@capybara-hq/kernel 0.1.0-rc.2 → 0.1.0-rc.20

package/dist/db/kernel-schema.d.ts

@@ -1,4 +1,4 @@
-import type { SkillInvocation } from "@capybara-hq/plugin-sdk";
+import type { FileSystemHandle, ParsedTheme, SkillInvocation } from "@capybara-hq/plugin-sdk";
 import type { ColumnType, Generated, Kysely } from "kysely";
 /** 带默认值的时间戳列：插入可省略，读出为 Date。 */
 type Ts = ColumnType<Date, Date | string | undefined, Date | string>;
@@ -11,9 +11,32 @@ export interface AccountsTable {
     email: string | null;
     email_verified: Generated<boolean>;
     status: Generated<"active" | "disabled">;
-    is_enterprise_admin: Generated<boolean>;
+    is_super_admin: Generated<boolean>;
     created_at: Ts;
     updated_at: Ts;
+    /** 0064: the org the account last chose as current; a new session starts in it. */
+    last_org_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0091: the person's time zone (IANA); null follows the browser (run context spec §3.4). */
+    time_zone: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0090: the account must set its own password first (a generated initial password). */
+    must_change_password: Generated<boolean>;
+    /** 0093: the person's theme id across all their orgs; null follows the org (themes spec §7). */
+    theme: ColumnType<string | null, string | null | undefined, string | null>;
+}
+/**
+ * 0090: a generated initial password sealed for the person who approved the account's creation,
+ * read once on the web (Platform tool spec §14.5 item 2).
+ */
+export interface AccountInitialPasswordsTable {
+    account_id: string;
+    recipient_account_id: string;
+    conversation_id: string;
+    run_id: string;
+    call_id: string;
+    master_key_id: string;
+    ciphertext: Buffer;
+    expires_at: Date | string;
+    created_at: Ts;
 }
 export interface IdentitiesTable {
     source: string;
@@ -111,6 +134,26 @@ export interface ExtensionOrgConfigsTable {
     updated_by: string | null;
     updated_at: Ts;
 }
+/** An org's copy of an extension's overridable deployment config fields (0086, spec A §5.4). */
+export interface ExtensionOrgOverridesTable {
+    plugin: string;
+    org_id: string;
+    /** The copy's non-secret values (its secrets are in `secrets`). */
+    config: ColumnType<Record<string, unknown>, string | undefined, string>;
+    created_by: string | null;
+    created_at: Ts;
+    updated_by: string | null;
+    updated_at: Ts;
+}
+/** An org admin's switch of one extension tool (0086, spec A §7). */
+export interface OrgToolSwitchesTable {
+    org_id: string;
+    plugin: string;
+    tool: string;
+    enabled: boolean;
+    updated_by: string | null;
+    updated_at: Ts;
+}
 export interface AuditEventsTable {
     id: Generated<string>;
     at: Ts;
@@ -149,6 +192,15 @@ export interface AgentsTable {
     org_role: Generated<"admin" | "member" | "guest">;
     current_version: number;
     needs_reassignment: Generated<boolean>;
+    /** 0067: the profile (display data, outside the versions). */
+    profile_avatar: ColumnType<Record<string, unknown> | null, string | null | undefined, string | null>;
+    profile_description: Generated<string>;
+    profile_quick_actions: ColumnType<unknown[], string | undefined, string>;
+    profile_updated_at: Ts;
+    /** 0085: the template the agent was created from (display only, no FK). */
+    created_from_template_id: NullableCol<string>;
+    created_from_template_version: NullableCol<number>;
+    created_from_template_name: NullableCol<string>;
     created_at: Ts;
     updated_at: Ts;
     deleted_at: TsNullable;
@@ -199,6 +251,14 @@ export interface ConversationsTable {
     queue_paused: ColumnType<boolean, boolean | undefined, boolean>;
     /** 0062: why the queue paused (`QueuePauseReason`); null when not paused or not recorded. */
     queue_pause_reason: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0065: when the owner archived it (hidden from the default lists); null = not archived. */
+    archived_at: ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
+    /** 0065: when the owner deleted it (soft delete: hidden everywhere for the owner); null = live. */
+    deleted_at: ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
+    /** 0074: levels below the root conversation (0 = a root; a sub-agent's is its parent's + 1). */
+    subagent_depth: ColumnType<number, number | undefined, number>;
+    /** 0088, renamed in 0105: the device the conversation runs in; null = not chosen yet. */
+    device_id: ColumnType<string | null, string | null | undefined, string | null>;
 }
 /** 0060: an org's order of file-preview@1 previewers (UI refresh B Task 11). */
 export interface FilePreviewersTable {
@@ -208,6 +268,15 @@ export interface FilePreviewersTable {
     position: number;
     disabled: ColumnType<boolean, boolean | undefined, boolean>;
 }
+/** 0073: an org's default provider of an `org-default` extension point. */
+export interface OrgExtensionPointDefaultsTable {
+    org_id: string;
+    /** The extension point name without the major (`web-search`). */
+    point: string;
+    extension: string;
+    updated_at: Ts;
+    updated_by: string | null;
+}
 /** 0059: a queued message (not in the event log until sent). */
 export interface ConversationQueueTable {
     id: string;
@@ -268,8 +337,13 @@ export interface RunsTable {
     subagent_tokens_used: Int8;
     /** 0054: when this run's `subagents` wait expires (set while it waits on sub-agents). */
     wait_expires_at: TsNullable;
+    /**
+     * 0074: the person-triggered root run whose budget window this run counts against (dispatches
+     * and its descendants' tokens, agent map spec §6); null = the run is its own budget run.
+     */
+    budget_run_id: ColumnType<string | null, string | null | undefined, string | null>;
 }
-/** 0053: one row per sub-agent dispatch (an `agent` call of a parent run). */
+/** 0053: one row per sub-agent dispatch (an `Agent` call of a parent run). */
 export interface SubagentDispatchesTable {
     parent_run_id: string;
     parent_call_id: string;
@@ -280,19 +354,29 @@ export interface SubagentDispatchesTable {
     /** A follow-up to an existing sub-agent, not a new one. */
     resumed: ColumnType<boolean, boolean | undefined, boolean>;
     created_at: Ts;
+    /** 0074: the budget run the dispatch counts against (`runs.budget_run_id` of the tree). */
+    budget_run_id: string;
+    /** 0074: the dispatch of a `context: fork` skill invocation (phase D). */
+    for_skill: ColumnType<boolean, boolean | undefined, boolean>;
 }
 /** 0053: an agent template installed in an org from a plugin. */
 export interface AgentTemplatesTable {
     id: string;
+    /** 0084: the owner shares this template with other orgs. */
+    shareable: Dflt<boolean>;
     org_id: string;
     name: string;
     catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
-    /** The plugin that installed it (`NOT NULL`, 0053): the roster type is `<plugin>:<name>`. */
-    plugin_name: string;
+    /** The plugin that installed it: the roster type is `<plugin>:<name>`; null (0081, nullable) = the bare `<name>`. */
+    plugin_name: ColumnType<string | null, string | null | undefined, string | null>;
     current_version: number;
     deleted_at: TsNullable;
     created_at: Ts;
     updated_at: Ts;
+    /** 0081: the platform template this copy links to (null = none). */
+    platform_template_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0081: a pin keeps the copy on its own stored version (ruling B2). */
+    pinned_version: ColumnType<number | null, number | null | undefined, number | null>;
 }
 /** 0053: one version of an agent template; `definition` is the parsed frontmatter and body. */
 export interface AgentTemplateVersionsTable {
@@ -333,6 +417,25 @@ export interface ConnectorsTable {
     catalog_version: ColumnType<string | null, string | null | undefined, string | null>;
     /** 0037：模板的 defaultToolPolicies（授权码连接器在首个快照时应用）。 */
     template_tool_policies: ColumnType<Record<string, "allow" | "ask" | "deny"> | null, string | null | undefined, string | null>;
+    /** 0081: the platform connector template this connector was made from (null = none). */
+    platform_template_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /**
+     * 0106: the setup guide of its connector template it was last set up with (`{ guideId, version,
+     * hash, mode: null }`); null when unknown (custom connectors, connectors before 0106).
+     */
+    guide_ack: ColumnType<GuideAckJson | null, string | null | undefined, string | null>;
+}
+/**
+ * 0104: a member's own policy for one tool of a personal-credential connector, for calls made with
+ * their own connection (maintainer decision 2026-11-09).
+ */
+export interface ConnectorToolAccountPoliciesTable {
+    org_id: string;
+    connector_id: string;
+    account_id: string;
+    tool_name: string;
+    policy: "allow" | "ask" | "deny";
+    updated_at: Ts;
 }
 /** 0010_tools.sql（0033 由 `app_tools` 改名）：连接器暴露的工具。 */
 export interface ConnectorToolsTable {
@@ -399,8 +502,15 @@ export interface ApprovalsTable {
     attempt: Generated<number>;
     /** 0056: the reason given with a denial (null without one). */
     deny_reason: Generated<string | null>;
+    /** 0086: the kernel-rendered summary of the call (per-call policies; null without one). */
+    summary: ColumnType<{
+        zh: string;
+        en: string;
+    } | null, string | null | undefined, string | null>;
+    /** 0086: the scopes the person may choose (null: derived, see `approvals.service.ts`). */
+    scopes: ColumnType<("once" | "session" | "always")[] | null, ("once" | "session" | "always")[] | null | undefined, ("once" | "session" | "always")[] | null>;
 }
-/** 0010_tools.sql：ask_user 提问。 */
+/** 0010_tools.sql：AskUserQuestion 提问。 */
 export interface QuestionsTable {
     id: string;
     org_id: string;
@@ -408,7 +518,7 @@ export interface QuestionsTable {
     run_id: string;
     call_id: string;
     spec: Json<unknown>;
-    status: Generated<"pending" | "answered" | "expired" | "cancelled">;
+    status: Generated<"pending" | "answered" | "skipped" | "expired" | "cancelled">;
     answer: ColumnType<unknown, string | null | undefined, string | null>;
     answered_by: string | null;
     answered_at: TsNullable;
@@ -462,6 +572,17 @@ export interface LgCheckpointWritesTable {
     task_path: Generated<string>;
 }
 /** 0018_channels.sql：组织的渠道连接（非密钥配置；密钥在 secrets `channels:<id>:config`）。 */
+/**
+ * `channel_connections.guide_ack` (0099) and `connectors.guide_ack` (0106): the setup guide a
+ * target was set up with; `hash` is the v2 drift hash (`setupGuideHash`, admin audience) of
+ * `mode` (null for a place without modes).
+ */
+export interface GuideAckJson {
+    guideId: string;
+    version: string;
+    hash: string;
+    mode: string | null;
+}
 export interface ChannelConnectionsTable {
     id: string;
     org_id: string;
@@ -476,6 +597,11 @@ export interface ChannelConnectionsTable {
     last_error: string | null;
     bot_user_id: string | null;
     tenant_id: string | null;
+    /**
+     * 0099_channel_connection_guide_ack.sql: the setup guide last set up with,
+     * `{ guideId, version, hash, mode }`; null when unknown.
+     */
+    guide_ack: ColumnType<GuideAckJson | null, string | null | undefined, string | null>;
     created_by: string;
     created_at: Ts;
     updated_at: Ts;
@@ -547,9 +673,11 @@ export interface AttachmentsTable {
     expires_at: TsNullable;
     /** 0024：上传用途（技能包不能绑定到消息）。 */
     purpose: ColumnType<AttachmentPurpose, AttachmentPurpose | undefined, AttachmentPurpose>;
+    /** 0068: the agent whose profile uses this avatar upload (set once, when it is saved). */
+    agent_id: ColumnType<string | null, string | null | undefined, string | null>;
 }
-/** 预签名上传的用途：对话附件 / 技能包 zip。 */
-export type AttachmentPurpose = "chat" | "skill-package";
+/** 预签名上传的用途：对话附件 / 技能包 zip / agent avatar image. */
+export type AttachmentPurpose = "chat" | "skill-package" | "agent-avatar";
 /** 技能版本的清单（`skill_versions.manifest`）。 */
 export interface SkillManifest {
     name: string;
@@ -569,13 +697,16 @@ export interface SkillManifest {
 /** 0024_skills.sql：技能（组织技能库 / agent 自己的技能）。 */
 export interface SkillsTable {
     id: string;
+    /** 0084: the owner shares this copy with other orgs. */
+    shareable: Dflt<boolean>;
     org_id: string;
     scope: "org" | "agent";
     agent_id: string | null;
     name: string;
     description: string;
     current_version: number;
-    created_by: string;
+    /** 0076: null for a skill the kernel created (the plugin scope sync). */
+    created_by: string | null;
     created_at: Ts;
     updated_at: Ts;
     deleted_at: TsNullable;
@@ -585,6 +716,14 @@ export interface SkillsTable {
      */
     catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
     catalog_version: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0081: the platform skill this copy links to (null = none). */
+    platform_skill_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0081: a pin keeps the copy on its own stored version (ruling B2). */
+    pinned_version: ColumnType<number | null, number | null | undefined, number | null>;
+    /** 0111: the agent a shared org skill came from (cleared when that agent is deleted). */
+    origin_agent_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0111: the account that maintains a shared org skill. */
+    maintainer_account_id: ColumnType<string | null, string | null | undefined, string | null>;
 }
 /** 0024_skills.sql：技能的版本。 */
 export interface SkillVersionsTable {
@@ -592,10 +731,11 @@ export interface SkillVersionsTable {
     version: number;
     manifest: Json<SkillManifest>;
     object_prefix: string;
-    created_by: string;
+    /** 0076: null for a version the kernel created (the plugin scope sync). */
+    created_by: string | null;
     created_at: Ts;
     /**
-     * 0037, renamed in 0042: this version's enterprise catalog source (NULL for custom uploads /
+     * 0037, renamed in 0042: this version's platform catalog source (NULL for custom uploads /
      * agent skills).
      */
     catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
@@ -624,14 +764,46 @@ export interface SkillChangeRequestsTable {
     proposed_version: Json<ProposedSkillVersion>;
     object_prefix: string;
     requested_by_account: string;
-    requested_in_conversation: string;
+    /** 0112: null for a share request and for a version proposal registered on the web. */
+    requested_in_conversation: string | null;
     status: Generated<"pending" | "approved" | "rejected" | "cancelled">;
+    /** 0111: a share of an agent skill with the org, or a new version of a shared skill. */
+    kind: Dflt<"share" | "version">;
     decided_by: string | null;
     decided_at: TsNullable;
     created_at: Ts;
 }
-/** 0023_sandboxes.sql：按对话的沙箱（见 sandbox/sandbox.service.ts）。 */
-export interface SandboxesTable {
+/** 0070_background_tasks.sql: a Bash command running in the background in a conversation's sandbox. */
+export interface BackgroundTasksTable {
+    id: string;
+    org_id: string;
+    conversation_id: string;
+    sandbox_conversation_id: string;
+    run_id: string;
+    call_id: string;
+    trigger_account_id: string;
+    description: string;
+    command: string;
+    /** NULL while the launch is reserved but not started (0071). */
+    sid: string | null;
+    output_path: string;
+    status: ColumnType<"running" | "completed" | "failed" | "stopped" | "timed_out" | "lost", string | undefined, string>;
+    lost_reason: ColumnType<string | null, string | null | undefined, string | null>;
+    exit_code: ColumnType<number | null, number | null | undefined, number | null>;
+    started_at: Ts;
+    finished_at: TsNullable;
+    deadline_at: Date | string;
+    /** NULL while the launch is reserved but not started (0071). */
+    sandbox_created_at: Date | string | null;
+    kill_pending: ColumnType<boolean, boolean | undefined, boolean>;
+    read_offset: ColumnType<string, number | string | undefined, number | string>;
+    /** Set while a stop is under way (0072); the poller skips such a task. */
+    stopping_at: ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
+    /** 0088, renamed in 0105: the device the task runs in. */
+    device_id: ColumnType<string | null, string | null | undefined, string | null>;
+}
+/** 0023_sandboxes.sql: the legacy per-conversation sandbox; kept only for the cleanup job (0088). */
+export interface LegacySandboxesTable {
     conversation_id: string;
     org_id: string;
     provider: string;
@@ -658,6 +830,86 @@ export interface SandboxesTable {
     } | null, string | null | undefined, string | null>;
     sweep_failed_at: TsNullable;
 }
+type InstanceHandle = ColumnType<{
+    id: string;
+    [k: string]: unknown;
+} | null, string | null | undefined, string | null>;
+/**
+ * 0088_environments.sql, renamed in 0105: a device. A cloud device is one instance plus a kept file
+ * system; a local device is a person's machine (device_machines).
+ */
+export interface DevicesTable {
+    id: string;
+    org_id: string;
+    owner_kind: "personal";
+    owner_account_id: string;
+    name: ColumnType<string | null, string | null | undefined, string | null>;
+    is_default: ColumnType<boolean, boolean | undefined, boolean>;
+    /** 0093, renamed in 0105: `local` is a person's machine (device_machines). */
+    source: "cloud" | "local";
+    provider: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0096: the provider a demoted default was demoted from; null for every other device. */
+    demoted_from_provider: ColumnType<string | null, string | null | undefined, string | null>;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0088_environments.sql, renamed in 0105: the instance and file system of a device. */
+export interface DeviceInstancesTable {
+    device_id: string;
+    org_id: string;
+    provider: ColumnType<string | null, string | null | undefined, string | null>;
+    /** The provider's `FileSystemHandle`; null before the file system exists or after a reset. */
+    fs_handle: ColumnType<FileSystemHandle | null, string | null | undefined, string | null>;
+    fs_status: ColumnType<"none" | "ready" | "lost", "none" | "ready" | "lost" | undefined, "none" | "ready" | "lost">;
+    handle: InstanceHandle;
+    status: ColumnType<"none" | "creating" | "running" | "suspended" | "destroyed", "none" | "creating" | "running" | "suspended" | "destroyed" | undefined, "none" | "creating" | "running" | "suspended" | "destroyed">;
+    last_used_at: Ts;
+    running_since: TsNullable;
+    created_at: Ts;
+    suspended_at: TsNullable;
+    destroyed_at: TsNullable;
+    /** Fencing number: every status / handle write under the lock compares and increments it. */
+    generation: ColumnType<number, number | undefined, number>;
+    /** An instance was created at least once (only ever set to true). */
+    had_instance: ColumnType<boolean, boolean | undefined, boolean>;
+    /** How many times the files were reset (0095); a reset may bring back the same file system id. */
+    fs_resets: ColumnType<number, number | undefined, number>;
+    /** The old provider's instance left behind by a provider change. */
+    prev_provider: ColumnType<string | null, string | null | undefined, string | null>;
+    prev_handle: InstanceHandle;
+    sweep_failed_at: TsNullable;
+}
+/**
+ * 0093_connected_environments.sql, renamed in 0105: the machine of a local device. At most one
+ * unrevoked row per device; revoking sets `revoked_at` and keeps the row.
+ */
+export interface DeviceMachinesTable {
+    id: Generated<string>;
+    org_id: string;
+    device_id: string;
+    account_id: string;
+    /** A hash of the machine credential, never the credential itself. */
+    credential_hash: string;
+    name: string;
+    os: string;
+    arch: string;
+    program_version: ColumnType<string | null, string | null | undefined, string | null>;
+    mode: ColumnType<"os" | "docker" | null, "os" | "docker" | null | undefined, "os" | "docker" | null>;
+    /** The roots the program exposes, as it reported them (a JSON array). */
+    roots: ColumnType<unknown, string | null | undefined, string | null>;
+    session_isolation: ColumnType<boolean, boolean | undefined, boolean>;
+    last_seen_at: TsNullable;
+    created_at: Ts;
+    revoked_at: TsNullable;
+}
+/** 0088_environments.sql, renamed in 0105: the device a member's new conversations use by default. */
+export interface DeviceDefaultsTable {
+    org_id: string;
+    account_id: string;
+    device_id: string;
+    updated_at: Ts;
+}
 /** pg numeric：驱动读出为字符串（精确小数），读取方自行 `Number()`。 */
 type Numeric = ColumnType<string, number | string, number | string>;
 type NumericNullable = ColumnType<string | null, number | string | null, number | string | null>;
@@ -788,6 +1040,20 @@ export interface ExtensionPackagesTable {
     source_ref: string;
     uploaded_by: string | null;
     created_at: Ts;
+    /** 0066: the plugin.json `displayName`; null without one and for packages stored before 0066. */
+    display_name: ColumnType<{
+        zh: string;
+        en: string;
+    } | null, string | null | undefined, string | null>;
+}
+/**
+ * 0100: catalog display files (plugin icons, connector template icons, setup guide files) by
+ * sha256, shared by every version listing one (`catalog/catalog-files.ts`).
+ */
+export interface CatalogFilesTable {
+    sha256: string;
+    data: Buffer;
+    touched_at: Ts;
 }
 /** 0030, renamed in 0041: package bytes when there is no object storage. */
 export interface ExtensionBlobsTable {
@@ -806,13 +1072,19 @@ export interface ExtensionInstallsTable {
     installed_at: Ts;
     updated_by: string | null;
     updated_at: Ts;
-    /** 0034 (F-AA): the source item when installed through the enterprise catalog. */
+    /** 0034 (F-AA): the source item when installed through the platform catalog. */
     catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
     /**
      * 0050: a required bootstrap plugin (enabled in every org without an org config row; cannot be
      * disabled or uninstalled). Written only by the bootstrap step.
      */
     required: ColumnType<boolean, boolean | undefined, boolean>;
+    /**
+     * 0097: when the desired state last became `enabled` (NULL while disabled). Of two enabled
+     * providers of one single-provider extension point (left from before enabling a second was
+     * refused) the earliest enabled is the one every replica loads.
+     */
+    enabled_at: TsNullable;
 }
 /** Which npm package owns an extension name (Ruling P3): written on first install, kept on uninstall. */
 export interface ExtensionNameOwnersTable {
@@ -838,6 +1110,12 @@ export interface ExtensionReplicaStatusTable {
     detail: string | null;
     /** The old version this replica still serves when this row's version did not load (see migration 0030). */
     serving_version: Generated<string | null>;
+    /**
+     * 0107: the package sha256 this replica actually serves for the plugin (the row's `sha256` when
+     * loaded, the older package still running when the row's version is pending or failed, null when
+     * none runs). Client code is delivered for the package a live replica serves.
+     */
+    serving_sha256: Generated<string | null>;
     http_replica_id: string | null;
     heartbeat_at: Ts;
 }
@@ -847,8 +1125,31 @@ export interface UsageReportSweepTable {
     watermark: Ts;
     updated_at: ColumnType<Date, Date | string | undefined, Date | string>;
 }
+/** A model disabled on the platform (`org_id` null) or in one org (0089, spec B §5.3). */
+export interface ModelDisabledTable {
+    org_id: string | null;
+    provider: string;
+    model: string;
+    disabled_by: string | null;
+    disabled_at: Ts;
+}
+/** One model call outside a conversation, e.g. an extension's embed call (0089, spec B §5.4). */
+export interface ModelUsageTable {
+    id: Generated<string>;
+    org_id: string;
+    extension: string;
+    purpose: string;
+    provider: string;
+    model: string;
+    input_tokens: number;
+    occurred_at: Ts;
+    reported_at: TsNullable;
+    /** Set when the row's `usage.report` job gave up after its last attempt (the sweep skips it). */
+    report_failed_at: TsNullable;
+}
 export interface KernelDatabase {
     accounts: AccountsTable;
+    account_initial_passwords: AccountInitialPasswordsTable;
     identities: IdentitiesTable;
     local_passwords: LocalPasswordsTable;
     orgs: OrgsTable;
@@ -858,6 +1159,8 @@ export interface KernelDatabase {
     api_tokens: ApiTokensTable;
     deployment_settings: DeploymentSettingsTable;
     extension_org_configs: ExtensionOrgConfigsTable;
+    extension_org_overrides: ExtensionOrgOverridesTable;
+    org_tool_switches: OrgToolSwitchesTable;
     audit_events: AuditEventsTable;
     secrets: SecretsTable;
     agents: AgentsTable;
@@ -867,6 +1170,7 @@ export interface KernelDatabase {
     conversation_events: ConversationEventsTable;
     conversation_queue: ConversationQueueTable;
     file_previewers: FilePreviewersTable;
+    org_extension_point_defaults: OrgExtensionPointDefaultsTable;
     runs: RunsTable;
     subagent_dispatches: SubagentDispatchesTable;
     agent_templates: AgentTemplatesTable;
@@ -875,6 +1179,7 @@ export interface KernelDatabase {
     lg_checkpoint_writes: LgCheckpointWritesTable;
     connectors: ConnectorsTable;
     connector_tools: ConnectorToolsTable;
+    connector_tool_account_policies: ConnectorToolAccountPoliciesTable;
     tool_grants: ToolGrantsTable;
     conversation_tool_grants: ConversationToolGrantsTable;
     approvals: ApprovalsTable;
@@ -889,7 +1194,12 @@ export interface KernelDatabase {
     org_anonymous_accounts: OrgAnonymousAccountsTable;
     directory_exclusions: DirectoryExclusionsTable;
     attachments: AttachmentsTable;
-    sandboxes: SandboxesTable;
+    sandboxes: LegacySandboxesTable;
+    devices: DevicesTable;
+    device_instances: DeviceInstancesTable;
+    device_defaults: DeviceDefaultsTable;
+    device_machines: DeviceMachinesTable;
+    background_tasks: BackgroundTasksTable;
     skills: SkillsTable;
     skill_versions: SkillVersionsTable;
     skill_change_requests: SkillChangeRequestsTable;
@@ -899,6 +1209,8 @@ export interface KernelDatabase {
     eval_runs: EvalRunsTable;
     eval_results: EvalResultsTable;
     model_purpose_mappings: ModelPurposeMappingsTable;
+    model_disabled: ModelDisabledTable;
+    model_usage: ModelUsageTable;
     extension_packages: ExtensionPackagesTable;
     extension_blobs: ExtensionBlobsTable;
     extension_installs: ExtensionInstallsTable;
@@ -908,15 +1220,116 @@ export interface KernelDatabase {
     extension_deployment_configs: ExtensionDeploymentConfigsTable;
     catalog_items: CatalogItemsTable;
     catalog_item_versions: CatalogItemVersionsTable;
+    catalog_files: CatalogFilesTable;
     marketplaces: MarketplacesTable;
     marketplace_entries: MarketplaceEntriesTable;
+    marketplace_icons: MarketplaceIconsTable;
+    marketplace_icon_failures: MarketplaceIconFailuresTable;
     plugin_import_staging: PluginImportStagingTable;
     catalog_requests: CatalogRequestsTable;
     catalog_org_grants: CatalogOrgGrantsTable;
+    catalog_item_scope_orgs: CatalogItemScopeOrgsTable;
+    catalog_item_org_switches: CatalogItemOrgSwitchesTable;
+    platform_skills: PlatformSkillsTable;
+    platform_skill_versions: PlatformSkillVersionsTable;
+    platform_agent_templates: PlatformAgentTemplatesTable;
+    platform_agent_template_versions: PlatformAgentTemplateVersionsTable;
+    platform_connector_templates: PlatformConnectorTemplatesTable;
+    platform_themes: PlatformThemesTable;
+    platform_theme_versions: PlatformThemeVersionsTable;
+    component_scope_orgs: ComponentScopeOrgsTable;
+    component_org_switches: ComponentOrgSwitchesTable;
     plugin_installs: PluginInstallsTable;
     plugin_install_components: PluginInstallComponentsTable;
     extension_catalog_sources: ExtensionCatalogSourcesTable;
     bootstrap_runs: BootstrapRunsTable;
+    platform_migration_runs: PlatformMigrationRunsTable;
+    org_notices: OrgNoticesTable;
+    platform_notices: PlatformNoticesTable;
+    plugin_scope_sync_failures: PluginScopeSyncFailuresTable;
+    extension_client_builds: ExtensionClientBuildsTable;
+    extension_client_reports: ExtensionClientReportsTable;
+}
+/**
+ * 0107: the client files of an extension package (client extensions spec §9.1), keyed by the
+ * package sha256 (the build id). Paths are the manifest keys (`./dist/client/...`); the files live
+ * in object storage under `deployment/<object_prefix>`.
+ */
+export interface ExtensionClientBuildsTable {
+    package_sha256: string;
+    plugin: string;
+    /** `./dist/client/client.mjs`, or null for CSS-only decoration. */
+    entry: string | null;
+    styles: ColumnType<string[], string[], string[]>;
+    assets: ColumnType<string[], string[], string[]>;
+    /** Manifest key -> `sha384-<base64>`, checked against the bytes when stored. */
+    integrity: Json<Record<string, string>>;
+    /** Manifest key -> size in bytes. */
+    sizes: Json<Record<string, number>>;
+    api_version: number;
+    /** Relative to `deployment/`: `platform/client/<plugin>/<sha256>/`. */
+    object_prefix: string;
+    created_at: Ts;
+}
+/** 0107: crash and load reports of client code (client extensions spec §10.4). */
+export interface ExtensionClientReportsTable {
+    plugin: string;
+    build: string;
+    /** Null for admin pages. */
+    org_id: string | null;
+    contribution: string | null;
+    kind: "load" | "render" | "event" | "api" | "budget";
+    count: Generated<number>;
+    first_at: Ts;
+    last_at: Ts;
+    last_message: string;
+}
+/** 0082: one run of the platform components migration job (`catalog/platform-migration.ts`). */
+export interface PlatformMigrationRunsTable {
+    id: string;
+    started_at: Ts;
+    finished_at: TsNullable;
+    stats: Json<Record<string, unknown>>;
+}
+/** 0082: the kinds of {@link OrgNoticesTable}. */
+export type OrgNoticeKind = "skill_renamed" | "item_shared" | "shared_item_updated" | "upload_confirmed" | "upload_rejected";
+/** 0082: a notice for an org's admins (an inbox item), until one of them dismisses it. */
+export interface OrgNoticesTable {
+    id: string;
+    org_id: string;
+    kind: OrgNoticeKind;
+    /** `skill_renamed`: `{ skillId, from, to, platformSkillId, plugin }`. */
+    detail: Json<Record<string, unknown>>;
+    created_at: Ts;
+    dismissed_at: TsNullable;
+    dismissed_by: NullableCol<string>;
+}
+/** 0084: a notice for the super admins (platform inbox), until one of them dismisses it. */
+export interface PlatformNoticesTable {
+    id: string;
+    kind: "ownership_transferred";
+    detail: Json<Record<string, unknown>>;
+    created_at: Ts;
+    dismissed_at: TsNullable;
+    dismissed_by: NullableCol<string>;
+}
+/**
+ * 0083: what a failed scope sync attempt was doing: turning the plugin on, off, or installing the
+ * dependencies a platform update added to a live install.
+ */
+export type ScopeSyncOp = "install" | "uninstall" | "dependencies";
+/**
+ * 0083: an open failure of the plugin scope sync for one (item, org): its last attempt failed; the
+ * next sync of the pair that does not fail deletes the row.
+ */
+export interface PluginScopeSyncFailuresTable {
+    item_id: string;
+    org_id: string;
+    op: ScopeSyncOp;
+    /** The `ApiError` code, else `internal`. */
+    code: string;
+    message: string;
+    failed_at: Ts;
 }
 /** 0050: one row per bootstrap manifest the bootstrap step completed. */
 export interface BootstrapRunsTable {
@@ -925,7 +1338,7 @@ export interface BootstrapRunsTable {
     completed_at: Ts;
     results: ColumnType<unknown, string, string>;
 }
-/** 0034_directory.sql, renamed in 0042, one kind (plugin) since 0044: enterprise catalog items. */
+/** 0034_directory.sql, renamed in 0042, one kind (plugin) since 0044: platform catalog items. */
 export interface CatalogItemsTable {
     id: string;
     /** The plugin name (one live item per name). */
@@ -946,12 +1359,188 @@ export interface CatalogItemsTable {
     deleted_at: ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
     /** 0035, renamed in 0042: the marketplace it was imported from (null once that is deleted). */
     marketplace_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0075: who the plugin is offered to (`named`: the rows of `catalog_item_scope_orgs`). */
+    scope: ColumnType<"all" | "optional" | "named", "all" | "optional" | "named" | undefined, "all" | "optional" | "named">;
+    /** 0075: shipped with the deployment (required bootstrap plugins); always scope `all`. */
+    builtin: ColumnType<boolean, boolean | undefined, boolean>;
+    /** 0075: switched off for every org by the super admin. */
+    disabled: ColumnType<boolean, boolean | undefined, boolean>;
+    /** 0075: bumped on every scope change. */
+    scope_version: ColumnType<number, number | undefined, number>;
+    /** 0077: orgs outside a `named` item's list see it as requestable (never usable). */
+    shown_to_others: ColumnType<boolean, boolean | undefined, boolean>;
+    /** 0082: the version its platform components were last written from (null: never). */
+    platform_synced_version: NullableCol<string>;
+    /** 0084: the owning org (null = the platform). */
+    owner_org_id: NullableDflt<string>;
+    /** 0084: the owner shares it with other orgs (the gate is `owner_org_id IS NULL OR shareable`). */
+    shareable: Dflt<boolean>;
+    /** 0084: an upload waits for the super admin's confirmation of its permission digest. */
+    awaiting_confirmation: Dflt<boolean>;
+    /** 0084: the uploaded version not yet confirmed. */
+    pending_version: NullableDflt<string>;
+    pending_by: NullableDflt<string>;
+    pending_at: NullableDflt<Date | string>;
+}
+/** 0075: the orgs a `named` item is offered to. */
+export interface CatalogItemScopeOrgsTable {
+    item_id: string;
+    org_id: string;
+}
+/** 0075: an org's on / off switch of an item's components. */
+export interface CatalogItemOrgSwitchesTable {
+    item_id: string;
+    org_id: string;
+    enabled: boolean;
+    updated_by: NullableCol<string>;
+    updated_at: Ts;
+}
+type ScopeMode = "follow" | "own";
+type ComponentScope = "all" | "optional" | "named";
+type ComponentKind = "skill" | "agent_template" | "connector_template" | "theme";
+type Dflt<T> = ColumnType<T, T | undefined, T>;
+type NullableDflt<T> = ColumnType<T | null, T | null | undefined, T | null>;
+/** 0081: the scope columns every platform component carries (ruling C2). */
+interface PlatformScopeColumns {
+    scope_mode: Dflt<ScopeMode>;
+    scope: Dflt<ComponentScope>;
+    disabled: Dflt<boolean>;
+    shown_to_others: Dflt<boolean>;
+    scope_version: Dflt<number>;
+}
+/** 0081: a skill owned by the deployment (ruling A2). */
+export interface PlatformSkillsTable extends PlatformScopeColumns {
+    id: string;
+    /** 0084: the owning org (null = the platform). */
+    owner_org_id: NullableDflt<string>;
+    /** 0084: the org it was created in; never changed (F27). */
+    origin_org_id: NullableDflt<string>;
+    /** 0084: the owner shares it with other orgs. */
+    shareable: Dflt<boolean>;
+    catalog_item_id: NullableDflt<string>;
+    plugin_name: NullableDflt<string>;
+    name: string;
+    description: string;
+    description_zh: NullableDflt<string>;
+    current_version: number;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0081: one version of a platform skill; files live under `object_prefix` in `deployment/`. */
+export interface PlatformSkillVersionsTable {
+    skill_id: string;
+    version: number;
+    manifest: Json<SkillManifest>;
+    object_prefix: string;
+    catalog_version: NullableDflt<string>;
+    source_format: Dflt<SourceFormat>;
+    suggest_pinned: Dflt<boolean>;
+    updated_on_own: Dflt<boolean>;
+    created_by: NullableDflt<string>;
+    created_at: Ts;
+}
+/** 0081: an agent template owned by the deployment. */
+export interface PlatformAgentTemplatesTable extends PlatformScopeColumns {
+    id: string;
+    /** 0084: the owning org (null = the platform). */
+    owner_org_id: NullableDflt<string>;
+    /** 0084: the org it was created in; never changed (F27). */
+    origin_org_id: NullableDflt<string>;
+    /** 0084: the owner shares it with other orgs. */
+    shareable: Dflt<boolean>;
+    catalog_item_id: NullableDflt<string>;
+    plugin_name: NullableDflt<string>;
+    name: string;
+    description: NullableDflt<string>;
+    description_zh: NullableDflt<string>;
+    current_version: number;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0081: one version of a platform agent template. */
+export interface PlatformAgentTemplateVersionsTable {
+    template_id: string;
+    version: number;
+    definition: Json<unknown>;
+    object_prefix: NullableDflt<string>;
+    catalog_version: NullableDflt<string>;
+    source_format: Dflt<SourceFormat>;
+    suggest_pinned: Dflt<boolean>;
+    updated_on_own: Dflt<boolean>;
+    created_by: NullableDflt<string>;
+    created_at: Ts;
+}
+/** 0081: a connector template of a catalog item, with its own scope; connectors stay per org. */
+export interface PlatformConnectorTemplatesTable extends PlatformScopeColumns {
+    id: string;
+    /** 0084: the owning org (null = the platform). */
+    owner_org_id: NullableDflt<string>;
+    /** 0084: the owner shares it with other orgs. */
+    shareable: Dflt<boolean>;
+    catalog_item_id: string;
+    template_id: string;
+    current_version: string;
+    file: Json<unknown>;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0093: a theme (themes spec §6); every theme comes from a plugin, owned by the platform or an org. */
+export interface PlatformThemesTable extends PlatformScopeColumns {
+    id: string;
+    /** The owning org (null = the platform). */
+    owner_org_id: NullableDflt<string>;
+    /** The org it was created in; never changed. */
+    origin_org_id: NullableDflt<string>;
+    /** The owner shares it with other orgs. */
+    shareable: Dflt<boolean>;
+    catalog_item_id: NullableDflt<string>;
+    plugin_name: NullableDflt<string>;
+    name: string;
+    description: NullableDflt<string>;
+    description_zh: NullableDflt<string>;
+    current_version: number;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
 }
 /**
- * 0034, renamed in 0042, reshaped in 0044: the versions of an enterprise catalog item. `manifest` is
+ * 0093: one version of a theme; `definition` is the parsed theme file, its fonts and logo live
+ * under `object_prefix` in `deployment/` (null without assets).
+ */
+export interface PlatformThemeVersionsTable {
+    theme_id: string;
+    version: number;
+    definition: Json<ParsedTheme>;
+    object_prefix: NullableDflt<string>;
+    catalog_version: NullableDflt<string>;
+    updated_on_own: Dflt<boolean>;
+    created_by: NullableDflt<string>;
+    created_at: Ts;
+}
+/** 0081: the orgs an own-scope `named` component is offered to. */
+export interface ComponentScopeOrgsTable {
+    kind: ComponentKind;
+    component_id: string;
+    org_id: string;
+}
+/** 0081: an org's on / off switch of a component. */
+export interface ComponentOrgSwitchesTable {
+    kind: ComponentKind;
+    component_id: string;
+    org_id: string;
+    enabled: boolean;
+    updated_by: NullableCol<string>;
+    updated_at: Ts;
+}
+/**
+ * 0034, renamed in 0042, reshaped in 0044: the versions of a platform catalog item. `manifest` is
  * the normalized plugin.json (skills and connector templates listed explicitly); `extension_sha256`
  * the plugin's extension package in `extension_packages` (null without an extension); `files` the
- * files stored under `object_prefix` (skills, connector templates, icons).
+ * version's stored files: display files (icons, setup guide files) in `catalog_files` (0100), the
+ * rest (skills, connector and agent templates) under `object_prefix`.
  */
 export interface CatalogItemVersionsTable {
     item_id: string;
@@ -982,8 +1571,20 @@ export interface CatalogItemVersionsTable {
     license_text: ColumnType<string | null, string | null | undefined, string | null>;
     /** 0051: the root LICENSE was too long (or not UTF-8) to store. */
     license_truncated: ColumnType<boolean, boolean | undefined, boolean>;
+    /**
+     * 0084 (ruling P3-52): when the version was applied or confirmed (default: written; an org's
+     * upload writes null until applied). Only applied, not rejected versions serve other orgs.
+     */
+    applied_at: TsNullable;
+    /** 0084 (ruling P3-52): when the super admin rejected this pending org version. */
+    rejected_at: TsNullable;
+    /**
+     * 0107: the keys of `suggestedAppearance.replacements` in plugin.json order (jsonb does not keep
+     * key order); null without replacements.
+     */
+    appearance_order: ColumnType<string[] | null, string[] | null | undefined, string[] | null>;
 }
-/** 0035_catalogs.sql, renamed in 0042: marketplaces (official / enterprise). */
+/** 0035_catalogs.sql, renamed in 0042: marketplaces (official / custom). */
 export interface MarketplacesTable {
     id: string;
     name: string;
@@ -1010,6 +1611,8 @@ export interface MarketplacesTable {
         name: string;
         reason: string;
     }[], string | undefined, string>;
+    /** 0101: the git commit whose repository-path icons were last stored completely. */
+    icons_commit: ColumnType<string | null, string | null | undefined, string | null>;
 }
 /**
  * 0035, renamed in 0042, reshaped in 0044: cached marketplace entries (replaced as a whole on each
@@ -1030,12 +1633,33 @@ export interface MarketplaceEntriesTable {
     claude: ColumnType<unknown | null, string | null | undefined, string | null>;
     updated_at: Ts;
 }
+/**
+ * 0101: marketplace entry icons, one per (marketplace, the entry's `icon` as written), downloaded
+ * on refresh (`catalog/marketplace-icons.ts`).
+ */
+export interface MarketplaceIconsTable {
+    source_id: string;
+    ref: string;
+    sha256: string;
+    content_type: "image/svg+xml" | "image/png";
+    data: Buffer;
+    fetched_at: Ts;
+}
+/** 0101: icon URLs whose last download failed, retried after a backoff. */
+export interface MarketplaceIconFailuresTable {
+    source_id: string;
+    ref: string;
+    failed_at: Ts;
+    attempts: ColumnType<number, number | undefined, number>;
+}
 /**
  * 0036_app_import_staging.sql, renamed in 0043, reshaped in 0044: a staged plugin import (written by
  * prepare, deleted by confirm, expires after 24 hours). `manifest` holds what confirm writes.
  */
 export interface PluginImportStagingTable {
     id: string;
+    /** 0084: the org whose upload this is (null: the super admin's import). */
+    org_id: NullableDflt<string>;
     review: Json<unknown>;
     manifest: Json<unknown>;
     object_prefix: string | null;
@@ -1046,14 +1670,31 @@ export interface PluginImportStagingTable {
 }
 type NullableCol<T> = ColumnType<T | null, T | null | undefined, T | null>;
 /**
- * 0037, renamed in 0042: an org's catalog requests (stage org = a member request; deployment =
- * waiting for enterprise admin approval).
+ * 0037, renamed in 0042, kinds since 0077: an org's catalog requests. `stage` (org / deployment) is
+ * still written (`enable` -> org, else deployment) but no longer read.
  */
 export interface CatalogRequestsTable {
     id: string;
     org_id: string;
-    item_id: string;
+    /** 0077: null for an `import` request until its confirm writes the item. */
+    item_id: NullableCol<string>;
     version: NullableCol<string>;
+    /** 0077: what the request asks for (spec §5.1). */
+    kind: ColumnType<"access" | "import" | "enable" | "connector_setup", "access" | "import" | "enable" | "connector_setup" | undefined, "access" | "import" | "enable" | "connector_setup">;
+    /** 0085: the agent of a `connector_setup` request (cascades with the agent). */
+    agent_id: NullableCol<string>;
+    /** 0085: the template connector keys a `connector_setup` request still waits for. */
+    pending_keys: ColumnType<string[] | null, string | null | undefined, string | null>;
+    /** 0077: the marketplace entry of an `import` request (null once the marketplace is deleted). */
+    marketplace_id: NullableCol<string>;
+    entry_name: NullableCol<string>;
+    entry_version: NullableCol<string>;
+    /** 0077: the optional reason of a rejection. */
+    reason: NullableCol<string>;
+    /** 0077: the prepared import of an approved `import` request. */
+    staging_id: NullableCol<string>;
+    /** 0077: the requester dismissed the decision from the inbox. */
+    dismissed_at: NullableCol<Date>;
     stage: "org" | "deployment";
     requested_by: string | null;
     note: ColumnType<string, string | undefined, string>;
@@ -1073,7 +1714,7 @@ export interface ExtensionCatalogSourcesTable {
     item_id: string;
     created_at: Generated<Date>;
 }
-/** 0037, renamed in 0042: an enterprise admin's approval for an org to install a needs_approval item. */
+/** 0037, renamed in 0042: a super admin's approval for an org to install a needs_approval item. */
 export interface CatalogOrgGrantsTable {
     item_id: string;
     org_id: string;
@@ -1103,8 +1744,8 @@ export interface PluginInstallsTable {
  */
 export interface PluginInstallComponentsTable {
     install_id: string;
-    /** 0053: 'agent_template', ref = the agent_templates id. */
-    kind: "extension" | "connector" | "skill" | "plugin" | "agent_template";
+    /** 0053: 'agent_template', ref = the agent_templates id; 0093: 'theme', ref = the platform_themes id. */
+    kind: "extension" | "connector" | "skill" | "plugin" | "agent_template" | "theme";
     ref: string;
     created: boolean;
     skill_version: NullableCol<number>;