@team-semicolon/semicolony-cli 4.18.72 → 4.18.74
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/bundle.js +1126 -1118
- package/migrations/178_feedback_capture_capability.sql +137 -0
- package/migrations/179_worker_feedback_credential_scope.sql +209 -0
- package/migrations/180_worker_dashboard_owner_credentials.sql +264 -0
- package/migrations/181_db_authoritative_common_skills.sql +56 -0
- package/migrations/182_skill_governance_gateway_runtime_grants.sql +46 -0
- package/migrations/README.md +16 -14
- package/package.json +1 -1
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
-- 182_skill_governance_gateway_runtime_grants.sql
|
|
2
|
+
--
|
|
3
|
+
-- Migration 161 originally created the governed skill tables. Its sc_app
|
|
4
|
+
-- grants were strengthened later, after some environments had already marked
|
|
5
|
+
-- that migration as applied. Re-assert the runtime contract in a new additive
|
|
6
|
+
-- migration so kb-gateway can stage, activate, and project immutable releases
|
|
7
|
+
-- without receiving lease-administration authority.
|
|
8
|
+
|
|
9
|
+
REVOKE ALL ON TABLE
|
|
10
|
+
semicolony.skill_capability_leases,
|
|
11
|
+
semicolony.skill_capability_lease_revocations
|
|
12
|
+
FROM PUBLIC, sc_app;
|
|
13
|
+
|
|
14
|
+
REVOKE ALL ON TABLE
|
|
15
|
+
semicolony.skill_releases,
|
|
16
|
+
semicolony.skill_release_files,
|
|
17
|
+
semicolony.skill_release_activations,
|
|
18
|
+
semicolony.skill_change_proposals,
|
|
19
|
+
semicolony.project_skill_releases,
|
|
20
|
+
semicolony.v_current_skill_capability_leases,
|
|
21
|
+
semicolony.v_current_skill_release_activations
|
|
22
|
+
FROM PUBLIC, sc_app;
|
|
23
|
+
|
|
24
|
+
GRANT SELECT, INSERT ON TABLE
|
|
25
|
+
semicolony.skill_releases,
|
|
26
|
+
semicolony.skill_release_files,
|
|
27
|
+
semicolony.skill_release_activations
|
|
28
|
+
TO sc_app;
|
|
29
|
+
|
|
30
|
+
GRANT INSERT ON TABLE
|
|
31
|
+
semicolony.skill_change_proposals,
|
|
32
|
+
semicolony.project_skill_releases
|
|
33
|
+
TO sc_app;
|
|
34
|
+
|
|
35
|
+
GRANT SELECT (proposal_id, recorded_at) ON TABLE
|
|
36
|
+
semicolony.skill_change_proposals
|
|
37
|
+
TO sc_app;
|
|
38
|
+
|
|
39
|
+
GRANT SELECT (project_release_id, recorded_at) ON TABLE
|
|
40
|
+
semicolony.project_skill_releases
|
|
41
|
+
TO sc_app;
|
|
42
|
+
|
|
43
|
+
GRANT SELECT ON TABLE
|
|
44
|
+
semicolony.v_current_skill_capability_leases,
|
|
45
|
+
semicolony.v_current_skill_release_activations
|
|
46
|
+
TO sc_app;
|
package/migrations/README.md
CHANGED
|
@@ -5,20 +5,22 @@ SEMICOLONY CLI의 PostgreSQL 마이그레이션 파일들.
|
|
|
5
5
|
|
|
6
6
|
## 마이그레이션 목록
|
|
7
7
|
|
|
8
|
-
| 파일
|
|
9
|
-
|
|
10
|
-
| `001_initial.sql`
|
|
11
|
-
| `002_add_indexes.sql`
|
|
12
|
-
| `003_add_fk.sql`
|
|
13
|
-
| `004_session_count_trigger.sql`
|
|
14
|
-
| `005_bot_workspace_audits.sql`
|
|
15
|
-
| `006_bot_kb_subscriptions.sql`
|
|
16
|
-
| `007_flatten_skill_names.sql`
|
|
17
|
-
| `165_skill_release_retirements.sql`
|
|
18
|
-
| `166_lease_operations_retire.sql`
|
|
19
|
-
| `169_worker_profile_releases.sql`
|
|
20
|
-
| `170_worker_release_credential_scopes.sql` | Worker credential owner 함수의 허용 범위에 release read/report scope 추가
|
|
21
|
-
| `174_worker_fleet_board_grants.sql`
|
|
8
|
+
| 파일 | 설명 |
|
|
9
|
+
| ------------------------------------------ | -------------------------------------------------------------------------------------------------------- |
|
|
10
|
+
| `001_initial.sql` | 초기 스키마 (skill/agent/command_definitions, bot_status 등) |
|
|
11
|
+
| `002_add_indexes.sql` | 조회 성능 인덱스 추가 |
|
|
12
|
+
| `003_add_fk.sql` | FK 제약조건 추가 |
|
|
13
|
+
| `004_session_count_trigger.sql` | 봇 세션 카운트 트리거 |
|
|
14
|
+
| `005_bot_workspace_audits.sql` | Bot workspace 감사 테이블 |
|
|
15
|
+
| `006_bot_kb_subscriptions.sql` | 봇별 KB 구독 테이블 |
|
|
16
|
+
| `007_flatten_skill_names.sql` | Flat skill naming 마이그레이션 |
|
|
17
|
+
| `165_skill_release_retirements.sql` | 거버넌스 스킬 은퇴 프리미티브 (append-only 기록 + 뷰) |
|
|
18
|
+
| `166_lease_operations_retire.sql` | `skill_capability_leases` profile→operations CHECK 재생성: operate 프로필에 `skills.release.retire` 추가 |
|
|
19
|
+
| `169_worker_profile_releases.sql` | Immutable SEMO Ops worker profile releases and device rollout state |
|
|
20
|
+
| `170_worker_release_credential_scopes.sql` | Worker credential owner 함수의 허용 범위에 release read/report scope 추가 |
|
|
21
|
+
| `174_worker_fleet_board_grants.sql` | 플릿 상황판 전용 롤 `sc_fleet_board` + 오퍼레이터 액션 감사 테이블 |
|
|
22
|
+
| `178_feedback_capture_capability.sql` | `sc_app` 일반 DML 없이 KB+액션아이템을 원자 기록하는 `record_feedback` capability |
|
|
23
|
+
| `179_worker_feedback_credential_scope.sql` | 워커 자격증명 `feedback:write` 허용 및 활성 디바이스 바인딩에 범위 백필 |
|
|
22
24
|
|
|
23
25
|
## 007: Flat Skill Naming
|
|
24
26
|
|