@team-semicolon/semicolony-cli 4.18.74 → 4.18.76

package/migrations/182_worker_agent_installation_kind.sql

@@ -0,0 +1,77 @@
+-- 182_worker_agent_installation_kind.sql
+--
+-- Distinguish human-operated worker devices from service-hive Agent runtime
+-- installations without replacing the existing worker_devices compatibility
+-- key or changing any existing Human row identity.
+
+ALTER TABLE semicolony.worker_devices
+  ADD COLUMN IF NOT EXISTS installation_kind TEXT NOT NULL DEFAULT 'human-device';
+
+ALTER TABLE semicolony.worker_devices
+  ADD CONSTRAINT worker_devices_installation_kind_check
+  CHECK (installation_kind IN ('human-device', 'agent-runtime')),
+  ADD CONSTRAINT worker_devices_agent_installation_identity_check
+  CHECK (
+    installation_kind <> 'agent-runtime'
+    OR (
+      device_id = 'hermes-principals@hermes'
+      AND installed_profile_id = 'semo-ops-worker-agent'
+      AND kb_access_mode = 'worker-gateway'
+    )
+  );
+
+CREATE INDEX IF NOT EXISTS idx_worker_devices_installation_kind_profile
+  ON semicolony.worker_devices (installation_kind, installed_profile_id, status);
+
+COMMENT ON COLUMN semicolony.worker_devices.installation_kind IS
+  'human-device for a person-operated Worker; agent-runtime for a service-hive Agent installation.';
+
+CREATE OR REPLACE VIEW semicolony.v_worker_environment_status AS
+SELECT
+  wd.device_id,
+  wd.worker_id,
+  wd.display_name,
+  wd.hostname,
+  wd.os,
+  wd.workspace_root,
+  wd.installed_profile_id,
+  wd.installed_profile_version,
+  wd.tool_adapters_enabled,
+  wd.kb_access_mode,
+  wd.last_seen_at,
+  wd.last_doctor_status,
+  wd.last_doctor_summary,
+  wd.setup_progress,
+  wd.status,
+  wd.updated_at,
+  COALESCE(
+    jsonb_agg(
+      jsonb_build_object(
+        'local_hive_id', lh.local_hive_id,
+        'workload_type', lh.workload_type,
+        'status', lh.status,
+        'migration_target', lh.migration_target,
+        'expiry_at', lh.expiry_at,
+        'last_seen_at', lh.last_seen_at
+      )
+    ) FILTER (WHERE lh.local_hive_id IS NOT NULL),
+    '[]'::jsonb
+  ) AS local_hives,
+  wp.active_release_id,
+  active_release.version AS active_release_version,
+  wd.applied_release_id,
+  wd.applied_release_version,
+  wd.applied_at,
+  wd.installation_kind,
+  wd.device_id AS installation_id
+FROM semicolony.worker_devices wd
+LEFT JOIN semicolony.local_hives lh
+  ON lh.device_id = wd.device_id
+LEFT JOIN semicolony.workspace_profiles wp
+  ON wp.profile_id = wd.installed_profile_id
+LEFT JOIN semicolony.worker_profile_releases active_release
+  ON active_release.release_id = wp.active_release_id
+GROUP BY wd.device_id, wp.active_release_id, active_release.version;
+
+COMMENT ON COLUMN semicolony.v_worker_environment_status.installation_id IS
+  'Runtime-neutral installation identity; backed by device_id for compatibility.';

package/migrations/183_db_authoritative_common_skill_constraints.sql

@@ -0,0 +1,16 @@
+-- Migration 181 made source_repository nullable for DB-native common-skill
+-- releases, but migration 161 also created a separate non-empty CHECK. A
+-- PostgreSQL CHECK containing `IS NOT NULL` rejects the intended NULL even
+-- after the column-level NOT NULL constraint is removed.
+--
+-- The composite skill_releases_provenance_check remains authoritative: it
+-- requires NULL Git provenance for source_kind='db' and non-empty repository
+-- provenance for source_kind='git-legacy'. Hash format checks remain in place;
+-- they naturally accept NULL for DB-native rows and validate legacy values.
+
+ALTER TABLE semicolony.skill_releases
+  DROP CONSTRAINT IF EXISTS skill_releases_source_repository_check;
+
+COMMENT ON CONSTRAINT skill_releases_provenance_check
+  ON semicolony.skill_releases IS
+  'Source-specific provenance contract: DB releases have task/base lineage; legacy releases retain complete Git lineage.';

package/migrations/183_db_native_skill_release_constraints.sql

@@ -0,0 +1,30 @@
+-- 183_db_native_skill_release_constraints.sql
+--
+-- Migration 181 made Git provenance nullable for DB-native authoring, but the
+-- inline checks created by migration 161 still reject NULL before the new
+-- source-kind provenance check can accept it. Replace those legacy checks with
+-- nullable format checks; skill_releases_provenance_check continues to require
+-- all three values for git-legacy rows.
+
+ALTER TABLE semicolony.skill_releases
+  DROP CONSTRAINT IF EXISTS skill_releases_source_repository_check,
+  DROP CONSTRAINT IF EXISTS skill_releases_git_commit_sha_check,
+  DROP CONSTRAINT IF EXISTS skill_releases_git_tree_oid_check;
+
+ALTER TABLE semicolony.skill_releases
+  ADD CONSTRAINT skill_releases_source_repository_format_check
+    CHECK (
+      source_repository IS NULL
+      OR NULLIF(btrim(source_repository), '') IS NOT NULL
+    ),
+  ADD CONSTRAINT skill_releases_git_commit_sha_format_check
+    CHECK (
+      git_commit_sha IS NULL
+      OR git_commit_sha ~ '^[0-9a-f]{40}$'
+    ),
+  ADD CONSTRAINT skill_releases_git_tree_oid_format_check
+    CHECK (
+      git_tree_oid IS NULL
+      OR git_tree_oid ~ '^[0-9a-f]{40}$'
+    );
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@team-semicolon/semicolony-cli",
-  "version": "4.18.74",
+  "version": "4.18.76",
   "description": "SemiColony CLI - AI operations and agent orchestration installer",
   "main": "dist/bundle.js",
   "bin": {