@capybara-hq/kernel 0.1.0-rc.5 → 0.1.0-rc.7

package/src/migrations/0089_model_kinds_usage.sql

@@ -0,0 +1,38 @@
+-- Model platform providers (spec 2026-11-06-model-platform-providers-design.md). Expand-only: two
+-- new tables, nothing existing changes.
+
+-- 0089, spec §5.3: models disabled on two layers. `org_id` null is the platform's list (the super
+-- admin; such a model is invisible to every org), otherwise the org's own list (an org admin, among
+-- the models the platform left on). No row means the model is enabled; a model a provider lists
+-- later is enabled everywhere until someone disables it. Keyed on the model id, so a row applies to
+-- whichever list the org sees (the platform's config or the org's own copy); an id the list does
+-- not contain is kept harmlessly.
+CREATE TABLE IF NOT EXISTS model_disabled (
+  org_id text NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  provider text NOT NULL,
+  model text NOT NULL,
+  disabled_by text REFERENCES accounts(id) ON DELETE SET NULL,
+  disabled_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE UNIQUE INDEX IF NOT EXISTS model_disabled_scope_key
+  ON model_disabled ((coalesce(org_id, '')), provider, model);
+
+-- 0089, spec §5.4: model usage outside conversations (an extension's `ctx.models.embed` call). One
+-- row per call; `reported_at` is set once the `usage.report` job for the row (eventId = id) has
+-- nothing left to deliver (delivered, no subscriber, or a definite drop); `report_failed_at` once
+-- the job gave up after its last attempt. The sweeper re-enqueues recent rows where both are null.
+CREATE TABLE IF NOT EXISTS model_usage (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  org_id text NOT NULL REFERENCES orgs(id) ON DELETE CASCADE,
+  extension text NOT NULL,
+  purpose text NOT NULL,
+  provider text NOT NULL,
+  model text NOT NULL,
+  input_tokens integer NOT NULL,
+  occurred_at timestamptz NOT NULL DEFAULT now(),
+  reported_at timestamptz NULL,
+  report_failed_at timestamptz NULL
+);
+CREATE INDEX IF NOT EXISTS model_usage_org_time ON model_usage (org_id, occurred_at DESC);
+CREATE INDEX IF NOT EXISTS model_usage_unreported ON model_usage (occurred_at)
+  WHERE reported_at IS NULL AND report_failed_at IS NULL;

package/src/migrations/0090_initial_passwords.sql

@@ -0,0 +1,27 @@
+-- Platform tool phase 2 (spec 2026-11-07-platform-tool-design.md §14.5 item 2): the super admin's
+-- agent creates an account with a kernel-generated one-time password. Expand-only.
+--
+-- must_change_password: the account must set its own password before anything else (the auth
+-- guard refuses every route but the password change, /me and logout until it does).
+ALTER TABLE capybara.accounts ADD COLUMN IF NOT EXISTS must_change_password boolean NOT NULL DEFAULT false;
+
+-- The generated password, sealed with the master keyring (AES-256-GCM, AAD = account id), waiting
+-- for the person who approved the creation to read it once on the web. Keyed by the account; the
+-- tool call it came from (conversation_id, run_id, call_id: a call id is unique only within its run)
+-- and its recipient decide who may read it. Read once (deleted as it is read), dropped when the
+-- account changes its password, and dropped after expires_at by the hourly cleanup job.
+CREATE TABLE IF NOT EXISTS capybara.account_initial_passwords (
+  account_id text PRIMARY KEY REFERENCES capybara.accounts(id) ON DELETE CASCADE,
+  recipient_account_id text NOT NULL REFERENCES capybara.accounts(id) ON DELETE CASCADE,
+  conversation_id text NOT NULL REFERENCES capybara.conversations(id) ON DELETE CASCADE,
+  run_id text NOT NULL,
+  call_id text NOT NULL,
+  master_key_id text NOT NULL,
+  ciphertext bytea NOT NULL,
+  expires_at timestamptz NOT NULL,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS account_initial_passwords_call_idx
+  ON capybara.account_initial_passwords (conversation_id, run_id, call_id);
+CREATE INDEX IF NOT EXISTS account_initial_passwords_expires_idx
+  ON capybara.account_initial_passwords (expires_at);

package/src/migrations/0091_account_time_zone.sql

@@ -0,0 +1,4 @@
+-- Run context (spec 2026-11-08-run-context-design.md §3.4): a person's time zone setting (IANA
+-- name). Null, the default, follows the browser's time zone sent with each message; a set value
+-- overrides it. Expand-only.
+ALTER TABLE accounts ADD COLUMN IF NOT EXISTS time_zone text;

package/src/migrations/0092_tools_default_on.sql

@@ -0,0 +1,27 @@
+-- Tools are on by default (spec 2026-11-08-tools-default-on-design.md §3): an agent stores only
+-- what it turns off (`disabledTools`), not an enabled list (`tools`). Every stored agent version,
+-- older ones included (a rollback reads the same shape), becomes "nothing turned off". Idempotent:
+-- a definition without `tools` is left alone, one without `disabledTools` gets the empty list.
+UPDATE agent_versions
+SET definition = (definition - 'tools') || jsonb_build_object('disabledTools', '[]'::jsonb)
+WHERE definition ? 'tools' OR NOT definition ? 'disabledTools';
+
+-- Org-made agent templates (saved from an agent by an org admin: no plugin, no catalog item)
+-- lose their `tools` allowlist, so they turn nothing off either. Templates from plugin packages
+-- keep what the package wrote.
+UPDATE agent_template_versions AS v
+SET definition = v.definition - 'tools'
+FROM agent_templates AS t
+WHERE t.id = v.template_id
+  AND t.plugin_name IS NULL
+  AND t.catalog_item_id IS NULL
+  AND v.definition ? 'tools';
+
+UPDATE platform_agent_template_versions AS v
+SET definition = v.definition - 'tools'
+FROM platform_agent_templates AS t
+WHERE t.id = v.template_id
+  AND t.plugin_name IS NULL
+  AND t.catalog_item_id IS NULL
+  AND v.object_prefix IS NULL
+  AND v.definition ? 'tools';

package/dist/platform/redact-orgs.d.ts

@@ -1,7 +0,0 @@
-/**
- * A super-admin result as it may enter one org's event log (Platform tool spec §6.1): every org
- * list becomes `{ count }`, org ids and names elsewhere are dropped, and an org owner is given as
- * `{ kind: "org" }` only. Shared agents, trajectories and eval snapshots expose the log to other
- * people, so another org is never named or described; the admin console shows which.
- */
-export declare function redactOrgs(value: unknown): unknown;

package/dist/platform/redact-orgs.js

@@ -1,52 +0,0 @@
-/**
- * Keys whose value lists orgs in the platform views (`CatalogItemView.scopeOrgs`, the update
- * preview's `extension.orgs`, `connectorOrgs`, a component's `pinnedOrgs` and `kept`, a scope
- * preview's `affected`, …): replaced with `{ count }`.
- */
-const ORG_LISTS = new Set([
-    "orgs",
-    "scopeOrgs",
-    "pinnedOrgs",
-    "connectorOrgs",
-    "kept",
-    "usedBy",
-    "affected",
-]);
-/** Keys naming one org, or orgs by id: dropped. */
-const ORG_KEYS = new Set([
-    "orgId",
-    "orgIds",
-    "orgName",
-    "orgNames",
-    "ownerOrgId",
-]);
-/**
- * A super-admin result as it may enter one org's event log (Platform tool spec §6.1): every org
- * list becomes `{ count }`, org ids and names elsewhere are dropped, and an org owner is given as
- * `{ kind: "org" }` only. Shared agents, trajectories and eval snapshots expose the log to other
- * people, so another org is never named or described; the admin console shows which.
- */
-export function redactOrgs(value) {
-    if (Array.isArray(value))
-        return value.map(redactOrgs);
-    if (value === null || typeof value !== "object")
-        return value;
-    if (value instanceof Date)
-        return value;
-    const out = {};
-    for (const [k, v] of Object.entries(value)) {
-        if (ORG_KEYS.has(k))
-            continue;
-        if (ORG_LISTS.has(k) && Array.isArray(v)) {
-            out[k] = { count: v.length };
-            continue;
-        }
-        if (k === "owner" && isOrgOwner(v)) {
-            out[k] = { kind: "org" };
-            continue;
-        }
-        out[k] = redactOrgs(v);
-    }
-    return out;
-}
-const isOrgOwner = (v) => typeof v === "object" && v !== null && v.kind === "org";