@team-semicolon/semicolony-cli 4.18.51

package/migrations/137_runtime_backfill_team_semicolon.sql

@@ -0,0 +1,131 @@
+-- 137_runtime_backfill_team_semicolon.sql
+-- 런타임 테이블 tenant_id/scope 2단계 백필 (RLS Phase 2 준비).
+--
+-- 결정: semicolony/decision/rls-trusted-service-guc-boundary-2026-06-19.
+-- 선행: 136_runtime_tenant_columns.sql (컬럼 추가).
+--
+-- 2단계:
+--   (1) 고객 런타임 프로젝션 행(`ag-{slug}-{agent}`): bot_id 에서 파생한 slug 로
+--       public.tenants 를 조인해 tenant_id 를 채우고 scope='tenant-local'.
+--       slug 에 하이픈이 들어갈 수 있으므로(jeongmin-cafe) 첫 하이픈 split 이 아니라
+--       실제 tenants.slug 에 대해 `bot_id LIKE 'ag-'||slug||'-%'` 매칭한다(가장 긴 slug 우선).
+--   (2) 내부 런타임 행(나머지 — 7봇/시스템): team-semicolon 테넌트에 귀속, scope='tenant-local'.
+--
+-- 가드: team-semicolon 테넌트가 없으면 전체 백필을 skip(부분 적용 방지).
+--   → 러너가 파일을 BEGIN/COMMIT 으로 감싸고 `semicolony.` 를 retarget 한다. public.* 는 그대로.
+--
+-- 검증(적용 후 수동 실행):
+--   SELECT COUNT(*)::int AS missing FROM semicolony.bot_status
+--     WHERE scope = 'tenant-local' AND tenant_id IS NULL;   -- 기대: 0
+--   (bot_sessions / bot_commitments / action_items / agent_personas /
+--    agent_persona_revisions 도 동일 쿼리로 missing=0 확인)
+
+DO $$
+DECLARE
+  team_tid uuid;
+BEGIN
+  SELECT id INTO team_tid FROM public.tenants WHERE slug = 'team-semicolon';
+  IF team_tid IS NULL THEN
+    RAISE NOTICE 'team-semicolon tenant not found — skipping runtime backfill (137)';
+    RETURN;
+  END IF;
+
+  -- ── (1) 고객 프로젝션 행: bot_id 의 slug 로 tenant 매칭 ──────────
+  -- 가장 긴 매칭 slug 를 택해 접두 충돌(예: 'cafe' vs 'cafe-2')을 방지.
+  UPDATE semicolony.bot_status b
+     SET tenant_id = m.tenant_id, scope = 'tenant-local'
+    FROM (
+      SELECT b2.bot_id, t.id AS tenant_id
+        FROM semicolony.bot_status b2
+        JOIN LATERAL (
+          SELECT t.id
+            FROM public.tenants t
+           WHERE b2.bot_id LIKE 'ag-' || t.slug || '-%'
+           ORDER BY length(t.slug) DESC
+           LIMIT 1
+        ) t ON true
+    ) m
+   WHERE b.bot_id = m.bot_id
+     AND b.tenant_id IS NULL;
+
+  UPDATE semicolony.agent_personas p
+     SET tenant_id = m.tenant_id, scope = 'tenant-local'
+    FROM (
+      SELECT p2.slug, t.id AS tenant_id
+        FROM semicolony.agent_personas p2
+        JOIN LATERAL (
+          SELECT t.id
+            FROM public.tenants t
+           WHERE p2.slug LIKE 'ag-' || t.slug || '-%'
+           ORDER BY length(t.slug) DESC
+           LIMIT 1
+        ) t ON true
+    ) m
+   WHERE p.slug = m.slug
+     AND p.tenant_id IS NULL;
+
+  UPDATE semicolony.bot_commitments c
+     SET tenant_id = m.tenant_id, scope = 'tenant-local'
+    FROM (
+      SELECT c2.id, t.id AS tenant_id
+        FROM semicolony.bot_commitments c2
+        JOIN LATERAL (
+          SELECT t.id
+            FROM public.tenants t
+           WHERE c2.bot_id LIKE 'ag-' || t.slug || '-%'
+           ORDER BY length(t.slug) DESC
+           LIMIT 1
+        ) t ON true
+    ) m
+   WHERE c.id = m.id
+     AND c.tenant_id IS NULL;
+
+  UPDATE semicolony.bot_sessions s
+     SET tenant_id = m.tenant_id, scope = 'tenant-local'
+    FROM (
+      SELECT s2.bot_id, s2.session_key, t.id AS tenant_id
+        FROM semicolony.bot_sessions s2
+        JOIN LATERAL (
+          SELECT t.id
+            FROM public.tenants t
+           WHERE s2.bot_id LIKE 'ag-' || t.slug || '-%'
+           ORDER BY length(t.slug) DESC
+           LIMIT 1
+        ) t ON true
+    ) m
+   WHERE s.bot_id = m.bot_id AND s.session_key = m.session_key
+     AND s.tenant_id IS NULL;
+
+  -- agent_persona_revisions: 부모 persona 의 tenant 를 상속(파생 안정성).
+  UPDATE semicolony.agent_persona_revisions r
+     SET tenant_id = p.tenant_id, scope = 'tenant-local'
+    FROM semicolony.agent_personas p
+   WHERE r.slug = p.slug
+     AND p.tenant_id IS NOT NULL
+     AND r.tenant_id IS NULL;
+
+  -- ── (2) 내부 행: 나머지(7봇/시스템) → team-semicolon ───────────
+  UPDATE semicolony.bot_status
+     SET tenant_id = team_tid, scope = 'tenant-local'
+   WHERE tenant_id IS NULL;
+
+  UPDATE semicolony.bot_sessions
+     SET tenant_id = team_tid, scope = 'tenant-local'
+   WHERE tenant_id IS NULL;
+
+  UPDATE semicolony.bot_commitments
+     SET tenant_id = team_tid, scope = 'tenant-local'
+   WHERE tenant_id IS NULL;
+
+  UPDATE semicolony.action_items
+     SET tenant_id = team_tid, scope = 'tenant-local'
+   WHERE tenant_id IS NULL;
+
+  UPDATE semicolony.agent_personas
+     SET tenant_id = team_tid, scope = 'tenant-local'
+   WHERE tenant_id IS NULL;
+
+  UPDATE semicolony.agent_persona_revisions
+     SET tenant_id = team_tid, scope = 'tenant-local'
+   WHERE tenant_id IS NULL;
+END $$;

package/migrations/138_runtime_constraints_not_valid.sql

@@ -0,0 +1,56 @@
+-- @transaction: off
+-- 138_runtime_constraints_not_valid.sql
+-- 백필(137) 완료 후 scope/tenant_id 무결성 CHECK 를 안전하게 고정.
+--
+-- 결정: semicolony/decision/rls-trusted-service-guc-boundary-2026-06-19.
+-- 선행: 136(컬럼), 137(백필).
+--
+-- 전략(긴 락 회피):
+--   - ADD CONSTRAINT ... NOT VALID  → 기존 행 풀스캔 검증 없이 즉시 등록(짧은 락).
+--   - VALIDATE CONSTRAINT           → SHARE UPDATE EXCLUSIVE(쓰기 허용)로 기존 행 검증.
+--   두 단계를 분리하면 라이브 DB 에서 긴 ACCESS EXCLUSIVE 락 없이 제약을 활성화할 수 있다.
+--
+-- @transaction: off 이유:
+--   - VALIDATE CONSTRAINT 은 큰 통합 트랜잭션 밖에서 실행되어야 락 보유 시간을 최소화한다.
+--   - 러너가 이 지시자를 보면 파일을 BEGIN/COMMIT 으로 감싸지 않는다(각 문이 자기 트랜잭션).
+--   - `semicolony.` 는 러너가 활성 스키마로 retarget 한다(`@schema-retarget: off` 아님).
+--
+-- 멱등: 제약 존재 여부를 pg_constraint 로 가드. 재실행해도 중복 추가/검증 안 함.
+
+DO $$
+DECLARE
+  active_schema text := coalesce(nullif(current_setting('app.runtime_schema', true), ''), 'semicolony');
+  tbl text;
+  tables text[] := ARRAY[
+    'bot_status', 'bot_sessions', 'bot_commitments', 'action_items',
+    'agent_personas', 'agent_persona_revisions'
+  ];
+  cname text;
+BEGIN
+  FOREACH tbl IN ARRAY tables LOOP
+    cname := tbl || '_scope_tenant_chk';
+    IF to_regclass(format('%I.%I', active_schema, tbl)) IS NULL THEN
+      CONTINUE;
+    END IF;
+    -- 1) NOT VALID 등록(없을 때만)
+    IF NOT EXISTS (
+      SELECT 1 FROM pg_constraint
+       WHERE conname = cname
+         AND conrelid = format('%I.%I', active_schema, tbl)::regclass
+    ) THEN
+      EXECUTE format(
+        'ALTER TABLE %I.%I ADD CONSTRAINT %I CHECK (scope = ''platform-global'' OR tenant_id IS NOT NULL) NOT VALID',
+        active_schema, tbl, cname
+      );
+    END IF;
+    -- 2) VALIDATE(아직 미검증일 때만)
+    IF EXISTS (
+      SELECT 1 FROM pg_constraint
+       WHERE conname = cname
+         AND conrelid = format('%I.%I', active_schema, tbl)::regclass
+         AND convalidated = false
+    ) THEN
+      EXECUTE format('ALTER TABLE %I.%I VALIDATE CONSTRAINT %I', active_schema, tbl, cname);
+    END IF;
+  END LOOP;
+END $$;

package/migrations/139_tenant_vms.sql

@@ -0,0 +1,31 @@
+-- 139_tenant_vms.sql
+-- VM-per-tenant 런타임 샌드박스의 SoT. 중앙 sc-control / Proxmox hook worker 만 기록한다.
+-- 결정: semicolony/decision/vm-provisioning-proxmox-api-token-bootstrap-secret-2026-06-19
+-- 선례: 129_kb_multitenant_gateway.sql (public.tenants FK + per-tenant 격리),
+--       gateway_credentials (자격증명 vault).
+--
+-- 러너(db.ts)가 파일 전체를 BEGIN/COMMIT 으로 감싸고 `semicolony.` 한정자만 활성 스키마로 retarget 한다.
+--   → 여기엔 트랜잭션 구문을 넣지 않는다. 이 테이블들은 appdb 공용 자원이므로 `public.` 스키마
+--      (테넌트/슬롯/잡)에 둔다 — retarget 대상이 아니라 flip 후에도 동일 위치를 유지한다.
+
+-- ============================================================
+-- public.tenant_vms — 테넌트별 프로비저닝된 VM 레코드 (1 tenant × N vm 가능)
+-- ============================================================
+CREATE TABLE IF NOT EXISTS public.tenant_vms (
+  id                    UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id             UUID NOT NULL REFERENCES public.tenants(id) ON DELETE CASCADE,
+  vmid                  INT UNIQUE,                       -- Proxmox VMID (중앙 할당, 캘러 공급 금지)
+  host_node             TEXT,                             -- Proxmox 노드명 (예: hermes)
+  ip                    TEXT,                             -- VM 내부 IP
+  status                TEXT
+    CHECK (status IN ('provisioning', 'active', 'suspended', 'destroyed')),
+  template_version      TEXT,                             -- 클론 소스 템플릿 버전 (예: v1)
+  slot_id               UUID,                             -- public.fleet_slots(id) — 140 에서 정의
+  gateway_credential_id UUID,                             -- semicolony.gateway_credentials(id) — KB bearer
+  cloudinit_sha256      TEXT,                             -- 주입된 cloud-init 페이로드 무결성 해시
+  last_heartbeat_at     TIMESTAMPTZ,                      -- runtime-control 하트비트 수신 시각
+  created_at            TIMESTAMPTZ DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_tenant_vms_tenant ON public.tenant_vms (tenant_id);
+CREATE INDEX IF NOT EXISTS idx_tenant_vms_status ON public.tenant_vms (status);

package/migrations/140_fleet_slots.sql

@@ -0,0 +1,23 @@
+-- 140_fleet_slots.sql
+-- 워크스테이션(Proxmox) 용량 슬롯. 중앙 sc-control 이 FOR UPDATE SKIP LOCKED 로 원자 할당한다.
+-- 두 워커가 같은 슬롯을 동시에 점유하지 못하게 하는 단일 SoT.
+-- 결정: semicolony/decision/vm-provisioning-proxmox-api-token-bootstrap-secret-2026-06-19
+--
+-- 러너가 파일을 BEGIN/COMMIT 으로 감싼다. appdb 공용 자원이므로 `public.` 스키마 (retarget 비대상).
+
+-- ============================================================
+-- public.fleet_slots — host_node × slot_index 단위의 용량 슬롯
+-- ============================================================
+CREATE TABLE IF NOT EXISTS public.fleet_slots (
+  id         UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  host_node  TEXT,                                        -- Proxmox 노드명 (예: hermes)
+  slot_index INT,                                         -- 노드 내 슬롯 번호
+  status     TEXT NOT NULL DEFAULT 'free'
+    CHECK (status IN ('free', 'reserved', 'occupied')),
+  cpu_limit  INT,                                         -- 슬롯 vCPU 상한
+  ram_mb     INT,                                         -- 슬롯 RAM (MB)
+  disk_gb    INT,                                         -- 슬롯 디스크 (GB)
+  UNIQUE (host_node, slot_index)
+);
+
+CREATE INDEX IF NOT EXISTS idx_fleet_slots_status ON public.fleet_slots (status);

package/migrations/141_provisioning_jobs.sql

@@ -0,0 +1,29 @@
+-- 141_provisioning_jobs.sql
+-- 타입드 프로비저닝 잡 큐 (producer = sc-control, consumer = Proxmox hook worker).
+-- payload 는 검증된 타입드 객체만 (셸 조각·임의 명령·캘러 공급 vmid 금지 — sc-control.ts 에서 가드).
+-- claim 은 FOR UPDATE SKIP LOCKED 로 정확히 한 워커만 점유.
+-- 결정: semicolony/decision/vm-provisioning-proxmox-api-token-bootstrap-secret-2026-06-19
+-- 선례: cron.ts cronTick (FOR UPDATE SKIP LOCKED 원자 claim).
+--
+-- 러너가 파일을 BEGIN/COMMIT 으로 감싼다. appdb 공용 큐이므로 `public.` 스키마 (retarget 비대상).
+
+-- ============================================================
+-- public.provisioning_jobs — clone/destroy/suspend/resume/resync 잡 큐
+-- ============================================================
+CREATE TABLE IF NOT EXISTS public.provisioning_jobs (
+  id               UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  kind             TEXT
+    CHECK (kind IN ('clone', 'destroy', 'suspend', 'resume', 'resync')),
+  tenant_slug      TEXT,                                  -- 대상 테넌트 슬러그 (vmid 는 payload 에 없음)
+  payload          JSONB,                                 -- 타입드 ProvisioningPayload 만
+  status           TEXT NOT NULL DEFAULT 'queued'
+    CHECK (status IN ('queued', 'claimed', 'running', 'done', 'failed')),
+  attempts         INT NOT NULL DEFAULT 0,
+  lease_expires_at TIMESTAMPTZ,                           -- claim 리스 만료 (stale claim 재할당용)
+  claimed_by       TEXT,                                  -- worker id
+  created_at       TIMESTAMPTZ DEFAULT now(),
+  updated_at       TIMESTAMPTZ DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_provisioning_jobs_status_created
+  ON public.provisioning_jobs (status, created_at);

package/migrations/142_rls_enable_semicolony.sql

@@ -0,0 +1,129 @@
+-- @schema-retarget: off
+-- 142_rls_enable_semicolony.sql
+-- RLS 활성화(마지막 비가역 게이트) — semicolony.* 서비스/멀티테넌트 테이블.
+--
+-- 결정: semicolony/decision/rls-trusted-service-guc-boundary-2026-06-19.
+-- 선행: 135(역할+헬퍼), 136(컬럼), 137(백필), 138(무결성 CHECK).
+--   *** 반드시 서비스 경로가 sc_app 로 통과하는 것을 검증한 뒤에만 적용한다(롤백 드릴 준비). ***
+--
+-- 정책 모델(fail-closed):
+--   USING      = public.is_provider() OR scope='platform-global' OR tenant_id = public.current_tenant_id()
+--   WITH CHECK = public.is_provider() OR tenant_id = public.current_tenant_id()
+--   → 읽기: provider / 플랫폼-글로벌 / 자기 테넌트만. GUC 미설정 시 current_tenant_id()=NULL →
+--     tenant_id = NULL 비교는 NULL(=거짓) → 격리(fail-closed).
+--   → 쓰기: provider 또는 자기 테넌트 행만(platform-global 신규 쓰기는 provider 만).
+--
+-- FORCE ROW LEVEL SECURITY: 테이블 소유자에게도 RLS 적용 → 소유자 연결로도 누수 없음.
+--
+-- @schema-retarget: off 이유: public.is_provider()/current_tenant_id() 와 role 참조는
+--   절대 retarget 되면 안 된다(GUC 계약). 테이블도 semicolony.* 리터럴로 고정한다(이 게이트는
+--   현행 semicolony 스키마 대상; flip 시 별도 게이트로 재평가).
+--
+-- 멱등: ENABLE/FORCE 는 반복 안전. 정책은 DROP POLICY IF EXISTS → CREATE 로 재적용.
+
+-- ============================================================
+-- bot_status
+-- ============================================================
+ALTER TABLE semicolony.bot_status ENABLE ROW LEVEL SECURITY;
+ALTER TABLE semicolony.bot_status FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON semicolony.bot_status;
+CREATE POLICY tenant_isolation ON semicolony.bot_status
+  USING (public.is_provider() OR scope = 'platform-global' OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- bot_sessions
+-- ============================================================
+ALTER TABLE semicolony.bot_sessions ENABLE ROW LEVEL SECURITY;
+ALTER TABLE semicolony.bot_sessions FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON semicolony.bot_sessions;
+CREATE POLICY tenant_isolation ON semicolony.bot_sessions
+  USING (public.is_provider() OR scope = 'platform-global' OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- bot_commitments
+-- ============================================================
+ALTER TABLE semicolony.bot_commitments ENABLE ROW LEVEL SECURITY;
+ALTER TABLE semicolony.bot_commitments FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON semicolony.bot_commitments;
+CREATE POLICY tenant_isolation ON semicolony.bot_commitments
+  USING (public.is_provider() OR scope = 'platform-global' OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- action_items
+-- ============================================================
+ALTER TABLE semicolony.action_items ENABLE ROW LEVEL SECURITY;
+ALTER TABLE semicolony.action_items FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON semicolony.action_items;
+CREATE POLICY tenant_isolation ON semicolony.action_items
+  USING (public.is_provider() OR scope = 'platform-global' OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- agent_personas
+-- ============================================================
+ALTER TABLE semicolony.agent_personas ENABLE ROW LEVEL SECURITY;
+ALTER TABLE semicolony.agent_personas FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON semicolony.agent_personas;
+CREATE POLICY tenant_isolation ON semicolony.agent_personas
+  USING (public.is_provider() OR scope = 'platform-global' OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- agent_persona_revisions
+-- ============================================================
+ALTER TABLE semicolony.agent_persona_revisions ENABLE ROW LEVEL SECURITY;
+ALTER TABLE semicolony.agent_persona_revisions FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON semicolony.agent_persona_revisions;
+CREATE POLICY tenant_isolation ON semicolony.agent_persona_revisions
+  USING (public.is_provider() OR scope = 'platform-global' OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- knowledge_base
+--   READ: provider / 자기 테넌트 / 플랫폼-글로벌이되 게이트웨이 allowlist(metadata->>'tenant_visible'='true')
+--         에 한해 테넌트에 노출(게이트웨이 노출 계약과 일치).
+--   WRITE: provider 또는 자기 테넌트.
+-- ============================================================
+ALTER TABLE semicolony.knowledge_base ENABLE ROW LEVEL SECURITY;
+ALTER TABLE semicolony.knowledge_base FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON semicolony.knowledge_base;
+CREATE POLICY tenant_isolation ON semicolony.knowledge_base
+  USING (
+    public.is_provider()
+    OR tenant_id = public.current_tenant_id()
+    OR (scope = 'platform-global' AND metadata->>'tenant_visible' = 'true')
+  )
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- entity_relations
+-- ============================================================
+ALTER TABLE semicolony.entity_relations ENABLE ROW LEVEL SECURITY;
+ALTER TABLE semicolony.entity_relations FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON semicolony.entity_relations;
+CREATE POLICY tenant_isolation ON semicolony.entity_relations
+  USING (public.is_provider() OR scope = 'platform-global' OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- kb_claims (scope DEFAULT 'tenant-local')
+-- ============================================================
+ALTER TABLE semicolony.kb_claims ENABLE ROW LEVEL SECURITY;
+ALTER TABLE semicolony.kb_claims FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON semicolony.kb_claims;
+CREATE POLICY tenant_isolation ON semicolony.kb_claims
+  USING (public.is_provider() OR scope = 'platform-global' OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- concierge_requests (tenant_id NOT NULL, scope 컬럼 없음 → 순수 tenant 격리)
+-- ============================================================
+ALTER TABLE semicolony.concierge_requests ENABLE ROW LEVEL SECURITY;
+ALTER TABLE semicolony.concierge_requests FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON semicolony.concierge_requests;
+CREATE POLICY tenant_isolation ON semicolony.concierge_requests
+  USING (public.is_provider() OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());

package/migrations/143_rls_enable_public.sql

@@ -0,0 +1,54 @@
+-- @schema-retarget: off
+-- 143_rls_enable_public.sql
+-- RLS 활성화 — public.* 멀티테넌트 facade 테이블.
+--
+-- 결정: semicolony/decision/rls-trusted-service-guc-boundary-2026-06-19.
+-- 선행: 135(역할+헬퍼). 010_customer_tables(tenants/agent_installs/agent_activity).
+--
+-- 정책 모델:
+--   - tenants:        자기 테넌트(id = current_tenant_id()) 또는 provider 만 조회.
+--   - agent_installs: tenant_id = current_tenant_id() 또는 provider.
+--   - agent_activity: tenant_id = current_tenant_id() 또는 provider.
+--   - agent_listings: 플랫폼 카탈로그(공용) → RLS 미적용(UNRESTRICTED). 정책/ENABLE 없음.
+--
+--   GUC 미설정(테넌트 미인증) 시 current_tenant_id()=NULL → 비교가 NULL(=거짓) → fail-closed.
+--
+-- FORCE ROW LEVEL SECURITY: 소유자 연결에도 적용. trusted 서비스는 provider 연결/GUC 로 우회.
+--
+-- @schema-retarget: off: public.* 와 헬퍼 함수는 retarget 대상이 아니다(스키마 flip 무관).
+-- 멱등: ENABLE/FORCE 반복 안전. 정책은 DROP IF EXISTS → CREATE.
+
+-- ============================================================
+-- public.tenants — 멤버(자기 테넌트) / provider 가시
+-- ============================================================
+ALTER TABLE public.tenants ENABLE ROW LEVEL SECURITY;
+ALTER TABLE public.tenants FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON public.tenants;
+CREATE POLICY tenant_isolation ON public.tenants
+  USING (public.is_provider() OR id = public.current_tenant_id())
+  WITH CHECK (public.is_provider());
+
+-- ============================================================
+-- public.agent_installs
+-- ============================================================
+ALTER TABLE public.agent_installs ENABLE ROW LEVEL SECURITY;
+ALTER TABLE public.agent_installs FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON public.agent_installs;
+CREATE POLICY tenant_isolation ON public.agent_installs
+  USING (public.is_provider() OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- public.agent_activity
+-- ============================================================
+ALTER TABLE public.agent_activity ENABLE ROW LEVEL SECURITY;
+ALTER TABLE public.agent_activity FORCE ROW LEVEL SECURITY;
+DROP POLICY IF EXISTS tenant_isolation ON public.agent_activity;
+CREATE POLICY tenant_isolation ON public.agent_activity
+  USING (public.is_provider() OR tenant_id = public.current_tenant_id())
+  WITH CHECK (public.is_provider() OR tenant_id = public.current_tenant_id());
+
+-- ============================================================
+-- public.agent_listings — 플랫폼 공용 카탈로그: RLS 미적용(UNRESTRICTED).
+--   의도적으로 ENABLE ROW LEVEL SECURITY 를 호출하지 않는다(모든 테넌트가 라이브러리 열람).
+-- ============================================================

package/migrations/144_worker_device_registry.sql

@@ -0,0 +1,211 @@
+-- 144_worker_device_registry.sql
+-- SEMO Ops worker device registry.
+--
+-- Purpose:
+--   - Store operator-kit/local worker environments in DB so Semi can answer setup status.
+--   - Keep "local hive" as an exception record only for worker-owned always-on workloads.
+--
+-- Safety:
+--   - Additive only: new tables, indexes, triggers, and a read view.
+--   - No token plaintext. gateway_credential_id references the hashed credential vault only.
+--   - Runner wraps this file in BEGIN/COMMIT; do not add transaction statements here.
+
+CREATE TABLE IF NOT EXISTS semicolony.workspace_profiles (
+  profile_id         TEXT PRIMARY KEY,
+  version            TEXT NOT NULL,
+  status             TEXT NOT NULL DEFAULT 'active'
+    CHECK (status IN ('draft', 'active', 'deprecated', 'retired')),
+  kb_gateway_url     TEXT,
+  repo_provider      TEXT,
+  repo_remotes       JSONB NOT NULL DEFAULT '{}'::jsonb,
+  default_workspace_root TEXT,
+  tool_adapters      TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+  guidance_template_version TEXT,
+  required_smokes    JSONB NOT NULL DEFAULT '[]'::jsonb,
+  metadata           JSONB NOT NULL DEFAULT '{}'::jsonb,
+  created_at         TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  updated_at         TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+COMMENT ON TABLE semicolony.workspace_profiles IS
+  'SEMO Ops worker setup profile versions. Local worker files are snapshots of this DB/KB source.';
+
+CREATE TABLE IF NOT EXISTS semicolony.worker_devices (
+  device_id          TEXT PRIMARY KEY,
+  worker_id          TEXT NOT NULL,
+  display_name       TEXT,
+  hostname           TEXT,
+  os                 TEXT,
+  shell              TEXT,
+  workspace_root     TEXT,
+  installed_profile_id TEXT NOT NULL DEFAULT 'semo-ops-worker',
+  installed_profile_version TEXT,
+  tool_adapters_enabled TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+  kb_access_mode     TEXT NOT NULL DEFAULT 'worker-gateway'
+    CHECK (kb_access_mode IN ('worker-gateway', 'direct-db-bootstrap', 'kb-portable', 'none')),
+  gateway_credential_id UUID REFERENCES semicolony.gateway_credentials(id) ON DELETE SET NULL,
+  last_seen_at       TIMESTAMPTZ,
+  last_doctor_status TEXT NOT NULL DEFAULT 'unknown'
+    CHECK (last_doctor_status IN ('unknown', 'pending', 'pass', 'warn', 'fail')),
+  last_doctor_summary JSONB NOT NULL DEFAULT '{}'::jsonb,
+  setup_progress     JSONB NOT NULL DEFAULT '{}'::jsonb,
+  status             TEXT NOT NULL DEFAULT 'pending-auth'
+    CHECK (status IN ('pending-auth', 'pending-setup', 'active', 'blocked', 'stale', 'revoked', 'retired')),
+  metadata           JSONB NOT NULL DEFAULT '{}'::jsonb,
+  created_at         TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  updated_at         TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+COMMENT ON TABLE semicolony.worker_devices IS
+  'Registered SEMO Ops worker devices. One person may own multiple devices.';
+COMMENT ON COLUMN semicolony.worker_devices.setup_progress IS
+  'Per-step setup status map, e.g. {"env_file":"pass","gitlab":"pending","kb_read":"fail"}.';
+COMMENT ON COLUMN semicolony.worker_devices.gateway_credential_id IS
+  'Reference to hashed gateway credential row. Plaintext worker tokens must never be stored here.';
+
+CREATE INDEX IF NOT EXISTS idx_worker_devices_worker
+  ON semicolony.worker_devices (worker_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_worker_devices_status_seen
+  ON semicolony.worker_devices (status, last_seen_at DESC NULLS LAST);
+
+CREATE INDEX IF NOT EXISTS idx_worker_devices_profile
+  ON semicolony.worker_devices (installed_profile_id, installed_profile_version);
+
+CREATE TABLE IF NOT EXISTS semicolony.local_hives (
+  local_hive_id      TEXT PRIMARY KEY,
+  device_id          TEXT NOT NULL REFERENCES semicolony.worker_devices(device_id) ON DELETE CASCADE,
+  worker_id          TEXT NOT NULL,
+  workload_type      TEXT NOT NULL
+    CHECK (workload_type IN ('hive-bridge', 'hive-agent', 'hive-cron', 'hive-link', 'hive-watch', 'other')),
+  reason             TEXT NOT NULL,
+  cannot_move_reason TEXT,
+  migration_target   TEXT NOT NULL,
+  expiry_at          TIMESTAMPTZ,
+  health_check       JSONB NOT NULL DEFAULT '{}'::jsonb,
+  last_seen_at       TIMESTAMPTZ,
+  status             TEXT NOT NULL DEFAULT 'approved'
+    CHECK (status IN ('approved', 'expiring', 'migrated', 'retired')),
+  metadata           JSONB NOT NULL DEFAULT '{}'::jsonb,
+  created_at         TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  updated_at         TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+COMMENT ON TABLE semicolony.local_hives IS
+  'Exception registry for local always-on worker workloads that cannot yet move to workstation/service hive.';
+
+CREATE INDEX IF NOT EXISTS idx_local_hives_device
+  ON semicolony.local_hives (device_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_local_hives_worker
+  ON semicolony.local_hives (worker_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_local_hives_expiry
+  ON semicolony.local_hives (expiry_at)
+  WHERE status IN ('approved', 'expiring') AND expiry_at IS NOT NULL;
+
+CREATE OR REPLACE FUNCTION semicolony.trg_worker_registry_updated()
+RETURNS TRIGGER AS $$
+BEGIN
+  NEW.updated_at = NOW();
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+DROP TRIGGER IF EXISTS trg_workspace_profiles_updated ON semicolony.workspace_profiles;
+CREATE TRIGGER trg_workspace_profiles_updated
+  BEFORE UPDATE ON semicolony.workspace_profiles
+  FOR EACH ROW EXECUTE FUNCTION semicolony.trg_worker_registry_updated();
+
+DROP TRIGGER IF EXISTS trg_worker_devices_updated ON semicolony.worker_devices;
+CREATE TRIGGER trg_worker_devices_updated
+  BEFORE UPDATE ON semicolony.worker_devices
+  FOR EACH ROW EXECUTE FUNCTION semicolony.trg_worker_registry_updated();
+
+DROP TRIGGER IF EXISTS trg_local_hives_updated ON semicolony.local_hives;
+CREATE TRIGGER trg_local_hives_updated
+  BEFORE UPDATE ON semicolony.local_hives
+  FOR EACH ROW EXECUTE FUNCTION semicolony.trg_worker_registry_updated();
+
+INSERT INTO semicolony.workspace_profiles (
+  profile_id,
+  version,
+  status,
+  kb_gateway_url,
+  repo_provider,
+  repo_remotes,
+  default_workspace_root,
+  tool_adapters,
+  guidance_template_version,
+  required_smokes,
+  metadata
+)
+VALUES (
+  'semo-ops-worker',
+  '2026-07-09',
+  'active',
+  'https://semicolony.semi-colon.space/kb-gateway',
+  'gitlab',
+  '{"semicolony":"https://gitlab.semi-colon.space/semicolon-devteam/semicolony.git"}'::jsonb,
+  '~/Desktop/Sources/semicolon',
+  ARRAY['codex', 'claude-code'],
+  '2026-07-09',
+  '[
+    {"id":"worker:gateway-env","label":"worker KB gateway env"},
+    {"id":"worker:env-file","label":"worker env file"},
+    {"id":"worker:mcp-config","label":"KB MCP config"},
+    {"id":"worker:guidance:claude","label":"Claude worker guidance"},
+    {"id":"worker:guidance:codex","label":"Codex worker guidance"},
+    {"id":"worker:kb:hive-service","label":"KB read smoke: hive-service"},
+    {"id":"worker:kb:setup-guide","label":"KB read smoke: worker setup guide"},
+    {"id":"worker:gitlab","label":"GitLab access"}
+  ]'::jsonb,
+  '{"scope":"tenant-local","tenant_anchor":"team-semicolon","owner":"SEMO Ops"}'::jsonb
+)
+ON CONFLICT (profile_id) DO UPDATE
+SET version = EXCLUDED.version,
+    status = EXCLUDED.status,
+    kb_gateway_url = EXCLUDED.kb_gateway_url,
+    repo_provider = EXCLUDED.repo_provider,
+    repo_remotes = EXCLUDED.repo_remotes,
+    default_workspace_root = EXCLUDED.default_workspace_root,
+    tool_adapters = EXCLUDED.tool_adapters,
+    guidance_template_version = EXCLUDED.guidance_template_version,
+    required_smokes = EXCLUDED.required_smokes,
+    metadata = semicolony.workspace_profiles.metadata || EXCLUDED.metadata;
+
+CREATE OR REPLACE VIEW semicolony.v_worker_environment_status AS
+SELECT
+  wd.device_id,
+  wd.worker_id,
+  wd.display_name,
+  wd.hostname,
+  wd.os,
+  wd.workspace_root,
+  wd.installed_profile_id,
+  wd.installed_profile_version,
+  wd.tool_adapters_enabled,
+  wd.kb_access_mode,
+  wd.last_seen_at,
+  wd.last_doctor_status,
+  wd.last_doctor_summary,
+  wd.setup_progress,
+  wd.status,
+  wd.updated_at,
+  COALESCE(
+    jsonb_agg(
+      jsonb_build_object(
+        'local_hive_id', lh.local_hive_id,
+        'workload_type', lh.workload_type,
+        'status', lh.status,
+        'migration_target', lh.migration_target,
+        'expiry_at', lh.expiry_at,
+        'last_seen_at', lh.last_seen_at
+      )
+    ) FILTER (WHERE lh.local_hive_id IS NOT NULL),
+    '[]'::jsonb
+  ) AS local_hives
+FROM semicolony.worker_devices wd
+LEFT JOIN semicolony.local_hives lh
+  ON lh.device_id = wd.device_id
+GROUP BY wd.device_id;