@capybara-hq/kernel 0.1.0-rc.2 → 0.1.0-rc.20

package/src/migrations/0063_tool_keys_claude_code.sql

@@ -0,0 +1,220 @@
+-- Tool naming (spec docs/superpowers/specs/2026-10-29-tool-naming-claude-code-design.md §8.2):
+-- the release candidates' tool keys in mutable state become the current keys. Builtins by the
+-- frozen map of packages/kernel/src/tools/legacy-keys.ts (LEGACY_BUILTINS); an rc `<x>__<tool>`
+-- key becomes `mcp__<x>__<tool>` when `x` is a connector of the row's org (or the row records its
+-- connector) and `plugin__<x>__<tool>` when `x` is an extension of the deployment
+-- (extension_installs, or extension_name_owners for config-declared ones); when both or neither,
+-- the row stays and the kernel's startup notice `tools.legacy_key_unmapped` counts it.
+-- Keys in the current format never match. A grant whose new key already exists for the same
+-- owner is left as it is (the primary key). Decided approvals and answered questions are
+-- history and stay. Logs and recordings are never rewritten (§8). Idempotent: a second run
+-- matches nothing it could change.
+
+-- capybara:allow-destructive rewrites rc tool keys in place (the old keys no longer name a tool; the kernel reads only the new ones)
+UPDATE tool_grants g
+SET tool_key = m.new_key
+FROM (VALUES
+  ('sandbox_bash', 'Bash'), ('sandbox_read', 'Read'), ('sandbox_write', 'Write'),
+  ('sandbox_edit', 'Edit'), ('sandbox_glob', 'Glob'), ('sandbox_grep', 'Grep'),
+  ('sandbox_deliver', 'Deliver'), ('skill_load', 'Skill'), ('skill_write', 'SkillWrite'),
+  ('ask_user', 'AskUserQuestion'), ('read_tool_output', 'ReadToolOutput'),
+  ('tool_search', 'ToolSearch'), ('agent', 'Agent')
+) AS m(old_key, new_key)
+WHERE g.tool_key = m.old_key
+  AND NOT EXISTS (
+    SELECT 1 FROM tool_grants x
+    WHERE x.org_id = g.org_id AND x.account_id = g.account_id AND x.agent_id = g.agent_id
+      AND x.tool_key = m.new_key
+  );
+
+-- capybara:allow-destructive rewrites rc tool keys in place (the old keys no longer name a tool; the kernel reads only the new ones)
+UPDATE tool_grants g
+SET tool_key = CASE
+  WHEN g.connector_id IS NOT NULL OR (
+    EXISTS (SELECT 1 FROM connectors c
+            WHERE c.org_id = g.org_id AND c.deleted_at IS NULL
+              AND c.slug = split_part(g.tool_key, '__', 1))
+    AND split_part(g.tool_key, '__', 1) NOT IN (
+      SELECT name FROM extension_installs UNION SELECT name FROM extension_name_owners)
+  ) THEN 'mcp__' || g.tool_key
+  ELSE 'plugin__' || g.tool_key
+END
+WHERE g.tool_key ~ '^[a-z0-9][a-z0-9_-]*__.' AND g.tool_key !~ '^(mcp|plugin)__'
+  AND (
+    g.connector_id IS NOT NULL
+    OR (
+      EXISTS (SELECT 1 FROM connectors c
+              WHERE c.org_id = g.org_id AND c.deleted_at IS NULL
+                AND c.slug = split_part(g.tool_key, '__', 1))
+    ) <> (
+      split_part(g.tool_key, '__', 1) IN (
+        SELECT name FROM extension_installs UNION SELECT name FROM extension_name_owners)
+    )
+  )
+  AND NOT EXISTS (
+    SELECT 1 FROM tool_grants x
+    WHERE x.org_id = g.org_id AND x.account_id = g.account_id AND x.agent_id = g.agent_id
+      AND x.tool_key IN ('mcp__' || g.tool_key, 'plugin__' || g.tool_key)
+  );
+
+-- capybara:allow-destructive rewrites rc tool keys in place (the old keys no longer name a tool; the kernel reads only the new ones)
+UPDATE conversation_tool_grants g
+SET tool_key = m.new_key
+FROM (VALUES
+  ('sandbox_bash', 'Bash'), ('sandbox_read', 'Read'), ('sandbox_write', 'Write'),
+  ('sandbox_edit', 'Edit'), ('sandbox_glob', 'Glob'), ('sandbox_grep', 'Grep'),
+  ('sandbox_deliver', 'Deliver'), ('skill_load', 'Skill'), ('skill_write', 'SkillWrite'),
+  ('ask_user', 'AskUserQuestion'), ('read_tool_output', 'ReadToolOutput'),
+  ('tool_search', 'ToolSearch'), ('agent', 'Agent')
+) AS m(old_key, new_key)
+WHERE g.tool_key = m.old_key
+  AND NOT EXISTS (
+    SELECT 1 FROM conversation_tool_grants x
+    WHERE x.conversation_id = g.conversation_id AND x.tool_key = m.new_key
+  );
+
+-- capybara:allow-destructive rewrites rc tool keys in place (the old keys no longer name a tool; the kernel reads only the new ones)
+UPDATE conversation_tool_grants g
+SET tool_key = CASE
+  WHEN g.connector_id IS NOT NULL OR (
+    EXISTS (SELECT 1 FROM connectors c
+            WHERE c.org_id = v.org_id AND c.deleted_at IS NULL
+              AND c.slug = split_part(g.tool_key, '__', 1))
+    AND split_part(g.tool_key, '__', 1) NOT IN (
+      SELECT name FROM extension_installs UNION SELECT name FROM extension_name_owners)
+  ) THEN 'mcp__' || g.tool_key
+  ELSE 'plugin__' || g.tool_key
+END
+FROM conversations v
+WHERE v.id = g.conversation_id
+  AND g.tool_key ~ '^[a-z0-9][a-z0-9_-]*__.' AND g.tool_key !~ '^(mcp|plugin)__'
+  AND (
+    g.connector_id IS NOT NULL
+    OR (
+      EXISTS (SELECT 1 FROM connectors c
+              WHERE c.org_id = v.org_id AND c.deleted_at IS NULL
+                AND c.slug = split_part(g.tool_key, '__', 1))
+    ) <> (
+      split_part(g.tool_key, '__', 1) IN (
+        SELECT name FROM extension_installs UNION SELECT name FROM extension_name_owners)
+    )
+  )
+  AND NOT EXISTS (
+    SELECT 1 FROM conversation_tool_grants x
+    WHERE x.conversation_id = g.conversation_id
+      AND x.tool_key IN ('mcp__' || g.tool_key, 'plugin__' || g.tool_key)
+  );
+
+-- capybara:allow-destructive rewrites rc tool keys of pending approvals in place (resumed by run and call id, never by key)
+UPDATE approvals a
+SET tool_key = m.new_key
+FROM (VALUES
+  ('sandbox_bash', 'Bash'), ('sandbox_read', 'Read'), ('sandbox_write', 'Write'),
+  ('sandbox_edit', 'Edit'), ('sandbox_glob', 'Glob'), ('sandbox_grep', 'Grep'),
+  ('sandbox_deliver', 'Deliver'), ('skill_load', 'Skill'), ('skill_write', 'SkillWrite'),
+  ('ask_user', 'AskUserQuestion'), ('read_tool_output', 'ReadToolOutput'),
+  ('tool_search', 'ToolSearch'), ('agent', 'Agent')
+) AS m(old_key, new_key)
+WHERE a.status = 'pending' AND a.tool_key = m.old_key;
+
+-- capybara:allow-destructive rewrites rc tool keys of pending approvals in place (resumed by run and call id, never by key)
+UPDATE approvals a
+SET tool_key = CASE
+  WHEN a.connector_id IS NOT NULL OR (
+    EXISTS (SELECT 1 FROM connectors c
+            WHERE c.org_id = a.org_id AND c.deleted_at IS NULL
+              AND c.slug = split_part(a.tool_key, '__', 1))
+    AND split_part(a.tool_key, '__', 1) NOT IN (
+      SELECT name FROM extension_installs UNION SELECT name FROM extension_name_owners)
+  ) THEN 'mcp__' || a.tool_key
+  ELSE 'plugin__' || a.tool_key
+END
+WHERE a.status = 'pending'
+  AND a.tool_key ~ '^[a-z0-9][a-z0-9_-]*__.' AND a.tool_key !~ '^(mcp|plugin)__'
+  AND (
+    a.connector_id IS NOT NULL
+    OR (
+      EXISTS (SELECT 1 FROM connectors c
+              WHERE c.org_id = a.org_id AND c.deleted_at IS NULL
+                AND c.slug = split_part(a.tool_key, '__', 1))
+    ) <> (
+      split_part(a.tool_key, '__', 1) IN (
+        SELECT name FROM extension_installs UNION SELECT name FROM extension_name_owners)
+    )
+  );
+
+-- capybara:allow-destructive rewrites rc tool keys of pending questions in place (resumed by run and call id, never by key)
+UPDATE questions q
+SET spec = jsonb_set(q.spec, '{toolKey}', to_jsonb(m.new_key))
+FROM (VALUES
+  ('sandbox_bash', 'Bash'), ('sandbox_read', 'Read'), ('sandbox_write', 'Write'),
+  ('sandbox_edit', 'Edit'), ('sandbox_glob', 'Glob'), ('sandbox_grep', 'Grep'),
+  ('sandbox_deliver', 'Deliver'), ('skill_load', 'Skill'), ('skill_write', 'SkillWrite'),
+  ('ask_user', 'AskUserQuestion'), ('read_tool_output', 'ReadToolOutput'),
+  ('tool_search', 'ToolSearch'), ('agent', 'Agent')
+) AS m(old_key, new_key)
+WHERE q.status = 'pending' AND q.spec->>'toolKey' = m.old_key;
+
+-- capybara:allow-destructive rewrites rc tool keys of pending questions in place (resumed by run and call id, never by key)
+UPDATE questions q
+SET spec = jsonb_set(
+  q.spec,
+  '{toolKey}',
+  to_jsonb(CASE
+    WHEN EXISTS (SELECT 1 FROM connectors c
+                 WHERE c.org_id = q.org_id AND c.deleted_at IS NULL
+                   AND c.slug = split_part(q.spec->>'toolKey', '__', 1))
+    THEN 'mcp__' || (q.spec->>'toolKey')
+    ELSE 'plugin__' || (q.spec->>'toolKey')
+  END)
+)
+WHERE q.status = 'pending'
+  AND q.spec->>'toolKey' ~ '^[a-z0-9][a-z0-9_-]*__.' AND q.spec->>'toolKey' !~ '^(mcp|plugin)__'
+  AND (
+    EXISTS (SELECT 1 FROM connectors c
+            WHERE c.org_id = q.org_id AND c.deleted_at IS NULL
+              AND c.slug = split_part(q.spec->>'toolKey', '__', 1))
+  ) <> (
+    split_part(q.spec->>'toolKey', '__', 1) IN (
+      SELECT name FROM extension_installs UNION SELECT name FROM extension_name_owners)
+  );
+
+-- What the startup notice counts (rows the statements above could not map), each over a partial
+-- index holding only such rows, so the count at every start reads nearly empty indexes. The
+-- predicate is the one of countLegacyToolKeys (packages/kernel/src/tools/legacy-data.ts).
+CREATE INDEX IF NOT EXISTS tool_grants_legacy_key_idx ON tool_grants (org_id)
+  WHERE (tool_key = ANY (ARRAY['sandbox_bash', 'sandbox_read', 'sandbox_write', 'sandbox_edit',
+    'sandbox_glob', 'sandbox_grep', 'sandbox_deliver', 'skill_load', 'skill_write', 'ask_user',
+    'read_tool_output', 'tool_search', 'agent']::text[])
+    OR (tool_key ~ '^[a-z0-9][a-z0-9_-]*__.' AND tool_key !~ '^(mcp|plugin)__'));
+CREATE INDEX IF NOT EXISTS conversation_tool_grants_legacy_key_idx
+  ON conversation_tool_grants (conversation_id)
+  WHERE (tool_key = ANY (ARRAY['sandbox_bash', 'sandbox_read', 'sandbox_write', 'sandbox_edit',
+    'sandbox_glob', 'sandbox_grep', 'sandbox_deliver', 'skill_load', 'skill_write', 'ask_user',
+    'read_tool_output', 'tool_search', 'agent']::text[])
+    OR (tool_key ~ '^[a-z0-9][a-z0-9_-]*__.' AND tool_key !~ '^(mcp|plugin)__'));
+CREATE INDEX IF NOT EXISTS approvals_legacy_key_idx ON approvals (org_id)
+  WHERE status = 'pending'
+    AND (tool_key = ANY (ARRAY['sandbox_bash', 'sandbox_read', 'sandbox_write', 'sandbox_edit',
+    'sandbox_glob', 'sandbox_grep', 'sandbox_deliver', 'skill_load', 'skill_write', 'ask_user',
+    'read_tool_output', 'tool_search', 'agent']::text[])
+    OR (tool_key ~ '^[a-z0-9][a-z0-9_-]*__.' AND tool_key !~ '^(mcp|plugin)__'));
+CREATE INDEX IF NOT EXISTS questions_legacy_key_idx ON questions (org_id)
+  WHERE status = 'pending'
+    AND ((spec->>'toolKey') = ANY (ARRAY['sandbox_bash', 'sandbox_read', 'sandbox_write',
+    'sandbox_edit', 'sandbox_glob', 'sandbox_grep', 'sandbox_deliver', 'skill_load', 'skill_write',
+    'ask_user', 'read_tool_output', 'tool_search', 'agent']::text[])
+    OR ((spec->>'toolKey') ~ '^[a-z0-9][a-z0-9_-]*__.' AND (spec->>'toolKey') !~ '^(mcp|plugin)__'));
+
+-- Read before Write / Edit (spec §4.5): EventLog.latestFileState reads the latest tool_result of
+-- a conversation whose view names a file, on every Write and Edit. Without this index it scans
+-- the conversation's events backwards through the primary key, filtering each payload (EXPLAIN
+-- on a 20 000-event conversation: every row removed by the filter for a path never read); with
+-- it, one index probe. Partial: only tool_result rows. Built without CONCURRENTLY (a migration
+-- runs in one transaction), which locks conversation_events against writes while it builds: this
+-- assumes release-candidate-sized event tables, as the event indexes of 0025 and 0040 did. A
+-- deployment with a large table builds it CONCURRENTLY by hand before upgrading; IF NOT EXISTS
+-- then skips it here.
+CREATE INDEX IF NOT EXISTS conversation_events_file_state_idx
+  ON conversation_events (conversation_id, ((payload->'view'->'file'->>'path')), seq DESC)
+  WHERE type = 'tool_result';

package/src/migrations/0064_account_last_org.sql

@@ -0,0 +1,7 @@
+-- The organization an account last chose as its current one: a new web session (login, SSO, setup,
+-- an accepted invitation) starts in it while the account is still a member and the org is not
+-- deleted, so people don't pick their org again at every sign-in. Written with the session's
+-- current org by `PUT /me/current-org`; NULL = never chosen (a new session then starts in the only
+-- org when there is exactly one). Additive: older replicas never read or write it.
+ALTER TABLE capybara.accounts
+  ADD COLUMN IF NOT EXISTS last_org_id text REFERENCES capybara.orgs(id) ON DELETE SET NULL;

package/src/migrations/0065_conversation_archive.sql

@@ -0,0 +1,8 @@
+-- A person archives a conversation (hidden from the default lists, still readable and unarchived
+-- by a new message) or deletes it (soft: hidden everywhere for the owner; the event log, runs and
+-- trajectories stay for enterprise admins).
+ALTER TABLE capybara.conversations ADD COLUMN IF NOT EXISTS archived_at timestamptz;
+ALTER TABLE capybara.conversations ADD COLUMN IF NOT EXISTS deleted_at timestamptz;
+CREATE INDEX IF NOT EXISTS conversations_live_idx
+  ON capybara.conversations (org_id, account_id, updated_at DESC)
+  WHERE deleted_at IS NULL AND archived_at IS NULL;

package/src/migrations/0066_extension_display_name.sql

@@ -0,0 +1,4 @@
+-- The plugin.json `displayName` ({ zh, en }) of an extension package, written when the package is
+-- stored; NULL when the plugin has none and for packages stored before this migration (no
+-- backfill: a name arrives with the next version). Additive: older replicas never read it.
+ALTER TABLE capybara.extension_packages ADD COLUMN IF NOT EXISTS display_name jsonb;

package/src/migrations/0067_agent_profiles.sql

@@ -0,0 +1,20 @@
+-- The agent profile (avatar, description, quick actions): display data stored beside the agent,
+-- outside agent_versions, so changing it creates no version. Expand-only.
+-- profile_updated_at is kept at millisecond precision so a client can send it back as expectedUpdatedAt.
+ALTER TABLE capybara.agents ADD COLUMN IF NOT EXISTS profile_avatar jsonb;
+ALTER TABLE capybara.agents ADD COLUMN IF NOT EXISTS profile_description text NOT NULL DEFAULT '';
+ALTER TABLE capybara.agents
+  ADD COLUMN IF NOT EXISTS profile_quick_actions jsonb NOT NULL DEFAULT '[]';
+ALTER TABLE capybara.agents
+  ADD COLUMN IF NOT EXISTS profile_updated_at timestamptz NOT NULL
+  DEFAULT date_trunc('milliseconds', now());
+
+-- A definition's avatarUrl becomes an external avatar (once: only where none is set yet).
+UPDATE capybara.agents a
+SET profile_avatar = jsonb_build_object('kind', 'external', 'url', v.definition->>'avatarUrl')
+FROM capybara.agent_versions v
+WHERE v.agent_id = a.id
+  AND v.version = a.current_version
+  AND a.profile_avatar IS NULL
+  AND jsonb_typeof(v.definition->'avatarUrl') = 'string'
+  AND v.definition->>'avatarUrl' <> '';

package/src/migrations/0068_agent_avatar_uploads.sql

@@ -0,0 +1,7 @@
+-- Agent avatar uploads reuse the presigned attachment flow: a new purpose 'agent-avatar' and the
+-- agent whose profile uses the upload (set once on save; a used upload has no expiry).
+ALTER TABLE capybara.attachments DROP CONSTRAINT IF EXISTS attachments_purpose_check;
+ALTER TABLE capybara.attachments
+  ADD CONSTRAINT attachments_purpose_check
+  CHECK (purpose IN ('chat', 'skill-package', 'agent-avatar'));
+ALTER TABLE capybara.attachments ADD COLUMN IF NOT EXISTS agent_id text;

package/src/migrations/0069_attachments_agent_idx.sql

@@ -0,0 +1,3 @@
+-- The agent avatar lookup and the cleanup of an agent's uploads filter attachments by agent_id;
+-- a partial index keeps it small, since most attachments belong to no agent.
+CREATE INDEX IF NOT EXISTS attachments_agent_idx ON capybara.attachments (agent_id) WHERE agent_id IS NOT NULL;

package/src/migrations/0070_background_tasks.sql

@@ -0,0 +1,37 @@
+-- Background Bash (spec 2026-11-05-background-bash-design §4.1): a command started with
+-- run_in_background keeps running in the conversation's sandbox after its tool call returns. One
+-- row per task; the owner is `conversation_id` (the child conversation for a sub-agent) and
+-- `sandbox_conversation_id` is the root conversation that owns the sandbox. Rows go with their
+-- conversations; finished rows are pruned after tools.outputRetentionDays.
+CREATE TABLE IF NOT EXISTS capybara.background_tasks (
+  id text PRIMARY KEY,
+  org_id text NOT NULL,
+  conversation_id text NOT NULL REFERENCES capybara.conversations(id) ON DELETE CASCADE,
+  sandbox_conversation_id text NOT NULL REFERENCES capybara.conversations(id) ON DELETE CASCADE,
+  run_id text NOT NULL,
+  call_id text NOT NULL,
+  trigger_account_id text NOT NULL,
+  description text NOT NULL,
+  command text NOT NULL,
+  -- the session id: the pid `setsid` started; stopping and liveness go by the session
+  sid text NOT NULL,
+  -- relative to /workspace
+  output_path text NOT NULL,
+  status text NOT NULL DEFAULT 'running'
+    CHECK (status IN ('running', 'completed', 'failed', 'stopped', 'timed_out', 'lost')),
+  lost_reason text,
+  exit_code integer,
+  started_at timestamptz NOT NULL DEFAULT now(),
+  finished_at timestamptz,
+  deadline_at timestamptz NOT NULL,
+  -- the sandbox instance the task runs in (the handle plus created_at identify an instance)
+  sandbox_created_at timestamptz NOT NULL,
+  -- a task marked lost while its process may still exist
+  kill_pending boolean NOT NULL DEFAULT false,
+  -- the bytes TaskOutput has already returned
+  read_offset bigint NOT NULL DEFAULT 0
+);
+CREATE INDEX IF NOT EXISTS background_tasks_running_idx
+  ON capybara.background_tasks (sandbox_conversation_id) WHERE status = 'running';
+CREATE INDEX IF NOT EXISTS background_tasks_conversation_idx
+  ON capybara.background_tasks (conversation_id, started_at DESC);

package/src/migrations/0071_background_tasks_reserve.sql

@@ -0,0 +1,6 @@
+-- Background Bash: a launch reserves its row (status running, counted against
+-- sandbox.background.maxTasks under a transaction-scoped lock) before the launch exec, and sets
+-- sid and sandbox_created_at once the command started. A row without a sid is a reservation: the
+-- poller skips it, and a failed launch finishes it as failed.
+ALTER TABLE IF EXISTS capybara.background_tasks ALTER COLUMN sid DROP NOT NULL;
+ALTER TABLE IF EXISTS capybara.background_tasks ALTER COLUMN sandbox_created_at DROP NOT NULL;

package/src/migrations/0072_background_tasks_stopping.sql

@@ -0,0 +1,5 @@
+-- Background Bash: a stop claims its task before it signals the session (stopping_at), so the
+-- poller, which skips a claimed task, cannot finish it meanwhile from what the signals leave
+-- behind (no process, or the wrapper's exit status); the stop's own finish is then the only one.
+-- A launch that finds its reservation claimed kills the command it started at once.
+ALTER TABLE IF EXISTS capybara.background_tasks ADD COLUMN IF NOT EXISTS stopping_at timestamptz;

package/src/migrations/0073_org_extension_point_defaults.sql

@@ -0,0 +1,11 @@
+-- Web tools (spec §6): an org's default provider of an extension point with `selection:
+-- "org-default"` (`point` is the name without the major, e.g. `web-search`). A row naming an
+-- extension that is disabled or uninstalled stays and is ignored until it is a candidate again.
+CREATE TABLE IF NOT EXISTS capybara.org_extension_point_defaults (
+  org_id text NOT NULL REFERENCES capybara.orgs(id) ON DELETE CASCADE,
+  point text NOT NULL,
+  extension text NOT NULL,
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  updated_by text REFERENCES capybara.accounts(id) ON DELETE SET NULL,
+  PRIMARY KEY (org_id, point)
+);

package/src/migrations/0074_subagent_tree.sql

@@ -0,0 +1,50 @@
+-- Agent map (spec docs/superpowers/specs/2026-11-06-agent-map-design.md §6): nested sub-agents
+-- and a budget per tree.
+-- - conversations.subagent_depth: levels below the root conversation (0 = a root, 1 = its child).
+-- - runs.budget_run_id: the person-triggered root run whose window this run's dispatches and its
+--   descendants' tokens count against; null = the run is its own budget run.
+-- - subagent_dispatches.budget_run_id: the budget run the dispatch counted against (existing rows:
+--   the dispatching run, which was its own budget run before nesting).
+-- - subagent_dispatches.for_skill: the dispatch of a `context: fork` skill invocation (existing
+--   fork dispatches are backfilled).
+ALTER TABLE conversations ADD COLUMN IF NOT EXISTS subagent_depth smallint NOT NULL DEFAULT 0;
+
+ALTER TABLE runs ADD COLUMN IF NOT EXISTS budget_run_id text;
+CREATE INDEX IF NOT EXISTS runs_budget_run_idx ON runs (budget_run_id)
+  WHERE budget_run_id IS NOT NULL;
+
+ALTER TABLE subagent_dispatches ADD COLUMN IF NOT EXISTS budget_run_id text;
+UPDATE subagent_dispatches SET budget_run_id = parent_run_id WHERE budget_run_id IS NULL;
+ALTER TABLE subagent_dispatches ALTER COLUMN budget_run_id SET NOT NULL;
+ALTER TABLE subagent_dispatches ADD COLUMN IF NOT EXISTS for_skill boolean NOT NULL DEFAULT false;
+-- Existing fork dispatches (phase D: call id `skill-<seq>` at step 0, `skillCallId` / `FORK_STEP`
+-- in runtime/subagents/skill-fork.ts) are marked, so a fork in flight across the upgrade keeps its
+-- wait and its finish is never delivered as a background child's. A second run changes nothing.
+UPDATE subagent_dispatches SET for_skill = true
+WHERE for_skill = false AND step = 0 AND parent_call_id ~ '^skill-[0-9]+$';
+CREATE INDEX IF NOT EXISTS subagent_dispatches_budget_run_idx
+  ON subagent_dispatches (budget_run_id);
+
+-- Org overrides stored in deployment_settings.subagentLimitOverrides ({orgId: {...}}): the limit
+-- maxConcurrentPerRun is now maxConcurrentPerConversation (per conversation, §6). Each org entry
+-- holding the old key gets the new key with its value instead; an entry that already has the new
+-- key keeps it. Rows without the old key are left as they are, so a second run changes nothing.
+UPDATE deployment_settings AS ds
+SET value = (
+  SELECT jsonb_object_agg(
+    e.org,
+    CASE
+      WHEN jsonb_typeof(e.entry) = 'object' AND e.entry ? 'maxConcurrentPerRun'
+        THEN jsonb_build_object('maxConcurrentPerConversation', e.entry -> 'maxConcurrentPerRun')
+          || (e.entry - 'maxConcurrentPerRun')
+      ELSE e.entry
+    END
+  )
+  FROM jsonb_each(ds.value) AS e(org, entry)
+)
+WHERE ds.key = 'subagentLimitOverrides'
+  AND jsonb_typeof(ds.value) = 'object'
+  AND EXISTS (
+    SELECT 1 FROM jsonb_each(ds.value) AS e(org, entry)
+    WHERE jsonb_typeof(e.entry) = 'object' AND e.entry ? 'maxConcurrentPerRun'
+  );

package/src/migrations/0075_plugin_scope.sql

@@ -0,0 +1,61 @@
+-- Plugin scope (phase 1, spec 2026-11-05-plugin-component-management-design.md §5): every catalog item
+-- gets a scope (all / optional / named), a builtin flag, a disabled flag, an org list (named) and
+-- per-org switches. Replaces the catalog policy, grants and requests. Expand-only: `policy`,
+-- `catalog_org_grants` and `catalog_requests` stay (nothing reads them after this release).
+-- The backfill runs once per database (the migrator records the file); the UPDATEs below only read
+-- the old columns, and the inserts are ON CONFLICT DO NOTHING.
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS scope text NOT NULL DEFAULT 'optional';
+ALTER TABLE catalog_items DROP CONSTRAINT IF EXISTS catalog_items_scope_check;
+ALTER TABLE catalog_items ADD CONSTRAINT catalog_items_scope_check
+  CHECK (scope IN ('all', 'optional', 'named'));
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS builtin boolean NOT NULL DEFAULT false;
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS disabled boolean NOT NULL DEFAULT false;
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS scope_version integer NOT NULL DEFAULT 0;
+
+-- named scope: the orgs the item is offered to.
+CREATE TABLE IF NOT EXISTS catalog_item_scope_orgs (
+  item_id uuid NOT NULL REFERENCES catalog_items(id) ON DELETE CASCADE,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  PRIMARY KEY (item_id, org_id)
+);
+
+-- Per-org on / off switch of an item's components.
+CREATE TABLE IF NOT EXISTS catalog_item_org_switches (
+  item_id uuid NOT NULL REFERENCES catalog_items(id) ON DELETE CASCADE,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  enabled boolean NOT NULL,
+  updated_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (item_id, org_id)
+);
+
+-- Backfill from policy / grants / installs.
+UPDATE catalog_items SET disabled = true WHERE policy = 'disabled';
+UPDATE catalog_items SET scope = 'named' WHERE policy = 'needs_approval';
+
+-- Required bootstrap plugins are builtin and offered to every org.
+UPDATE catalog_items SET scope = 'all', builtin = true
+  WHERE id IN (SELECT catalog_item_id FROM extension_installs
+               WHERE required AND catalog_item_id IS NOT NULL);
+
+-- named: granted orgs and orgs that already installed it.
+INSERT INTO catalog_item_scope_orgs (item_id, org_id)
+  SELECT g.item_id, g.org_id FROM catalog_org_grants g
+  JOIN catalog_items i ON i.id = g.item_id AND i.scope = 'named'
+  ON CONFLICT DO NOTHING;
+INSERT INTO catalog_item_scope_orgs (item_id, org_id)
+  SELECT DISTINCT p.item_id, p.org_id FROM plugin_installs p
+  JOIN catalog_items i ON i.id = p.item_id AND i.scope = 'named'
+  WHERE p.status = 'installed'
+  ON CONFLICT DO NOTHING;
+
+-- An org that installed the item keeps it on (builtin / all items need no switch).
+INSERT INTO catalog_item_org_switches (item_id, org_id, enabled)
+  SELECT DISTINCT p.item_id, p.org_id, true FROM plugin_installs p
+  JOIN catalog_items i ON i.id = p.item_id AND i.scope <> 'all'
+  WHERE p.status = 'installed'
+  ON CONFLICT DO NOTHING;
+
+-- Requests are gone: pending ones are withdrawn ('cancelled', the status the old withdraw used).
+UPDATE catalog_requests SET status = 'cancelled', note = 'superseded by scope', decided_at = now()
+  WHERE status = 'pending';

package/src/migrations/0076_skills_created_by_nullable.sql

@@ -0,0 +1,6 @@
+-- Plugin scope sync (spec 2026-11-05-plugin-component-management-design.md §5): the kernel installs
+-- plugins in an org as no person (the worker job that converges orgs to a plugin's scope), so a
+-- skill or skill version it creates has no creator. Relaxing NOT NULL is expand-only: rows written
+-- before keep their creator, and dropping NOT NULL on a nullable column is a no-op.
+ALTER TABLE skills ALTER COLUMN created_by DROP NOT NULL;
+ALTER TABLE skill_versions ALTER COLUMN created_by DROP NOT NULL;

package/src/migrations/0077_scope_requests.sql

@@ -0,0 +1,52 @@
+-- Requests under plugin scope (phase 1, spec 2026-11-05-plugin-component-management-design.md
+-- §5.1). A request has a kind: `access` (an org admin asks the enterprise admin to add the org to a
+-- `named` item shown to other orgs), `import` (an org admin asks for a marketplace entry that is not
+-- in the catalog yet: no item, the entry instead) or `enable` (a member asks the org admin to switch
+-- an `optional` item on). Expand-only: `stage`, `version`, `org_decided_*` stay (the new code still
+-- writes `stage` so the old NOT NULL and CHECK hold, and reads none of them).
+
+-- Whether orgs outside a `named` item's list see it (as requestable). Never makes it usable.
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS shown_to_others boolean NOT NULL DEFAULT true;
+
+ALTER TABLE catalog_requests ADD COLUMN IF NOT EXISTS kind text NOT NULL DEFAULT 'access';
+ALTER TABLE catalog_requests DROP CONSTRAINT IF EXISTS catalog_requests_kind_check;
+ALTER TABLE catalog_requests ADD CONSTRAINT catalog_requests_kind_check
+  CHECK (kind IN ('access', 'import', 'enable'));
+-- An `import` request names a marketplace entry; its item is written when the import's confirm
+-- commits.
+ALTER TABLE catalog_requests ALTER COLUMN item_id DROP NOT NULL;
+ALTER TABLE catalog_requests ADD COLUMN IF NOT EXISTS marketplace_id text
+  REFERENCES marketplaces(id) ON DELETE SET NULL;
+ALTER TABLE catalog_requests ADD COLUMN IF NOT EXISTS entry_name text;
+ALTER TABLE catalog_requests ADD COLUMN IF NOT EXISTS entry_version text;
+ALTER TABLE catalog_requests DROP CONSTRAINT IF EXISTS catalog_requests_target_check;
+ALTER TABLE catalog_requests ADD CONSTRAINT catalog_requests_target_check
+  CHECK (kind = 'import' AND entry_name IS NOT NULL OR kind <> 'import' AND item_id IS NOT NULL);
+-- The optional reason of a rejection, shown to the requester.
+ALTER TABLE catalog_requests ADD COLUMN IF NOT EXISTS reason text;
+-- The prepared import of an approved `import` request (it resolves when that staging is confirmed;
+-- a staging that expires leaves it pending).
+ALTER TABLE catalog_requests ADD COLUMN IF NOT EXISTS staging_id uuid;
+CREATE INDEX IF NOT EXISTS catalog_requests_staging_idx
+  ON catalog_requests (staging_id) WHERE staging_id IS NOT NULL;
+-- The requester dismissed the decision notice from the inbox.
+ALTER TABLE catalog_requests ADD COLUMN IF NOT EXISTS dismissed_at timestamptz;
+
+-- One pending request per (org, kind, item or entry): replaces the old (org, item) index.
+DROP INDEX IF EXISTS directory_requests_pending_uq;
+CREATE UNIQUE INDEX IF NOT EXISTS catalog_requests_pending_item_uq
+  ON catalog_requests (org_id, kind, item_id)
+  WHERE status = 'pending' AND item_id IS NOT NULL;
+CREATE UNIQUE INDEX IF NOT EXISTS catalog_requests_pending_entry_uq
+  ON catalog_requests (org_id, marketplace_id, entry_name)
+  WHERE status = 'pending' AND kind = 'import';
+CREATE INDEX IF NOT EXISTS catalog_requests_kind_idx
+  ON catalog_requests (kind, status, created_at);
+CREATE INDEX IF NOT EXISTS catalog_requests_requester_idx
+  ON catalog_requests (org_id, requested_by) WHERE status IN ('approved', 'rejected');
+
+-- Rows written before kinds: a member's request (stage org) was an `enable` one; decided requests
+-- from before are not shown to their requesters as new decisions.
+UPDATE catalog_requests SET kind = 'enable' WHERE stage = 'org' AND kind = 'access';
+UPDATE catalog_requests SET dismissed_at = now()
+  WHERE status <> 'pending' AND dismissed_at IS NULL;

package/src/migrations/0078_scope_grant_switches.sql

@@ -0,0 +1,18 @@
+-- Plugin scope follow-up to 0075 (spec 2026-11-05-plugin-component-management-design.md §6
+-- "Migration of what exists"): 0075 put the orgs granted a `needs_approval` item on its `named`
+-- list, where a listed org without a switch row wants the plugin on. A grant only allowed an
+-- install; an org that never installed it did not have it on. Such orgs get an explicit switch
+-- row `enabled = false`, so the plugin stays off there until an org admin switches it on.
+-- Expand-only and idempotent: inserts only, ON CONFLICT DO NOTHING (a switch row an org admin or
+-- 0075 wrote wins).
+INSERT INTO catalog_item_org_switches (item_id, org_id, enabled)
+  SELECT s.item_id, s.org_id, false
+  FROM catalog_item_scope_orgs s
+  JOIN catalog_items i ON i.id = s.item_id AND i.policy = 'needs_approval'
+  JOIN catalog_org_grants g ON g.item_id = s.item_id AND g.org_id = s.org_id
+  WHERE NOT EXISTS (
+    SELECT 1 FROM plugin_installs p
+    WHERE p.item_id = s.item_id AND p.org_id = s.org_id
+      AND p.status IN ('installing', 'installed', 'upgrading')
+  )
+  ON CONFLICT DO NOTHING;

package/src/migrations/0079_scope_live_install_switches.sql

@@ -0,0 +1,19 @@
+-- Plugin scope follow-up to 0075 (spec 2026-11-05-plugin-component-management-design.md §6
+-- "Migration of what exists"): 0075 listed and switched on only the org installs with status
+-- `installed`. An install that was `installing` or `upgrading` when 0075 ran got no switch row,
+-- which for an `optional` item means off, and no place on a `named` item's org list; the worker's
+-- start-time scope resync would then uninstall it. Such installs get what 0075 gave installed ones:
+-- the org on the named list and a switch row `enabled = true` (builtin / `all` items need none).
+-- Expand-only and idempotent: inserts only, ON CONFLICT DO NOTHING (a row an org admin, 0075 or
+-- 0078 wrote wins).
+INSERT INTO catalog_item_scope_orgs (item_id, org_id)
+  SELECT DISTINCT p.item_id, p.org_id FROM plugin_installs p
+  JOIN catalog_items i ON i.id = p.item_id AND i.scope = 'named'
+  WHERE p.status IN ('installing', 'upgrading')
+  ON CONFLICT DO NOTHING;
+
+INSERT INTO catalog_item_org_switches (item_id, org_id, enabled)
+  SELECT DISTINCT p.item_id, p.org_id, true FROM plugin_installs p
+  JOIN catalog_items i ON i.id = p.item_id AND i.scope <> 'all'
+  WHERE p.status IN ('installing', 'upgrading')
+  ON CONFLICT DO NOTHING;

package/src/migrations/0080_rename_enterprise_admin.sql

@@ -0,0 +1,18 @@
+-- The deployment-level role "enterprise admin" becomes "super admin" (plugin and component
+-- management spec §13.4b): accounts.is_enterprise_admin becomes is_super_admin, and the stored
+-- deployment setting orgCreation "enterprise_admin" becomes "super_admin". Historical audit rows
+-- are not rewritten. No compatibility layer (release candidate).
+
+-- capybara:allow-destructive column rename; code is renamed in the same release (release candidate, no compatibility layer)
+DO $$
+BEGIN
+  IF EXISTS (SELECT 1 FROM information_schema.columns
+             WHERE table_schema = 'capybara' AND table_name = 'accounts'
+               AND column_name = 'is_enterprise_admin') THEN
+    ALTER TABLE accounts RENAME COLUMN is_enterprise_admin TO is_super_admin;
+  END IF;
+END
+$$;
+
+UPDATE deployment_settings SET value = '"super_admin"'::jsonb
+  WHERE key = 'orgCreation' AND value = '"enterprise_admin"'::jsonb;