@team-semicolon/semicolony-cli 4.18.51

package/migrations/100_migrate_services_drop.sql

@@ -0,0 +1,57 @@
+-- 100: Phase 4 — services 허브 테이블 (17건) KB 이식 + DROP
+-- 코드는 이미 KB pipeline/config 기반으로 전환됨
+
+-- 1. services → KB pipeline/config
+-- drift 복구: 이미 DROP 된 소스 테이블은 to_regclass 가드로 skip (2026-04-23)
+DO $$
+DECLARE
+  rec RECORD;
+BEGIN
+  IF to_regclass('semicolony.services') IS NULL THEN
+    RAISE NOTICE '100-1 skipped: services already dropped';
+    RETURN;
+  END IF;
+  FOR rec IN SELECT * FROM semicolony.services WHERE service_domain IS NOT NULL LOOP
+    INSERT INTO semicolony.knowledge_base (domain, key, sub_key, content, created_by, metadata)
+    VALUES (
+      rec.service_domain, 'pipeline', 'config',
+      COALESCE(rec.project_name, ''),
+      'migration-100',
+      jsonb_build_object(
+        'service_id', rec.service_id,
+        'project_name', COALESCE(rec.project_name, ''),
+        'owner_name', COALESCE(rec.owner_name, ''),
+        'owner_contact', rec.owner_contact,
+        'current_phase', COALESCE(rec.current_phase, 0),
+        'infra_phase', rec.infra_phase,
+        'status', COALESCE(rec.status, 'active'),
+        'lifecycle', COALESCE(rec.lifecycle, 'build'),
+        'service_type', COALESCE(rec.service_type, 'incubator'),
+        'parent_service_id', rec.parent_service_id,
+        'tech_stack', rec.tech_stack,
+        'service_url', rec.service_url,
+        'bm', rec.bm,
+        'repo', rec.repo,
+        'slack_channel', rec.slack_channel,
+        'launched_at', rec.launched_at::text,
+        'project_metadata', COALESCE(rec.metadata, '{}'::jsonb),
+        'created_at', rec.created_at::text
+      )
+    )
+    ON CONFLICT (domain, key, sub_key) DO UPDATE SET
+      content = EXCLUDED.content,
+      metadata = EXCLUDED.metadata,
+      updated_at = NOW();
+  END LOOP;
+END $$;
+
+-- 2. 레거시 VIEW DROP
+DROP VIEW IF EXISTS semicolony.service_projects CASCADE;
+DROP VIEW IF EXISTS semicolony.gfp_projects CASCADE;
+DROP VIEW IF EXISTS semicolony.gfp_phase_sections CASCADE;
+DROP VIEW IF EXISTS semicolony.gfp_materials CASCADE;
+DROP VIEW IF EXISTS semicolony.gfp_research_tasks CASCADE;
+DROP VIEW IF EXISTS semicolony.gfp_infra_requests CASCADE;
+
+-- 3. services 테이블 DROP → 101_drop_services.sql로 분리
+-- sandbox.ts 에서 semicolony.services 참조(8곳)가 KB 전환 완료된 후 실행

package/migrations/101_drop_services.sql

@@ -0,0 +1,5 @@
+-- 101: services 허브 테이블 최종 DROP
+-- 전제 조건: sandbox.ts의 semicolony.services 참조(8곳)가 KB 기반으로 전환 완료되어야 함
+-- migration 100에서 데이터 이식은 이미 완료됨
+
+DROP TABLE IF EXISTS semicolony.services CASCADE;

package/migrations/102_cost_log_session_dedup.sql

@@ -0,0 +1,13 @@
+-- 102: bot_cost_log에 세션/메시지 ID 추가 — Stop 훅 기반 턴별 토큰 추적 dedup용
+
+BEGIN;
+
+ALTER TABLE semicolony.bot_cost_log
+  ADD COLUMN IF NOT EXISTS session_id TEXT,
+  ADD COLUMN IF NOT EXISTS message_id TEXT;
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_cost_log_dedup
+  ON semicolony.bot_cost_log (session_id, message_id)
+  WHERE message_id IS NOT NULL;
+
+COMMIT;

package/migrations/103_board.sql

@@ -0,0 +1,57 @@
+-- 103: 파일 게시판 (자료실) — Dashboard CRUD + Introduction 공개 조회
+-- 권한 enforce는 API 레이어에서 수행 (pg 직접 접근, RLS 미사용)
+-- 파일 바이너리는 bytea로 저장 (meetings.audio_data 패턴 재사용)
+
+BEGIN;
+
+CREATE TABLE IF NOT EXISTS semicolony.board_categories (
+  slug              TEXT PRIMARY KEY,
+  label             TEXT NOT NULL,
+  sort_order        INT DEFAULT 0,
+  is_public_allowed BOOLEAN NOT NULL DEFAULT TRUE,
+  created_at        TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE TABLE IF NOT EXISTS semicolony.board_posts (
+  id                       UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  title                    TEXT NOT NULL,
+  description              TEXT,
+  category_slug            TEXT NOT NULL REFERENCES semicolony.board_categories(slug),
+  uploader_id              UUID,
+  uploader_email           TEXT,
+  uploader_name_snapshot   TEXT,
+  is_public                BOOLEAN NOT NULL DEFAULT FALSE,
+  is_hidden                BOOLEAN NOT NULL DEFAULT FALSE,
+  view_count               INT NOT NULL DEFAULT 0,
+  created_at               TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  updated_at               TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE TABLE IF NOT EXISTS semicolony.board_attachments (
+  id           UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  post_id      UUID NOT NULL REFERENCES semicolony.board_posts(id) ON DELETE CASCADE,
+  file_name    TEXT NOT NULL,
+  mime_type    TEXT NOT NULL,
+  size_bytes   BIGINT NOT NULL,
+  file_data    BYTEA NOT NULL,
+  created_at   TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_board_posts_public
+  ON semicolony.board_posts (is_public, created_at DESC)
+  WHERE is_hidden = FALSE;
+
+CREATE INDEX IF NOT EXISTS idx_board_posts_category
+  ON semicolony.board_posts (category_slug, created_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_board_attachments_post
+  ON semicolony.board_attachments (post_id);
+
+-- 시드 카테고리
+INSERT INTO semicolony.board_categories (slug, label, sort_order, is_public_allowed) VALUES
+  ('materials',  '자료/문서',              10, TRUE),
+  ('press',      '보도자료/외부 공개',     20, TRUE),
+  ('recruiting', '채용/회사 소개',         30, TRUE)
+ON CONFLICT (slug) DO NOTHING;
+
+COMMIT;

package/migrations/104_agent_factory.sql

@@ -0,0 +1,284 @@
+-- 104: Agent Factory 기반 마련
+-- 1) bot_status에 Factory 메타 컬럼 추가 (slack/kb/budget/template 하드코딩 제거 준비)
+-- 2) bot_id_aliases: 불변 bot_id + 표시명 변경을 위한 별칭 테이블
+-- 3) bot_seats: Claude Max seat 물리/논리 분리 (런타임 동적 할당)
+-- 4) semiclaw → semicolonybot 리브랜드 1단계 (새 row + alias 활성화)
+-- 5) NOTIFY 트리거: bot_status / bot_delegation / bot_id_aliases 변경 시 핫 리로드 시그널
+
+BEGIN;
+
+-- ============================================================
+-- 1. bot_status 컬럼 확장
+-- ============================================================
+
+ALTER TABLE semicolony.bot_status
+  ADD COLUMN IF NOT EXISTS kb_domains         TEXT[],
+  ADD COLUMN IF NOT EXISTS budget_per_message NUMERIC(6,3),
+  ADD COLUMN IF NOT EXISTS slack_username     TEXT,
+  ADD COLUMN IF NOT EXISTS slack_icon_emoji   TEXT,
+  ADD COLUMN IF NOT EXISTS created_by_bot_id  TEXT,
+  ADD COLUMN IF NOT EXISTS template_bot_id    TEXT;
+
+-- 백필 — 기존 하드코딩 맵(packages/common/src/slack/bot-config.ts)을 DB로 이식
+--   kb_domains: orchestrator는 빈 배열(전체 허용), 나머지는 명시적 리스트
+--   budget_per_message: 봇별 기본 예산
+--   slack_username/icon_emoji: FALLBACK_SLACK_PROFILES
+UPDATE semicolony.bot_status SET
+  kb_domains         = '{}',
+  budget_per_message = 1.5,
+  slack_username     = 'SemiClaw',
+  slack_icon_emoji   = ':clipboard:',
+  created_by_bot_id  = '__genesis__'
+WHERE bot_id = 'semiclaw';
+
+UPDATE semicolony.bot_status SET
+  kb_domains         = ARRAY['semicolon','semicolony'],
+  budget_per_message = 1.0,
+  slack_username     = 'PlanClaw',
+  slack_icon_emoji   = ':bar_chart:',
+  created_by_bot_id  = '__genesis__'
+WHERE bot_id = 'planclaw';
+
+UPDATE semicolony.bot_status SET
+  kb_domains         = ARRAY['semicolon'],
+  budget_per_message = 1.0,
+  slack_username     = 'DesignClaw',
+  slack_icon_emoji   = ':art:',
+  created_by_bot_id  = '__genesis__'
+WHERE bot_id = 'designclaw';
+
+UPDATE semicolony.bot_status SET
+  kb_domains         = ARRAY['semicolon'],
+  budget_per_message = 1.5,
+  slack_username     = 'WorkClaw',
+  slack_icon_emoji   = ':hammer_and_wrench:',
+  created_by_bot_id  = '__genesis__'
+WHERE bot_id = 'workclaw';
+
+UPDATE semicolony.bot_status SET
+  kb_domains         = ARRAY['semicolon'],
+  budget_per_message = 0.8,
+  slack_username     = 'ReviewClaw',
+  slack_icon_emoji   = ':mag:',
+  created_by_bot_id  = '__genesis__'
+WHERE bot_id = 'reviewclaw';
+
+UPDATE semicolony.bot_status SET
+  kb_domains         = ARRAY['semicolon','semicolony'],
+  budget_per_message = 1.0,
+  slack_username     = 'InfraClaw',
+  slack_icon_emoji   = ':gear:',
+  created_by_bot_id  = '__genesis__'
+WHERE bot_id = 'infraclaw';
+
+UPDATE semicolony.bot_status SET
+  kb_domains         = ARRAY['semicolon'],
+  budget_per_message = 0.5,
+  slack_username     = 'GrowthClaw',
+  slack_icon_emoji   = ':chart_with_upwards_trend:',
+  created_by_bot_id  = '__genesis__'
+WHERE bot_id = 'growthclaw';
+
+UPDATE semicolony.bot_status SET
+  kb_domains         = ARRAY['semicolon'],
+  budget_per_message = 1.0,
+  slack_username     = 'Incubator',
+  slack_icon_emoji   = ':hatching_chick:',
+  created_by_bot_id  = '__genesis__'
+WHERE bot_id = 'incubator';
+
+-- ============================================================
+-- 2. bot_id_aliases — 표시명 변경 시 기존 bot_id 참조 보존
+-- ============================================================
+
+CREATE TABLE IF NOT EXISTS semicolony.bot_id_aliases (
+  alias             TEXT PRIMARY KEY,
+  canonical_bot_id  TEXT NOT NULL REFERENCES semicolony.bot_status(bot_id),
+  retired_at        TIMESTAMPTZ,
+  created_at        TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_bot_aliases_canonical
+  ON semicolony.bot_id_aliases (canonical_bot_id);
+
+-- ============================================================
+-- 3. bot_seats — Claude Max seat 할당 (물리 seat ↔ 논리 bot)
+-- ============================================================
+
+CREATE TABLE IF NOT EXISTS semicolony.bot_seats (
+  seat_id            TEXT PRIMARY KEY,
+  claude_config_dir  TEXT NOT NULL,
+  max_concurrent     INT  NOT NULL DEFAULT 1,
+  current_bot_id     TEXT REFERENCES semicolony.bot_status(bot_id),
+  allocated_at       TIMESTAMPTZ,
+  status             TEXT NOT NULL DEFAULT 'available'
+                     CHECK (status IN ('available','allocated','quarantined')),
+  created_at         TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  updated_at         TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_bot_seats_status
+  ON semicolony.bot_seats (status);
+
+CREATE INDEX IF NOT EXISTS idx_bot_seats_current_bot
+  ON semicolony.bot_seats (current_bot_id) WHERE current_bot_id IS NOT NULL;
+
+-- ============================================================
+-- 4. semiclaw → semicolonybot 리브랜드 1단계
+-- ============================================================
+
+-- 4.1 semicolonybot row 생성 (semiclaw를 템플릿으로 복사)
+INSERT INTO semicolony.bot_status (
+  bot_id, name, emoji, role, workspace_path, status,
+  kb_domains, budget_per_message, slack_username, slack_icon_emoji,
+  created_by_bot_id, template_bot_id
+)
+SELECT
+  'semicolonybot', 'SemiColonyBot', ':robot_face:', 'orchestrator',
+  REPLACE(workspace_path, 'semiclaw', 'semicolonybot'),
+  status,
+  kb_domains, budget_per_message, 'SemiColonyBot', ':robot_face:',
+  '__genesis__', 'semiclaw'
+FROM semicolony.bot_status WHERE bot_id = 'semiclaw'
+ON CONFLICT (bot_id) DO NOTHING;
+
+-- 4.2 alias 활성화 (semiclaw → semicolonybot)
+INSERT INTO semicolony.bot_id_aliases (alias, canonical_bot_id)
+VALUES ('semiclaw', 'semicolonybot')
+ON CONFLICT (alias) DO NOTHING;
+
+-- 4.3 semicolonybot agents 온톨로지 row (entity_type='agents')
+INSERT INTO semicolony.ontology (domain, entity_type, schema, description)
+VALUES ('semicolonybot', 'agents', '{}'::jsonb, 'SEMICOLONY 오케스트레이터 (semiclaw 후계)')
+ON CONFLICT (domain) DO UPDATE SET
+  entity_type = EXCLUDED.entity_type,
+  description = EXCLUDED.description;
+
+-- 4.4 semicolonybot KB 키 복사 (identity, delegation, model-config, status, slack-config 등)
+INSERT INTO semicolony.knowledge_base (domain, key, sub_key, content, metadata, created_by)
+SELECT
+  'semicolonybot', key, sub_key, content, metadata, 'migration-104'
+FROM semicolony.knowledge_base
+WHERE domain = 'semiclaw'
+  AND key IN ('identity','delegation','model-config','status','slack-config','slack-profile','cron-schedule','tools','skills','kb-access')
+ON CONFLICT (domain, key, sub_key) DO NOTHING;
+
+-- 4.5 identity 콘텐츠의 이름은 SemiColonyBot으로 덮어쓰기
+UPDATE semicolony.knowledge_base
+SET content = format(
+  E'name: %s\nemoji: %s\ntagline: %s\nrole: %s\nagent_type: %s',
+  'SemiColonyBot', ':robot_face:', 'SEMICOLONY 오케스트레이터', 'orchestrator', 'orchestrator'
+), updated_at = NOW()
+WHERE domain = 'semicolonybot' AND key = 'identity' AND sub_key = '';
+
+-- 4.6 slack-profile 덮어쓰기 (SemiColonyBot 표시명)
+UPDATE semicolony.knowledge_base
+SET content = E'username: SemiColonyBot\nicon_emoji: ":robot_face:"', updated_at = NOW()
+WHERE domain = 'semicolonybot' AND key IN ('slack-profile','slack-config') AND sub_key = '';
+
+-- 4.7 bot_delegation 복제 — 기존 semiclaw → X 위임을 semicolonybot → X 로 복제
+--     (semiclaw 행은 alias 호환성 유지 차원에서 삭제하지 않음)
+-- 075에서 unique 제약이 (from,to,type,metadata->>'label')의 composite 으로 바뀌어
+-- ON CONFLICT 타겟을 명시하면 매치 실패. DO NOTHING 타겟 생략으로 변경.
+INSERT INTO semicolony.bot_delegation (
+  from_bot_id, to_bot_id, delegation_type, domains, method, channel,
+  max_roundtrips, priority, is_active, metadata
+)
+SELECT
+  'semicolonybot', to_bot_id, delegation_type, domains, method, channel,
+  max_roundtrips, priority, is_active, COALESCE(metadata, '{}'::jsonb)
+FROM semicolony.bot_delegation
+WHERE from_bot_id = 'semiclaw'
+ON CONFLICT DO NOTHING;
+
+-- ============================================================
+-- 5. bot_seats 초기 행 — snamanager0 (현재 유일한 Claude Max seat)
+-- ============================================================
+
+INSERT INTO semicolony.bot_seats (seat_id, claude_config_dir, current_bot_id, allocated_at, status)
+VALUES ('snamanager0', '$HOME/.claude/snamanager0', 'semicolonybot', NOW(), 'allocated')
+ON CONFLICT (seat_id) DO UPDATE SET
+  current_bot_id = EXCLUDED.current_bot_id,
+  allocated_at   = EXCLUDED.allocated_at,
+  status         = EXCLUDED.status;
+
+-- ============================================================
+-- 6. NOTIFY 트리거 — 라우팅 설정 변경 시 핫 리로드 시그널
+-- ============================================================
+
+CREATE OR REPLACE FUNCTION semicolony.notify_routing_reload()
+RETURNS TRIGGER AS $$
+DECLARE
+  payload JSONB;
+  op      TEXT := TG_OP;
+  tbl     TEXT := TG_TABLE_NAME;
+  bot_id  TEXT;
+BEGIN
+  IF (TG_OP = 'DELETE') THEN
+    IF (tbl = 'bot_status') THEN
+      bot_id := OLD.bot_id;
+    ELSIF (tbl = 'bot_delegation') THEN
+      bot_id := OLD.to_bot_id;
+    ELSIF (tbl = 'bot_id_aliases') THEN
+      bot_id := OLD.canonical_bot_id;
+    END IF;
+  ELSE
+    IF (tbl = 'bot_status') THEN
+      bot_id := NEW.bot_id;
+    ELSIF (tbl = 'bot_delegation') THEN
+      bot_id := NEW.to_bot_id;
+    ELSIF (tbl = 'bot_id_aliases') THEN
+      bot_id := NEW.canonical_bot_id;
+    END IF;
+  END IF;
+
+  payload := jsonb_build_object('op', op, 'table', tbl, 'bot_id', bot_id, 'at', NOW());
+  PERFORM pg_notify('semicolony_routing_reload', payload::text);
+  RETURN COALESCE(NEW, OLD);
+END;
+$$ LANGUAGE plpgsql;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_trigger WHERE tgname = 'trg_notify_bot_status') THEN
+    CREATE TRIGGER trg_notify_bot_status
+      AFTER INSERT OR UPDATE OR DELETE ON semicolony.bot_status
+      FOR EACH ROW EXECUTE FUNCTION semicolony.notify_routing_reload();
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_trigger WHERE tgname = 'trg_notify_bot_delegation') THEN
+    CREATE TRIGGER trg_notify_bot_delegation
+      AFTER INSERT OR UPDATE OR DELETE ON semicolony.bot_delegation
+      FOR EACH ROW EXECUTE FUNCTION semicolony.notify_routing_reload();
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_trigger WHERE tgname = 'trg_notify_bot_aliases') THEN
+    CREATE TRIGGER trg_notify_bot_aliases
+      AFTER INSERT OR UPDATE OR DELETE ON semicolony.bot_id_aliases
+      FOR EACH ROW EXECUTE FUNCTION semicolony.notify_routing_reload();
+  END IF;
+END $$;
+
+-- ============================================================
+-- 7. 검증용 헬퍼 뷰
+-- ============================================================
+
+CREATE OR REPLACE VIEW semicolony.v_bot_factory_status AS
+SELECT
+  bs.bot_id,
+  bs.name,
+  bs.status,
+  bs.role,
+  bs.created_by_bot_id,
+  bs.template_bot_id,
+  bs.slack_username,
+  bs.budget_per_message,
+  bs.kb_domains,
+  COALESCE(
+    (SELECT array_agg(alias ORDER BY alias) FROM semicolony.bot_id_aliases WHERE canonical_bot_id = bs.bot_id),
+    '{}'
+  ) AS aliases,
+  seat.seat_id AS seat_id,
+  seat.claude_config_dir AS claude_config_dir
+FROM semicolony.bot_status bs
+LEFT JOIN semicolony.bot_seats seat ON seat.current_bot_id = bs.bot_id;
+
+COMMIT;

package/migrations/105_kb_notify.sql

@@ -0,0 +1,44 @@
+-- Migration 105: semicolony.knowledge_base 변경 이벤트 NOTIFY 트리거
+--
+-- Phase 1c KbStore.watch() 구현을 지원한다. 클라이언트는
+-- `LISTEN semicolony_kb_change` 로 구독하고 JSON payload 를 파싱한다.
+--
+-- payload 스키마: { "type": "upsert" | "delete", "domain": "...", "key": "...",
+--                   "subKey": "...", "kbId": 123 }
+
+CREATE OR REPLACE FUNCTION semicolony.notify_kb_change()
+RETURNS TRIGGER AS $$
+DECLARE
+  payload JSONB;
+  row_data RECORD;
+  change_type TEXT;
+BEGIN
+  IF TG_OP = 'DELETE' THEN
+    row_data := OLD;
+    change_type := 'delete';
+  ELSE
+    row_data := NEW;
+    change_type := 'upsert';
+  END IF;
+
+  payload := jsonb_build_object(
+    'type', change_type,
+    'domain', row_data.domain,
+    'key', row_data.key,
+    'subKey', COALESCE(row_data.sub_key, ''),
+    'kbId', row_data.kb_id
+  );
+
+  PERFORM pg_notify('semicolony_kb_change', payload::text);
+  RETURN COALESCE(NEW, OLD);
+END;
+$$ LANGUAGE plpgsql;
+
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_trigger WHERE tgname = 'trg_notify_kb_change') THEN
+    CREATE TRIGGER trg_notify_kb_change
+      AFTER INSERT OR UPDATE OR DELETE ON semicolony.knowledge_base
+      FOR EACH ROW EXECUTE FUNCTION semicolony.notify_kb_change();
+  END IF;
+END $$;

package/migrations/106_office_id_agents_commands.sql

@@ -0,0 +1,73 @@
+-- 106: office_id 컬럼을 agent_definitions / command_definitions 에도 확장
+-- L2 tenant 격리의 기본 메커니즘 — skill_definitions 에 이미 존재, 동일 패턴으로 확장.
+-- 모든 기존 레코드는 office_id=NULL (공개 L0 카탈로그) 로 유지.
+-- drift 복구: 소스 테이블이 없으면 전체 섹션 skip (2026-04-23)
+BEGIN;
+
+-- 1+3. agent_definitions 확장
+DO $$
+BEGIN
+  IF to_regclass('semicolony.agent_definitions') IS NULL THEN
+    RAISE NOTICE '106 section agent_definitions skipped: table missing';
+    RETURN;
+  END IF;
+
+  ALTER TABLE semicolony.agent_definitions
+    ADD COLUMN IF NOT EXISTS office_id UUID DEFAULT NULL;
+
+  CREATE INDEX IF NOT EXISTS idx_agent_definitions_office
+    ON semicolony.agent_definitions(office_id)
+    WHERE office_id IS NOT NULL;
+
+  IF EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'agent_definitions_name_key'
+      AND conrelid = 'semicolony.agent_definitions'::regclass
+  ) THEN
+    ALTER TABLE semicolony.agent_definitions DROP CONSTRAINT agent_definitions_name_key;
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_indexes
+    WHERE schemaname = 'semicolony' AND tablename = 'agent_definitions'
+      AND indexname = 'agent_definitions_name_office_uniq'
+  ) THEN
+    CREATE UNIQUE INDEX agent_definitions_name_office_uniq
+      ON semicolony.agent_definitions(name, COALESCE(office_id, '00000000-0000-0000-0000-000000000000'::uuid));
+  END IF;
+END $$;
+
+-- 2+4. command_definitions 확장
+DO $$
+BEGIN
+  IF to_regclass('semicolony.command_definitions') IS NULL THEN
+    RAISE NOTICE '106 section command_definitions skipped: table missing';
+    RETURN;
+  END IF;
+
+  ALTER TABLE semicolony.command_definitions
+    ADD COLUMN IF NOT EXISTS office_id UUID DEFAULT NULL;
+
+  CREATE INDEX IF NOT EXISTS idx_command_definitions_office
+    ON semicolony.command_definitions(office_id)
+    WHERE office_id IS NOT NULL;
+
+  IF EXISTS (
+    SELECT 1 FROM pg_constraint
+    WHERE conname = 'command_definitions_folder_name_key'
+      AND conrelid = 'semicolony.command_definitions'::regclass
+  ) THEN
+    ALTER TABLE semicolony.command_definitions DROP CONSTRAINT command_definitions_folder_name_key;
+  END IF;
+
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_indexes
+    WHERE schemaname = 'semicolony' AND tablename = 'command_definitions'
+      AND indexname = 'command_definitions_folder_name_office_uniq'
+  ) THEN
+    CREATE UNIQUE INDEX command_definitions_folder_name_office_uniq
+      ON semicolony.command_definitions(folder, name, COALESCE(office_id, '00000000-0000-0000-0000-000000000000'::uuid));
+  END IF;
+END $$;
+
+COMMIT;

package/migrations/107_agent_service_credentials.sql

@@ -0,0 +1,79 @@
+-- 107: agent service credentials (PAT vault)
+-- SEMICOLONY를 중앙 발급/검증자로 하는 Personal Access Token 저장소.
+-- 관련 결정: `semicolon decision agent-authenticated-action-standard`
+
+BEGIN;
+
+CREATE TABLE IF NOT EXISTS semicolony.agent_service_credentials (
+  id               UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  bot_id           TEXT NOT NULL,
+  service_domain   TEXT NOT NULL,
+  token_hash       TEXT NOT NULL UNIQUE,
+  token_prefix     TEXT NOT NULL,
+  scopes           TEXT[] NOT NULL DEFAULT '{}',
+  issued_at        TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  expires_at       TIMESTAMPTZ,
+  last_used_at     TIMESTAMPTZ,
+  revoked_at       TIMESTAMPTZ,
+  revoked_reason   TEXT,
+  issued_by        TEXT NOT NULL,
+  metadata         JSONB NOT NULL DEFAULT '{}'::jsonb,
+
+  CONSTRAINT chk_token_hash_format
+    CHECK (token_hash ~ '^[0-9a-f]{64}$'),
+  CONSTRAINT chk_token_prefix_format
+    CHECK (token_prefix ~ '^semicolony_pat_(live|test)_[a-z0-9_-]+_$'),
+  CONSTRAINT chk_revoke_consistency
+    CHECK (revoked_reason IS NULL OR revoked_at IS NOT NULL),
+  CONSTRAINT chk_expires_after_issued
+    CHECK (expires_at IS NULL OR expires_at > issued_at)
+);
+
+CREATE INDEX IF NOT EXISTS idx_agent_creds_bot_id
+  ON semicolony.agent_service_credentials (bot_id);
+
+CREATE INDEX IF NOT EXISTS idx_agent_creds_service
+  ON semicolony.agent_service_credentials (service_domain);
+
+CREATE INDEX IF NOT EXISTS idx_agent_creds_active
+  ON semicolony.agent_service_credentials (bot_id, service_domain)
+  WHERE revoked_at IS NULL;
+
+CREATE INDEX IF NOT EXISTS idx_agent_creds_expires
+  ON semicolony.agent_service_credentials (expires_at)
+  WHERE revoked_at IS NULL AND expires_at IS NOT NULL;
+
+CREATE OR REPLACE VIEW semicolony.v_agent_credentials_audit AS
+SELECT
+  id,
+  bot_id,
+  service_domain,
+  token_prefix,
+  scopes,
+  issued_at,
+  expires_at,
+  last_used_at,
+  revoked_at,
+  revoked_reason,
+  issued_by,
+  CASE
+    WHEN revoked_at IS NOT NULL THEN 'revoked'
+    WHEN expires_at IS NOT NULL AND expires_at < NOW() THEN 'expired'
+    ELSE 'active'
+  END AS status,
+  metadata
+FROM semicolony.agent_service_credentials;
+
+COMMENT ON TABLE semicolony.agent_service_credentials IS
+  'PAT vault for agent→service authenticated writes. Plaintext never stored — only HMAC-SHA256(pepper, plaintext) hex. See decision: agent-authenticated-action-standard.';
+
+COMMENT ON COLUMN semicolony.agent_service_credentials.token_hash IS
+  '64-char lowercase hex of HMAC-SHA256(SEMICOLONY_CREDENTIAL_PEPPER, plaintext). Unique globally.';
+
+COMMENT ON COLUMN semicolony.agent_service_credentials.token_prefix IS
+  'Deterministic prefix ending in underscore (e.g. "semicolony_pat_live_workclaw_"). Safe to expose to services for audit logging.';
+
+COMMENT ON COLUMN semicolony.agent_service_credentials.scopes IS
+  'Format "{resource}:{action}" (e.g. ["board:write","kpi:read"]). Wildcard "resource:*" supported in verify.';
+
+COMMIT;

package/migrations/108_drop_l2_ontology_seeds.sql

@@ -0,0 +1,16 @@
+-- 108: L2 ontology seed cleanup
+-- migration 017 시드된 세미콜론 L2 ontology 행(jungchipan, playland)을 제거.
+-- 외부 OSS 신규 인스턴스에서는 자동 삭제되어 깨끗한 상태로 시작.
+-- 기존 인스턴스에 해당 도메인 KB 데이터가 살아있으면 ontology 행은 보존 (안전).
+--
+-- 관련 인벤토리: docs/L2-INVENTORY.md (HIGH #1)
+
+BEGIN;
+
+DELETE FROM semicolony.ontology o
+WHERE o.domain IN ('jungchipan', 'playland')
+  AND NOT EXISTS (
+    SELECT 1 FROM semicolony.knowledge_base kb WHERE kb.domain = o.domain
+  );
+
+COMMIT;

package/migrations/109_generic_ontology_descriptions.sql

@@ -0,0 +1,21 @@
+-- 109: ontology JSON Schema description 일반화
+-- migration 015 에서 KPI ontology 의 properties.project.description 에 세미콜론 L2 도메인
+-- 예시("gameland, jungchipan")가 박혀 있었음. OSS 배포 시 외부 사용자에게 노출되므로 일반화.
+--
+-- 관련 인벤토리: docs/L2-INVENTORY.md (MEDIUM #2)
+
+BEGIN;
+
+UPDATE semicolony.ontology
+SET
+  schema = jsonb_set(
+    schema,
+    '{properties,metadata,properties,project,description}',
+    '"프로젝트 ID (예: my-service)"'::jsonb
+  ),
+  version = version + 1
+WHERE domain = 'kpi'
+  AND schema #> '{properties,metadata,properties,project,description}'
+      = '"프로젝트 ID (예: gameland, jungchipan)"'::jsonb;
+
+COMMIT;