@team-semicolon/semicolony-cli 4.18.72 → 4.18.74

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,46 @@
1
+ -- 182_skill_governance_gateway_runtime_grants.sql
2
+ --
3
+ -- Migration 161 originally created the governed skill tables. Its sc_app
4
+ -- grants were strengthened later, after some environments had already marked
5
+ -- that migration as applied. Re-assert the runtime contract in a new additive
6
+ -- migration so kb-gateway can stage, activate, and project immutable releases
7
+ -- without receiving lease-administration authority.
8
+
9
+ REVOKE ALL ON TABLE
10
+ semicolony.skill_capability_leases,
11
+ semicolony.skill_capability_lease_revocations
12
+ FROM PUBLIC, sc_app;
13
+
14
+ REVOKE ALL ON TABLE
15
+ semicolony.skill_releases,
16
+ semicolony.skill_release_files,
17
+ semicolony.skill_release_activations,
18
+ semicolony.skill_change_proposals,
19
+ semicolony.project_skill_releases,
20
+ semicolony.v_current_skill_capability_leases,
21
+ semicolony.v_current_skill_release_activations
22
+ FROM PUBLIC, sc_app;
23
+
24
+ GRANT SELECT, INSERT ON TABLE
25
+ semicolony.skill_releases,
26
+ semicolony.skill_release_files,
27
+ semicolony.skill_release_activations
28
+ TO sc_app;
29
+
30
+ GRANT INSERT ON TABLE
31
+ semicolony.skill_change_proposals,
32
+ semicolony.project_skill_releases
33
+ TO sc_app;
34
+
35
+ GRANT SELECT (proposal_id, recorded_at) ON TABLE
36
+ semicolony.skill_change_proposals
37
+ TO sc_app;
38
+
39
+ GRANT SELECT (project_release_id, recorded_at) ON TABLE
40
+ semicolony.project_skill_releases
41
+ TO sc_app;
42
+
43
+ GRANT SELECT ON TABLE
44
+ semicolony.v_current_skill_capability_leases,
45
+ semicolony.v_current_skill_release_activations
46
+ TO sc_app;
@@ -5,20 +5,22 @@ SEMICOLONY CLI의 PostgreSQL 마이그레이션 파일들.
5
5
 
6
6
  ## 마이그레이션 목록
7
7
 
8
- | 파일 | 설명 |
9
- |------|------|
10
- | `001_initial.sql` | 초기 스키마 (skill/agent/command_definitions, bot_status 등) |
11
- | `002_add_indexes.sql` | 조회 성능 인덱스 추가 |
12
- | `003_add_fk.sql` | FK 제약조건 추가 |
13
- | `004_session_count_trigger.sql` | 봇 세션 카운트 트리거 |
14
- | `005_bot_workspace_audits.sql` | Bot workspace 감사 테이블 |
15
- | `006_bot_kb_subscriptions.sql` | 봇별 KB 구독 테이블 |
16
- | `007_flatten_skill_names.sql` | Flat skill naming 마이그레이션 |
17
- | `165_skill_release_retirements.sql` | 거버넌스 스킬 은퇴 프리미티브 (append-only 기록 + 뷰) |
18
- | `166_lease_operations_retire.sql` | `skill_capability_leases` profile→operations CHECK 재생성: operate 프로필에 `skills.release.retire` 추가 |
19
- | `169_worker_profile_releases.sql` | Immutable SEMO Ops worker profile releases and device rollout state |
20
- | `170_worker_release_credential_scopes.sql` | Worker credential owner 함수의 허용 범위에 release read/report scope 추가 |
21
- | `174_worker_fleet_board_grants.sql` | 플릿 상황판 전용 롤 `sc_fleet_board` + 오퍼레이터 액션 감사 테이블 |
8
+ | 파일 | 설명 |
9
+ | ------------------------------------------ | -------------------------------------------------------------------------------------------------------- |
10
+ | `001_initial.sql` | 초기 스키마 (skill/agent/command_definitions, bot_status 등) |
11
+ | `002_add_indexes.sql` | 조회 성능 인덱스 추가 |
12
+ | `003_add_fk.sql` | FK 제약조건 추가 |
13
+ | `004_session_count_trigger.sql` | 봇 세션 카운트 트리거 |
14
+ | `005_bot_workspace_audits.sql` | Bot workspace 감사 테이블 |
15
+ | `006_bot_kb_subscriptions.sql` | 봇별 KB 구독 테이블 |
16
+ | `007_flatten_skill_names.sql` | Flat skill naming 마이그레이션 |
17
+ | `165_skill_release_retirements.sql` | 거버넌스 스킬 은퇴 프리미티브 (append-only 기록 + 뷰) |
18
+ | `166_lease_operations_retire.sql` | `skill_capability_leases` profile→operations CHECK 재생성: operate 프로필에 `skills.release.retire` 추가 |
19
+ | `169_worker_profile_releases.sql` | Immutable SEMO Ops worker profile releases and device rollout state |
20
+ | `170_worker_release_credential_scopes.sql` | Worker credential owner 함수의 허용 범위에 release read/report scope 추가 |
21
+ | `174_worker_fleet_board_grants.sql` | 플릿 상황판 전용 롤 `sc_fleet_board` + 오퍼레이터 액션 감사 테이블 |
22
+ | `178_feedback_capture_capability.sql` | `sc_app` 일반 DML 없이 KB+액션아이템을 원자 기록하는 `record_feedback` capability |
23
+ | `179_worker_feedback_credential_scope.sql` | 워커 자격증명 `feedback:write` 허용 및 활성 디바이스 바인딩에 범위 백필 |
22
24
 
23
25
  ## 007: Flat Skill Naming
24
26
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@team-semicolon/semicolony-cli",
3
- "version": "4.18.72",
3
+ "version": "4.18.74",
4
4
  "description": "SemiColony CLI - AI operations and agent orchestration installer",
5
5
  "main": "dist/bundle.js",
6
6
  "bin": {