@capybara-hq/kernel 0.1.0-rc.3 → 0.1.0-rc.5

package/dist/db/kernel-schema.d.ts

@@ -1,4 +1,4 @@
-import type { SkillInvocation } from "@capybara-hq/plugin-sdk";
+import type { FileSystemHandle, SkillInvocation } from "@capybara-hq/plugin-sdk";
 import type { ColumnType, Generated, Kysely } from "kysely";
 /** 带默认值的时间戳列：插入可省略，读出为 Date。 */
 type Ts = ColumnType<Date, Date | string | undefined, Date | string>;
@@ -11,9 +11,11 @@ export interface AccountsTable {
     email: string | null;
     email_verified: Generated<boolean>;
     status: Generated<"active" | "disabled">;
-    is_enterprise_admin: Generated<boolean>;
+    is_super_admin: Generated<boolean>;
     created_at: Ts;
     updated_at: Ts;
+    /** 0064: the org the account last chose as current; a new session starts in it. */
+    last_org_id: ColumnType<string | null, string | null | undefined, string | null>;
 }
 export interface IdentitiesTable {
     source: string;
@@ -111,6 +113,26 @@ export interface ExtensionOrgConfigsTable {
     updated_by: string | null;
     updated_at: Ts;
 }
+/** An org's copy of an extension's overridable deployment config fields (0086, spec A §5.4). */
+export interface ExtensionOrgOverridesTable {
+    plugin: string;
+    org_id: string;
+    /** The copy's non-secret values (its secrets are in `secrets`). */
+    config: ColumnType<Record<string, unknown>, string | undefined, string>;
+    created_by: string | null;
+    created_at: Ts;
+    updated_by: string | null;
+    updated_at: Ts;
+}
+/** An org admin's switch of one extension tool (0086, spec A §7). */
+export interface OrgToolSwitchesTable {
+    org_id: string;
+    plugin: string;
+    tool: string;
+    enabled: boolean;
+    updated_by: string | null;
+    updated_at: Ts;
+}
 export interface AuditEventsTable {
     id: Generated<string>;
     at: Ts;
@@ -149,6 +171,15 @@ export interface AgentsTable {
     org_role: Generated<"admin" | "member" | "guest">;
     current_version: number;
     needs_reassignment: Generated<boolean>;
+    /** 0067: the profile (display data, outside the versions). */
+    profile_avatar: ColumnType<Record<string, unknown> | null, string | null | undefined, string | null>;
+    profile_description: Generated<string>;
+    profile_quick_actions: ColumnType<unknown[], string | undefined, string>;
+    profile_updated_at: Ts;
+    /** 0085: the template the agent was created from (display only, no FK). */
+    created_from_template_id: NullableCol<string>;
+    created_from_template_version: NullableCol<number>;
+    created_from_template_name: NullableCol<string>;
     created_at: Ts;
     updated_at: Ts;
     deleted_at: TsNullable;
@@ -199,6 +230,14 @@ export interface ConversationsTable {
     queue_paused: ColumnType<boolean, boolean | undefined, boolean>;
     /** 0062: why the queue paused (`QueuePauseReason`); null when not paused or not recorded. */
     queue_pause_reason: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0065: when the owner archived it (hidden from the default lists); null = not archived. */
+    archived_at: ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
+    /** 0065: when the owner deleted it (soft delete: hidden everywhere for the owner); null = live. */
+    deleted_at: ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
+    /** 0074: levels below the root conversation (0 = a root; a sub-agent's is its parent's + 1). */
+    subagent_depth: ColumnType<number, number | undefined, number>;
+    /** 0088: the environment the conversation runs in; null = not chosen yet. */
+    environment_id: ColumnType<string | null, string | null | undefined, string | null>;
 }
 /** 0060: an org's order of file-preview@1 previewers (UI refresh B Task 11). */
 export interface FilePreviewersTable {
@@ -208,6 +247,15 @@ export interface FilePreviewersTable {
     position: number;
     disabled: ColumnType<boolean, boolean | undefined, boolean>;
 }
+/** 0073: an org's default provider of an `org-default` extension point. */
+export interface OrgExtensionPointDefaultsTable {
+    org_id: string;
+    /** The extension point name without the major (`web-search`). */
+    point: string;
+    extension: string;
+    updated_at: Ts;
+    updated_by: string | null;
+}
 /** 0059: a queued message (not in the event log until sent). */
 export interface ConversationQueueTable {
     id: string;
@@ -268,6 +316,11 @@ export interface RunsTable {
     subagent_tokens_used: Int8;
     /** 0054: when this run's `subagents` wait expires (set while it waits on sub-agents). */
     wait_expires_at: TsNullable;
+    /**
+     * 0074: the person-triggered root run whose budget window this run counts against (dispatches
+     * and its descendants' tokens, agent map spec §6); null = the run is its own budget run.
+     */
+    budget_run_id: ColumnType<string | null, string | null | undefined, string | null>;
 }
 /** 0053: one row per sub-agent dispatch (an `Agent` call of a parent run). */
 export interface SubagentDispatchesTable {
@@ -280,19 +333,29 @@ export interface SubagentDispatchesTable {
     /** A follow-up to an existing sub-agent, not a new one. */
     resumed: ColumnType<boolean, boolean | undefined, boolean>;
     created_at: Ts;
+    /** 0074: the budget run the dispatch counts against (`runs.budget_run_id` of the tree). */
+    budget_run_id: string;
+    /** 0074: the dispatch of a `context: fork` skill invocation (phase D). */
+    for_skill: ColumnType<boolean, boolean | undefined, boolean>;
 }
 /** 0053: an agent template installed in an org from a plugin. */
 export interface AgentTemplatesTable {
     id: string;
+    /** 0084: the owner shares this template with other orgs. */
+    shareable: Dflt<boolean>;
     org_id: string;
     name: string;
     catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
-    /** The plugin that installed it (`NOT NULL`, 0053): the roster type is `<plugin>:<name>`. */
-    plugin_name: string;
+    /** The plugin that installed it: the roster type is `<plugin>:<name>`; null (0081, nullable) = the bare `<name>`. */
+    plugin_name: ColumnType<string | null, string | null | undefined, string | null>;
     current_version: number;
     deleted_at: TsNullable;
     created_at: Ts;
     updated_at: Ts;
+    /** 0081: the platform template this copy links to (null = none). */
+    platform_template_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0081: a pin keeps the copy on its own stored version (ruling B2). */
+    pinned_version: ColumnType<number | null, number | null | undefined, number | null>;
 }
 /** 0053: one version of an agent template; `definition` is the parsed frontmatter and body. */
 export interface AgentTemplateVersionsTable {
@@ -333,6 +396,8 @@ export interface ConnectorsTable {
     catalog_version: ColumnType<string | null, string | null | undefined, string | null>;
     /** 0037：模板的 defaultToolPolicies（授权码连接器在首个快照时应用）。 */
     template_tool_policies: ColumnType<Record<string, "allow" | "ask" | "deny"> | null, string | null | undefined, string | null>;
+    /** 0081: the platform connector template this connector was made from (null = none). */
+    platform_template_id: ColumnType<string | null, string | null | undefined, string | null>;
 }
 /** 0010_tools.sql（0033 由 `app_tools` 改名）：连接器暴露的工具。 */
 export interface ConnectorToolsTable {
@@ -399,6 +464,13 @@ export interface ApprovalsTable {
     attempt: Generated<number>;
     /** 0056: the reason given with a denial (null without one). */
     deny_reason: Generated<string | null>;
+    /** 0086: the kernel-rendered summary of the call (per-call policies; null without one). */
+    summary: ColumnType<{
+        zh: string;
+        en: string;
+    } | null, string | null | undefined, string | null>;
+    /** 0086: the scopes the person may choose (null: derived, see `approvals.service.ts`). */
+    scopes: ColumnType<("once" | "session" | "always")[] | null, ("once" | "session" | "always")[] | null | undefined, ("once" | "session" | "always")[] | null>;
 }
 /** 0010_tools.sql：AskUserQuestion 提问。 */
 export interface QuestionsTable {
@@ -547,9 +619,11 @@ export interface AttachmentsTable {
     expires_at: TsNullable;
     /** 0024：上传用途（技能包不能绑定到消息）。 */
     purpose: ColumnType<AttachmentPurpose, AttachmentPurpose | undefined, AttachmentPurpose>;
+    /** 0068: the agent whose profile uses this avatar upload (set once, when it is saved). */
+    agent_id: ColumnType<string | null, string | null | undefined, string | null>;
 }
-/** 预签名上传的用途：对话附件 / 技能包 zip。 */
-export type AttachmentPurpose = "chat" | "skill-package";
+/** 预签名上传的用途：对话附件 / 技能包 zip / agent avatar image. */
+export type AttachmentPurpose = "chat" | "skill-package" | "agent-avatar";
 /** 技能版本的清单（`skill_versions.manifest`）。 */
 export interface SkillManifest {
     name: string;
@@ -569,13 +643,16 @@ export interface SkillManifest {
 /** 0024_skills.sql：技能（组织技能库 / agent 自己的技能）。 */
 export interface SkillsTable {
     id: string;
+    /** 0084: the owner shares this copy with other orgs. */
+    shareable: Dflt<boolean>;
     org_id: string;
     scope: "org" | "agent";
     agent_id: string | null;
     name: string;
     description: string;
     current_version: number;
-    created_by: string;
+    /** 0076: null for a skill the kernel created (the plugin scope sync). */
+    created_by: string | null;
     created_at: Ts;
     updated_at: Ts;
     deleted_at: TsNullable;
@@ -585,6 +662,10 @@ export interface SkillsTable {
      */
     catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
     catalog_version: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0081: the platform skill this copy links to (null = none). */
+    platform_skill_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0081: a pin keeps the copy on its own stored version (ruling B2). */
+    pinned_version: ColumnType<number | null, number | null | undefined, number | null>;
 }
 /** 0024_skills.sql：技能的版本。 */
 export interface SkillVersionsTable {
@@ -592,10 +673,11 @@ export interface SkillVersionsTable {
     version: number;
     manifest: Json<SkillManifest>;
     object_prefix: string;
-    created_by: string;
+    /** 0076: null for a version the kernel created (the plugin scope sync). */
+    created_by: string | null;
     created_at: Ts;
     /**
-     * 0037, renamed in 0042: this version's enterprise catalog source (NULL for custom uploads /
+     * 0037, renamed in 0042: this version's platform catalog source (NULL for custom uploads /
      * agent skills).
      */
     catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
@@ -630,8 +712,37 @@ export interface SkillChangeRequestsTable {
     decided_at: TsNullable;
     created_at: Ts;
 }
-/** 0023_sandboxes.sql：按对话的沙箱（见 sandbox/sandbox.service.ts）。 */
-export interface SandboxesTable {
+/** 0070_background_tasks.sql: a Bash command running in the background in a conversation's sandbox. */
+export interface BackgroundTasksTable {
+    id: string;
+    org_id: string;
+    conversation_id: string;
+    sandbox_conversation_id: string;
+    run_id: string;
+    call_id: string;
+    trigger_account_id: string;
+    description: string;
+    command: string;
+    /** NULL while the launch is reserved but not started (0071). */
+    sid: string | null;
+    output_path: string;
+    status: ColumnType<"running" | "completed" | "failed" | "stopped" | "timed_out" | "lost", string | undefined, string>;
+    lost_reason: ColumnType<string | null, string | null | undefined, string | null>;
+    exit_code: ColumnType<number | null, number | null | undefined, number | null>;
+    started_at: Ts;
+    finished_at: TsNullable;
+    deadline_at: Date | string;
+    /** NULL while the launch is reserved but not started (0071). */
+    sandbox_created_at: Date | string | null;
+    kill_pending: ColumnType<boolean, boolean | undefined, boolean>;
+    read_offset: ColumnType<string, number | string | undefined, number | string>;
+    /** Set while a stop is under way (0072); the poller skips such a task. */
+    stopping_at: ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
+    /** 0088: the environment the task runs in. */
+    environment_id: ColumnType<string | null, string | null | undefined, string | null>;
+}
+/** 0023_sandboxes.sql: the legacy per-conversation sandbox; kept only for the cleanup job (0088). */
+export interface LegacySandboxesTable {
     conversation_id: string;
     org_id: string;
     provider: string;
@@ -658,6 +769,55 @@ export interface SandboxesTable {
     } | null, string | null | undefined, string | null>;
     sweep_failed_at: TsNullable;
 }
+type InstanceHandle = ColumnType<{
+    id: string;
+    [k: string]: unknown;
+} | null, string | null | undefined, string | null>;
+/** 0088_environments.sql: a long-lived environment (one instance plus a kept file system). */
+export interface EnvironmentsTable {
+    id: string;
+    org_id: string;
+    owner_kind: "personal";
+    owner_account_id: string;
+    name: ColumnType<string | null, string | null | undefined, string | null>;
+    is_default: ColumnType<boolean, boolean | undefined, boolean>;
+    source: "cloud";
+    provider: ColumnType<string | null, string | null | undefined, string | null>;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0088_environments.sql: the instance and file system of an environment (replaces sandboxes). */
+export interface EnvironmentInstancesTable {
+    environment_id: string;
+    org_id: string;
+    provider: ColumnType<string | null, string | null | undefined, string | null>;
+    /** The provider's `FileSystemHandle`; null before the file system exists or after a reset. */
+    fs_handle: ColumnType<FileSystemHandle | null, string | null | undefined, string | null>;
+    fs_status: ColumnType<"none" | "ready" | "lost", "none" | "ready" | "lost" | undefined, "none" | "ready" | "lost">;
+    handle: InstanceHandle;
+    status: ColumnType<"none" | "creating" | "running" | "suspended" | "destroyed", "none" | "creating" | "running" | "suspended" | "destroyed" | undefined, "none" | "creating" | "running" | "suspended" | "destroyed">;
+    last_used_at: Ts;
+    running_since: TsNullable;
+    created_at: Ts;
+    suspended_at: TsNullable;
+    destroyed_at: TsNullable;
+    /** Fencing number: every status / handle write under the lock compares and increments it. */
+    generation: ColumnType<number, number | undefined, number>;
+    /** An instance was created at least once (only ever set to true). */
+    had_instance: ColumnType<boolean, boolean | undefined, boolean>;
+    /** The old provider's instance left behind by a provider change. */
+    prev_provider: ColumnType<string | null, string | null | undefined, string | null>;
+    prev_handle: InstanceHandle;
+    sweep_failed_at: TsNullable;
+}
+/** 0088_environments.sql: the environment a member's new conversations use by default. */
+export interface EnvironmentDefaultsTable {
+    org_id: string;
+    account_id: string;
+    environment_id: string;
+    updated_at: Ts;
+}
 /** pg numeric：驱动读出为字符串（精确小数），读取方自行 `Number()`。 */
 type Numeric = ColumnType<string, number | string, number | string>;
 type NumericNullable = ColumnType<string | null, number | string | null, number | string | null>;
@@ -788,6 +948,11 @@ export interface ExtensionPackagesTable {
     source_ref: string;
     uploaded_by: string | null;
     created_at: Ts;
+    /** 0066: the plugin.json `displayName`; null without one and for packages stored before 0066. */
+    display_name: ColumnType<{
+        zh: string;
+        en: string;
+    } | null, string | null | undefined, string | null>;
 }
 /** 0030, renamed in 0041: package bytes when there is no object storage. */
 export interface ExtensionBlobsTable {
@@ -806,7 +971,7 @@ export interface ExtensionInstallsTable {
     installed_at: Ts;
     updated_by: string | null;
     updated_at: Ts;
-    /** 0034 (F-AA): the source item when installed through the enterprise catalog. */
+    /** 0034 (F-AA): the source item when installed through the platform catalog. */
     catalog_item_id: ColumnType<string | null, string | null | undefined, string | null>;
     /**
      * 0050: a required bootstrap plugin (enabled in every org without an org config row; cannot be
@@ -858,6 +1023,8 @@ export interface KernelDatabase {
     api_tokens: ApiTokensTable;
     deployment_settings: DeploymentSettingsTable;
     extension_org_configs: ExtensionOrgConfigsTable;
+    extension_org_overrides: ExtensionOrgOverridesTable;
+    org_tool_switches: OrgToolSwitchesTable;
     audit_events: AuditEventsTable;
     secrets: SecretsTable;
     agents: AgentsTable;
@@ -867,6 +1034,7 @@ export interface KernelDatabase {
     conversation_events: ConversationEventsTable;
     conversation_queue: ConversationQueueTable;
     file_previewers: FilePreviewersTable;
+    org_extension_point_defaults: OrgExtensionPointDefaultsTable;
     runs: RunsTable;
     subagent_dispatches: SubagentDispatchesTable;
     agent_templates: AgentTemplatesTable;
@@ -889,7 +1057,11 @@ export interface KernelDatabase {
     org_anonymous_accounts: OrgAnonymousAccountsTable;
     directory_exclusions: DirectoryExclusionsTable;
     attachments: AttachmentsTable;
-    sandboxes: SandboxesTable;
+    sandboxes: LegacySandboxesTable;
+    environments: EnvironmentsTable;
+    environment_instances: EnvironmentInstancesTable;
+    environment_defaults: EnvironmentDefaultsTable;
+    background_tasks: BackgroundTasksTable;
     skills: SkillsTable;
     skill_versions: SkillVersionsTable;
     skill_change_requests: SkillChangeRequestsTable;
@@ -913,10 +1085,70 @@ export interface KernelDatabase {
     plugin_import_staging: PluginImportStagingTable;
     catalog_requests: CatalogRequestsTable;
     catalog_org_grants: CatalogOrgGrantsTable;
+    catalog_item_scope_orgs: CatalogItemScopeOrgsTable;
+    catalog_item_org_switches: CatalogItemOrgSwitchesTable;
+    platform_skills: PlatformSkillsTable;
+    platform_skill_versions: PlatformSkillVersionsTable;
+    platform_agent_templates: PlatformAgentTemplatesTable;
+    platform_agent_template_versions: PlatformAgentTemplateVersionsTable;
+    platform_connector_templates: PlatformConnectorTemplatesTable;
+    component_scope_orgs: ComponentScopeOrgsTable;
+    component_org_switches: ComponentOrgSwitchesTable;
     plugin_installs: PluginInstallsTable;
     plugin_install_components: PluginInstallComponentsTable;
     extension_catalog_sources: ExtensionCatalogSourcesTable;
     bootstrap_runs: BootstrapRunsTable;
+    platform_migration_runs: PlatformMigrationRunsTable;
+    org_notices: OrgNoticesTable;
+    platform_notices: PlatformNoticesTable;
+    plugin_scope_sync_failures: PluginScopeSyncFailuresTable;
+}
+/** 0082: one run of the platform components migration job (`catalog/platform-migration.ts`). */
+export interface PlatformMigrationRunsTable {
+    id: string;
+    started_at: Ts;
+    finished_at: TsNullable;
+    stats: Json<Record<string, unknown>>;
+}
+/** 0082: the kinds of {@link OrgNoticesTable}. */
+export type OrgNoticeKind = "skill_renamed" | "item_shared" | "shared_item_updated" | "upload_confirmed" | "upload_rejected";
+/** 0082: a notice for an org's admins (an inbox item), until one of them dismisses it. */
+export interface OrgNoticesTable {
+    id: string;
+    org_id: string;
+    kind: OrgNoticeKind;
+    /** `skill_renamed`: `{ skillId, from, to, platformSkillId, plugin }`. */
+    detail: Json<Record<string, unknown>>;
+    created_at: Ts;
+    dismissed_at: TsNullable;
+    dismissed_by: NullableCol<string>;
+}
+/** 0084: a notice for the super admins (platform inbox), until one of them dismisses it. */
+export interface PlatformNoticesTable {
+    id: string;
+    kind: "ownership_transferred";
+    detail: Json<Record<string, unknown>>;
+    created_at: Ts;
+    dismissed_at: TsNullable;
+    dismissed_by: NullableCol<string>;
+}
+/**
+ * 0083: what a failed scope sync attempt was doing: turning the plugin on, off, or installing the
+ * dependencies a platform update added to a live install.
+ */
+export type ScopeSyncOp = "install" | "uninstall" | "dependencies";
+/**
+ * 0083: an open failure of the plugin scope sync for one (item, org): its last attempt failed; the
+ * next sync of the pair that does not fail deletes the row.
+ */
+export interface PluginScopeSyncFailuresTable {
+    item_id: string;
+    org_id: string;
+    op: ScopeSyncOp;
+    /** The `ApiError` code, else `internal`. */
+    code: string;
+    message: string;
+    failed_at: Ts;
 }
 /** 0050: one row per bootstrap manifest the bootstrap step completed. */
 export interface BootstrapRunsTable {
@@ -925,7 +1157,7 @@ export interface BootstrapRunsTable {
     completed_at: Ts;
     results: ColumnType<unknown, string, string>;
 }
-/** 0034_directory.sql, renamed in 0042, one kind (plugin) since 0044: enterprise catalog items. */
+/** 0034_directory.sql, renamed in 0042, one kind (plugin) since 0044: platform catalog items. */
 export interface CatalogItemsTable {
     id: string;
     /** The plugin name (one live item per name). */
@@ -946,9 +1178,151 @@ export interface CatalogItemsTable {
     deleted_at: ColumnType<Date | null, Date | string | null | undefined, Date | string | null>;
     /** 0035, renamed in 0042: the marketplace it was imported from (null once that is deleted). */
     marketplace_id: ColumnType<string | null, string | null | undefined, string | null>;
+    /** 0075: who the plugin is offered to (`named`: the rows of `catalog_item_scope_orgs`). */
+    scope: ColumnType<"all" | "optional" | "named", "all" | "optional" | "named" | undefined, "all" | "optional" | "named">;
+    /** 0075: shipped with the deployment (required bootstrap plugins); always scope `all`. */
+    builtin: ColumnType<boolean, boolean | undefined, boolean>;
+    /** 0075: switched off for every org by the super admin. */
+    disabled: ColumnType<boolean, boolean | undefined, boolean>;
+    /** 0075: bumped on every scope change. */
+    scope_version: ColumnType<number, number | undefined, number>;
+    /** 0077: orgs outside a `named` item's list see it as requestable (never usable). */
+    shown_to_others: ColumnType<boolean, boolean | undefined, boolean>;
+    /** 0082: the version its platform components were last written from (null: never). */
+    platform_synced_version: NullableCol<string>;
+    /** 0084: the owning org (null = the platform). */
+    owner_org_id: NullableDflt<string>;
+    /** 0084: the owner shares it with other orgs (the gate is `owner_org_id IS NULL OR shareable`). */
+    shareable: Dflt<boolean>;
+    /** 0084: an upload waits for the super admin's confirmation of its permission digest. */
+    awaiting_confirmation: Dflt<boolean>;
+    /** 0084: the uploaded version not yet confirmed. */
+    pending_version: NullableDflt<string>;
+    pending_by: NullableDflt<string>;
+    pending_at: NullableDflt<Date | string>;
+}
+/** 0075: the orgs a `named` item is offered to. */
+export interface CatalogItemScopeOrgsTable {
+    item_id: string;
+    org_id: string;
+}
+/** 0075: an org's on / off switch of an item's components. */
+export interface CatalogItemOrgSwitchesTable {
+    item_id: string;
+    org_id: string;
+    enabled: boolean;
+    updated_by: NullableCol<string>;
+    updated_at: Ts;
+}
+type ScopeMode = "follow" | "own";
+type ComponentScope = "all" | "optional" | "named";
+type ComponentKind = "skill" | "agent_template" | "connector_template";
+type Dflt<T> = ColumnType<T, T | undefined, T>;
+type NullableDflt<T> = ColumnType<T | null, T | null | undefined, T | null>;
+/** 0081: the scope columns every platform component carries (ruling C2). */
+interface PlatformScopeColumns {
+    scope_mode: Dflt<ScopeMode>;
+    scope: Dflt<ComponentScope>;
+    disabled: Dflt<boolean>;
+    shown_to_others: Dflt<boolean>;
+    scope_version: Dflt<number>;
+}
+/** 0081: a skill owned by the deployment (ruling A2). */
+export interface PlatformSkillsTable extends PlatformScopeColumns {
+    id: string;
+    /** 0084: the owning org (null = the platform). */
+    owner_org_id: NullableDflt<string>;
+    /** 0084: the org it was created in; never changed (F27). */
+    origin_org_id: NullableDflt<string>;
+    /** 0084: the owner shares it with other orgs. */
+    shareable: Dflt<boolean>;
+    catalog_item_id: NullableDflt<string>;
+    plugin_name: NullableDflt<string>;
+    name: string;
+    description: string;
+    description_zh: NullableDflt<string>;
+    current_version: number;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0081: one version of a platform skill; files live under `object_prefix` in `deployment/`. */
+export interface PlatformSkillVersionsTable {
+    skill_id: string;
+    version: number;
+    manifest: Json<SkillManifest>;
+    object_prefix: string;
+    catalog_version: NullableDflt<string>;
+    source_format: Dflt<SourceFormat>;
+    suggest_pinned: Dflt<boolean>;
+    updated_on_own: Dflt<boolean>;
+    created_by: NullableDflt<string>;
+    created_at: Ts;
+}
+/** 0081: an agent template owned by the deployment. */
+export interface PlatformAgentTemplatesTable extends PlatformScopeColumns {
+    id: string;
+    /** 0084: the owning org (null = the platform). */
+    owner_org_id: NullableDflt<string>;
+    /** 0084: the org it was created in; never changed (F27). */
+    origin_org_id: NullableDflt<string>;
+    /** 0084: the owner shares it with other orgs. */
+    shareable: Dflt<boolean>;
+    catalog_item_id: NullableDflt<string>;
+    plugin_name: NullableDflt<string>;
+    name: string;
+    description: NullableDflt<string>;
+    description_zh: NullableDflt<string>;
+    current_version: number;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0081: one version of a platform agent template. */
+export interface PlatformAgentTemplateVersionsTable {
+    template_id: string;
+    version: number;
+    definition: Json<unknown>;
+    object_prefix: NullableDflt<string>;
+    catalog_version: NullableDflt<string>;
+    source_format: Dflt<SourceFormat>;
+    suggest_pinned: Dflt<boolean>;
+    updated_on_own: Dflt<boolean>;
+    created_by: NullableDflt<string>;
+    created_at: Ts;
+}
+/** 0081: a connector template of a catalog item, with its own scope; connectors stay per org. */
+export interface PlatformConnectorTemplatesTable extends PlatformScopeColumns {
+    id: string;
+    /** 0084: the owning org (null = the platform). */
+    owner_org_id: NullableDflt<string>;
+    /** 0084: the owner shares it with other orgs. */
+    shareable: Dflt<boolean>;
+    catalog_item_id: string;
+    template_id: string;
+    current_version: string;
+    file: Json<unknown>;
+    created_at: Ts;
+    updated_at: Ts;
+    deleted_at: TsNullable;
+}
+/** 0081: the orgs an own-scope `named` component is offered to. */
+export interface ComponentScopeOrgsTable {
+    kind: ComponentKind;
+    component_id: string;
+    org_id: string;
+}
+/** 0081: an org's on / off switch of a component. */
+export interface ComponentOrgSwitchesTable {
+    kind: ComponentKind;
+    component_id: string;
+    org_id: string;
+    enabled: boolean;
+    updated_by: NullableCol<string>;
+    updated_at: Ts;
 }
 /**
- * 0034, renamed in 0042, reshaped in 0044: the versions of an enterprise catalog item. `manifest` is
+ * 0034, renamed in 0042, reshaped in 0044: the versions of a platform catalog item. `manifest` is
  * the normalized plugin.json (skills and connector templates listed explicitly); `extension_sha256`
  * the plugin's extension package in `extension_packages` (null without an extension); `files` the
  * files stored under `object_prefix` (skills, connector templates, icons).
@@ -982,8 +1356,15 @@ export interface CatalogItemVersionsTable {
     license_text: ColumnType<string | null, string | null | undefined, string | null>;
     /** 0051: the root LICENSE was too long (or not UTF-8) to store. */
     license_truncated: ColumnType<boolean, boolean | undefined, boolean>;
+    /**
+     * 0084 (ruling P3-52): when the version was applied or confirmed (default: written; an org's
+     * upload writes null until applied). Only applied, not rejected versions serve other orgs.
+     */
+    applied_at: TsNullable;
+    /** 0084 (ruling P3-52): when the super admin rejected this pending org version. */
+    rejected_at: TsNullable;
 }
-/** 0035_catalogs.sql, renamed in 0042: marketplaces (official / enterprise). */
+/** 0035_catalogs.sql, renamed in 0042: marketplaces (official / custom). */
 export interface MarketplacesTable {
     id: string;
     name: string;
@@ -1036,6 +1417,8 @@ export interface MarketplaceEntriesTable {
  */
 export interface PluginImportStagingTable {
     id: string;
+    /** 0084: the org whose upload this is (null: the super admin's import). */
+    org_id: NullableDflt<string>;
     review: Json<unknown>;
     manifest: Json<unknown>;
     object_prefix: string | null;
@@ -1046,14 +1429,31 @@ export interface PluginImportStagingTable {
 }
 type NullableCol<T> = ColumnType<T | null, T | null | undefined, T | null>;
 /**
- * 0037, renamed in 0042: an org's catalog requests (stage org = a member request; deployment =
- * waiting for enterprise admin approval).
+ * 0037, renamed in 0042, kinds since 0077: an org's catalog requests. `stage` (org / deployment) is
+ * still written (`enable` -> org, else deployment) but no longer read.
  */
 export interface CatalogRequestsTable {
     id: string;
     org_id: string;
-    item_id: string;
+    /** 0077: null for an `import` request until its confirm writes the item. */
+    item_id: NullableCol<string>;
     version: NullableCol<string>;
+    /** 0077: what the request asks for (spec §5.1). */
+    kind: ColumnType<"access" | "import" | "enable" | "connector_setup", "access" | "import" | "enable" | "connector_setup" | undefined, "access" | "import" | "enable" | "connector_setup">;
+    /** 0085: the agent of a `connector_setup` request (cascades with the agent). */
+    agent_id: NullableCol<string>;
+    /** 0085: the template connector keys a `connector_setup` request still waits for. */
+    pending_keys: ColumnType<string[] | null, string | null | undefined, string | null>;
+    /** 0077: the marketplace entry of an `import` request (null once the marketplace is deleted). */
+    marketplace_id: NullableCol<string>;
+    entry_name: NullableCol<string>;
+    entry_version: NullableCol<string>;
+    /** 0077: the optional reason of a rejection. */
+    reason: NullableCol<string>;
+    /** 0077: the prepared import of an approved `import` request. */
+    staging_id: NullableCol<string>;
+    /** 0077: the requester dismissed the decision from the inbox. */
+    dismissed_at: NullableCol<Date>;
     stage: "org" | "deployment";
     requested_by: string | null;
     note: ColumnType<string, string | undefined, string>;
@@ -1073,7 +1473,7 @@ export interface ExtensionCatalogSourcesTable {
     item_id: string;
     created_at: Generated<Date>;
 }
-/** 0037, renamed in 0042: an enterprise admin's approval for an org to install a needs_approval item. */
+/** 0037, renamed in 0042: a super admin's approval for an org to install a needs_approval item. */
 export interface CatalogOrgGrantsTable {
     item_id: string;
     org_id: string;

package/dist/db/pool.d.ts

@@ -18,6 +18,11 @@ export declare function pgConnectOptions(cfg: {
  */
 export declare function createDb(url: string, poolMax: number, onError?: (err: Error) => void, opts?: {
     connectTimeoutMs?: number | undefined;
+    /**
+     * How long an idle client stays in the pool (pg's `idleTimeoutMillis`; unset = pg's 10 s).
+     * Every new client costs a TCP + auth handshake, several round trips to a distant database.
+     */
+    idleTimeoutMs?: number | undefined;
     /**
      * Error of a client while it is checked out: pg-pool drops its own listener on checkout, so
      * without this a backend killed between two statements is an uncaught exception.