（requested_in_conversation）用草稿版本（试用）。
+CREATE TABLE IF NOT EXISTS skill_change_requests (
+  id text PRIMARY KEY,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  agent_id text NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+  skill_id text REFERENCES skills(id) ON DELETE CASCADE,
+  proposed_version jsonb NOT NULL,
+  object_prefix text NOT NULL,
+  requested_by_account text NOT NULL REFERENCES accounts(id),
+  requested_in_conversation text NOT NULL REFERENCES conversations(id) ON DELETE CASCADE,
+  status text NOT NULL DEFAULT 'pending'
+    CHECK (status IN ('pending', 'approved', 'rejected', 'cancelled')),
+  decided_by text REFERENCES accounts(id),
+  decided_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+-- 同一 agent 的同名技能最多一条待处理的申请（同一对话再写会取代旧的，别的对话再写被拒绝）
+CREATE UNIQUE INDEX IF NOT EXISTS skill_change_requests_pending_name_uq
+  ON skill_change_requests (agent_id, (proposed_version -> 'manifest' ->> 'name'))
+  WHERE status = 'pending';
+-- 运行开始解析技能目录时按发起对话找试用中的申请
+CREATE INDEX IF NOT EXISTS skill_change_requests_conversation_idx
+  ON skill_change_requests (requested_in_conversation)
+  WHERE status = 'pending';
+-- 收件箱：按组织列出待处理的申请
+CREATE INDEX IF NOT EXISTS skill_change_requests_org_pending_idx
+  ON skill_change_requests (org_id, created_at)
+  WHERE status = 'pending';

package/src/migrations/0027_model_prices.sql

@@ -0,0 +1,18 @@
+-- M6 T1：模型价格表（C2）。成本在读取时按这里的价格计算，不写进事件日志；单位为每百万 token，
+-- 币种为部署设置 priceCurrency。由企业管理员录入；插件不声明价格。缓存读 / 写价为 NULL 时按输入价计。
+CREATE TABLE IF NOT EXISTS model_prices (
+  provider text NOT NULL,
+  model text NOT NULL,
+  input_per_mtok numeric NOT NULL CHECK (input_per_mtok >= 0),
+  output_per_mtok numeric NOT NULL CHECK (output_per_mtok >= 0),
+  cache_read_per_mtok numeric CHECK (cache_read_per_mtok >= 0),
+  cache_write_per_mtok numeric CHECK (cache_write_per_mtok >= 0),
+  updated_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (provider, model)
+);
+-- 轨迹列表：按 agent 筛选、按最近更新倒序（TrajectoryService.list）
+CREATE INDEX IF NOT EXISTS conversations_agent_idx ON conversations (org_id, agent_id, updated_at DESC);
+-- 轨迹按运行窗口读事件（EventLog.readRunsAfter）：按 (会话, 运行, seq) 取，往前翻页时不扫更晚运行的事件
+CREATE INDEX IF NOT EXISTS conversation_events_run_idx
+  ON conversation_events (conversation_id, run_id, seq) WHERE run_id IS NOT NULL;

package/src/migrations/0028_evals.sql

@@ -0,0 +1,105 @@
+-- M6 T3：评测集、用例、评测运行与结果（D4、C3–C7）。一个评测集对应一个 agent；用例是某次真实运行的日志快照
+-- （eval_cases.snapshot，≤ evals.maxCaseBytes），不引用原对话：原对话删除后用例照常可读、可回放。
+-- 评测数据只在本组织内。删除评测集（Ruling S1-a）：用例（含快照）硬删，结果随之级联删除，集合行留作软删除
+-- （deleted_at）的审计存根，运行行保留。eval_runs / eval_results 由 T4 起写入。
+CREATE TABLE IF NOT EXISTS eval_sets (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  agent_id text NOT NULL REFERENCES agents(id),
+  name text NOT NULL,
+  description text NOT NULL DEFAULT '',
+  -- 评委评分标准（T6）；NULL = 用默认标准
+  rubric text,
+  created_by text NOT NULL REFERENCES accounts(id),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  deleted_at timestamptz
+);
+CREATE INDEX IF NOT EXISTS eval_sets_org_idx ON eval_sets (org_id, created_at DESC) WHERE deleted_at IS NULL;
+
+-- source_conversation_id / source_run_id 只是来源记录，不设外键（原对话可被删除）。
+-- replayable_steps = replayableCalls(snapshot).length，写入时算好，列表不必读快照。
+-- plan_step / plan_run：两种回放模式的计划（预建结果的 step / seq、预计请求数、原运行用量、评委上下文 token），
+-- base_model：用例原版本的模型（快照与 agent_versions 都没有定义时为 NULL）。写入时算好，估算与启动不读快照。
+CREATE TABLE IF NOT EXISTS eval_cases (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  set_id uuid NOT NULL REFERENCES eval_sets(id) ON DELETE CASCADE,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  source_conversation_id text NOT NULL,
+  source_run_id text NOT NULL,
+  agent_version integer NOT NULL,
+  title text NOT NULL,
+  snapshot jsonb NOT NULL,
+  snapshot_bytes integer NOT NULL CHECK (snapshot_bytes >= 0),
+  replayable_steps integer NOT NULL DEFAULT 0 CHECK (replayable_steps >= 0),
+  plan_step jsonb NOT NULL,
+  plan_run jsonb NOT NULL,
+  base_model jsonb,
+  added_by text NOT NULL REFERENCES accounts(id),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  UNIQUE (set_id, source_run_id)
+);
+
+CREATE TABLE IF NOT EXISTS eval_runs (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  set_id uuid NOT NULL REFERENCES eval_sets(id) ON DELETE CASCADE,
+  mode text NOT NULL CHECK (mode IN ('step', 'run')),
+  candidate jsonb NOT NULL,
+  judge boolean NOT NULL DEFAULT false,
+  token_cap bigint NOT NULL CHECK (token_cap > 0),
+  tokens_used bigint NOT NULL DEFAULT 0,
+  status text NOT NULL DEFAULT 'queued'
+    CHECK (status IN ('queued', 'running', 'completed', 'cancelled', 'capped', 'failed')),
+  cases_total integer NOT NULL,
+  cases_done integer NOT NULL DEFAULT 0,
+  -- 连续出错的结果数（成功即清零）；达到 evals.maxConsecutiveErrors 时运行置 failed，原因记在 error
+  consecutive_errors integer NOT NULL DEFAULT 0,
+  -- 运行失败的原因 {code, message}（英文；界面按 code 走 i18n）
+  error jsonb,
+  estimate jsonb NOT NULL,
+  created_by text NOT NULL REFERENCES accounts(id),
+  created_at timestamptz NOT NULL DEFAULT now(),
+  started_at timestamptz,
+  finished_at timestamptz
+);
+CREATE INDEX IF NOT EXISTS eval_runs_set_idx ON eval_runs (set_id, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS eval_results (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  run_id uuid NOT NULL REFERENCES eval_runs(id) ON DELETE CASCADE,
+  case_id uuid NOT NULL REFERENCES eval_cases(id) ON DELETE CASCADE,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  step integer,
+  model_call_seq bigint,
+  status text NOT NULL DEFAULT 'pending'
+    CHECK (status IN ('pending', 'running', 'done', 'error', 'skipped')),
+  baseline jsonb,
+  candidate jsonb,
+  diff jsonb,
+  judge jsonb,
+  drift text[] NOT NULL DEFAULT '{}',
+  error jsonb,
+  eval_conversation_id text,
+  -- 认领该结果的任务尝试（每次执行一个新 uuid）：写 done 与计费都以它为条件，失去认领的旧执行者写不进来
+  claimed_by text,
+  label text CHECK (label IN ('pass', 'fail')),
+  label_note text,
+  labeled_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  labeled_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS eval_results_run_idx ON eval_results (run_id, id);
+CREATE INDEX IF NOT EXISTS eval_results_case_idx ON eval_results (case_id);
+
+-- 对话种类：chat（普通对话）/ eval（整轮回放用的隐藏对话，T5；不在「我的对话」里）。
+ALTER TABLE conversations
+  ADD COLUMN IF NOT EXISTS kind text NOT NULL DEFAULT 'chat' CHECK (kind IN ('chat', 'eval'));
+ALTER TABLE conversations
+  ADD COLUMN IF NOT EXISTS eval_run_id uuid REFERENCES eval_runs(id) ON DELETE SET NULL;
+-- 轨迹列表（TrajectoryService.list）不按 agent 筛选时按 (org_id, kind) 取、按 (updated_at, id) 倒序
+CREATE INDEX IF NOT EXISTS conversations_org_kind_idx
+  ON conversations (org_id, kind, updated_at DESC, id DESC);
+-- 删除评测集 / 组织清理按运行找评测对话
+CREATE INDEX IF NOT EXISTS conversations_eval_run_idx ON conversations (eval_run_id) WHERE kind = 'eval';

package/src/migrations/0029_model_purposes.sql

@@ -0,0 +1,18 @@
+-- M6 T6：模型用途映射（C9）。org_id 为 NULL 的一行是部署默认（企业管理员设），组织可覆盖（组织管理员设）。
+-- 用途是内核用途（目前只有 eval）或已加载插件 permissions.models 声明的；params 已按目标模型的声明校验。
+-- 每个（组织 / 部署, 用途）至多一行：NULLS NOT DISTINCT 让部署默认也只有一行（需要 PG ≥ 15）。
+CREATE TABLE IF NOT EXISTS model_purpose_mappings (
+  org_id text REFERENCES orgs(id) ON DELETE CASCADE,
+  purpose text NOT NULL,
+  provider text NOT NULL,
+  model text NOT NULL,
+  params jsonb NOT NULL DEFAULT '{}',
+  updated_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT model_purpose_mappings_scope_key UNIQUE NULLS NOT DISTINCT (org_id, purpose)
+);
+
+-- 评委状态（T6）：none = 不评；pending = 结果已 done、评委还没做；done / error = 已给出结论 / 失败；
+-- skipped = 运行在评委之前停下（取消 / 越限 / 熔断）。用例在没有 pending 的评委之前不算做完。
+ALTER TABLE eval_results ADD COLUMN IF NOT EXISTS judge_status text NOT NULL DEFAULT 'none'
+  CHECK (judge_status IN ('none', 'pending', 'done', 'error', 'skipped'));

package/src/migrations/0030_plugin_installs.sql

@@ -0,0 +1,73 @@
+-- M6 T11：插件安装记录、内容寻址包存储与各副本的加载状态（C13）。
+-- 包按整个 tgz 的 sha256 寻址；字节放对象存储 deployment/plugins/blobs/<sha256>.tgz（blob_store = object），
+-- 没有对象存储或由 CLI 写入时放 plugin_blobs（blob_store = pg，同受 packages.maxBytes 限制）。
+-- name 是插件清单名，package_name 是 package.json 的 npm 包名（同名插件换了包名视为冲突）。
+CREATE TABLE IF NOT EXISTS plugin_packages (
+  sha256 text PRIMARY KEY CHECK (sha256 ~ '^[0-9a-f]{64}$'),
+  name text NOT NULL,
+  package_name text NOT NULL,
+  version text NOT NULL,
+  size bigint NOT NULL CHECK (size > 0),
+  section jsonb NOT NULL,
+  blob_store text NOT NULL CHECK (blob_store IN ('object', 'pg')),
+  source text NOT NULL CHECK (source IN ('npm', 'file', 'directory')),
+  source_ref text NOT NULL,
+  uploaded_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS plugin_packages_name_idx ON plugin_packages (name, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS plugin_blobs (
+  sha256 text PRIMARY KEY REFERENCES plugin_packages(sha256) ON DELETE CASCADE,
+  bytes bytea NOT NULL
+);
+
+-- 每插件一行：期望的版本与状态（后台只写这里，各副本收敛）。migrated_sha = 已执行过其迁移的包。
+CREATE TABLE IF NOT EXISTS plugin_installs (
+  name text PRIMARY KEY,
+  sha256 text NOT NULL REFERENCES plugin_packages(sha256),
+  version text NOT NULL,
+  source text NOT NULL CHECK (source IN ('npm', 'file', 'directory')),
+  desired_state text NOT NULL DEFAULT 'disabled' CHECK (desired_state IN ('enabled', 'disabled')),
+  migrated_sha text,
+  installed_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  installed_at timestamptz NOT NULL DEFAULT now(),
+  updated_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+-- 插件名归哪个 npm 包（Ruling P3）：第一次安装时写入，卸载不删。卸载保留数据、密钥、批准快照与组织启用，
+-- 另一个 npm 包不能用同名插件接手这些。只上传、没安装过的包不占名字。
+CREATE TABLE IF NOT EXISTS plugin_name_owners (
+  name text PRIMARY KEY,
+  package_name text NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+
+INSERT INTO plugin_name_owners (name, package_name)
+SELECT plugin_installs.name, plugin_packages.package_name
+FROM plugin_installs
+JOIN plugin_packages ON plugin_packages.sha256 = plugin_installs.sha256
+ON CONFLICT DO NOTHING;
+
+-- 每个副本（进程）每个插件的加载结果；replica_id 是进程级的 <hostname>-<pid>-<6 位随机>，
+-- http_replica_id 是配置的 http.replicaId（有就记，便于与 x-capybara-replica 对照）。
+-- state = pending 时 reason 为 config / approval / migration / dependency。
+-- serving_version：这一行的版本没加载成（failed / pending）而本副本仍在用旧版本时，旧版本号；否则为空。
+CREATE TABLE IF NOT EXISTS plugin_replica_status (
+  replica_id text NOT NULL,
+  plugin text NOT NULL,
+  version text NOT NULL,
+  sha256 text,
+  source text NOT NULL CHECK (source IN ('builtin', 'config', 'install')),
+  state text NOT NULL CHECK (state IN ('loaded', 'failed', 'unloaded', 'pending')),
+  reason text,
+  detail text,
+  serving_version text,
+  http_replica_id text,
+  heartbeat_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (replica_id, plugin)
+);
+
+CREATE INDEX IF NOT EXISTS plugin_replica_status_plugin_idx ON plugin_replica_status (plugin);

package/src/migrations/0031_plugin_snapshot_source.sql

@@ -0,0 +1,6 @@
+-- M6 T13：网页批准插件权限（D8），快照来源加 'web'。0016 的 CHECK 是内联匿名约束（默认名
+-- plugin_permission_snapshots_source_check），先删后加；整个文件在一个事务里，可重复执行。
+ALTER TABLE plugin_permission_snapshots
+  DROP CONSTRAINT IF EXISTS plugin_permission_snapshots_source_check;
+ALTER TABLE plugin_permission_snapshots
+  ADD CONSTRAINT plugin_permission_snapshots_source_check CHECK (source IN ('cli', 'auto', 'web'));

package/src/migrations/0032_plugin_deployment_configs.sql

@@ -0,0 +1,10 @@
+-- M6 T15：部署级插件配置存 PG（D8 / C10）。只存非密钥字段（按点路径嵌套的对象）；密钥字段各自加密存
+-- capybara.secrets（namespace kernel、org_id '_deployment'、键 plugin-deployment-config:<plugin>:<path>）。
+-- 优先级：环境变量 > 文件 / Nacos > 这里 > schema 默认值；文件或环境变量里有的字段只读。
+-- 内置、配置声明与安装记录的插件都可以在这里配；卸载插件不删这一行（数据保留）。
+CREATE TABLE IF NOT EXISTS plugin_deployment_configs (
+  plugin text PRIMARY KEY,
+  config jsonb NOT NULL DEFAULT '{}'::jsonb,
+  updated_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  updated_at timestamptz NOT NULL DEFAULT now()
+);

package/src/migrations/0033_rename_apps_to_connectors.sql

@@ -0,0 +1,25 @@
+-- D17：「应用 / app」（远端服务实例）改名「连接器 / connector」。表与 app_id 列改名；索引与约束名不改
+-- （如 apps_org_slug_uniq、app_tools_policy_source_check）。secrets 键 credentials:app:*、已存 agent 版本里的
+-- {kind:"app"}、事件 payload 的 appId 与旧审计记录 app.* 不改（C27）。不建兼容视图（C28）。
+
+-- capybara:allow-destructive D17 应用 → 连接器全量改名；同一发布内代码与 web 同步改名（项目未发布，无兼容层，C28）
+ALTER TABLE IF EXISTS apps RENAME TO connectors;
+-- capybara:allow-destructive D17 应用 → 连接器全量改名；同一发布内代码与 web 同步改名（项目未发布，无兼容层，C28）
+ALTER TABLE IF EXISTS app_tools RENAME TO connector_tools;
+
+-- RENAME COLUMN 没有 IF EXISTS：按 information_schema 判断后再改，重复执行无副作用。
+-- capybara:allow-destructive D17 应用 → 连接器全量改名；同一发布内代码与 web 同步改名（项目未发布，无兼容层，C28）
+DO $$
+DECLARE
+  t text;
+BEGIN
+  FOREACH t IN ARRAY ARRAY['connector_tools', 'tool_grants', 'conversation_tool_grants', 'approvals'] LOOP
+    IF EXISTS (
+      SELECT 1 FROM information_schema.columns
+      WHERE table_schema = 'capybara' AND table_name = t AND column_name = 'app_id'
+    ) THEN
+      EXECUTE format('ALTER TABLE capybara.%I RENAME COLUMN app_id TO connector_id', t);
+    END IF;
+  END LOOP;
+END
+$$;

package/src/migrations/0034_directory.sql

@@ -0,0 +1,49 @@
+-- M6 T23：企业目录条目与版本（D9 / C21 / C22）。四种 kind：plugin、connector-template、skill、app（T25）。
+-- name：plugin 为插件清单名，skill 为 SKILL.md 的 name，connector-template 为去掉 scope 的 npm 包名。
+-- package_name：条目的 npm 包名；同一条目的新版本必须来自同一个包（别的包用同名 → directory.name_conflict）。
+-- 策略：allow（新导入默认）/ needs_approval / disabled，只挂在条目上。删除为软删除（deleted_at）：
+-- 版本行与存储里的文件保留（已从目录安装的组件仍引用它们）；删除后同一 (kind, name) 可以重新导入成新条目。
+CREATE TABLE IF NOT EXISTS directory_items (
+  id uuid PRIMARY KEY,
+  kind text NOT NULL CHECK (kind IN ('plugin', 'connector-template', 'skill', 'app')),
+  name text NOT NULL,
+  package_name text NOT NULL,
+  publisher text NOT NULL,
+  display_name jsonb,
+  description text NOT NULL,
+  policy text NOT NULL DEFAULT 'allow' CHECK (policy IN ('allow', 'needs_approval', 'disabled')),
+  latest_version text NOT NULL,
+  created_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  deleted_at timestamptz
+);
+CREATE UNIQUE INDEX IF NOT EXISTS directory_items_live_name_uq
+  ON directory_items (kind, name)
+  WHERE deleted_at IS NULL;
+
+-- 每个导入的版本：section = package.json 的 capybara 段（原样）；source file / npm（T24 加 catalog），
+-- source_ref：file 为 upload，npm 为 <包名>@<版本>；integrity：npm 下载时校验所用的 sha512（file 为空）。
+-- plugin：plugin_sha256 指向包存储（plugin_packages），object_prefix 为空；
+-- skill / connector-template：文件在对象存储 deployment/<object_prefix><path>，object_prefix =
+-- directory/<item_id>/<version>/；files = [{ path, size, sha256 }]。resolved 留给应用包（T25）。
+CREATE TABLE IF NOT EXISTS directory_item_versions (
+  item_id uuid NOT NULL REFERENCES directory_items(id) ON DELETE CASCADE,
+  version text NOT NULL,
+  section jsonb NOT NULL,
+  source text NOT NULL CHECK (source IN ('file', 'npm')),
+  source_ref text NOT NULL,
+  integrity text,
+  object_prefix text,
+  plugin_sha256 text REFERENCES plugin_packages(sha256),
+  resolved jsonb,
+  files jsonb NOT NULL DEFAULT '[]'::jsonb,
+  size bigint NOT NULL CHECK (size > 0),
+  imported_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  imported_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (item_id, version)
+);
+
+-- F-AA：经目录装到部署的插件记下来源条目（T26 据此让组织启用受目录策略约束）；不经目录安装时为空。
+ALTER TABLE plugin_installs
+  ADD COLUMN IF NOT EXISTS directory_item_id uuid REFERENCES directory_items(id) ON DELETE SET NULL;

package/src/migrations/0035_catalogs.sql

@@ -0,0 +1,40 @@
+-- M6 T24：目录来源（D16 / C25 / C26）。官方清单（id 'official'，builtin，地址来自配置 catalogs.official.*，
+-- 每次启动按配置同步）与企业清单（id 为 uuid，企业管理员维护；可选令牌存 secrets：namespace kernel、
+-- org_id _deployment、键 catalog-token:<id>）。enabled：后台的启停（official 另受配置 catalogs.official.enabled 约束）。
+-- etag：上次成功拉取的 ETag（下次带 If-None-Match）；last_status：never / ok / error；拉取或校验失败保留上一份条目。
+CREATE TABLE IF NOT EXISTS catalog_sources (
+  id text PRIMARY KEY,
+  name text NOT NULL,
+  url text NOT NULL,
+  mirrors jsonb NOT NULL DEFAULT '[]'::jsonb,
+  builtin boolean NOT NULL DEFAULT false,
+  enabled boolean NOT NULL DEFAULT true,
+  etag text,
+  last_refreshed_at timestamptz,
+  last_status text NOT NULL DEFAULT 'never' CHECK (last_status IN ('ok', 'error', 'never')),
+  last_error text,
+  created_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+
+-- 每次成功刷新整体替换某个来源的条目（只供企业管理员浏览；引入时才物化为目录条目）。entry = 清单条目（已校验）。
+CREATE TABLE IF NOT EXISTS catalog_entries (
+  source_id text NOT NULL REFERENCES catalog_sources(id) ON DELETE CASCADE,
+  kind text NOT NULL CHECK (kind IN ('plugin', 'connector-template', 'skill', 'app')),
+  name text NOT NULL,
+  npm text NOT NULL,
+  entry jsonb NOT NULL,
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (source_id, kind, name)
+);
+
+-- 从清单引入的目录条目记下来源清单（来源删除后置空，条目保留）。
+ALTER TABLE directory_items
+  ADD COLUMN IF NOT EXISTS catalog_source_id text REFERENCES catalog_sources(id) ON DELETE SET NULL;
+
+-- 版本来源增加 catalog（source_ref = <sourceId>:<npm>@<version>，integrity = 清单的 sha512）。
+-- 约束名为 PG 对 0034 内联 CHECK 的默认命名。
+ALTER TABLE directory_item_versions
+  DROP CONSTRAINT IF EXISTS directory_item_versions_source_check;
+ALTER TABLE directory_item_versions
+  ADD CONSTRAINT directory_item_versions_source_check CHECK (source IN ('file', 'npm', 'catalog'));

package/src/migrations/0036_app_import_staging.sql

@@ -0,0 +1,17 @@
+-- M6 T25：应用包（app.yaml）企业导入的暂存（C31）。prepare 校验完整个应用包（全部插件按 lock 下载并按 sha512
+-- 校验、模板、技能）后写一行，confirm 按 reviewHash 一次批准并删除该行；24 小时过期，由维护任务
+-- app-staging-cleanup 删除过期行与 object_prefix 下的对象（插件包留在内容寻址的 plugin_packages）。
+-- review：给企业管理员看的审阅（AppReview）；bundle：确认时要用的解析结果（清单、文件、npm 包名、预定的条目 id、
+-- 包大小）；source：{ kind: file | npm | catalog, ref, integrity?, catalogSourceId? }。
+-- object_prefix：技能文件、图标与 app.yaml 在对象存储 deployment/<object_prefix><path>，确认后由版本行接管。
+CREATE TABLE IF NOT EXISTS app_import_staging (
+  id uuid PRIMARY KEY,
+  review jsonb NOT NULL,
+  bundle jsonb NOT NULL,
+  object_prefix text,
+  source jsonb NOT NULL,
+  created_by text REFERENCES accounts(id) ON DELETE CASCADE,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  expires_at timestamptz NOT NULL
+);
+CREATE INDEX IF NOT EXISTS app_import_staging_expires_idx ON app_import_staging (expires_at);

package/src/migrations/0037_directory_installs.sql

@@ -0,0 +1,92 @@
+-- M6 T26：组织从企业目录安装（C22 / C31）、成员申请与审批。
+-- directory_requests：成员申请（stage org，进组织管理员收件箱）与需审批条目的部署级申请（stage deployment，
+-- 企业管理员决定）。同一组织、同一条目只能有一个 pending 申请（F-AF 部分唯一索引）。
+CREATE TABLE IF NOT EXISTS directory_requests (
+  id uuid PRIMARY KEY,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  item_id uuid NOT NULL REFERENCES directory_items(id) ON DELETE CASCADE,
+  version text,
+  stage text NOT NULL CHECK (stage IN ('org', 'deployment')),
+  requested_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  note text NOT NULL DEFAULT '',
+  status text NOT NULL DEFAULT 'pending'
+    CHECK (status IN ('pending', 'approved', 'rejected', 'cancelled')),
+  decided_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  decided_at timestamptz,
+  -- 组织管理员批准后升级到 stage deployment 时记下批准人与时间（最终决定人仍记 decided_by）
+  org_decided_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  org_decided_at timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE UNIQUE INDEX IF NOT EXISTS directory_requests_pending_uq
+  ON directory_requests (org_id, item_id)
+  WHERE status = 'pending';
+CREATE INDEX IF NOT EXISTS directory_requests_stage_idx
+  ON directory_requests (stage, status, created_at);
+
+-- 企业管理员批准某组织安装 needs_approval 条目（跨版本有效）。
+CREATE TABLE IF NOT EXISTS directory_org_grants (
+  item_id uuid NOT NULL REFERENCES directory_items(id) ON DELETE CASCADE,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  granted_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  granted_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (item_id, org_id)
+);
+
+-- 应用在组织里的安装（C31）：失败的安装留行（status failed，error 只含步骤与错误码），可以重新安装。
+CREATE TABLE IF NOT EXISTS app_installs (
+  id uuid PRIMARY KEY,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  item_id uuid NOT NULL REFERENCES directory_items(id) ON DELETE RESTRICT,
+  version text NOT NULL,
+  status text NOT NULL CHECK (status IN ('installing', 'installed', 'failed', 'uninstalling')),
+  installed_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  installed_at timestamptz NOT NULL DEFAULT now(),
+  error jsonb
+);
+CREATE UNIQUE INDEX IF NOT EXISTS app_installs_live_uq
+  ON app_installs (org_id, item_id)
+  WHERE status <> 'failed';
+
+-- 应用安装的组件：created = 本次安装新建（false = 之前已存在）；技能新增版本时记 skill_version。
+CREATE TABLE IF NOT EXISTS app_install_components (
+  install_id uuid NOT NULL REFERENCES app_installs(id) ON DELETE CASCADE,
+  kind text NOT NULL CHECK (kind IN ('plugin', 'connector', 'skill')),
+  ref text NOT NULL,
+  created boolean NOT NULL,
+  skill_version integer,
+  PRIMARY KEY (install_id, kind, ref)
+);
+
+-- 从目录安装的连接器 / 技能记下来源条目与版本（应用的组件记应用条目）。
+ALTER TABLE connectors ADD COLUMN IF NOT EXISTS directory_item_id uuid
+  REFERENCES directory_items(id) ON DELETE SET NULL;
+ALTER TABLE connectors ADD COLUMN IF NOT EXISTS directory_version text;
+-- 模板的 defaultToolPolicies：授权码连接器安装时没有工具快照，首个快照时按它设默认策略（policy_source 'template'）
+ALTER TABLE connectors ADD COLUMN IF NOT EXISTS template_tool_policies jsonb;
+ALTER TABLE skills ADD COLUMN IF NOT EXISTS directory_item_id uuid
+  REFERENCES directory_items(id) ON DELETE SET NULL;
+ALTER TABLE skills ADD COLUMN IF NOT EXISTS directory_version text;
+-- 每个技能版本记自己的来源（自定义上传为 NULL）：退回版本时技能的来源跟着退回
+ALTER TABLE skill_versions ADD COLUMN IF NOT EXISTS directory_item_id uuid
+  REFERENCES directory_items(id) ON DELETE SET NULL;
+ALTER TABLE skill_versions ADD COLUMN IF NOT EXISTS directory_version text;
+
+-- 把插件带进部署的全部目录条目（插件条目装到部署、应用包确认时 install / upgrade 的插件）。同一插件可以有多个
+-- 来源；组织直接启用（不经某个条目安装）时按全部来源的策略判定，最严格的生效（C22）。不经目录安装的插件没有行；
+-- 插件从部署卸载（删安装记录）时同一事务删掉它的行，之后不经目录重装不受旧条目约束。
+CREATE TABLE IF NOT EXISTS plugin_directory_sources (
+  plugin text NOT NULL,
+  item_id uuid NOT NULL REFERENCES directory_items(id) ON DELETE CASCADE,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (plugin, item_id)
+);
+INSERT INTO plugin_directory_sources (plugin, item_id)
+  SELECT name, directory_item_id FROM plugin_installs WHERE directory_item_id IS NOT NULL
+  ON CONFLICT DO NOTHING;
+
+-- F-Z：模板安装的默认策略记 policy_source 'template'（约束名改名后不变）。
+ALTER TABLE connector_tools DROP CONSTRAINT IF EXISTS app_tools_policy_source_check;
+ALTER TABLE connector_tools DROP CONSTRAINT IF EXISTS connector_tools_policy_source_check;
+ALTER TABLE connector_tools ADD CONSTRAINT connector_tools_policy_source_check
+  CHECK (policy_source IN ('derived', 'admin', 'template'));

package/src/migrations/0038_channel_inbound_mode.sql

@@ -0,0 +1,6 @@
+-- M7 T4 (E11-D): per-connection inbound mode. 'long_connection' (default) is held by a gateway
+-- replica's supervisor; 'webhook' receives platform callbacks on the gateway route
+-- POST /channels/webhook/<id> and is skipped by the supervisor scan.
+ALTER TABLE channel_connections
+  ADD COLUMN IF NOT EXISTS inbound_mode text NOT NULL DEFAULT 'long_connection'
+    CHECK (inbound_mode IN ('long_connection', 'webhook'));

package/src/migrations/0039_channel_card_pending.sql

@@ -0,0 +1,8 @@
+-- M7 T5a: outbound delivery records an approval / question card before sending it, so a click on a
+-- card that is already visible on the platform is accepted (Ruling A13 finds the row). The row is
+-- 'pending' with no message_id until the send returns; the transaction that advances
+-- channel_deliveries.last_seq fills message_id and sets 'sent'. Existing rows were all sent.
+ALTER TABLE channel_card_messages ALTER COLUMN message_id DROP NOT NULL;
+ALTER TABLE channel_card_messages
+  ADD COLUMN IF NOT EXISTS status text NOT NULL DEFAULT 'sent'
+    CHECK (status IN ('pending', 'sent'));

package/src/migrations/0040_usage_report_sweep.sql

@@ -0,0 +1,10 @@
+-- M7 T16 (Ruling R13): the usage.report sweeper re-enqueues recent `usage` events so a delivery is
+-- never lost when the fast-path enqueue fails. It scans by created_at; the partial index keeps that
+-- cheap. The single-row table holds the sweep watermark (advanced by the maintenance job).
+CREATE INDEX IF NOT EXISTS conversation_events_usage_idx
+  ON conversation_events (created_at) WHERE type = 'usage';
+CREATE TABLE IF NOT EXISTS usage_report_sweep (
+  id smallint PRIMARY KEY DEFAULT 1 CHECK (id = 1),
+  watermark timestamptz NOT NULL,
+  updated_at timestamptz NOT NULL DEFAULT now()
+);

package/src/migrations/0041_rename_plugins_to_extensions.sql

@@ -0,0 +1,38 @@
+-- Phase 0a terminology: the kernel's plugin domain becomes the extension domain. The nine plugin_*
+-- tables are renamed to extension_* (plugin_directory_sources -> extension_catalog_sources); the
+-- `plugin` text columns keep their name (the value is the extension's name). Index, FK and PK names
+-- are not renamed (as in 0033). The package / install `source` value 'directory' becomes 'catalog'.
+-- PG schemas plugin_<name> are not touched. No compatibility views (nothing is released yet).
+
+-- capybara:allow-destructive table rename; code is renamed in the same release (project not released, no compatibility layer)
+ALTER TABLE IF EXISTS plugin_packages RENAME TO extension_packages;
+-- capybara:allow-destructive table rename; code is renamed in the same release (project not released, no compatibility layer)
+ALTER TABLE IF EXISTS plugin_blobs RENAME TO extension_blobs;
+-- capybara:allow-destructive table rename; code is renamed in the same release (project not released, no compatibility layer)
+ALTER TABLE IF EXISTS plugin_installs RENAME TO extension_installs;
+-- capybara:allow-destructive table rename; code is renamed in the same release (project not released, no compatibility layer)
+ALTER TABLE IF EXISTS plugin_name_owners RENAME TO extension_name_owners;
+-- capybara:allow-destructive table rename; code is renamed in the same release (project not released, no compatibility layer)
+ALTER TABLE IF EXISTS plugin_replica_status RENAME TO extension_replica_status;
+-- capybara:allow-destructive table rename; code is renamed in the same release (project not released, no compatibility layer)
+ALTER TABLE IF EXISTS plugin_permission_snapshots RENAME TO extension_permission_snapshots;
+-- capybara:allow-destructive table rename; code is renamed in the same release (project not released, no compatibility layer)
+ALTER TABLE IF EXISTS plugin_org_configs RENAME TO extension_org_configs;
+-- capybara:allow-destructive table rename; code is renamed in the same release (project not released, no compatibility layer)
+ALTER TABLE IF EXISTS plugin_deployment_configs RENAME TO extension_deployment_configs;
+-- capybara:allow-destructive table rename; code is renamed in the same release (project not released, no compatibility layer)
+ALTER TABLE IF EXISTS plugin_directory_sources RENAME TO extension_catalog_sources;
+
+-- source 'directory' -> 'catalog': drop the CHECK (under its 0030 name, or ours on a second run),
+-- rewrite the rows, add it back. The whole file runs in one transaction, so this is repeatable.
+ALTER TABLE extension_packages DROP CONSTRAINT IF EXISTS plugin_packages_source_check;
+ALTER TABLE extension_packages DROP CONSTRAINT IF EXISTS extension_packages_source_check;
+UPDATE extension_packages SET source = 'catalog' WHERE source = 'directory';
+ALTER TABLE extension_packages ADD CONSTRAINT extension_packages_source_check
+  CHECK (source IN ('npm', 'file', 'catalog'));
+
+ALTER TABLE extension_installs DROP CONSTRAINT IF EXISTS plugin_installs_source_check;
+ALTER TABLE extension_installs DROP CONSTRAINT IF EXISTS extension_installs_source_check;
+UPDATE extension_installs SET source = 'catalog' WHERE source = 'directory';
+ALTER TABLE extension_installs ADD CONSTRAINT extension_installs_source_check
+  CHECK (source IN ('npm', 'file', 'catalog'));