@capybara-hq/kernel 0.1.0-rc.23 → 0.1.0-rc.25

package/dist/conversations/queue.service.js

@@ -31,7 +31,7 @@ let ConversationQueue = class ConversationQueue {
     runs;
     txHost;
     constructor(db, eventLog, conversations, 
-    /** Starts the conversation's next run (`ensureRun`). */
+    /** Starts the conversation's next run after a commit (a failure is logged, never thrown). */
     runs, txHost) {
         this.db = db;
         this.eventLog = eventLog;
@@ -101,16 +101,16 @@ let ConversationQueue = class ConversationQueue {
         }
         if (out.created) {
             await this.eventLog.publishChanged(conversationId, "queue");
-            await this.runs.ensureRun(conversationId);
+            await this.runs.ensureRunAfterCommit(conversationId);
         }
         return { item: toItem(out.row), created: out.created };
     }
     // its own transaction: the caller notifies and publishes after the commit
     async addIn(orgId, conversationId, accountId, input, files, skill, extra, internal) {
         const t = this.db.db;
-        await t
+        const conv = await t
             .selectFrom("conversations")
-            .select("id")
+            .select("last_seq")
             .where("id", "=", conversationId)
             .forUpdate()
             .executeTakeFirstOrThrow();
@@ -168,6 +168,9 @@ let ConversationQueue = class ConversationQueue {
         })
             .returning(COLUMNS)
             .executeTakeFirstOrThrow();
+        // on an idle conversation the item goes out at once: owed with it (no event of its own, so
+        // under the conversation's newest seq; transactional outbox spec §6)
+        await this.runs.oweEnsureRun(conversationId, conv.last_seq, orgId);
         return { row, created: true };
     }
     /**
@@ -253,6 +256,8 @@ let ConversationQueue = class ConversationQueue {
         // a task's queued message deleted by a person: its run is skipped (scheduled tasks §6)
         await releaseQueuedTaskRunIn(t, gone.schedule);
         await unpauseIfEmpty(t, conversationId);
+        // the wakes an unpause releases for the tree are owed with it (transactional outbox spec §6)
+        await this.runs.oweHeldTreeIn(conversationId);
     }
     /**
      * Sends a queued item now: it leaves the queue and is posted as a user message in the same
@@ -263,7 +268,7 @@ let ConversationQueue = class ConversationQueue {
      */
     async sendNow(orgId, conversationId, accountId, itemId) {
         await this.conversations.writable(orgId, conversationId, accountId);
-        const { event, fresh, switched, unarchived, skipped, toSeq } = await this.sendNowIn(conversationId, itemId);
+        const { event, fresh, switched, unarchived, skipped, toSeq } = await this.sendNowIn(orgId, conversationId, itemId);
         if (fresh)
             await this.eventLog.notify(conversationId, toSeq);
         await this.conversations.announceSkipped(skipped);
@@ -272,12 +277,12 @@ let ConversationQueue = class ConversationQueue {
         if (unarchived)
             await this.eventLog.publishChanged(conversationId, "archived");
         await this.eventLog.publishChanged(conversationId, "queue");
-        await this.runs.ensureRun(conversationId);
+        await this.runs.ensureRunAfterCommit(conversationId);
         await this.runs.wakeHeldTree(conversationId);
         return event;
     }
     // its own transaction: the caller notifies and publishes after the commit
-    async sendNowIn(conversationId, itemId) {
+    async sendNowIn(orgId, conversationId, itemId) {
         const t = this.db.db;
         await this.lockConversation(conversationId);
         const head = await t
@@ -313,6 +318,10 @@ let ConversationQueue = class ConversationQueue {
         const skips = sent
             ? { skipped: NO_REPLY_SKIPS, toSeq: null }
             : await this.conversations.skipWaitsIn(conversationId, row.account_id, out.event.seq);
+        // the run the sent message starts is owed with it (transactional outbox spec §6), and so are
+        // the wakes the unpause releases for the tree
+        await this.runs.oweEnsureRun(conversationId, out.event.seq, orgId);
+        await this.runs.oweHeldTreeIn(conversationId);
         return {
             ...out,
             fresh: !sent,
@@ -323,16 +332,28 @@ let ConversationQueue = class ConversationQueue {
     /** "Continue sending": clears the pause and lets `ensureRun` send the head item. */
     async resume(orgId, conversationId, accountId) {
         await this.conversations.writable(orgId, conversationId, accountId);
-        await this.db
-            .updateTable("conversations")
-            .set({ queue_paused: false, queue_pause_reason: null })
-            .where("id", "=", conversationId)
-            .execute();
+        await this.resumeIn(orgId, conversationId);
         await this.eventLog.publishChanged(conversationId, "queue");
-        await this.runs.ensureRun(conversationId);
+        await this.runs.ensureRunAfterCommit(conversationId);
         // a paused root holds the wakes of its whole tree (agent map spec §5.3)
         await this.runs.wakeHeldTree(conversationId);
     }
+    /**
+     * Clears the pause and owes the ensure-run backstop that sends the head item (no event of its
+     * own, so under the conversation's newest seq; transactional outbox spec §6).
+     */
+    // its own transaction: the caller publishes and starts the run after the commit
+    async resumeIn(orgId, conversationId) {
+        const conv = await this.db.db
+            .updateTable("conversations")
+            .set({ queue_paused: false, queue_pause_reason: null })
+            .where("id", "=", conversationId)
+            .returning("last_seq")
+            .executeTakeFirstOrThrow();
+        await this.runs.oweEnsureRun(conversationId, conv.last_seq, orgId);
+        // the wakes the root held for its tree (agent map spec §5.3) are owed with the unpause
+        await this.runs.oweHeldTreeIn(conversationId);
+    }
     /** A queued item or a sent message for this client id (outside any transaction). */
     async prior(conversationId, clientMessageId) {
         const row = await this.db
@@ -370,6 +391,9 @@ __decorate([
 __decorate([
     Transactional({ propagation: "requires_new" })
 ], ConversationQueue.prototype, "sendNowIn", null);
+__decorate([
+    Transactional({ propagation: "requires_new" })
+], ConversationQueue.prototype, "resumeIn", null);
 __decorate([
     Transactional({ propagation: "mandatory" })
 ], ConversationQueue.prototype, "lockConversation", null);

package/dist/conversations/source.d.ts

@@ -0,0 +1,10 @@
+import type { ConversationSource } from "@capybara-hq/plugin-sdk";
+import type { KernelSchemaDb } from "../db/kernel-schema.js";
+/**
+ * Where a conversation comes from (memory plugin spec §6.2), stored on its row at creation
+ * (`conversations.source`, migration 0124) and never changed. A missing conversation throws
+ * rather than guessing a source (a guess could offer a group chat what only a DM may see).
+ */
+export declare function conversationSourceOf(db: Pick<KernelSchemaDb, "selectFrom">, conversationId: string): Promise<ConversationSource>;
+/** The source of a conversation created for a channel chat of `chatType`. */
+export declare const channelSource: (chatType: "dm" | "group") => ConversationSource;

package/dist/conversations/source.js

@@ -0,0 +1,17 @@
+/**
+ * Where a conversation comes from (memory plugin spec §6.2), stored on its row at creation
+ * (`conversations.source`, migration 0124) and never changed. A missing conversation throws
+ * rather than guessing a source (a guess could offer a group chat what only a DM may see).
+ */
+export async function conversationSourceOf(db, conversationId) {
+    const row = await db
+        .selectFrom("conversations")
+        .select("source")
+        .where("id", "=", conversationId)
+        .executeTakeFirst();
+    if (row === undefined)
+        throw new Error(`conversation ${conversationId} not found`);
+    return row.source;
+}
+/** The source of a conversation created for a channel chat of `chatType`. */
+export const channelSource = (chatType) => chatType === "dm" ? "channel_dm" : "channel_group";

package/dist/conversations/titles.d.ts

@@ -5,7 +5,7 @@ import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
 import { ModelPurposesService } from "../models/purposes.js";
 import { type AuditEntry, type HookRunner } from "../runtime/hook-calls.js";
-import { UsageReporter } from "../runtime/usage-report.js";
+import { UsageReportJobs } from "../runtime/usage-report-jobs.js";
 import { EventLog } from "./event-log.js";
 import { type ConversationEvent } from "./events.js";
 /**
@@ -56,7 +56,7 @@ export declare function titleExcerpt(firstUser: string, firstReply: string): str
 export declare function cleanTitle(reply: string): string | null;
 export interface TitleDeps {
     db: KernelSchemaDb;
-    eventLog: Pick<EventLog, "append" | "appendIn" | "readAfter" | "latestOfType" | "notify" | "publishChanged">;
+    eventLog: Pick<EventLog, "appendInReport" | "readAfter" | "latestOfType" | "notify" | "publishChanged">;
     purposes: Pick<ModelPurposesService, "chat">;
     log: Pick<Logger, "warn">;
     /**
@@ -64,11 +64,10 @@ export interface TitleDeps {
      * title and uses up the attempt) and `model.response` with `purpose: "title"`, like compaction.
      */
     hooks?: HookRunner;
-    usageReport?: Pick<UsageReporter, "enqueue">;
     /** Aborts the call (worker shutdown). */
     signal?: AbortSignal;
     /** The job's transactional writes ({@link TitleGenerator}). */
-    writes: Pick<TitleGenerator, "writeResult" | "auditDenied">;
+    writes: Pick<TitleGenerator, "writeResult" | "writeUsage" | "auditDenied">;
 }
 /** The attempt number to enqueue for this conversation, or null when no title job is due. */
 export declare function titleAttemptDue(db: KernelSchemaDb, conversationId: string): Promise<number | null>;
@@ -93,19 +92,22 @@ export declare class TitleGenerator {
     private readonly purposes;
     /** The title call fires the plugin hooks (`model.request`, `model.response`). */
     private readonly host;
-    private readonly usageReport;
+    /** The title call's `usage.report` delivery, owed with its usage event. */
+    private readonly usage;
     private readonly log;
     readonly txHost: TransactionHost;
     constructor(kdb: KernelDb, eventLog: TitleDeps["eventLog"], purposes: Pick<ModelPurposesService, "chat">, 
     /** The title call fires the plugin hooks (`model.request`, `model.response`). */
     host: {
         readonly hooks?: HookRunner;
-    } | undefined, usageReport: Pick<UsageReporter, "enqueue"> | undefined, log: Pick<Logger, "warn">, txHost: TransactionHost);
+    } | undefined, 
+    /** The title call's `usage.report` delivery, owed with its usage event. */
+    usage: Pick<UsageReportJobs, "oweEvents">, log: Pick<Logger, "warn">, txHost: TransactionHost);
     /** One attempt ({@link runTitleJob}); `signal` aborts the call (the worker stopping). */
     run(conversationId: string, attempt: number, signal?: AbortSignal): Promise<void>;
     /**
-     * Appends the call's `usage` event and writes the title while `title_source IS NULL` (a rename
-     * wins), in one transaction.
+     * Appends the call's `usage` event (owing its `usage.report` delivery) and writes the title while
+     * `title_source IS NULL` (a rename wins), in one transaction.
      */
     writeResult(conversationId: string, attempt: number, out: {
         provider: string;
@@ -115,6 +117,17 @@ export declare class TitleGenerator {
         written: boolean;
         usage: ConversationEvent | undefined;
     }>;
+    /**
+     * Appends the usage event of a call that failed after it was sent (billed, so reported) and owes
+     * its `usage.report` delivery, in one transaction.
+     */
+    writeUsage(conversationId: string, attempt: number, u: {
+        provider: string;
+        model: string;
+        usage: ModelUsage;
+    }): Promise<ConversationEvent | undefined>;
+    /** The usage event and its owed delivery (only when this call wrote it, not on a retry's hit). */
+    private appendUsage;
     /** The `hook.denied` audit row of a denied title call. */
     auditDenied(entry: AuditEntry): Promise<void>;
 }

package/dist/conversations/titles.js

@@ -22,7 +22,7 @@ import { KERNEL_LOGGER } from "../infra/tokens.js";
 import { ModelsModule } from "../models/models.module.js";
 import { ModelPurposesService, PurposeAttemptError } from "../models/purposes.js";
 import { fireObserve, hookDeniedAudit, hookDeniedEvent, hookRequestOf, } from "../runtime/hook-calls.js";
-import { UsageReporter, UsageReportModule } from "../runtime/usage-report.js";
+import { UsageReportJobs, UsageReportJobsModule } from "../runtime/usage-report-jobs.js";
 import { HIDDEN_FORMAT_RE } from "../text.js";
 import { EventLog, EventLogModule } from "./event-log.js";
 import { typedInvocation } from "./events.js";
@@ -275,10 +275,8 @@ export async function runTitleJob(d, conversationId, attempt) {
         });
     }
     const { written, usage } = await d.writes.writeResult(conversationId, attempt, out, title);
-    if (usage) {
+    if (usage)
         await d.eventLog.notify(conversationId, usage.seq);
-        void d.usageReport?.enqueue(conversationId, usage.seq);
-    }
     if (written)
         await d.eventLog.publishChanged(conversationId, "title");
 }
@@ -291,9 +289,9 @@ const usageEvent = (attempt, u) => ({
     payload: { step: 0, provider: u.provider, model: u.model, ...u.usage, purpose: "title" },
 });
 async function logUsage(d, conversationId, attempt, u) {
-    const [ev] = await d.eventLog.append(conversationId, [usageEvent(attempt, u)]);
+    const ev = await d.writes.writeUsage(conversationId, attempt, u);
     if (ev)
-        void d.usageReport?.enqueue(conversationId, ev.seq);
+        await d.eventLog.notify(conversationId, ev.seq);
 }
 /** Returns a claimed attempt (shutdown before the call was sent). */
 async function giveBack(db, conversationId, attempt) {
@@ -383,17 +381,19 @@ let TitleGenerator = class TitleGenerator {
     eventLog;
     purposes;
     host;
-    usageReport;
+    usage;
     log;
     txHost;
     constructor(kdb, eventLog, purposes, 
     /** The title call fires the plugin hooks (`model.request`, `model.response`). */
-    host, usageReport, log, txHost) {
+    host, 
+    /** The title call's `usage.report` delivery, owed with its usage event. */
+    usage, log, txHost) {
         this.kdb = kdb;
         this.eventLog = eventLog;
         this.purposes = purposes;
         this.host = host;
-        this.usageReport = usageReport;
+        this.usage = usage;
         this.log = log;
         this.txHost = txHost;
     }
@@ -409,21 +409,20 @@ let TitleGenerator = class TitleGenerator {
             purposes: this.purposes,
             log: this.log,
             ...(hooks !== undefined && { hooks }),
-            ...(this.usageReport !== undefined && { usageReport: this.usageReport }),
             ...(signal !== undefined && { signal }),
             writes: this,
         }, conversationId, attempt);
     }
     /**
-     * Appends the call's `usage` event and writes the title while `title_source IS NULL` (a rename
-     * wins), in one transaction.
+     * Appends the call's `usage` event (owing its `usage.report` delivery) and writes the title while
+     * `title_source IS NULL` (a rename wins), in one transaction.
      */
     async writeResult(conversationId, attempt, out, title) {
         // Append first: it locks the conversation row FOR UPDATE before this transaction touches it.
         // Updating the title first held the row FOR NO KEY UPDATE, which lets in another
         // transaction's foreign key check (FOR KEY SHARE, e.g. inserting an approval); the append's
         // FOR UPDATE then waited for that one while it waited for the title row: 40P01
-        const [ev] = await this.eventLog.appendIn(conversationId, [usageEvent(attempt, out)]);
+        const ev = await this.appendUsage(conversationId, attempt, out);
         const row = title === null
             ? undefined
             : await this.kdb.db
@@ -435,6 +434,22 @@ let TitleGenerator = class TitleGenerator {
                 .executeTakeFirst();
         return { written: row !== undefined, usage: ev };
     }
+    /**
+     * Appends the usage event of a call that failed after it was sent (billed, so reported) and owes
+     * its `usage.report` delivery, in one transaction.
+     */
+    async writeUsage(conversationId, attempt, u) {
+        return this.appendUsage(conversationId, attempt, u);
+    }
+    /** The usage event and its owed delivery (only when this call wrote it, not on a retry's hit). */
+    async appendUsage(conversationId, attempt, u) {
+        const { events, fresh } = await this.eventLog.appendInReport(conversationId, [
+            usageEvent(attempt, u),
+        ]);
+        if (fresh[0])
+            await this.usage.oweEvents(conversationId, events);
+        return events[0];
+    }
     /** The `hook.denied` audit row of a denied title call. */
     async auditDenied(entry) {
         await audit(this.kdb.db, entry);
@@ -443,6 +458,12 @@ let TitleGenerator = class TitleGenerator {
 __decorate([
     Transactional({ propagation: "requires_new" })
 ], TitleGenerator.prototype, "writeResult", null);
+__decorate([
+    Transactional({ propagation: "requires_new" })
+], TitleGenerator.prototype, "writeUsage", null);
+__decorate([
+    Transactional({ propagation: "mandatory" })
+], TitleGenerator.prototype, "appendUsage", null);
 __decorate([
     Transactional({ propagation: "requires_new" })
 ], TitleGenerator.prototype, "auditDenied", null);
@@ -452,7 +473,7 @@ TitleGenerator = __decorate([
     __param(1, Inject(EventLog)),
     __param(2, Inject(ModelPurposesService)),
     __param(3, Inject(ExtensionHost)),
-    __param(4, Inject(UsageReporter)),
+    __param(4, Inject(UsageReportJobs)),
     __param(5, Inject(KERNEL_LOGGER)),
     __param(6, Inject(TransactionHost))
 ], TitleGenerator);
@@ -535,7 +556,13 @@ let TitlesModule = class TitlesModule {
 };
 TitlesModule = __decorate([
     Module({
-        imports: [EventLogModule, ModelsModule, ExtensionsModule, UsageReportModule, TITLE_QUEUE_MODULE],
+        imports: [
+            EventLogModule,
+            ModelsModule,
+            ExtensionsModule,
+            UsageReportJobsModule,
+            TITLE_QUEUE_MODULE,
+        ],
         providers: [TitleGenerator, TitleQueue],
         exports: [TitleQueue, TITLE_QUEUE_MODULE],
     })

package/dist/conversations/tree.d.ts

@@ -15,3 +15,13 @@ export declare function conversationTree(db: KernelSchemaDb, conversationId: str
  * `conversations.parent_conversation_id`. Empty for a root or an unknown id.
  */
 export declare function conversationAncestors(db: KernelSchemaDb, conversationId: string): Promise<string[]>;
+/**
+ * Locks the conversations `ids` and every ancestor of theirs (`FOR NO KEY UPDATE`, in the caller's
+ * transaction) tree by tree, root first: the trees in root id order, within a tree by level below
+ * the root, then id. A reply locks its root conversation and only then the sub-agents' below it
+ * (`ConversationsService.skipWaitsIn`), and a dispatch locks a parent before its child; a locker
+ * of conversations in plain id order could take a child before its root and wait for the root
+ * while such a path holds the root and waits for the child (40P01). Returns the ids locked (the
+ * requested ones and their ancestors); an unknown id is skipped.
+ */
+export declare function lockConversationTrees(db: KernelSchemaDb, ids: readonly string[]): Promise<string[]>;

package/dist/conversations/tree.js

@@ -40,3 +40,38 @@ export async function conversationAncestors(db, conversationId) {
     SELECT id FROM up WHERE level > 0 ORDER BY level`.execute(db);
     return r.rows.map((row) => row.id);
 }
+/**
+ * Locks the conversations `ids` and every ancestor of theirs (`FOR NO KEY UPDATE`, in the caller's
+ * transaction) tree by tree, root first: the trees in root id order, within a tree by level below
+ * the root, then id. A reply locks its root conversation and only then the sub-agents' below it
+ * (`ConversationsService.skipWaitsIn`), and a dispatch locks a parent before its child; a locker
+ * of conversations in plain id order could take a child before its root and wait for the root
+ * while such a path holds the root and waits for the child (40P01). Returns the ids locked (the
+ * requested ones and their ancestors); an unknown id is skipped.
+ */
+export async function lockConversationTrees(db, ids) {
+    const wanted = [...new Set(ids)];
+    if (wanted.length === 0)
+        return [];
+    const r = await sql `
+    WITH RECURSIVE up(start, id, parent, level) AS (
+      SELECT c.id, c.id, c.parent_conversation_id, 0 FROM capybara.conversations c
+      WHERE c.id = ANY(${wanted}::text[])
+      UNION ALL
+      SELECT up.start, c.id, c.parent_conversation_id, up.level + 1
+      FROM capybara.conversations c JOIN up ON c.id = up.parent
+      WHERE up.level < ${TREE_MAX_LEVELS}
+    ),
+    tops AS (
+      SELECT DISTINCT ON (start) start, id AS root, level AS height
+      FROM up ORDER BY start, level DESC
+    ),
+    nodes AS (
+      SELECT DISTINCT up.id, tops.root, tops.height - up.level AS depth
+      FROM up JOIN tops ON tops.start = up.start
+    )
+    SELECT c.id FROM capybara.conversations c JOIN nodes n ON n.id = c.id
+    ORDER BY n.root, n.depth, n.id
+    FOR NO KEY UPDATE OF c`.execute(db);
+    return r.rows.map((row) => row.id);
+}

package/dist/db/kernel-schema.d.ts

@@ -1,4 +1,4 @@
-import type { FileSystemHandle, ParsedTheme, SandboxTier, SkillInvocation } from "@capybara-hq/plugin-sdk";
+import type { ConversationSource, FileSystemHandle, ParsedTheme, SandboxTier, SkillInvocation } from "@capybara-hq/plugin-sdk";
 import type { ColumnType, Generated, Kysely } from "kysely";
 import type { ModelRef } from "../agents/definition.js";
 import type { ScheduleChat, ScheduleMarker, ScheduleMode, SchedulePauseReason, ScheduleStatus, ScheduleTrigger, TaskRunSkipReason, TaskRunStatus } from "../schedules/types.js";
@@ -263,6 +263,11 @@ export interface ConversationsTable {
     device_id: ColumnType<string | null, string | null | undefined, string | null>;
     /** 0113: the scheduled task that created it (`new` mode); null otherwise. */
     scheduled_task_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /**
+     * 0124: where the conversation comes from, set at creation and never changed. Required on insert
+     * (the column's `web` default is not relied on: a forgotten source must not read as web).
+     */
+    source: ColumnType<ConversationSource, ConversationSource, never>;
 }
 /** 0060: an org's order of file-preview@1 previewers (UI refresh B Task 11). */
 export interface FilePreviewersTable {
@@ -939,6 +944,8 @@ export interface DeviceMachinesTable {
     features: ColumnType<string[], string[] | undefined, string[]>;
     /** 0114: the program's local network policy summary (hello, refreshed by each `policy` op). */
     local_policy: ColumnType<unknown | null, string | null | undefined, string | null>;
+    /** 0118: the `policy` ops sent whose answer is not recorded yet (`PendingPolicyOp[]`). */
+    pending_policy_ops: ColumnType<unknown, string | undefined, string>;
 }
 /** 0088_environments.sql, renamed in 0105: the device a member's new conversations use by default. */
 export interface DeviceDefaultsTable {
@@ -1156,12 +1163,6 @@ export interface ExtensionReplicaStatusTable {
     http_replica_id: string | null;
     heartbeat_at: Ts;
 }
-/** 0040: the usage.report sweeper's watermark (a single row, id = 1). */
-export interface UsageReportSweepTable {
-    id: ColumnType<number, number | undefined, never>;
-    watermark: Ts;
-    updated_at: ColumnType<Date, Date | string | undefined, Date | string>;
-}
 /** A model disabled on the platform (`org_id` null) or in one org (0089, spec B §5.3). */
 export interface ModelDisabledTable {
     org_id: string | null;
@@ -1181,7 +1182,7 @@ export interface ModelUsageTable {
     input_tokens: number;
     occurred_at: Ts;
     reported_at: TsNullable;
-    /** Set when the row's `usage.report` job gave up after its last attempt (the sweep skips it). */
+    /** Set when the row's `usage.report` job gave up after its last attempt. */
     report_failed_at: TsNullable;
 }
 type NullableText = ColumnType<string | null, string | null | undefined, string | null>;
@@ -1228,8 +1229,6 @@ export interface ScheduledTaskRunsTable {
     skip_reason: ColumnType<TaskRunSkipReason | null, TaskRunSkipReason | null | undefined, TaskRunSkipReason | null>;
     error: NullableText;
     missing_grants: ColumnType<string[], string | undefined, string>;
-    /** When the scanner's repair last found this started run still in flight. */
-    rechecked_at: NullableTs;
 }
 /** 0113: a scheduled task's remembered grants (same shape as `conversation_tool_grants`). */
 export interface ScheduledTaskGrantsTable {
@@ -1310,7 +1309,6 @@ export interface KernelDatabase {
     extension_blobs: ExtensionBlobsTable;
     extension_installs: ExtensionInstallsTable;
     extension_replica_status: ExtensionReplicaStatusTable;
-    usage_report_sweep: UsageReportSweepTable;
     extension_name_owners: ExtensionNameOwnersTable;
     extension_deployment_configs: ExtensionDeploymentConfigsTable;
     catalog_items: CatalogItemsTable;
@@ -1338,12 +1336,34 @@ export interface KernelDatabase {
     plugin_install_components: PluginInstallComponentsTable;
     extension_catalog_sources: ExtensionCatalogSourcesTable;
     bootstrap_runs: BootstrapRunsTable;
-    platform_migration_runs: PlatformMigrationRunsTable;
     org_notices: OrgNoticesTable;
     platform_notices: PlatformNoticesTable;
     plugin_scope_sync_failures: PluginScopeSyncFailuresTable;
     extension_client_builds: ExtensionClientBuildsTable;
     extension_client_reports: ExtensionClientReportsTable;
+    outbox: OutboxTable;
+}
+/**
+ * 0119: the transactional outbox (transactional outbox spec §4). A row is a BullMQ job owed by a
+ * committed transaction; deleted on delivery, so only dead rows (`dead_at` set) stay.
+ */
+export interface OutboxTable {
+    /** bigint identity; the pg driver reads it as a string. */
+    id: Generated<string>;
+    queue: string;
+    job_name: string;
+    /** Unique per queue: a second add of the same job before delivery is a no-op. */
+    job_id: string;
+    data: Json;
+    /** The job's delay target; null runs it now. */
+    run_at: Date | null;
+    /** Null for platform work. */
+    org_id: string | null;
+    attempts: Generated<number>;
+    next_attempt_at: Generated<Date>;
+    last_error: string | null;
+    dead_at: Date | null;
+    created_at: Generated<Date>;
 }
 /**
  * 0107: the client files of an extension package (client extensions spec §9.1), keyed by the
@@ -1379,21 +1399,14 @@ export interface ExtensionClientReportsTable {
     last_at: Ts;
     last_message: string;
 }
-/** 0082: one run of the platform components migration job (`catalog/platform-migration.ts`). */
-export interface PlatformMigrationRunsTable {
-    id: string;
-    started_at: Ts;
-    finished_at: TsNullable;
-    stats: Json<Record<string, unknown>>;
-}
-/** 0082: the kinds of {@link OrgNoticesTable}. */
-export type OrgNoticeKind = "skill_renamed" | "item_shared" | "shared_item_updated" | "upload_confirmed" | "upload_rejected";
+/** 0084 (0121 dropped `skill_renamed`): the kinds of {@link OrgNoticesTable}. */
+export type OrgNoticeKind = "item_shared" | "shared_item_updated" | "upload_confirmed" | "upload_rejected";
 /** 0082: a notice for an org's admins (an inbox item), until one of them dismisses it. */
 export interface OrgNoticesTable {
     id: string;
     org_id: string;
     kind: OrgNoticeKind;
-    /** `skill_renamed`: `{ skillId, from, to, platformSkillId, plugin }`. */
+    /** The kind's shape (`OrgNoticeDetails` in `inbox/org-notices.ts`). */
     detail: Json<Record<string, unknown>>;
     created_at: Ts;
     dismissed_at: TsNullable;

package/dist/devices/devices.service.d.ts

@@ -4,9 +4,9 @@ import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
 import { LockService } from "../infra/lock/lock.service.js";
+import { OutboxService } from "../infra/outbox/outbox.service.js";
 import { DevicePolicyService } from "../local-devices/device-policy.service.js";
 import { MachinesService } from "../local-devices/machines.js";
-import type { KernelLogger } from "../log.js";
 import type { DeviceSandboxLevel } from "../runtime/context/device-paths.js";
 import { SandboxJobs } from "../sandbox/jobs.js";
 import { SandboxProviders } from "../sandbox/providers.js";
@@ -111,7 +111,8 @@ export interface DeviceSandboxView {
 export declare const RECENT_POLICY_CHANGES = 10;
 /**
  * One sandbox change of a device, as its owner sees it on the device page (§10.4):
- * - `policy` (`device.policy_changed`): a local policy change sent to the machine;
+ * - `policy` (`device.policy_changed`): a local policy change sent to the machine (`web`, `im`),
+ *   or made on the machine by its owner (`device`, `capybara-device policy ...`);
  * - `tier` (`device.tier_changed`): a cloud device's tier set by its owner;
  * - `isolation` (`device.isolation_reported`): the machine reported running without a sandbox,
  *   or with one again.
@@ -122,15 +123,23 @@ export interface DeviceSandboxChangeView {
     /** Hosts added to / removed from the local allowlist (`policy` only; else empty). */
     add: string[];
     remove: string[];
-    /** The tier set (`to: null`: follow the org's default); null when the tier did not change. */
+    /**
+     * The tier set (`to: null`: follow the org's default; `from`, the tier before, only for a change
+     * made on the machine); null when the tier did not change.
+     */
     tier: {
+        from?: SandboxTier | null;
         to: SandboxTier | null;
     } | null;
     /** The isolation set or reported; null when it did not change. */
     isolation: "sandbox" | "none" | null;
+    /** The localhost access now (a change made on the machine only); null when it did not change. */
+    localhost: DeviceLocalPolicySummary["localhost"] | null;
+    /** Whether the machine takes the platform's changes now (made on the machine); null: unchanged. */
+    remoteGrants: DeviceLocalPolicySummary["remoteGrants"] | null;
     /** The deciding account's display name (null when the account is gone). */
     by: string | null;
-    /** `device`: reported by the machine itself (`isolation`). */
+    /** `device`: made or reported on the machine itself (a `policy` change, an `isolation`). */
     via: "web" | "im" | "device";
     /** The machine answered with the policy as written (false: the answer never came). */
     confirmed: boolean;
@@ -172,8 +181,8 @@ export interface DeviceList {
  * Personal devices (spec 2026-11-07-environments-design §4.2 items 7, 12, 13; §6; §9):
  * cloud ones on the deployment's sandbox provider and `device` ones on a connected machine; a
  * person's devices in an org, visible and usable only by their owner (anyone else gets
- * `device.not_found`). Deleting one soft-deletes it and destroys its instance and files in a
- * `sandbox-destroy-for` job after the commit.
+ * `device.not_found`). Deleting one soft-deletes it and owes the destruction of its instance and
+ * files (a `sandbox-destroy-for` job) in the same transaction.
  */
 export declare class DevicesService {
     private readonly db;
@@ -182,14 +191,17 @@ export declare class DevicesService {
     private readonly providers;
     private readonly sandbox;
     private readonly sandboxJobs;
+    /** Owes a deleted device's destruction in the delete's transaction. */
+    private readonly outbox;
     private readonly access;
     private readonly displayNames;
-    private readonly log;
     /** Reads the device relay's lease (`online`). */
     private readonly locks;
     private readonly machines;
     private readonly policies;
-    constructor(db: KernelDb, txHost: TransactionHost, config: Pick<KernelConfigService, "get">, providers: Pick<SandboxProviders, "cloud" | "forName">, sandbox: Pick<SandboxService, "deviceLimits" | "limitsState">, sandboxJobs: Pick<SandboxJobs, "destroy" | "resetFiles">, access: Pick<DeviceAccess, "usable">, displayNames: Pick<ExtensionDisplayNames, "many">, log: Pick<KernelLogger, "warn">, 
+    constructor(db: KernelDb, txHost: TransactionHost, config: Pick<KernelConfigService, "get">, providers: Pick<SandboxProviders, "cloud" | "forName">, sandbox: Pick<SandboxService, "deviceLimits" | "limitsState">, sandboxJobs: Pick<SandboxJobs, "resetFiles">, 
+    /** Owes a deleted device's destruction in the delete's transaction. */
+    outbox: Pick<OutboxService, "add">, access: Pick<DeviceAccess, "usable">, displayNames: Pick<ExtensionDisplayNames, "many">, 
     /** Reads the device relay's lease (`online`). */
     locks: Pick<LockService, "holderOf">, machines: Pick<MachinesService, "revoke" | "revokeActive">, policies: Pick<DevicePolicyService, "apply" | "summary">);
     /**
@@ -275,9 +287,9 @@ export declare class DevicesService {
     /** Renames the device locked by {@link lockOwn} (`before`); see {@link rename}. */
     private renameLocked;
     /**
-     * Deletes one of the person's live devices: soft delete, its IM default row cleared, and
-     * after the commit a `sandbox-destroy-for` job (the worker waits for running commands, then
-     * destroys the instance and the files). Conversations bound to it keep pointing at it; their
+     * Deletes one of the person's live devices: soft delete, its IM default row cleared, and a
+     * `sandbox-destroy-for` job owed in the same transaction (`device-destroy-<deviceId>`; the
+     * worker waits for running commands, then destroys the instance and the files). Conversations bound to it keep pointing at it; their
      * sandbox tools then fail with `device.not_found`. A local device's machine is
      * revoked in the same transaction; after the commit it is told `stop { reason: "deleted" }`
      * (while connected) and its connection is closed.