@capybara-hq/kernel 0.0.0-stage → 0.1.0-rc.1

package/dist/db/kernel-schema.d.ts

@@ -0,0 +1,1122 @@
+import type { SkillInvocation } from "@capybara-hq/plugin-sdk";
+import type { ColumnType, Generated, Kysely } from "kysely";
+/** 带默认值的时间戳列：插入可省略，读出为 Date。 */
+type Ts = ColumnType<Date, Date | string | undefined, Date | string>;
+type TsNullable = ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
+/** jsonb 列：写入时传 JSON 字符串，读出为已解析对象。 */
+type Json<T = Record<string, unknown>> = ColumnType<T, string | undefined, string>;
+export interface AccountsTable {
+    id: string;
+    display_name: string;
+    email: string | null;
+    email_verified: Generated<boolean>;
+    status: Generated<"active" | "disabled">;
+    is_enterprise_admin: Generated<boolean>;
+    created_at: Ts;
+    updated_at: Ts;
+}
+export interface IdentitiesTable {
+    source: string;
+    external_id: string;
+    account_id: string;
+    email: string | null;
+    email_verified: Generated<boolean>;
+    profile: Json;
+    created_at: Ts;
+    /** 0019：身份行如何建立（Ruling A18）；null 为旧行，按 `sso` 处理。 */
+    linked_via: ColumnType<LinkedVia | null, LinkedVia | null | undefined, LinkedVia | null>;
+}
+/** 身份行的建立方式：IM 绑定链接、第三方登录、通讯录同步、本地登录名。 */
+export type LinkedVia = "bind" | "sso" | "directory" | "local";
+export interface LocalPasswordsTable {
+    account_id: string;
+    password_hash: string;
+    updated_at: Ts;
+}
+export interface OrgsTable {
+    id: string;
+    slug: string;
+    name: string;
+    created_by: string | null;
+    /** 0010：组织级设置（插入可省略，用列默认值 `{}`；写入传 JSON 字符串）。 */
+    settings: Json;
+    created_at: Ts;
+    deleted_at: TsNullable;
+    /** 0021：已删除组织的对象存储清理完成时间（storage/purge.ts）；插入可省略。 */
+    storage_purged_at: TsNullable;
+    /** 0021：清理任务的认领时间（认领超时后可重新认领）；插入可省略。 */
+    storage_purge_claimed_at: TsNullable;
+}
+export interface MembershipsTable {
+    org_id: string;
+    account_id: string;
+    role: "owner" | "admin" | "member" | "guest";
+    created_at: Ts;
+    updated_at: Ts;
+    /** 0017：成员关系来源；null = 手动 / 邀请，`"directory:<插件名>"` = 通讯录同步加入。 */
+    source: ColumnType<string | null, string | null | undefined, string | null>;
+}
+export interface InvitationsTable {
+    id: string;
+    org_id: string;
+    role: "admin" | "member" | "guest";
+    token_hash: string;
+    created_by: string;
+    created_at: Ts;
+    expires_at: ColumnType<Date, Date | string, Date | string>;
+    accepted_at: TsNullable;
+    accepted_by: string | null;
+    revoked_at: TsNullable;
+}
+export interface SessionsTable {
+    id: string;
+    account_id: string;
+    current_org_id: string | null;
+    refresh_hash: string;
+    prev_refresh_hash: string | null;
+    rotated_at: TsNullable;
+    user_agent: string | null;
+    ip: string | null;
+    created_at: Ts;
+    last_used_at: Ts;
+    expires_at: ColumnType<Date, Date | string, Date | string>;
+    revoked_at: TsNullable;
+}
+export interface ApiTokensTable {
+    id: string;
+    kind: "personal" | "service";
+    account_id: string | null;
+    org_id: string | null;
+    role: "admin" | "member" | "guest" | null;
+    name: string;
+    token_hash: string;
+    created_by: string;
+    created_at: Ts;
+    last_used_at: TsNullable;
+    expires_at: TsNullable;
+    revoked_at: TsNullable;
+}
+export interface DeploymentSettingsTable {
+    key: string;
+    value: ColumnType<unknown, string, string>;
+    updated_by: string | null;
+    updated_at: Ts;
+}
+export interface ExtensionOrgConfigsTable {
+    plugin: string;
+    org_id: string;
+    enabled: Generated<boolean>;
+    /** null when there is no config. */
+    config: ColumnType<Record<string, unknown> | null, string | null | undefined, string | null>;
+    updated_by: string | null;
+    updated_at: Ts;
+}
+export interface AuditEventsTable {
+    id: Generated<string>;
+    at: Ts;
+    actor_account_id: string | null;
+    actor_token_id: string | null;
+    org_id: string | null;
+    action: string;
+    target: string | null;
+    detail: Json;
+}
+/** 0016, renamed in 0041: the approved permission snapshot of an extension. */
+export interface ExtensionPermissionSnapshotsTable {
+    plugin: string;
+    version: string;
+    /** The normalized permission set (see extensions/permission-set.ts). */
+    permissions: Json<unknown>;
+    approved_by: string | null;
+    approved_at: Ts;
+    /** `bootstrap` (0050): approved by the bootstrap step (core's release vouched for it). */
+    source: "cli" | "auto" | "web" | "bootstrap";
+}
+/** 0002_secrets.sql：加密值（读写走 `createSecrets`，这里只供按键查询是否存在）。 */
+export interface SecretsTable {
+    namespace: string;
+    org_id: string;
+    key: string;
+    ciphertext: Buffer;
+    updated_at: Ts;
+}
+/** 0005_agents.sql：agent 当前元数据（定义在 agent_versions）。 */
+export interface AgentsTable {
+    id: string;
+    org_id: string;
+    owner_account_id: string;
+    visibility: "private" | "org" | "members";
+    org_role: Generated<"admin" | "member" | "guest">;
+    current_version: number;
+    needs_reassignment: Generated<boolean>;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0005_agents.sql：agent 定义的版本，只追加。 */
+export interface AgentVersionsTable {
+    agent_id: string;
+    version: number;
+    definition: Json;
+    created_by: string;
+    created_at: Ts;
+}
+/** 0005_agents.sql：visibility='members' 的 agent 名单。 */
+export interface AgentMembersTable {
+    agent_id: string;
+    account_id: string;
+}
+/** PG bigint：pg 驱动读出为字符串，读取方自行 `Number()`。 */
+type Int8 = ColumnType<string, number | string | undefined, number | string>;
+/** 0006_conversations.sql：会话；`last_seq` 为已分配的最大事件序号。 */
+export interface ConversationsTable {
+    id: string;
+    org_id: string;
+    agent_id: string;
+    account_id: string;
+    title: string | null;
+    last_seq: Int8;
+    consumed_seq: Int8;
+    created_at: Ts;
+    updated_at: Ts;
+    /** 0028：chat（普通对话）/ eval（整轮回放的隐藏对话）。 */
+    kind: ColumnType<ConversationKind, ConversationKind | undefined, ConversationKind>;
+    /** 0028：eval 对话所属的评测运行。 */
+    eval_run_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0053: a sub-agent's parent conversation (kind 'subagent' only). */
+    parent_conversation_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0053: the sub-agent type as resolved at the first dispatch (kind 'subagent' only). */
+    subagent_type: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0057: who wrote `title` (null = nobody yet). */
+    title_source: ColumnType<TitleSource | null, TitleSource | null | undefined, TitleSource | null>;
+    /** 0057: title-generation attempts made. */
+    title_attempts: ColumnType<number, number | undefined, number>;
+    /** 0057: the first message's clientMessageId (idempotent create on first send). */
+    create_request_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0058: the switched model / effort (`Selection`); null = never switched. */
+    selection: ColumnType<unknown | null, string | null | undefined, string | null>;
+    /** 0059: a run failed or was stopped with messages queued; the queue waits for resume. */
+    queue_paused: ColumnType<boolean, boolean | undefined, boolean>;
+    /** 0062: why the queue paused (`QueuePauseReason`); null when not paused or not recorded. */
+    queue_pause_reason: ColumnType<string | null, string | null | undefined, string | null>;
+}
+/** 0060: an org's order of file-preview@1 previewers (UI refresh B Task 11). */
+export interface FilePreviewersTable {
+    org_id: string;
+    plugin: string;
+    previewer_id: string;
+    position: number;
+    disabled: ColumnType<boolean, boolean | undefined, boolean>;
+}
+/** 0059: a queued message (not in the event log until sent). */
+export interface ConversationQueueTable {
+    id: string;
+    conversation_id: string;
+    account_id: string;
+    position: Int8;
+    text: string;
+    /** The content blocks after the text (`@` resources, uploaded file refs). */
+    content: Json<unknown>;
+    /** `@` resource metadata for `user_message.payload.attachments`. */
+    attachments: ColumnType<unknown, string | undefined, string>;
+    /** Uploaded files' display metadata `{ attachmentId, name, mediaType }[]`. */
+    files: ColumnType<unknown, string | undefined, string>;
+    client_message_id: string;
+    /** The model the message picks (`{ provider, model }`), or null (0061). */
+    model: ColumnType<unknown, string | null | undefined, string | null>;
+    /** The effort the message picks, or null (0061). */
+    effort: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0062: the `user_message.skill` record of a queued skill invocation, or null. */
+    skill: ColumnType<unknown, string | null | undefined, string | null>;
+    created_at: Ts;
+    updated_at: Ts;
+}
+export type TitleSource = "generated" | "manual";
+/** chat; eval (a hidden full-run replay conversation); subagent (0053: a sub-agent's conversation). */
+export type ConversationKind = "chat" | "eval" | "subagent";
+/** 0006_conversations.sql：会话事件日志，只追加。 */
+export interface ConversationEventsTable {
+    conversation_id: string;
+    seq: Int8;
+    type: string;
+    run_id: string | null;
+    idem_key: string | null;
+    payload: Json<unknown>;
+    created_at: Ts;
+}
+/** 0006_conversations.sql：一次 agent 运行。 */
+export interface RunsTable {
+    id: string;
+    conversation_id: string;
+    status: "queued" | "running" | "waiting" | "completed" | "failed" | "aborted";
+    agent_version: number;
+    trigger_account_id: string;
+    /** 0008：创建运行时最新 user_message 的 seq（终态时 consumed_seq 至少推进到它）。 */
+    trigger_seq: Int8;
+    created_at: Ts;
+    started_at: TsNullable;
+    finished_at: TsNullable;
+    /** 0012：进入 waiting 的时刻（续跑时清空）。 */
+    waiting_since: TsNullable;
+    /** 0012：累计等待时长（毫秒），不计入运行时长。 */
+    waited_ms: Int8;
+    /** 0012：续跑任务的 jobId；为空表示按触发消息生成的 jobId。 */
+    job_id: string | null;
+    /** 0012：最近一次（续跑）回到 queued 的时刻。 */
+    queued_at: TsNullable;
+    /** 0053: tokens used by this run's sub-agents (the parent run's budget counter). */
+    subagent_tokens_used: Int8;
+    /** 0054: when this run's `subagents` wait expires (set while it waits on sub-agents). */
+    wait_expires_at: TsNullable;
+}
+/** 0053: one row per sub-agent dispatch (an `agent` call of a parent run). */
+export interface SubagentDispatchesTable {
+    parent_run_id: string;
+    parent_call_id: string;
+    parent_conversation_id: string;
+    step: number;
+    child_conversation_id: string;
+    child_run_id: string;
+    /** A follow-up to an existing sub-agent, not a new one. */
+    resumed: ColumnType<boolean, boolean | undefined, boolean>;
+    created_at: Ts;
+}
+/** 0053: an agent template installed in an org from a plugin. */
+export interface AgentTemplatesTable {
+    id: string;
+    org_id: string;
+    name: string;
+    catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** The plugin that installed it (`NOT NULL`, 0053): the roster type is `<plugin>:<name>`. */
+    plugin_name: string;
+    current_version: number;
+    deleted_at: TsNullable;
+    created_at: Ts;
+    updated_at: Ts;
+}
+/** 0053: one version of an agent template; `definition` is the parsed frontmatter and body. */
+export interface AgentTemplateVersionsTable {
+    template_id: string;
+    version: number;
+    definition: Json<unknown>;
+    source_format: ColumnType<SourceFormat, SourceFormat | undefined, SourceFormat>;
+    catalog_version: ColumnType<string | null, string | null | undefined, string | null>;
+    created_at: Ts;
+}
+/**
+ * 0010_tools.sql（0033 由 `apps` 改名）：已安装的连接器（远端服务实例）。列 `connector` 是连接器插件的 kind，
+ * 改名后叫 `connectors.connector` 有点别扭，但为避免多一次 RENAME 保持原名。
+ */
+export interface ConnectorsTable {
+    id: string;
+    org_id: string;
+    slug: string;
+    name: string;
+    /** 连接器 kind（`Connector.kind`，如 `mcp`），由 `ToolRegistry.connector(kind)` 查找实现。 */
+    connector: string;
+    /** jsonb 带默认值：Json 的插入类型本身已可省略，不再包 Generated（嵌套会让插入类型失配）。 */
+    endpoint: Json<unknown>;
+    /** `{type, ownership: "org" | "personal", ...非密钥字段}`；凭据在 secrets。 */
+    auth: Json<unknown>;
+    status: Generated<"active" | "disabled">;
+    created_by: string;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+    /** 0015：最近一次成功拿到工具清单的时间；为空 = 从未拍过快照（首个快照按安装处理）。 */
+    tools_synced_at: TsNullable;
+    /**
+     * 0037, renamed in 0042: the source item (an app's template records the app item) and version
+     * when installed from a catalog template.
+     */
+    catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
+    catalog_version: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0037：模板的 defaultToolPolicies（授权码连接器在首个快照时应用）。 */
+    template_tool_policies: ColumnType<Record<string, "allow" | "ask" | "deny"> | null, string | null | undefined, string | null>;
+}
+/** 0010_tools.sql（0033 由 `app_tools` 改名）：连接器暴露的工具。 */
+export interface ConnectorToolsTable {
+    connector_id: string;
+    name: string;
+    spec: Json<unknown>;
+    spec_hash: string;
+    status: "enabled" | "disabled" | "pending_review";
+    default_policy: "allow" | "ask" | "deny";
+    reviewed_at: TsNullable;
+    /** 0013：工具来源（`resources` = 内核为支持 resources 的连接器补上的两个工具）。 */
+    source: Generated<"connector" | "resources">;
+    /** 0015：变化后待复核的新定义（复核前 spec / spec_hash / source 仍是旧的）。 */
+    pending_spec: ColumnType<unknown, string | null | undefined, string | null>;
+    pending_spec_hash: string | null;
+    pending_source: "connector" | "resources" | null;
+    /** 0015：默认策略的来历（admin = 管理员设定，复核通过后保留；derived = 按注解重新推导）。 */
+    policy_source: Generated<"derived" | "admin" | "template">;
+    /** 0015：远端不再提供该工具的时间（工具停用，行保留）。 */
+    missing_since: TsNullable;
+}
+/** 0010_tools.sql：「以后都允许」。 */
+export interface ToolGrantsTable {
+    org_id: string;
+    account_id: string;
+    agent_id: string;
+    tool_key: string;
+    spec_hash: string;
+    /** 连接器工具的来源连接器（插件 / 内置工具为 null；0033 由 `app_id` 改名）；授权只对同一个连接器有效。 */
+    connector_id: string | null;
+    created_at: Ts;
+}
+/** 0010_tools.sql：「本会话都允许」。 */
+export interface ConversationToolGrantsTable {
+    conversation_id: string;
+    tool_key: string;
+    spec_hash: string;
+    /** 同 `ToolGrantsTable.connector_id`。 */
+    connector_id: string | null;
+}
+/** 0010_tools.sql：工具调用审批；requested_for 与 approver_role 至少一个非空。 */
+export interface ApprovalsTable {
+    id: string;
+    org_id: string;
+    conversation_id: string;
+    run_id: string;
+    call_id: string;
+    tool_key: string;
+    /** jsonb 带默认值：Json 的插入类型本身已可省略。 */
+    input: Json<unknown>;
+    requested_for: string | null;
+    approver_role: string | null;
+    status: Generated<"pending" | "approved" | "denied" | "expired" | "cancelled">;
+    scope: "once" | "session" | "always" | null;
+    decided_by: string | null;
+    decided_at: TsNullable;
+    expires_at: Date | string;
+    created_at: Ts;
+    /** 0011：所批准的工具定义指纹（写授权用）。 */
+    spec_hash: string;
+    /** 0011：连接器工具的来源连接器（0033 由 `app_id` 改名）。 */
+    connector_id: string | null;
+    /** 0012：同一调用的第几次审批（从 1 起；工具定义变化后重新审批时递增）。 */
+    attempt: Generated<number>;
+    /** 0056: the reason given with a denial (null without one). */
+    deny_reason: Generated<string | null>;
+}
+/** 0010_tools.sql：ask_user 提问。 */
+export interface QuestionsTable {
+    id: string;
+    org_id: string;
+    conversation_id: string;
+    run_id: string;
+    call_id: string;
+    spec: Json<unknown>;
+    status: Generated<"pending" | "answered" | "expired" | "cancelled">;
+    answer: ColumnType<unknown, string | null | undefined, string | null>;
+    answered_by: string | null;
+    answered_at: TsNullable;
+    expires_at: Date | string;
+    created_at: Ts;
+    /** 0012：同一调用的第几轮输入请求（从 1 起）。 */
+    attempt: Generated<number>;
+}
+/** 0010_tools.sql：超大工具输出的存档。 */
+export interface ToolOutputsTable {
+    id: string;
+    org_id: string;
+    conversation_id: string;
+    call_id: string;
+    size_chars: number;
+    line_count: number;
+    content: string;
+    created_at: Ts;
+    expires_at: Date | string;
+}
+/** 0014_tool_specs.sql：工具定义快照（内容寻址，只增不改）。 */
+export interface ToolSpecsTable {
+    spec_hash: string;
+    spec: Json<unknown>;
+    created_at: Ts;
+}
+/** bytea 列：读出为 Buffer，写入可传 Buffer / Uint8Array。 */
+type Bytea = ColumnType<Buffer, Buffer | Uint8Array, Buffer | Uint8Array>;
+/** 0007_checkpoints.sql：LangGraph checkpoint（KyselyCheckpointSaver）。 */
+export interface LgCheckpointsTable {
+    thread_id: string;
+    checkpoint_ns: Generated<string>;
+    checkpoint_id: string;
+    parent_checkpoint_id: string | null;
+    checkpoint_type: string;
+    checkpoint: Bytea;
+    metadata_type: string;
+    metadata: Bytea;
+    created_at: Ts;
+}
+/** 0007_checkpoints.sql：checkpoint 的 pending writes。 */
+export interface LgCheckpointWritesTable {
+    thread_id: string;
+    checkpoint_ns: Generated<string>;
+    checkpoint_id: string;
+    task_id: string;
+    idx: number;
+    channel: string;
+    value_type: string;
+    value: Bytea;
+    task_path: Generated<string>;
+}
+/** 0018_channels.sql：组织的渠道连接（非密钥配置；密钥在 secrets `channels:<id>:config`）。 */
+export interface ChannelConnectionsTable {
+    id: string;
+    org_id: string;
+    plugin: string;
+    name: string;
+    agent_id: string;
+    config: Json;
+    unbound_policy: Generated<"bind" | "anonymous">;
+    status: Generated<"active" | "disabled" | "error">;
+    /** 0038_channel_inbound_mode.sql: how inbound events arrive (long connection by default). */
+    inbound_mode: Generated<"long_connection" | "webhook">;
+    last_error: string | null;
+    bot_user_id: string | null;
+    tenant_id: string | null;
+    created_by: string;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0018_channels.sql：IM 话题 ↔ 会话（未归档的行在 (连接, chat, thread_key, 账号) 上唯一）。 */
+export interface ChannelThreadsTable {
+    id: string;
+    connection_id: string;
+    chat_id: string;
+    thread_key: string;
+    account_id: string | null;
+    conversation_id: string;
+    created_at: Ts;
+    archived_at: TsNullable;
+}
+/** 0018_channels.sql：会话的 IM 投递目标与已投递到的事件序号（Task 11）。 */
+export interface ChannelDeliveriesTable {
+    conversation_id: string;
+    connection_id: string;
+    target: Json<unknown>;
+    last_seq: Int8;
+    draft_message_id: string | null;
+    fail_seq: ColumnType<string | null, number | string | null | undefined, number | string | null>;
+    fail_count: Generated<number>;
+    updated_at: Ts;
+}
+/** 0018_channels.sql：出站投递发出的审批 / 提问卡片对应的 IM 消息（Task 11，用于更新卡片状态）。 */
+export interface ChannelCardMessagesTable {
+    conversation_id: string;
+    connection_id: string;
+    card_kind: "approval" | "question";
+    card_id: string;
+    /** 0039: null while the row is `pending` (recorded before the send returned). */
+    message_id: string | null;
+    /** 0039: `pending` = recorded before sending; `sent` = message_id is known. */
+    status: Generated<"pending" | "sent">;
+    target: Json<unknown>;
+    created_at: Ts;
+}
+/** 0018_channels.sql：每个组织一个的匿名访客账号。 */
+export interface OrgAnonymousAccountsTable {
+    org_id: string;
+    account_id: string;
+    created_at: Ts;
+}
+/** 0019：通讯录排除（Ruling A20）——手动移出 / 离开的通讯录成员，同步不再加回。 */
+export interface DirectoryExclusionsTable {
+    org_id: string;
+    account_id: string;
+    plugin: string;
+    created_at: Ts;
+    created_by: string | null;
+}
+/** 0022_attachments.sql：对话附件（字节在对象存储，见 conversations/attachments.service.ts）。 */
+export interface AttachmentsTable {
+    id: string;
+    org_id: string;
+    conversation_id: string | null;
+    account_id: string;
+    name: string;
+    content_type: string;
+    size: Int8;
+    object_key: string;
+    status: "pending" | "ready" | "deleting";
+    etag: string | null;
+    pages: number | null;
+    created_at: Ts;
+    expires_at: TsNullable;
+    /** 0024：上传用途（技能包不能绑定到消息）。 */
+    purpose: ColumnType<AttachmentPurpose, AttachmentPurpose | undefined, AttachmentPurpose>;
+}
+/** 预签名上传的用途：对话附件 / 技能包 zip。 */
+export type AttachmentPurpose = "chat" | "skill-package";
+/** 技能版本的清单（`skill_versions.manifest`）。 */
+export interface SkillManifest {
+    name: string;
+    description: string;
+    files: {
+        path: string;
+        size: number;
+        sha256: string;
+    }[];
+    /**
+     * Phase D: how the version can be invoked, read from its SKILL.md when it was written. Absent
+     * means `{ model: true, user: true }` (every version written before phase D, and ordinary skills,
+     * whose manifest is unchanged). No backfill (decided 2026-10-27).
+     */
+    invocation?: SkillInvocation;
+}
+/** 0024_skills.sql：技能（组织技能库 / agent 自己的技能）。 */
+export interface SkillsTable {
+    id: string;
+    org_id: string;
+    scope: "org" | "agent";
+    agent_id: string | null;
+    name: string;
+    description: string;
+    current_version: number;
+    created_by: string;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+    /**
+     * 0037, renamed in 0042: the source item (an app's skill records the app item) and version when
+     * installed from the catalog.
+     */
+    catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
+    catalog_version: ColumnType<string | null, string | null | undefined, string | null>;
+}
+/** 0024_skills.sql：技能的版本。 */
+export interface SkillVersionsTable {
+    skill_id: string;
+    version: number;
+    manifest: Json<SkillManifest>;
+    object_prefix: string;
+    created_by: string;
+    created_at: Ts;
+    /**
+     * 0037, renamed in 0042: this version's enterprise catalog source (NULL for custom uploads /
+     * agent skills).
+     */
+    catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
+    catalog_version: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0051: the format of the plugin this version came from. */
+    source_format: ColumnType<SourceFormat, SourceFormat | undefined, SourceFormat>;
+    /** 0051: the plugin suggests pinning this skill (spec §9.1). */
+    suggest_pinned: ColumnType<boolean, boolean | undefined, boolean>;
+}
+/** 0051: the format a plugin version was read from. */
+export type SourceFormat = "capybara" | "claude-code";
+/** 0026_skill_changes.sql：技能变更申请里提议的版本。 */
+export interface ProposedSkillVersion {
+    /** 已有技能的 id，或新技能预先分配的 id。 */
+    skillId: string;
+    /** 批准后预期的版本号（试用时目录里用它）。 */
+    version: number;
+    manifest: SkillManifest;
+}
+/** 0026_skill_changes.sql：共享 agent 的技能变更申请（R4）。 */
+export interface SkillChangeRequestsTable {
+    id: string;
+    org_id: string;
+    agent_id: string;
+    skill_id: string | null;
+    proposed_version: Json<ProposedSkillVersion>;
+    object_prefix: string;
+    requested_by_account: string;
+    requested_in_conversation: string;
+    status: Generated<"pending" | "approved" | "rejected" | "cancelled">;
+    decided_by: string | null;
+    decided_at: TsNullable;
+    created_at: Ts;
+}
+/** 0023_sandboxes.sql：按对话的沙箱（见 sandbox/sandbox.service.ts）。 */
+export interface SandboxesTable {
+    conversation_id: string;
+    org_id: string;
+    provider: string;
+    /** 提供方的 `SandboxHandle`；creating 时为 NULL。 */
+    handle: ColumnType<{
+        id: string;
+        [k: string]: unknown;
+    } | null, string | null | undefined, string | null>;
+    status: "creating" | "running" | "suspended" | "destroyed";
+    last_used_at: Ts;
+    running_since: TsNullable;
+    created_at: Ts;
+    suspended_at: TsNullable;
+    destroyed_at: TsNullable;
+    /** 防护号：锁内的每次 status / handle 写入都按它比较并加一。 */
+    generation: ColumnType<number, number | undefined, number>;
+    /** 曾经成功创建过实例（只会置 true）。 */
+    had_instance: ColumnType<boolean, boolean | undefined, boolean>;
+    /** 换提供方时留下的旧实例。 */
+    prev_provider: string | null;
+    prev_handle: ColumnType<{
+        id: string;
+        [k: string]: unknown;
+    } | null, string | null | undefined, string | null>;
+    sweep_failed_at: TsNullable;
+}
+/** pg numeric：驱动读出为字符串（精确小数），读取方自行 `Number()`。 */
+type Numeric = ColumnType<string, number | string, number | string>;
+type NumericNullable = ColumnType<string | null, number | string | null, number | string | null>;
+/** 0027_model_prices.sql：模型价格（每百万 token，币种为部署设置 priceCurrency）。 */
+export interface ModelPricesTable {
+    provider: string;
+    model: string;
+    input_per_mtok: Numeric;
+    output_per_mtok: Numeric;
+    cache_read_per_mtok: NumericNullable;
+    cache_write_per_mtok: NumericNullable;
+    updated_by: string | null;
+    updated_at: Ts;
+}
+/** 0029_model_purposes.sql：模型用途映射（org_id 为 null = 部署默认；组织可覆盖）。 */
+export interface ModelPurposeMappingsTable {
+    org_id: string | null;
+    purpose: string;
+    provider: string;
+    model: string;
+    params: Json;
+    updated_by: string | null;
+    updated_at: Ts;
+}
+/** 0028_evals.sql：评测集（一个集合对应一个 agent；软删除）。 */
+export interface EvalSetsTable {
+    id: Generated<string>;
+    org_id: string;
+    agent_id: string;
+    name: string;
+    description: ColumnType<string, string | undefined, string>;
+    rubric: string | null;
+    created_by: string;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0028_evals.sql：评测用例（某次运行的日志快照，不引用原对话）。 */
+export interface EvalCasesTable {
+    id: Generated<string>;
+    set_id: string;
+    org_id: string;
+    source_conversation_id: string;
+    source_run_id: string;
+    agent_version: number;
+    title: string;
+    snapshot: Json<unknown>;
+    snapshot_bytes: number;
+    replayable_steps: ColumnType<number, number | undefined, number>;
+    /** 两种回放模式的计划（`StoredCasePlan`），写入时算好。 */
+    plan_step: Json<unknown>;
+    plan_run: Json<unknown>;
+    /** 用例原版本的模型（`ModelRef`）；没有定义时为 null。 */
+    base_model: ColumnType<unknown | null, string | null | undefined, string | null>;
+    added_by: string;
+    created_at: Ts;
+}
+export type EvalRunStatus = "queued" | "running" | "completed" | "cancelled" | "capped" | "failed";
+/** 0028_evals.sql：评测运行（T4 起写入）。 */
+export interface EvalRunsTable {
+    id: Generated<string>;
+    org_id: string;
+    set_id: string;
+    mode: "step" | "run";
+    candidate: Json<unknown>;
+    judge: ColumnType<boolean, boolean | undefined, boolean>;
+    token_cap: Int8;
+    tokens_used: Int8;
+    status: ColumnType<EvalRunStatus, EvalRunStatus | undefined, EvalRunStatus>;
+    cases_total: number;
+    cases_done: ColumnType<number, number | undefined, number>;
+    consecutive_errors: ColumnType<number, number | undefined, number>;
+    error: ColumnType<unknown | null, string | null | undefined, string | null>;
+    estimate: Json<unknown>;
+    created_by: string;
+    created_at: Ts;
+    started_at: TsNullable;
+    finished_at: TsNullable;
+}
+export type EvalResultStatus = "pending" | "running" | "done" | "error" | "skipped";
+/** 0029：评委状态（pending = 结果已 done、评委还没做）。 */
+export type JudgeStatus = "none" | "pending" | "done" | "error" | "skipped";
+/** 0028_evals.sql：评测结果（每用例一行或每步一行，T4 起写入）。 */
+export interface EvalResultsTable {
+    id: Generated<string>;
+    run_id: string;
+    case_id: string;
+    org_id: string;
+    step: number | null;
+    model_call_seq: ColumnType<string | null, number | string | null | undefined, number | string | null>;
+    status: ColumnType<EvalResultStatus, EvalResultStatus | undefined, EvalResultStatus>;
+    baseline: ColumnType<unknown | null, string | null | undefined, string | null>;
+    candidate: ColumnType<unknown | null, string | null | undefined, string | null>;
+    diff: ColumnType<unknown | null, string | null | undefined, string | null>;
+    judge: ColumnType<unknown | null, string | null | undefined, string | null>;
+    drift: ColumnType<string[], string[] | undefined, string[]>;
+    error: ColumnType<unknown | null, string | null | undefined, string | null>;
+    eval_conversation_id: string | null;
+    claimed_by: ColumnType<string | null, string | null | undefined, string | null>;
+    judge_status: ColumnType<JudgeStatus, JudgeStatus | undefined, JudgeStatus>;
+    label: "pass" | "fail" | null;
+    label_note: string | null;
+    labeled_by: string | null;
+    labeled_at: TsNullable;
+    created_at: Ts;
+    updated_at: Ts;
+}
+/**
+ * 内核 schema（capybara）的表结构，逐列对应 0002_secrets.sql（secrets）、0003_identity.sql、
+ * 0005_agents.sql、0006_conversations.sql、0007_checkpoints.sql、0010_tools.sql、0011_approvals_spec.sql、0016_plugin_permissions.sql、0018_channels.sql 与 0019_identity_trust.sql。
+ */
+/** 0030, renamed in 0041: content-addressed extension packages (sha256 = the whole tgz). */
+export interface ExtensionPackagesTable {
+    sha256: string;
+    /** The extension manifest name. */
+    name: string;
+    /** The npm package name from package.json. */
+    package_name: string;
+    version: string;
+    size: Int8;
+    /**
+     * The plugin's reviewed extension section (`PluginExtensionSection` from plugin.json); rows stored
+     * before 0.1.0 hold the old `capybara` section of package.json (both carry the static manifest).
+     */
+    section: Json<unknown>;
+    blob_store: "object" | "pg";
+    source: "npm" | "file" | "catalog" | "bootstrap";
+    source_ref: string;
+    uploaded_by: string | null;
+    created_at: Ts;
+}
+/** 0030, renamed in 0041: package bytes when there is no object storage. */
+export interface ExtensionBlobsTable {
+    sha256: string;
+    bytes: Buffer;
+}
+/** 0030, renamed in 0041: one install record (desired state) per extension. */
+export interface ExtensionInstallsTable {
+    name: string;
+    sha256: string;
+    version: string;
+    source: "npm" | "file" | "catalog" | "bootstrap";
+    desired_state: ColumnType<"enabled" | "disabled", "enabled" | "disabled" | undefined>;
+    migrated_sha: string | null;
+    installed_by: string | null;
+    installed_at: Ts;
+    updated_by: string | null;
+    updated_at: Ts;
+    /** 0034 (F-AA): the source item when installed through the enterprise catalog. */
+    catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /**
+     * 0050: a required bootstrap plugin (enabled in every org without an org config row; cannot be
+     * disabled or uninstalled). Written only by the bootstrap step.
+     */
+    required: ColumnType<boolean, boolean | undefined, boolean>;
+}
+/** Which npm package owns an extension name (Ruling P3): written on first install, kept on uninstall. */
+export interface ExtensionNameOwnersTable {
+    name: string;
+    package_name: string;
+    created_at: Generated<Date>;
+}
+/** 0032, renamed in 0041: non-secret fields of the deployment-level extension config (secrets in `secrets`, org_id `_deployment`). */
+export interface ExtensionDeploymentConfigsTable {
+    plugin: string;
+    config: ColumnType<Record<string, unknown>, string | undefined, string>;
+    updated_by: string | null;
+    updated_at: Ts;
+}
+export interface ExtensionReplicaStatusTable {
+    replica_id: string;
+    plugin: string;
+    version: string;
+    sha256: string | null;
+    source: "config" | "install";
+    state: "loaded" | "failed" | "unloaded" | "pending";
+    reason: string | null;
+    detail: string | null;
+    /** The old version this replica still serves when this row's version did not load (see migration 0030). */
+    serving_version: Generated<string | null>;
+    http_replica_id: string | null;
+    heartbeat_at: Ts;
+}
+/** 0040: the usage.report sweeper's watermark (a single row, id = 1). */
+export interface UsageReportSweepTable {
+    id: ColumnType<number, number | undefined, never>;
+    watermark: Ts;
+    updated_at: ColumnType<Date, Date | string | undefined, Date | string>;
+}
+export interface KernelDatabase {
+    accounts: AccountsTable;
+    identities: IdentitiesTable;
+    local_passwords: LocalPasswordsTable;
+    orgs: OrgsTable;
+    memberships: MembershipsTable;
+    invitations: InvitationsTable;
+    sessions: SessionsTable;
+    api_tokens: ApiTokensTable;
+    deployment_settings: DeploymentSettingsTable;
+    extension_org_configs: ExtensionOrgConfigsTable;
+    audit_events: AuditEventsTable;
+    secrets: SecretsTable;
+    agents: AgentsTable;
+    agent_versions: AgentVersionsTable;
+    agent_members: AgentMembersTable;
+    conversations: ConversationsTable;
+    conversation_events: ConversationEventsTable;
+    conversation_queue: ConversationQueueTable;
+    file_previewers: FilePreviewersTable;
+    runs: RunsTable;
+    subagent_dispatches: SubagentDispatchesTable;
+    agent_templates: AgentTemplatesTable;
+    agent_template_versions: AgentTemplateVersionsTable;
+    lg_checkpoints: LgCheckpointsTable;
+    lg_checkpoint_writes: LgCheckpointWritesTable;
+    connectors: ConnectorsTable;
+    connector_tools: ConnectorToolsTable;
+    tool_grants: ToolGrantsTable;
+    conversation_tool_grants: ConversationToolGrantsTable;
+    approvals: ApprovalsTable;
+    questions: QuestionsTable;
+    tool_outputs: ToolOutputsTable;
+    tool_specs: ToolSpecsTable;
+    extension_permission_snapshots: ExtensionPermissionSnapshotsTable;
+    channel_connections: ChannelConnectionsTable;
+    channel_threads: ChannelThreadsTable;
+    channel_deliveries: ChannelDeliveriesTable;
+    channel_card_messages: ChannelCardMessagesTable;
+    org_anonymous_accounts: OrgAnonymousAccountsTable;
+    directory_exclusions: DirectoryExclusionsTable;
+    attachments: AttachmentsTable;
+    sandboxes: SandboxesTable;
+    skills: SkillsTable;
+    skill_versions: SkillVersionsTable;
+    skill_change_requests: SkillChangeRequestsTable;
+    model_prices: ModelPricesTable;
+    eval_sets: EvalSetsTable;
+    eval_cases: EvalCasesTable;
+    eval_runs: EvalRunsTable;
+    eval_results: EvalResultsTable;
+    model_purpose_mappings: ModelPurposeMappingsTable;
+    extension_packages: ExtensionPackagesTable;
+    extension_blobs: ExtensionBlobsTable;
+    extension_installs: ExtensionInstallsTable;
+    extension_replica_status: ExtensionReplicaStatusTable;
+    usage_report_sweep: UsageReportSweepTable;
+    extension_name_owners: ExtensionNameOwnersTable;
+    extension_deployment_configs: ExtensionDeploymentConfigsTable;
+    catalog_items: CatalogItemsTable;
+    catalog_item_versions: CatalogItemVersionsTable;
+    marketplaces: MarketplacesTable;
+    marketplace_entries: MarketplaceEntriesTable;
+    plugin_import_staging: PluginImportStagingTable;
+    catalog_requests: CatalogRequestsTable;
+    catalog_org_grants: CatalogOrgGrantsTable;
+    plugin_installs: PluginInstallsTable;
+    plugin_install_components: PluginInstallComponentsTable;
+    extension_catalog_sources: ExtensionCatalogSourcesTable;
+    bootstrap_runs: BootstrapRunsTable;
+}
+/** 0050: one row per bootstrap manifest the bootstrap step completed. */
+export interface BootstrapRunsTable {
+    /** sha256 (hex) of the bootstrap manifest. */
+    manifest_sha256: string;
+    completed_at: Ts;
+    results: ColumnType<unknown, string, string>;
+}
+/** 0034_directory.sql, renamed in 0042, one kind (plugin) since 0044: enterprise catalog items. */
+export interface CatalogItemsTable {
+    id: string;
+    /** The plugin name (one live item per name). */
+    name: string;
+    /** 0046: null for a git plugin without package.json. */
+    package_name: string | null;
+    publisher: string;
+    display_name: ColumnType<{
+        zh: string;
+        en: string;
+    } | null, string | null | undefined, string | null>;
+    description: string;
+    policy: ColumnType<"allow" | "needs_approval" | "disabled", "allow" | "needs_approval" | "disabled" | undefined, "allow" | "needs_approval" | "disabled">;
+    latest_version: string;
+    created_by: string | null;
+    created_at: Generated<Date>;
+    updated_at: Ts;
+    deleted_at: ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
+    /** 0035, renamed in 0042: the marketplace it was imported from (null once that is deleted). */
+    marketplace_id: ColumnType<string | null, string | null | undefined, string | null>;
+}
+/**
+ * 0034, renamed in 0042, reshaped in 0044: the versions of an enterprise catalog item. `manifest` is
+ * the normalized plugin.json (skills and connector templates listed explicitly); `extension_sha256`
+ * the plugin's extension package in `extension_packages` (null without an extension); `files` the
+ * files stored under `object_prefix` (skills, connector templates, icons).
+ */
+export interface CatalogItemVersionsTable {
+    item_id: string;
+    version: string;
+    manifest: Json<unknown>;
+    source: "file" | "npm" | "marketplace" | "git" | "bootstrap";
+    source_ref: string;
+    integrity: string | null;
+    /** 0046: where the plugin came from (git location, archive URL or npm registry). */
+    source_detail: ColumnType<Record<string, unknown> | null, string | null | undefined, string | null>;
+    /** 0046: the content digest of the imported files (null before phase A1). */
+    content_digest: ColumnType<string | null, string | null | undefined, string | null>;
+    object_prefix: string | null;
+    extension_sha256: string | null;
+    files: Json<{
+        path: string;
+        size: number;
+        sha256: string;
+    }[]>;
+    size: Int8;
+    imported_by: string | null;
+    imported_at: Generated<Date>;
+    /** 0051: the format the version was read from. */
+    source_format: ColumnType<SourceFormat, SourceFormat | undefined, SourceFormat>;
+    /** 0051: the translation report of a Claude Code plugin (null for a native plugin). */
+    translation: ColumnType<unknown | null, string | null | undefined, string | null>;
+    /** 0051: the root LICENSE text (at most 64 KiB). */
+    license_text: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0051: the root LICENSE was too long (or not UTF-8) to store. */
+    license_truncated: ColumnType<boolean, boolean | undefined, boolean>;
+}
+/** 0035_catalogs.sql, renamed in 0042: marketplaces (official / enterprise). */
+export interface MarketplacesTable {
+    id: string;
+    name: string;
+    url: string;
+    mirrors: Json<string[]>;
+    builtin: ColumnType<boolean, boolean | undefined, boolean>;
+    enabled: ColumnType<boolean, boolean | undefined, boolean>;
+    etag: ColumnType<string | null, string | null | undefined, string | null>;
+    last_refreshed_at: ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
+    last_status: ColumnType<"ok" | "error" | "never", "ok" | "error" | "never" | undefined, "ok" | "error" | "never">;
+    last_error: ColumnType<string | null, string | null | undefined, string | null>;
+    created_by: ColumnType<string | null, string | null | undefined, string | null>;
+    created_at: Generated<Date>;
+    /** 0046: http (a marketplace.json URL) or git (a repository). */
+    form: ColumnType<"http" | "git", "http" | "git" | undefined, "http" | "git">;
+    /** 0046: the git ref a git marketplace follows (null = the remote HEAD). */
+    ref: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0046: the commit of a git marketplace's last successful refresh. */
+    last_commit: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0046: the manifest's `owner.name` at the last successful refresh. */
+    owner_name: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0051: entries the last successful refresh could not store (`{ name, reason }[]`). */
+    skipped: ColumnType<{
+        name: string;
+        reason: string;
+    }[], string | undefined, string>;
+}
+/**
+ * 0035, renamed in 0042, reshaped in 0044: cached marketplace entries (replaced as a whole on each
+ * successful refresh). One row per `marketplace.json` entry, keyed `(source_id, name, version)`;
+ * `version` is `''` for an entry without one; `npm` is the npm package of an npm source (else null).
+ */
+export interface MarketplaceEntriesTable {
+    source_id: string;
+    name: string;
+    version: ColumnType<string, string | undefined, string>;
+    npm: ColumnType<string | null, string | null | undefined, string | null>;
+    entry: Json<unknown>;
+    /** 0047: the branch head of a branch-following git entry already imported (null: unknown). */
+    head_commit: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0048: the git tree oid of the entry's plugin directory (path entries; git entries with a path). */
+    tree_oid: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0051: the Claude marketplace entry's overlay (`ClaudeEntryOverlay`; null for a Capybara entry). */
+    claude: ColumnType<unknown | null, string | null | undefined, string | null>;
+    updated_at: Ts;
+}
+/**
+ * 0036_app_import_staging.sql, renamed in 0043, reshaped in 0044: a staged plugin import (written by
+ * prepare, deleted by confirm, expires after 24 hours). `manifest` holds what confirm writes.
+ */
+export interface PluginImportStagingTable {
+    id: string;
+    review: Json<unknown>;
+    manifest: Json<unknown>;
+    object_prefix: string | null;
+    source: Json<unknown>;
+    created_by: string | null;
+    created_at: Generated<Date>;
+    expires_at: ColumnType<Date, Date | string, Date | string>;
+}
+type NullableCol<T> = ColumnType<T | null, T | null | undefined, T | null>;
+/**
+ * 0037, renamed in 0042: an org's catalog requests (stage org = a member request; deployment =
+ * waiting for enterprise admin approval).
+ */
+export interface CatalogRequestsTable {
+    id: string;
+    org_id: string;
+    item_id: string;
+    version: NullableCol<string>;
+    stage: "org" | "deployment";
+    requested_by: string | null;
+    note: ColumnType<string, string | undefined, string>;
+    status: ColumnType<"pending" | "approved" | "rejected" | "cancelled", "pending" | "approved" | "rejected" | "cancelled" | undefined, "pending" | "approved" | "rejected" | "cancelled">;
+    decided_by: NullableCol<string>;
+    decided_at: NullableCol<Date>;
+    org_decided_by: NullableCol<string>;
+    org_decided_at: NullableCol<Date>;
+    created_at: Generated<Date>;
+}
+/**
+ * 0037, renamed in 0041: the catalog items that brought an extension into the deployment (plugin
+ * and app items).
+ */
+export interface ExtensionCatalogSourcesTable {
+    plugin: string;
+    item_id: string;
+    created_at: Generated<Date>;
+}
+/** 0037, renamed in 0042: an enterprise admin's approval for an org to install a needs_approval item. */
+export interface CatalogOrgGrantsTable {
+    item_id: string;
+    org_id: string;
+    granted_by: string | null;
+    granted_at: Generated<Date>;
+}
+/** 0037：应用在组织里的安装。 */
+export interface PluginInstallsTable {
+    id: string;
+    org_id: string;
+    item_id: string;
+    version: string;
+    /** 0049: `upgrading` while an in-place upgrade runs. */
+    status: "installing" | "installed" | "failed" | "uninstalling" | "upgrading";
+    installed_by: string | null;
+    installed_at: Generated<Date>;
+    error: ColumnType<unknown, string | null | undefined, string | null>;
+    /**
+     * 0049: the journal of the running upgrade, `{ id, from, to, startedAt, done }` with `done` the
+     * `UpgradeStep`s of catalog/plugin-install.ts (read by `journalEntries`); null otherwise.
+     */
+    upgrade: ColumnType<unknown, string | null | undefined, string | null>;
+}
+/**
+ * 0037: the components of a plugin install (created = this install created it); kind 'plugin'
+ * (0045) is a dependency install, ref = its plugin_installs id.
+ */
+export interface PluginInstallComponentsTable {
+    install_id: string;
+    /** 0053: 'agent_template', ref = the agent_templates id. */
+    kind: "extension" | "connector" | "skill" | "plugin" | "agent_template";
+    ref: string;
+    created: boolean;
+    skill_version: NullableCol<number>;
+    /** 0049: the connector template a connector component was created from (null otherwise). */
+    template_id: NullableCol<string>;
+    /**
+     * 0049: an upgrade removed the component from the plugin but kept it (an agent still uses it):
+     * "no longer in the plugin"; still this install's for uninstall.
+     */
+    dropped: ColumnType<boolean, boolean | undefined, boolean>;
+}
+export type KernelDb = Kysely<KernelDatabase>;
+/** 把无类型的 Kysely 实例收窄成内核 schema 视图（`capybara`）。 */
+export declare function kernelDb(db: Kysely<any>): KernelDb;
+export {};