@capybara-hq/kernel 0.1.0-rc.3 → 0.1.0-rc.5

package/src/migrations/0081_platform_components.sql

@@ -0,0 +1,129 @@
+-- Platform components (phase 2, plan 2026-11-06-plugin-scope-phase-2.md rulings A2-C2, E2): skills,
+-- agent templates and connector templates owned by the deployment instead of an org, with their own
+-- scope (follow the plugin's, or their own), an org list (named) and per-org switches. Org copies
+-- link to them. Expand-only: nothing existing is changed except `agent_templates.plugin_name`
+-- losing NOT NULL (a template without a plugin is the bare `<name>`).
+
+CREATE TABLE IF NOT EXISTS platform_skills (
+  id text PRIMARY KEY,
+  catalog_item_id uuid REFERENCES catalog_items(id) ON DELETE SET NULL,
+  plugin_name text,
+  name text NOT NULL,
+  description text NOT NULL,
+  description_zh text,
+  current_version integer NOT NULL CHECK (current_version >= 1),
+  scope_mode text NOT NULL DEFAULT 'follow' CHECK (scope_mode IN ('follow', 'own')),
+  scope text NOT NULL DEFAULT 'optional' CHECK (scope IN ('all', 'optional', 'named')),
+  disabled boolean NOT NULL DEFAULT false,
+  shown_to_others boolean NOT NULL DEFAULT true,
+  scope_version integer NOT NULL DEFAULT 0,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  deleted_at timestamptz
+);
+CREATE UNIQUE INDEX IF NOT EXISTS platform_skills_live_name_uq
+  ON platform_skills ((coalesce(plugin_name, '')), name)
+  WHERE deleted_at IS NULL;
+
+CREATE TABLE IF NOT EXISTS platform_skill_versions (
+  skill_id text NOT NULL REFERENCES platform_skills(id) ON DELETE CASCADE,
+  version integer NOT NULL CHECK (version >= 1),
+  manifest jsonb NOT NULL,
+  object_prefix text NOT NULL,
+  catalog_version text,
+  source_format text NOT NULL DEFAULT 'capybara' CHECK (source_format IN ('capybara', 'claude-code')),
+  suggest_pinned boolean NOT NULL DEFAULT false,
+  updated_on_own boolean NOT NULL DEFAULT false,
+  created_by text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (skill_id, version)
+);
+
+CREATE TABLE IF NOT EXISTS platform_agent_templates (
+  id text PRIMARY KEY,
+  catalog_item_id uuid REFERENCES catalog_items(id) ON DELETE SET NULL,
+  plugin_name text,
+  name text NOT NULL,
+  description text,
+  description_zh text,
+  current_version integer NOT NULL CHECK (current_version >= 1),
+  scope_mode text NOT NULL DEFAULT 'follow' CHECK (scope_mode IN ('follow', 'own')),
+  scope text NOT NULL DEFAULT 'optional' CHECK (scope IN ('all', 'optional', 'named')),
+  disabled boolean NOT NULL DEFAULT false,
+  shown_to_others boolean NOT NULL DEFAULT true,
+  scope_version integer NOT NULL DEFAULT 0,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  deleted_at timestamptz
+);
+CREATE UNIQUE INDEX IF NOT EXISTS platform_agent_templates_live_name_uq
+  ON platform_agent_templates ((coalesce(plugin_name, '')), name)
+  WHERE deleted_at IS NULL;
+
+CREATE TABLE IF NOT EXISTS platform_agent_template_versions (
+  template_id text NOT NULL REFERENCES platform_agent_templates(id) ON DELETE CASCADE,
+  version integer NOT NULL CHECK (version >= 1),
+  definition jsonb NOT NULL,
+  object_prefix text,
+  catalog_version text,
+  source_format text NOT NULL DEFAULT 'capybara' CHECK (source_format IN ('capybara', 'claude-code')),
+  suggest_pinned boolean NOT NULL DEFAULT false,
+  updated_on_own boolean NOT NULL DEFAULT false,
+  created_by text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (template_id, version)
+);
+
+CREATE TABLE IF NOT EXISTS platform_connector_templates (
+  id text PRIMARY KEY,
+  catalog_item_id uuid NOT NULL REFERENCES catalog_items(id) ON DELETE CASCADE,
+  template_id text NOT NULL,
+  current_version text NOT NULL,
+  file jsonb NOT NULL,
+  scope_mode text NOT NULL DEFAULT 'follow' CHECK (scope_mode IN ('follow', 'own')),
+  scope text NOT NULL DEFAULT 'optional' CHECK (scope IN ('all', 'optional', 'named')),
+  disabled boolean NOT NULL DEFAULT false,
+  shown_to_others boolean NOT NULL DEFAULT true,
+  scope_version integer NOT NULL DEFAULT 0,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  deleted_at timestamptz
+);
+CREATE UNIQUE INDEX IF NOT EXISTS platform_connector_templates_live_uq
+  ON platform_connector_templates (catalog_item_id, template_id)
+  WHERE deleted_at IS NULL;
+
+-- Scope of an own-scope component: the orgs it is offered to (named) and each org's switch.
+CREATE TABLE IF NOT EXISTS component_scope_orgs (
+  kind text NOT NULL CHECK (kind IN ('skill', 'agent_template', 'connector_template')),
+  component_id text NOT NULL,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  PRIMARY KEY (kind, component_id, org_id)
+);
+CREATE TABLE IF NOT EXISTS component_org_switches (
+  kind text NOT NULL CHECK (kind IN ('skill', 'agent_template', 'connector_template')),
+  component_id text NOT NULL,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  enabled boolean NOT NULL,
+  updated_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (kind, component_id, org_id)
+);
+
+-- Links from the org copies (ruling B2): a pin keeps the copy on its own stored version.
+ALTER TABLE skills ADD COLUMN IF NOT EXISTS platform_skill_id text
+  REFERENCES platform_skills(id) ON DELETE SET NULL;
+ALTER TABLE skills ADD COLUMN IF NOT EXISTS pinned_version integer;
+ALTER TABLE agent_templates ADD COLUMN IF NOT EXISTS platform_template_id text
+  REFERENCES platform_agent_templates(id) ON DELETE SET NULL;
+ALTER TABLE agent_templates ADD COLUMN IF NOT EXISTS pinned_version integer;
+ALTER TABLE connectors ADD COLUMN IF NOT EXISTS platform_template_id text
+  REFERENCES platform_connector_templates(id) ON DELETE SET NULL;
+
+-- A template without a plugin is the bare `<name>`; the live-name index must still hold for NULLs.
+ALTER TABLE agent_templates ALTER COLUMN plugin_name DROP NOT NULL;
+-- capybara:allow-destructive the index is recreated in the same transaction over coalesce(plugin_name, '') so NULL plugin names stay unique; no data change
+DROP INDEX IF EXISTS agent_templates_live_name_uq;
+CREATE UNIQUE INDEX IF NOT EXISTS agent_templates_live_name_uq
+  ON agent_templates (org_id, (coalesce(plugin_name, '')), name)
+  WHERE deleted_at IS NULL;

package/src/migrations/0082_platform_migration.sql

@@ -0,0 +1,33 @@
+-- Plugin scope phase 2, Task 5: the migration of org copies to platform components
+-- (`catalog/platform-migration.ts`, the worker job `platform-components-migrate`), and the org
+-- notices it writes for the org admins' inbox.
+
+-- The catalog version the item's platform components were last written from
+-- (`PlatformComponents.syncFromVersion`); null = never: the migration job writes them once. Removed
+-- components are not brought back, since an item with a version here is never synced by the job.
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS platform_synced_version text;
+
+-- One row per run of the job (at every worker start and once a day): when it ran and what it
+-- changed; rows older than 30 days are pruned, except the first finished run, whose start is the
+-- cutoff of the one-shot rename step (only org skills whose current version predates it).
+CREATE TABLE IF NOT EXISTS platform_migration_runs (
+  id uuid PRIMARY KEY,
+  started_at timestamptz NOT NULL DEFAULT now(),
+  finished_at timestamptz,
+  stats jsonb NOT NULL DEFAULT '{}'::jsonb
+);
+
+-- A notice for an org's admins (inbox item kind = `kind`), until one of them dismisses it.
+-- `skill_renamed`: detail `{ skillId, from, to, platformSkillId, plugin }`.
+CREATE TABLE IF NOT EXISTS org_notices (
+  id uuid PRIMARY KEY,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  kind text NOT NULL CHECK (kind IN ('skill_renamed')),
+  detail jsonb NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  dismissed_at timestamptz,
+  dismissed_by text REFERENCES accounts(id) ON DELETE SET NULL
+);
+CREATE INDEX IF NOT EXISTS org_notices_open_idx
+  ON org_notices (org_id, created_at DESC)
+  WHERE dismissed_at IS NULL;

package/src/migrations/0083_plugin_scope_sync_failures.sql

@@ -0,0 +1,15 @@
+-- Plugin scope phase 2, Task 11: the plugin scope sync's open failures, for the super admin's
+-- inbox (`catalog/scope-sync.ts` writes them, `inbox/platform-inbox.service.ts` reads them). One
+-- row per (item, org) whose last sync attempt failed; the next sync of that pair that does not
+-- fail deletes it. The audit event `plugin.scope_sync_failed` stays the history. `op`: `install`
+-- (turning it on), `uninstall` (turning it off), `dependencies` (installing the dependencies a
+-- platform update added to a live install).
+CREATE TABLE IF NOT EXISTS plugin_scope_sync_failures (
+  item_id uuid NOT NULL REFERENCES catalog_items(id) ON DELETE CASCADE,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  op text NOT NULL CHECK (op IN ('install', 'uninstall', 'dependencies')),
+  code text NOT NULL,
+  message text NOT NULL,
+  failed_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (item_id, org_id)
+);

package/src/migrations/0084_org_owned_items.sql

@@ -0,0 +1,85 @@
+-- Org-owned items, sharing, pending uploads and notices (phase 3, plan
+-- 2026-11-06-plugin-scope-phase-3.md Task 1; rulings P3-3, P3-5, P3-6, P3-8, F27). Expand-only:
+-- every column is nullable or defaulted, and existing rows stay platform-owned (owner_org_id NULL)
+-- and not shareable. The only dropped objects are the old live-name indexes and the old notice
+-- kind check, replaced in the same file.
+
+-- Owners and pending uploads of catalog items. `owner_org_id` NULL = the platform; an org's
+-- upload that carries an extension waits for the super admin (`awaiting_confirmation`), with the
+-- uploaded version in `pending_*` until confirmed (P3-9 to P3-13).
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS owner_org_id text
+  REFERENCES orgs(id) ON DELETE SET NULL;
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS shareable boolean NOT NULL DEFAULT false;
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS awaiting_confirmation boolean NOT NULL DEFAULT false;
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS pending_version text;
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS pending_by text
+  REFERENCES accounts(id) ON DELETE SET NULL;
+ALTER TABLE catalog_items ADD COLUMN IF NOT EXISTS pending_at timestamptz;
+CREATE INDEX IF NOT EXISTS catalog_items_owner_idx
+  ON catalog_items (owner_org_id)
+  WHERE owner_org_id IS NOT NULL AND deleted_at IS NULL;
+
+-- Whether a version may be used (ruling P3-52): `applied_at` is set when it was applied or
+-- confirmed (a platform import is applied as it is written: the default; an org's upload writes
+-- NULL until its owner applies it or the super admin confirms it), `rejected_at` when the super
+-- admin rejected it. Readers serving other orgs or the generic update use only applied, not
+-- rejected versions, whoever owns the item (a transfer keeps the version rows). Existing rows
+-- are platform imports: applied.
+ALTER TABLE catalog_item_versions ADD COLUMN IF NOT EXISTS applied_at timestamptz DEFAULT now();
+ALTER TABLE catalog_item_versions ADD COLUMN IF NOT EXISTS rejected_at timestamptz;
+
+-- Platform components: the owning org (NULL = platform), the org they were created in
+-- (`origin_org_id`, no FK, immutable; F27) and the share switch (P3-3, P3-5).
+ALTER TABLE platform_skills ADD COLUMN IF NOT EXISTS owner_org_id text
+  REFERENCES orgs(id) ON DELETE SET NULL;
+ALTER TABLE platform_skills ADD COLUMN IF NOT EXISTS origin_org_id text;
+ALTER TABLE platform_skills ADD COLUMN IF NOT EXISTS shareable boolean NOT NULL DEFAULT false;
+ALTER TABLE platform_agent_templates ADD COLUMN IF NOT EXISTS owner_org_id text
+  REFERENCES orgs(id) ON DELETE SET NULL;
+ALTER TABLE platform_agent_templates ADD COLUMN IF NOT EXISTS origin_org_id text;
+ALTER TABLE platform_agent_templates ADD COLUMN IF NOT EXISTS shareable boolean NOT NULL DEFAULT false;
+ALTER TABLE platform_connector_templates ADD COLUMN IF NOT EXISTS owner_org_id text
+  REFERENCES orgs(id) ON DELETE SET NULL;
+ALTER TABLE platform_connector_templates ADD COLUMN IF NOT EXISTS shareable boolean NOT NULL DEFAULT false;
+
+-- Live names are unique per origin org (P3-5); the new indexes come first, then the old ones go
+-- (F27: new names, so a re-run is a true no-op).
+CREATE UNIQUE INDEX IF NOT EXISTS platform_skills_live_name_origin_uq
+  ON platform_skills ((coalesce(plugin_name, '')), name, (coalesce(origin_org_id, '')))
+  WHERE deleted_at IS NULL;
+CREATE UNIQUE INDEX IF NOT EXISTS platform_agent_templates_live_name_origin_uq
+  ON platform_agent_templates ((coalesce(plugin_name, '')), name, (coalesce(origin_org_id, '')))
+  WHERE deleted_at IS NULL;
+-- capybara:allow-destructive replaced by platform_skills_live_name_origin_uq created above in this file; no data change
+DROP INDEX IF EXISTS platform_skills_live_name_uq;
+-- capybara:allow-destructive replaced by platform_agent_templates_live_name_origin_uq created above in this file; no data change
+DROP INDEX IF EXISTS platform_agent_templates_live_name_uq;
+
+-- Org copies: whether the owner shares the copy with other orgs (P3-3, P3-6).
+ALTER TABLE skills ADD COLUMN IF NOT EXISTS shareable boolean NOT NULL DEFAULT false;
+ALTER TABLE agent_templates ADD COLUMN IF NOT EXISTS shareable boolean NOT NULL DEFAULT false;
+
+-- An org's upload waits in staging under its org (P3-8); deleting the org drops the staging.
+ALTER TABLE plugin_import_staging ADD COLUMN IF NOT EXISTS org_id text
+  REFERENCES orgs(id) ON DELETE CASCADE;
+
+-- New org notice kinds. 0082 declared the CHECK inline, so it is named org_notices_kind_check.
+-- capybara:allow-destructive the check is added back with the wider kind list in the next statement; existing rows (skill_renamed) satisfy it
+ALTER TABLE org_notices DROP CONSTRAINT IF EXISTS org_notices_kind_check;
+ALTER TABLE org_notices ADD CONSTRAINT org_notices_kind_check
+  CHECK (kind IN ('skill_renamed', 'item_shared', 'shared_item_updated',
+                  'upload_confirmed', 'upload_rejected'));
+
+-- A notice for the super admins (platform inbox), until one of them dismisses it.
+-- `ownership_transferred`: a deleted org's shared item now belongs to the platform.
+CREATE TABLE IF NOT EXISTS platform_notices (
+  id uuid PRIMARY KEY,
+  kind text NOT NULL CHECK (kind IN ('ownership_transferred')),
+  detail jsonb NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  dismissed_at timestamptz,
+  dismissed_by text REFERENCES accounts(id) ON DELETE SET NULL
+);
+CREATE INDEX IF NOT EXISTS platform_notices_open_idx
+  ON platform_notices (created_at DESC)
+  WHERE dismissed_at IS NULL;

package/src/migrations/0085_agent_templates_phase4.sql

@@ -0,0 +1,45 @@
+-- Agent templates, phase 4 (spec 2026-11-05-plugin-component-management-design.md §15.2: P4-7
+-- connector_setup requests, P4-8 provenance). Expand-only: every new column is nullable, existing
+-- rows keep their shape, and the only dropped objects are two checks replaced in this file.
+
+-- P4-8: where an agent came from. Display data only (no FK: the template may be deleted or
+-- renamed later), written when an agent is created from a template.
+ALTER TABLE agents ADD COLUMN IF NOT EXISTS created_from_template_id text;
+ALTER TABLE agents ADD COLUMN IF NOT EXISTS created_from_template_version int;
+ALTER TABLE agents ADD COLUMN IF NOT EXISTS created_from_template_name text;
+
+-- P4-7: a `connector_setup` request asks an org admin to set up the connectors an agent made from a
+-- template needs (`pending_keys`: the template's connector keys still without an instance). It
+-- names its agent and no item or marketplace entry.
+ALTER TABLE catalog_requests ADD COLUMN IF NOT EXISTS agent_id text
+  REFERENCES agents(id) ON DELETE CASCADE;
+ALTER TABLE catalog_requests ADD COLUMN IF NOT EXISTS pending_keys jsonb;
+
+-- capybara:allow-destructive the check is added back with `connector_setup` in the next statement; existing rows (access, import, enable) satisfy it
+ALTER TABLE catalog_requests DROP CONSTRAINT IF EXISTS catalog_requests_kind_check;
+ALTER TABLE catalog_requests ADD CONSTRAINT catalog_requests_kind_check
+  CHECK (kind IN ('access', 'import', 'enable', 'connector_setup'));
+
+-- item_id is already nullable (0077). The target check of 0077 required an item for every kind but
+-- `import`; a connector_setup row needs an agent instead.
+-- capybara:allow-destructive the check is added back with the connector_setup branch in the next statement; existing rows satisfy its first and third branches
+ALTER TABLE catalog_requests DROP CONSTRAINT IF EXISTS catalog_requests_target_check;
+ALTER TABLE catalog_requests ADD CONSTRAINT catalog_requests_target_check
+  CHECK (
+    kind = 'import' AND entry_name IS NOT NULL
+    OR kind = 'connector_setup' AND agent_id IS NOT NULL
+      AND item_id IS NULL AND entry_name IS NULL
+    OR kind NOT IN ('import', 'connector_setup') AND item_id IS NOT NULL
+  );
+
+-- `pending_keys` is a JSON array of keys when set.
+ALTER TABLE catalog_requests DROP CONSTRAINT IF EXISTS catalog_requests_pending_keys_check;
+ALTER TABLE catalog_requests ADD CONSTRAINT catalog_requests_pending_keys_check
+  CHECK (pending_keys IS NULL OR jsonb_typeof(pending_keys) = 'array');
+
+-- At most one pending setup request per agent (P4-7).
+CREATE UNIQUE INDEX IF NOT EXISTS catalog_requests_pending_setup_uq
+  ON catalog_requests (agent_id) WHERE kind = 'connector_setup' AND status = 'pending';
+
+CREATE INDEX IF NOT EXISTS catalog_requests_agent_idx
+  ON catalog_requests (agent_id) WHERE agent_id IS NOT NULL;

package/src/migrations/0086_org_layering.sql

@@ -0,0 +1,30 @@
+-- Platform / org layering (spec 2026-11-07-platform-org-layering-design.md). Expand-only: two new
+-- tables, nothing existing changes.
+
+-- 0086, spec §5.4 / §5.8: an org's copy of an extension's overridable deployment config fields. A
+-- row is a copy; no row means the org follows the platform ("no copy" and "a copy equal to the
+-- platform" stay distinct). `config` holds the copy's non-secret values; its secrets live in
+-- `secrets` under the org (namespace `kernel`, key `plugin-override:<plugin>:<path>`). Rows are kept
+-- when the extension is disabled or uninstalled, like `extension_org_configs`.
+CREATE TABLE IF NOT EXISTS extension_org_overrides (
+  plugin text NOT NULL,
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  config jsonb NOT NULL DEFAULT '{}'::jsonb,
+  created_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (plugin, org_id)
+);
+
+-- 0086, spec §7: an org admin's switch of one tool of an extension that is on in the org. No row
+-- means the tool follows the extension (on).
+CREATE TABLE IF NOT EXISTS org_tool_switches (
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  plugin text NOT NULL,
+  tool text NOT NULL,
+  enabled boolean NOT NULL,
+  updated_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (org_id, plugin, tool)
+);

package/src/migrations/0087_approval_summary.sql

@@ -0,0 +1,6 @@
+-- Platform tool (spec 2026-11-07-platform-tool-design.md §6.2, §6.3): an approval carries the
+-- kernel-rendered summary of the call ({zh, en}) and the scopes the person may choose. Expand-only:
+-- both columns are nullable; null keeps today's behavior (no summary; scopes derived from the row:
+-- "once" for a role escalation, else once / session / always).
+ALTER TABLE approvals ADD COLUMN IF NOT EXISTS summary jsonb;
+ALTER TABLE approvals ADD COLUMN IF NOT EXISTS scopes text[];

package/src/migrations/0088_environments.sql

@@ -0,0 +1,80 @@
+-- Environments phase 1 (spec 2026-11-07-environments-design §4.2, §10): a long-lived environment
+-- is one sandbox instance plus a file system kept until the environment is deleted. This replaces
+-- the per-conversation `sandboxes` table with `environment_instances`; the old table stays only
+-- for the cleanup job that destroys its remaining instances. The CHECK lists of owner_kind and
+-- source grow in phases 2 and 3 through new migrations.
+CREATE TABLE IF NOT EXISTS capybara.environments (
+  id text PRIMARY KEY,
+  org_id text NOT NULL REFERENCES capybara.orgs(id) ON DELETE CASCADE,
+  owner_kind text NOT NULL CHECK (owner_kind IN ('personal')),
+  owner_account_id text NOT NULL REFERENCES capybara.accounts(id),
+  name text,
+  is_default boolean NOT NULL DEFAULT false,
+  source text NOT NULL CHECK (source IN ('cloud')),
+  provider text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  deleted_at timestamptz
+);
+CREATE UNIQUE INDEX IF NOT EXISTS environments_default_uq
+  ON capybara.environments (org_id, owner_account_id)
+  WHERE is_default AND deleted_at IS NULL;
+CREATE UNIQUE INDEX IF NOT EXISTS environments_name_uq
+  ON capybara.environments (org_id, owner_account_id, lower(name))
+  WHERE name IS NOT NULL AND deleted_at IS NULL;
+
+-- Same columns and meaning as the old sandboxes table (0023), keyed by environment. fs_handle and
+-- fs_status describe the kept file system; status 'none' means no instance exists yet.
+CREATE TABLE IF NOT EXISTS capybara.environment_instances (
+  environment_id text PRIMARY KEY REFERENCES capybara.environments(id) ON DELETE CASCADE,
+  org_id text NOT NULL,
+  provider text,
+  fs_handle jsonb,
+  fs_status text NOT NULL DEFAULT 'none' CHECK (fs_status IN ('none', 'ready', 'lost')),
+  handle jsonb,
+  status text NOT NULL DEFAULT 'none'
+    CHECK (status IN ('none', 'creating', 'running', 'suspended', 'destroyed')),
+  last_used_at timestamptz NOT NULL DEFAULT now(),
+  running_since timestamptz,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  suspended_at timestamptz,
+  destroyed_at timestamptz,
+  generation integer NOT NULL DEFAULT 0,
+  had_instance boolean NOT NULL DEFAULT false,
+  prev_provider text,
+  prev_handle jsonb,
+  sweep_failed_at timestamptz
+);
+CREATE INDEX IF NOT EXISTS environment_instances_running_idx
+  ON capybara.environment_instances (last_used_at)
+  WHERE status = 'running';
+CREATE INDEX IF NOT EXISTS environment_instances_live_idx
+  ON capybara.environment_instances (last_used_at)
+  WHERE status <> 'destroyed';
+CREATE INDEX IF NOT EXISTS environment_instances_org_idx
+  ON capybara.environment_instances (org_id);
+
+-- The environment a member's new conversations use when they pick none.
+CREATE TABLE IF NOT EXISTS capybara.environment_defaults (
+  org_id text NOT NULL,
+  account_id text NOT NULL,
+  environment_id text NOT NULL REFERENCES capybara.environments(id) ON DELETE CASCADE,
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (org_id, account_id)
+);
+
+-- No cascade: a deleted environment is soft-deleted and the conversation keeps pointing at it.
+ALTER TABLE capybara.conversations
+  ADD COLUMN IF NOT EXISTS environment_id text REFERENCES capybara.environments(id);
+
+ALTER TABLE capybara.background_tasks ADD COLUMN IF NOT EXISTS environment_id text;
+CREATE INDEX IF NOT EXISTS background_tasks_environment_running_idx
+  ON capybara.background_tasks (environment_id) WHERE status = 'running';
+
+-- Tasks that ran in a per-conversation sandbox lose it with the move to environments (the
+-- instances are destroyed by the cleanup job).
+UPDATE capybara.background_tasks
+  SET status = 'lost',
+      lost_reason = COALESCE(lost_reason, 'sandbox_replaced_by_environment'),
+      finished_at = COALESCE(finished_at, now())
+  WHERE status = 'running';

package/dist/catalog/upgrade-targets.d.ts

@@ -1,56 +0,0 @@
-import type { KernelSchemaDb } from "../db/kernel-schema.js";
-import type { ExtensionRegistry } from "../extensions/registry.js";
-/**
- * Which versions an org may upgrade an installed plugin to (package ecosystem spec §10, Decision
- * 10, Ruling 8):
- * - a plugin with an extension follows the deployment: the only target is the catalog version
- *   whose extension package (sha256) is the one installed on the deployment, the newest import on
- *   ties (`1.0.0` and `1.0.0+sha256.x` can share an extension version with different bytes); an
- *   extension loaded from the startup config (config, no package) is matched by its
- *   version;
- * - a purely declarative plugin may move to any other imported version (an older one is a
- *   rollback).
- */
-/** The extension the deployment runs for a plugin name. */
-export interface DeployedExtension {
-    /** The installed package's sha256 (null for a config extension). */
-    sha256: string | null;
-    version: string;
-}
-/** A catalog version row as the target rules read it. */
-export interface TargetVersion {
-    version: string;
-    manifest: unknown;
-    extension_sha256: string | null;
-    imported_at: Date;
-}
-/**
- * The deployment's extension for plugin `name`: its install record (`extension_installs`, the
- * deployment's desired package; disabled on the deployment counts as none), else the extension
- * this replica loaded from the startup config; undefined when the deployment runs none (then no
- * upgrade target and no "upgrade pending").
- */
-export declare function deployedExtension(db: KernelSchemaDb, host: Pick<ExtensionRegistry, "manifests">, name: string): Promise<DeployedExtension | undefined>;
-/** Whether catalog version `v` carries the deployment's extension `d`. */
-export declare const runsDeployed: (v: TargetVersion, d: DeployedExtension) => boolean;
-/**
- * The catalog version an org install of an extension-bearing plugin may move to: the one carrying
- * the deployment's extension, the newest import on ties; undefined when none does.
- */
-export declare function deploymentTarget(versions: readonly TargetVersion[], d: DeployedExtension | undefined): TargetVersion | undefined;
-/** What an install view says about upgrades (Decision 10). */
-export interface UpgradeInfo {
-    /** The version an upgrade can move to now (the highest allowed target), null when none. */
-    upgradeAvailable: string | null;
-    /** An extension-bearing plugin whose org version is not the one the deployment runs. */
-    deploymentPending: boolean;
-}
-/**
- * The upgrade info of org installs (`itemId`, `name`, `version`), keyed by `itemId@version`; reads
- * the items' catalog versions and the deployment's extensions in a few queries.
- */
-export declare function upgradeInfo(db: KernelSchemaDb, host: Pick<ExtensionRegistry, "manifests">, installs: readonly {
-    itemId: string;
-    name: string;
-    version: string;
-}[]): Promise<Map<string, UpgradeInfo>>;

package/dist/catalog/upgrade-targets.js

@@ -1,90 +0,0 @@
-import { compareVersions } from "./versions.js";
-/**
- * The deployment's extension for plugin `name`: its install record (`extension_installs`, the
- * deployment's desired package; disabled on the deployment counts as none), else the extension
- * this replica loaded from the startup config; undefined when the deployment runs none (then no
- * upgrade target and no "upgrade pending").
- */
-export async function deployedExtension(db, host, name) {
-    const row = await db
-        .selectFrom("extension_installs")
-        .select(["sha256", "version", "desired_state"])
-        .where("name", "=", name)
-        .executeTakeFirst();
-    if (row) {
-        return row.desired_state === "enabled"
-            ? { sha256: row.sha256, version: row.version }
-            : undefined;
-    }
-    const loaded = host.manifests().find((m) => m.name === name);
-    return loaded ? { sha256: null, version: loaded.version } : undefined;
-}
-const extensionVersionOf = (v) => v.manifest.extension?.manifest.version;
-/** Whether catalog version `v` carries the deployment's extension `d`. */
-export const runsDeployed = (v, d) => d.sha256 !== null
-    ? v.extension_sha256 === d.sha256
-    : v.manifest.extension !== undefined && extensionVersionOf(v) === d.version;
-/**
- * The catalog version an org install of an extension-bearing plugin may move to: the one carrying
- * the deployment's extension, the newest import on ties; undefined when none does.
- */
-export function deploymentTarget(versions, d) {
-    if (d === undefined)
-        return undefined;
-    let best;
-    for (const v of versions) {
-        if (!runsDeployed(v, d))
-            continue;
-        if (best === undefined ||
-            v.imported_at.getTime() > best.imported_at.getTime() ||
-            (v.imported_at.getTime() === best.imported_at.getTime() && compareVersions(v, best) > 0)) {
-            best = v;
-        }
-    }
-    return best;
-}
-/**
- * The upgrade info of org installs (`itemId`, `name`, `version`), keyed by `itemId@version`; reads
- * the items' catalog versions and the deployment's extensions in a few queries.
- */
-export async function upgradeInfo(db, host, installs) {
-    const out = new Map();
-    if (installs.length === 0)
-        return out;
-    const rows = await db
-        .selectFrom("catalog_item_versions")
-        .select(["item_id", "version", "manifest", "extension_sha256", "imported_at"])
-        .where("item_id", "in", [...new Set(installs.map((i) => i.itemId))])
-        .execute();
-    const deployed = new Map();
-    for (const i of installs) {
-        const versions = rows.filter((r) => r.item_id === i.itemId);
-        const current = versions.find((v) => v.version === i.version);
-        if (current && current.manifest.extension !== undefined) {
-            if (!deployed.has(i.name))
-                deployed.set(i.name, await deployedExtension(db, host, i.name));
-            const d = deployed.get(i.name);
-            const target = deploymentTarget(versions, d);
-            out.set(`${i.itemId}@${i.version}`, {
-                upgradeAvailable: target && target.version !== i.version ? target.version : null,
-                deploymentPending: d !== undefined && !runsDeployed(current, d),
-            });
-            continue;
-        }
-        let newest;
-        for (const v of versions) {
-            if (newest === undefined || compareVersions(v, newest) > 0)
-                newest = v;
-        }
-        const newer = newest !== undefined &&
-            newest.version !== i.version &&
-            (current === undefined
-                ? compareVersions(newest.version, i.version) > 0
-                : compareVersions(newest, current) > 0);
-        out.set(`${i.itemId}@${i.version}`, {
-            upgradeAvailable: newer ? newest.version : null,
-            deploymentPending: false,
-        });
-    }
-    return out;
-}

package/dist/conversations/sandbox-status.d.ts

@@ -1,24 +0,0 @@
-import { SandboxService } from "../sandbox/sandbox.service.js";
-import { ConversationAccess } from "./access.js";
-import { ConversationsService } from "./conversations.service.js";
-export interface SandboxStatusView {
-    status: "running" | "suspended";
-    lastUsedAt: string;
-}
-/**
- * 对话沙箱的状态（网页上下文标签，M5 T11）：会话不可见 → `conversation.not_found`；
- * 没有可用的沙箱（未创建、已销毁、正在创建）→ `sandbox.not_found`（界面显示「未创建」）。
- */
-export declare class ConversationSandboxStatus {
-    /** 会话可见性（与会话 SSE 流同一判定）。 */
-    private readonly access;
-    /** The conversation whose sandbox it works in: a sub-agent's parent, else itself. */
-    private readonly conversations;
-    private readonly sandbox;
-    constructor(
-    /** 会话可见性（与会话 SSE 流同一判定）。 */
-    access: Pick<ConversationAccess, "isAccessible">, 
-    /** The conversation whose sandbox it works in: a sub-agent's parent, else itself. */
-    conversations: Pick<ConversationsService, "sandboxConversationOf">, sandbox: Pick<SandboxService, "status">);
-    get(orgId: string, conversationId: string, viewerAccountId: string): Promise<SandboxStatusView>;
-}

package/dist/conversations/sandbox-status.js

@@ -1,52 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from "@nestjs/common";
-import { ApiError } from "../errors.js";
-import { SandboxService } from "../sandbox/sandbox.service.js";
-import { UUID_RE } from "../ui/registry.js";
-import { ConversationAccess } from "./access.js";
-import { ConversationsService } from "./conversations.service.js";
-/**
- * 对话沙箱的状态（网页上下文标签，M5 T11）：会话不可见 → `conversation.not_found`；
- * 没有可用的沙箱（未创建、已销毁、正在创建）→ `sandbox.not_found`（界面显示「未创建」）。
- */
-let ConversationSandboxStatus = class ConversationSandboxStatus {
-    access;
-    conversations;
-    sandbox;
-    constructor(
-    /** 会话可见性（与会话 SSE 流同一判定）。 */
-    access, 
-    /** The conversation whose sandbox it works in: a sub-agent's parent, else itself. */
-    conversations, sandbox) {
-        this.access = access;
-        this.conversations = conversations;
-        this.sandbox = sandbox;
-    }
-    async get(orgId, conversationId, viewerAccountId) {
-        if (!UUID_RE.test(conversationId) ||
-            !(await this.access.isAccessible(orgId, conversationId, viewerAccountId))) {
-            throw new ApiError("conversation.not_found", "Conversation not found");
-        }
-        // a sub-agent works in its parent conversation's sandbox (sub-agents spec §10.1)
-        const sandboxConv = await this.conversations.sandboxConversationOf(orgId, conversationId);
-        const s = await this.sandbox.status(orgId, sandboxConv);
-        if (!s)
-            throw new ApiError("sandbox.not_found", "This conversation has no sandbox");
-        return { status: s.status, lastUsedAt: s.lastUsedAt.toISOString() };
-    }
-};
-ConversationSandboxStatus = __decorate([
-    Injectable(),
-    __param(0, Inject(ConversationAccess)),
-    __param(1, Inject(ConversationsService)),
-    __param(2, Inject(SandboxService))
-], ConversationSandboxStatus);
-export { ConversationSandboxStatus };