forgebadger 0.1.1 → 0.1.3

package/dist/gateway/src/db/migrations/0105_remove_copilot_grants.sql

@@ -0,0 +1,91 @@
+-- 0105_remove_copilot_grants.sql
+-- 删除 Copilot grant 体系：copilot_grants / copilot_conversation_grants（0069 建）；
+-- platform_action_intents 重建去掉 grant 两列（grant_id 被原表 FK 命名，不能 DROP COLUMN，数据保留）；
+-- channel_routes 重建改为绑定项目 project_id（存量路由引用已删除的 grant，丢弃，需重新配对）。
+-- 路由被整体丢弃，挂在路由上的渠道收件/投递记录随之清除（外键链：
+-- channel_deliveries / channel_message_events → channel_messages → channel_routes），
+-- 否则重建后的空 channel_routes 会让存量 channel_messages 成为悬挂外键，
+-- 启动时的 PRAGMA foreign_key_check 将拒绝启动。
+-- Drizzle executes migrations in a transaction. foreign_keys=OFF has no effect
+-- once that transaction has begun; defer the child references while rebuilding.
+PRAGMA defer_foreign_keys=ON;
+--> statement-breakpoint
+DELETE FROM channel_deliveries;
+--> statement-breakpoint
+DELETE FROM channel_message_events;
+--> statement-breakpoint
+DELETE FROM channel_messages;
+--> statement-breakpoint
+DROP TABLE channel_routes;
+--> statement-breakpoint
+CREATE TABLE channel_routes (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  identity_id TEXT NOT NULL,
+  project_id TEXT NOT NULL,
+  conversation_id TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'active',
+  revision INTEGER NOT NULL DEFAULT 1,
+  created_at INTEGER NOT NULL,
+  FOREIGN KEY(user_id,identity_id) REFERENCES channel_identities(user_id,id) ON DELETE CASCADE,
+  FOREIGN KEY(user_id,project_id) REFERENCES projects(user_id,id) ON DELETE CASCADE,
+  FOREIGN KEY(user_id,conversation_id) REFERENCES copilot_conversations(user_id,id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_channel_route_tenant ON channel_routes(user_id,id);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_channel_route_active ON channel_routes(user_id,identity_id) WHERE status='active';
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_channel_route_conversation ON channel_routes(user_id,conversation_id);
+--> statement-breakpoint
+-- DROP TABLE applies ON DELETE CASCADE to receipts even with deferred foreign
+-- keys. Preserve them explicitly until the replacement intent table exists.
+CREATE TEMP TABLE platform_action_receipts_saved AS SELECT * FROM platform_action_receipts;
+--> statement-breakpoint
+CREATE TABLE platform_action_intents_next (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  actor_user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  authority TEXT NOT NULL,
+  command_id TEXT NOT NULL,
+  input_json TEXT NOT NULL,
+  digest TEXT NOT NULL,
+  resources_json TEXT NOT NULL,
+  policy_version INTEGER NOT NULL,
+  expires_at INTEGER NOT NULL,
+  idempotency_key TEXT NOT NULL,
+  status TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  execution_owner TEXT,
+  execution_lease_expires_at INTEGER,
+  channel_conversation_id TEXT,
+  origin_kind TEXT NOT NULL DEFAULT 'legacy',
+  origin_run_id TEXT,
+  origin_step_id TEXT,
+  UNIQUE(user_id,idempotency_key),
+  UNIQUE(user_id,id)
+);
+--> statement-breakpoint
+INSERT INTO platform_action_intents_next (id,user_id,actor_user_id,authority,command_id,input_json,digest,resources_json,policy_version,expires_at,idempotency_key,status,created_at,execution_owner,execution_lease_expires_at,channel_conversation_id,origin_kind,origin_run_id,origin_step_id)
+SELECT id,user_id,actor_user_id,authority,command_id,input_json,digest,resources_json,policy_version,expires_at,idempotency_key,status,created_at,execution_owner,execution_lease_expires_at,channel_conversation_id,origin_kind,origin_run_id,origin_step_id FROM platform_action_intents;
+--> statement-breakpoint
+DROP TABLE platform_action_intents;
+--> statement-breakpoint
+ALTER TABLE platform_action_intents_next RENAME TO platform_action_intents;
+--> statement-breakpoint
+CREATE INDEX idx_platform_action_execution_lease ON platform_action_intents(user_id,status,execution_lease_expires_at);
+--> statement-breakpoint
+INSERT INTO platform_action_receipts (intent_id,user_id,outcome,result_json,created_at)
+SELECT saved.intent_id,saved.user_id,saved.outcome,saved.result_json,saved.created_at
+FROM platform_action_receipts_saved AS saved
+WHERE NOT EXISTS (SELECT 1 FROM platform_action_receipts AS current WHERE current.intent_id=saved.intent_id);
+--> statement-breakpoint
+DROP TABLE platform_action_receipts_saved;
+--> statement-breakpoint
+-- 最后删 grant 两表：旧 platform_action_intents（含 grant_id FK）已在上方重建移除，
+-- 避免 DROP 父表时被子表外键阻断。
+DROP TABLE copilot_conversation_grants;
+--> statement-breakpoint
+DROP TABLE copilot_grants;
+--> statement-breakpoint
+PRAGMA defer_foreign_keys=OFF;

package/dist/gateway/src/db/migrations/0106_mcp_cli_dispatch_scope.sql

@@ -0,0 +1,3 @@
+ALTER TABLE `mcp_access_tokens` ADD `allowed_root` text;
+--> statement-breakpoint
+ALTER TABLE `mcp_access_tokens` ADD `expires_at` integer;

package/dist/gateway/src/db/migrations/0107_cli_skill_revisions.sql

@@ -0,0 +1,12 @@
+CREATE TABLE `cli_skill_revisions` (
+  `id` text PRIMARY KEY NOT NULL,
+  `user_id` text NOT NULL REFERENCES `users`(`id`) ON DELETE CASCADE,
+  `skill_id` text NOT NULL,
+  `action` text NOT NULL CHECK (`action` IN ('install','update','rollback','legacy')),
+  `snapshot_json` text NOT NULL,
+  `package_hash` text NOT NULL,
+  `created_at` integer NOT NULL,
+  FOREIGN KEY (`skill_id`,`user_id`) REFERENCES `skills`(`id`,`user_id`) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE INDEX `idx_cli_skill_revisions_owner` ON `cli_skill_revisions` (`user_id`,`skill_id`,`created_at`);

package/dist/gateway/src/db/migrations/0108_copilot_run_governance.sql

@@ -0,0 +1,43 @@
+ALTER TABLE copilot_runs ADD COLUMN execution_phase text NOT NULL DEFAULT 'queued';
+--> statement-breakpoint
+ALTER TABLE copilot_runs ADD COLUMN phase_started_at integer;
+--> statement-breakpoint
+ALTER TABLE copilot_runs ADD COLUMN token_budget integer NOT NULL DEFAULT 500000;
+--> statement-breakpoint
+ALTER TABLE copilot_runs ADD COLUMN max_duration_ms integer NOT NULL DEFAULT 1800000;
+--> statement-breakpoint
+UPDATE copilot_runs SET execution_phase = CASE WHEN status = 'awaiting_approval' THEN 'awaiting_approval' WHEN status IN ('completed','stopped','failed','cancelled','indeterminate') THEN 'finished' ELSE 'queued' END;
+--> statement-breakpoint
+CREATE TABLE copilot_model_calls (
+  id text PRIMARY KEY NOT NULL,
+  user_id text NOT NULL,
+  run_id text NOT NULL,
+  kind text NOT NULL,
+  status text NOT NULL DEFAULT 'running',
+  charged_tokens integer NOT NULL,
+  usage_json text,
+  created_at integer NOT NULL,
+  completed_at integer,
+  FOREIGN KEY (user_id, run_id) REFERENCES copilot_runs(user_id, id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE INDEX idx_copilot_model_calls_run ON copilot_model_calls(user_id, run_id);
+--> statement-breakpoint
+CREATE TABLE copilot_followups (
+  id text PRIMARY KEY NOT NULL,
+  user_id text NOT NULL,
+  conversation_id text NOT NULL,
+  request_key text NOT NULL,
+  request_digest text NOT NULL,
+  input_json text NOT NULL,
+  status text NOT NULL DEFAULT 'queued',
+  run_id text,
+  error text,
+  created_at integer NOT NULL,
+  FOREIGN KEY (user_id, conversation_id) REFERENCES copilot_conversations(user_id, id) ON DELETE CASCADE,
+  FOREIGN KEY (user_id, run_id) REFERENCES copilot_runs(user_id, id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_followup_identity ON copilot_followups(user_id, conversation_id, request_key);
+--> statement-breakpoint
+CREATE INDEX idx_copilot_followup_pending ON copilot_followups(user_id, status, created_at);

package/dist/gateway/src/db/migrations/0109_copilot_research_jobs.sql

@@ -0,0 +1,19 @@
+CREATE TABLE copilot_research_jobs (
+  id text PRIMARY KEY NOT NULL,
+  user_id text NOT NULL,
+  origin_run_id text NOT NULL,
+  source_key text NOT NULL,
+  conversation_id text NOT NULL,
+  child_run_id text NOT NULL,
+  report_message_id text,
+  created_at integer NOT NULL,
+  FOREIGN KEY(user_id, origin_run_id) REFERENCES copilot_runs(user_id, id) ON DELETE CASCADE,
+  FOREIGN KEY(user_id, child_run_id) REFERENCES copilot_runs(user_id, id) ON DELETE CASCADE,
+  FOREIGN KEY(user_id, conversation_id) REFERENCES copilot_conversations(user_id, id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_research_source ON copilot_research_jobs(user_id, source_key);
+--> statement-breakpoint
+CREATE INDEX idx_copilot_research_origin ON copilot_research_jobs(user_id, origin_run_id);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_research_child ON copilot_research_jobs(user_id, child_run_id);

package/dist/gateway/src/db/migrations/0110_copilot_tool_artifacts.sql

@@ -0,0 +1,19 @@
+CREATE UNIQUE INDEX idx_copilot_step_identity ON copilot_run_steps(user_id, run_id, id);
+--> statement-breakpoint
+CREATE TABLE copilot_tool_artifacts (
+  step_id text PRIMARY KEY NOT NULL,
+  user_id text NOT NULL,
+  run_id text NOT NULL,
+  conversation_id text NOT NULL,
+  payload_json text NOT NULL,
+  content_bytes integer NOT NULL CHECK(content_bytes >= 0 AND content_bytes <= 2097152),
+  content_sha256 text NOT NULL,
+  created_at integer NOT NULL,
+  expires_at integer NOT NULL,
+  FOREIGN KEY(user_id, run_id, step_id) REFERENCES copilot_run_steps(user_id, run_id, id) ON DELETE CASCADE,
+  FOREIGN KEY(user_id, conversation_id) REFERENCES copilot_conversations(user_id, id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE INDEX idx_copilot_artifact_run ON copilot_tool_artifacts(user_id, run_id);
+--> statement-breakpoint
+CREATE INDEX idx_copilot_artifact_expiry ON copilot_tool_artifacts(user_id, expires_at);

package/dist/gateway/src/db/migrations/0111_copilot_model_metering.sql

@@ -0,0 +1,13 @@
+ALTER TABLE copilot_model_calls ADD COLUMN model_json text;
+--> statement-breakpoint
+ALTER TABLE copilot_model_calls ADD COLUMN pricing_json text;
+--> statement-breakpoint
+ALTER TABLE copilot_model_calls ADD COLUMN cost_nanousd integer;
+--> statement-breakpoint
+CREATE TABLE copilot_token_rates (
+  user_id text NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  model_profile_id text NOT NULL REFERENCES model_profiles(id) ON DELETE CASCADE,
+  rates_json text NOT NULL,
+  updated_at integer NOT NULL,
+  PRIMARY KEY(user_id,model_profile_id)
+);

package/dist/gateway/src/db/migrations/0112_copilot_repair_jobs.sql

@@ -0,0 +1,27 @@
+ALTER TABLE copilot_runs ADD COLUMN repair_revoked_at integer;
+--> statement-breakpoint
+CREATE TABLE copilot_repair_jobs (
+ id text PRIMARY KEY NOT NULL,
+ user_id text NOT NULL,
+ root_task_id text NOT NULL,
+ failed_task_id text NOT NULL,
+ origin_run_id text NOT NULL,
+ child_run_id text NOT NULL,
+ attempt integer NOT NULL CHECK(attempt BETWEEN 1 AND 2),
+ evidence_digest text NOT NULL,
+ submission_step_id text,
+ submitted_task_id text,
+ report_message_id text,
+ created_at integer NOT NULL,
+ FOREIGN KEY(user_id,root_task_id) REFERENCES copilot_development_tasks(user_id,id) ON DELETE CASCADE,
+ FOREIGN KEY(user_id,failed_task_id) REFERENCES copilot_development_tasks(user_id,id) ON DELETE CASCADE,
+ FOREIGN KEY(user_id,origin_run_id) REFERENCES copilot_runs(user_id,id) ON DELETE CASCADE,
+ FOREIGN KEY(user_id,child_run_id) REFERENCES copilot_runs(user_id,id) ON DELETE CASCADE,
+ FOREIGN KEY(user_id,submitted_task_id) REFERENCES copilot_development_tasks(user_id,id)
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_repair_attempt ON copilot_repair_jobs(user_id,root_task_id,attempt);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_repair_failed ON copilot_repair_jobs(user_id,failed_task_id);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_copilot_repair_child ON copilot_repair_jobs(user_id,child_run_id);

package/dist/gateway/src/db/migrations/0113_copilot_memory_search_index.sql

@@ -0,0 +1,19 @@
+CREATE UNIQUE INDEX idx_copilot_memory_tenant_id ON copilot_memory(user_id,id);
+--> statement-breakpoint
+CREATE TABLE copilot_memory_search_index (
+ user_id text NOT NULL,
+ memory_id text NOT NULL,
+ version text NOT NULL,
+ PRIMARY KEY(user_id,memory_id),
+ FOREIGN KEY(user_id,memory_id) REFERENCES copilot_memory(user_id,id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE TRIGGER copilot_memory_search_delete AFTER DELETE ON copilot_memory BEGIN
+ DELETE FROM copilot_memory_fts WHERE user_id=OLD.user_id AND memory_id=OLD.id;
+ DELETE FROM copilot_memory_search_index WHERE user_id=OLD.user_id AND memory_id=OLD.id;
+END;
+--> statement-breakpoint
+CREATE TRIGGER copilot_memory_search_invalidate AFTER UPDATE OF text,scope,project_id,conversation_id ON copilot_memory BEGIN
+ DELETE FROM copilot_memory_fts WHERE user_id=OLD.user_id AND memory_id=OLD.id;
+ DELETE FROM copilot_memory_search_index WHERE user_id=OLD.user_id AND memory_id=OLD.id;
+END;

package/dist/gateway/src/db/migrations/0114_channel_reliability.sql

@@ -0,0 +1,32 @@
+CREATE TABLE channel_route_sessions (
+ user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ route_id TEXT NOT NULL, chat_type TEXT NOT NULL, chat_id TEXT NOT NULL,
+ thread_id TEXT NOT NULL DEFAULT '', conversation_id TEXT NOT NULL,
+ PRIMARY KEY(user_id,route_id,chat_type,chat_id,thread_id),
+ FOREIGN KEY(user_id,route_id) REFERENCES channel_routes(user_id,id) ON DELETE CASCADE,
+ FOREIGN KEY(user_id,conversation_id) REFERENCES copilot_conversations(user_id,id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_channel_session_conversation ON channel_route_sessions(user_id,conversation_id);
+--> statement-breakpoint
+INSERT INTO channel_route_sessions(user_id,route_id,chat_type,chat_id,conversation_id)
+ SELECT r.user_id,r.id,'p2p',i.chat_id,r.conversation_id FROM channel_routes r
+ JOIN channel_identities i ON i.user_id=r.user_id AND i.id=r.identity_id;
+--> statement-breakpoint
+ALTER TABLE channel_messages ADD COLUMN chat_id TEXT;
+--> statement-breakpoint
+DROP INDEX idx_channel_message_provider;
+--> statement-breakpoint
+CREATE UNIQUE INDEX idx_channel_message_provider ON channel_messages(user_id,account_id,chat_id,message_id);
+--> statement-breakpoint
+CREATE TABLE telegram_polling_cursors (
+ user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ account_id TEXT NOT NULL, account_revision INTEGER NOT NULL, next_offset INTEGER NOT NULL,
+ PRIMARY KEY(user_id,account_id,account_revision)
+);
+--> statement-breakpoint
+ALTER TABLE channel_deliveries ADD COLUMN next_attempt_at INTEGER NOT NULL DEFAULT 0;
+--> statement-breakpoint
+ALTER TABLE channel_deliveries ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0;
+--> statement-breakpoint
+ALTER TABLE channel_deliveries ADD COLUMN next_part INTEGER NOT NULL DEFAULT 0;

package/dist/gateway/src/db/migrations/0115_feishu_typing_reactions.sql

@@ -0,0 +1,12 @@
+-- Keep compensation records when a route/conversation is revoked or removed.
+CREATE TABLE feishu_typing_reactions (
+ user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ inbox_id TEXT NOT NULL, account_id TEXT NOT NULL, app_id TEXT NOT NULL,
+ message_id TEXT NOT NULL, state TEXT NOT NULL DEFAULT 'pending', reaction_id TEXT,
+ claim_token TEXT, lease_until INTEGER, attempt_count INTEGER NOT NULL DEFAULT 0,
+ next_attempt_at INTEGER NOT NULL DEFAULT 0, reconcile_until INTEGER NOT NULL DEFAULT 0, created_at INTEGER NOT NULL,
+ PRIMARY KEY(user_id,inbox_id),
+ CONSTRAINT feishu_typing_state CHECK(state IN ('pending','adding','active','uncertain','done'))
+);
+--> statement-breakpoint
+CREATE INDEX idx_feishu_typing_due ON feishu_typing_reactions(user_id,state,next_attempt_at);

package/dist/gateway/src/db/migrations/0116_channel_control_commands.sql

@@ -0,0 +1,6 @@
+ALTER TABLE channel_messages ADD COLUMN conversation_id TEXT REFERENCES copilot_conversations(id);
+--> statement-breakpoint
+UPDATE channel_messages SET conversation_id=(SELECT r.conversation_id FROM copilot_runs r
+ WHERE r.user_id=channel_messages.user_id AND r.id=channel_messages.run_id) WHERE run_id IS NOT NULL;
+--> statement-breakpoint
+CREATE INDEX idx_channel_message_conversation ON channel_messages(user_id,conversation_id,status);

package/dist/gateway/src/db/migrations/0117_channel_session_model.sql

@@ -0,0 +1,2 @@
+-- Retain invalid selections after a model is removed; execution must fail visibly, not fall back.
+ALTER TABLE channel_route_sessions ADD COLUMN model_profile_id TEXT;

package/dist/gateway/src/db/migrations/0118_mcp_project_grants.sql

@@ -0,0 +1,2 @@
+-- NULL preserves legacy directory and account-scoped grants without expanding authority.
+ALTER TABLE mcp_access_tokens ADD COLUMN allowed_projects TEXT;

package/dist/gateway/src/db/migrations/0119_feishu_notifications.sql

@@ -0,0 +1,23 @@
+CREATE TABLE feishu_notification_settings (
+ user_id TEXT PRIMARY KEY NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ enabled INTEGER NOT NULL DEFAULT 0, identity_id TEXT,
+ types_json TEXT NOT NULL DEFAULT '["attention","failure","completion"]',
+ web_base_url TEXT NOT NULL DEFAULT '', revision INTEGER NOT NULL DEFAULT 1,
+ updated_at INTEGER NOT NULL
+);
+--> statement-breakpoint
+-- References are resolved with tenant filtering at send time. Keep delivery history after
+-- notifications/identities are deleted; missing source records cancel unsent deliveries.
+CREATE TABLE feishu_notification_deliveries (
+ id TEXT PRIMARY KEY NOT NULL, user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ notification_id TEXT, test_key TEXT, event_type TEXT NOT NULL,
+ subscription_revision INTEGER NOT NULL, identity_revision INTEGER NOT NULL,
+ status TEXT NOT NULL DEFAULT 'pending', error_code TEXT, provider_message_id TEXT,
+ claim_token TEXT, lease_until INTEGER, attempt_count INTEGER NOT NULL DEFAULT 0,
+ next_attempt_at INTEGER NOT NULL DEFAULT 0, expires_at INTEGER NOT NULL, created_at INTEGER NOT NULL,
+ CHECK(status IN ('pending','sending','delivered','failed','unknown','cancelled')),
+ CHECK((notification_id IS NOT NULL AND test_key IS NULL) OR (notification_id IS NULL AND test_key IS NOT NULL)),
+ UNIQUE(user_id,notification_id), UNIQUE(user_id,test_key)
+);
+--> statement-breakpoint
+CREATE INDEX idx_feishu_notification_due ON feishu_notification_deliveries(user_id,status,next_attempt_at);

package/dist/gateway/src/db/migrations/0120_feishu_notification_targets.sql

@@ -0,0 +1,25 @@
+ALTER TABLE feishu_notification_settings ADD COLUMN target_id TEXT;
+--> statement-breakpoint
+UPDATE feishu_notification_settings SET target_id='private:' || identity_id WHERE identity_id IS NOT NULL;
+--> statement-breakpoint
+ALTER TABLE feishu_notification_deliveries ADD COLUMN target_id TEXT;
+--> statement-breakpoint
+ALTER TABLE feishu_notification_deliveries ADD COLUMN target_revision INTEGER NOT NULL DEFAULT 0;
+--> statement-breakpoint
+-- Existing in-flight requests retain their outcome; old pending work is cancelled,
+-- never redirected or revived by the new notification authorization semantics.
+UPDATE feishu_notification_deliveries SET status='cancelled',error_code='TARGET_MIGRATED'
+WHERE status='pending';
+--> statement-breakpoint
+CREATE TABLE feishu_notification_groups (
+ id TEXT PRIMARY KEY NOT NULL,
+ user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ account_id TEXT NOT NULL,
+ account_revision INTEGER NOT NULL,
+ chat_id TEXT NOT NULL,
+ name TEXT NOT NULL,
+ available INTEGER NOT NULL DEFAULT 1,
+ revision INTEGER NOT NULL DEFAULT 1,
+ checked_at INTEGER NOT NULL,
+ UNIQUE(user_id,account_id,account_revision,chat_id)
+);

package/dist/gateway/src/db/migrations/0121_session_notification_prompts.sql

@@ -0,0 +1,10 @@
+CREATE TABLE session_notification_prompts (
+ user_id TEXT NOT NULL,
+ session_id TEXT NOT NULL,
+ native_session_id TEXT NOT NULL,
+ native_turn_id TEXT NOT NULL DEFAULT '',
+ prompt TEXT NOT NULL,
+ created_at INTEGER NOT NULL,
+ PRIMARY KEY (user_id,session_id,native_session_id,native_turn_id),
+ FOREIGN KEY (user_id,session_id) REFERENCES sessions(user_id,id) ON DELETE CASCADE
+);

package/dist/gateway/src/db/migrations/0122_mcode_adapter.sql

@@ -0,0 +1,97 @@
+-- MiniMax Code became a first-class adapter: extend
+-- model_provider_bindings_adapter_check to include 'mcode'. SQLite cannot ALTER
+-- a CHECK constraint, so the table is rebuilt (0053/0059/0087 pattern): same DDL
+-- in a `_mcode` table (only change: 'mcode' added to the adapter check), rows
+-- copied, copy guarded by row count, old table dropped, renamed back, indexes
+-- recreated with the 0056/0087 shapes.
+PRAGMA foreign_keys=OFF;
+--> statement-breakpoint
+CREATE TABLE `model_provider_bindings_mcode` (
+  `id` text PRIMARY KEY NOT NULL,
+  `user_id` text NOT NULL,
+  `adapter` text NOT NULL,
+  `scope` text NOT NULL,
+  `scope_key` text NOT NULL,
+  `project_id` text,
+  `provider_profile_id` text NOT NULL,
+  `model_profile_id` text NOT NULL,
+  `provider_credential_id` text,
+  `auth_mode` text NOT NULL,
+  `target_locator_hash` text NOT NULL,
+  `target_realpath_hash` text,
+  `desired_revision` integer DEFAULT 1 NOT NULL,
+  `applied_revision` integer,
+  `observed_fingerprint` text,
+  `backup_revision` integer,
+  `status` text DEFAULT 'active' NOT NULL,
+  `revoked_at` integer,
+  `created_at` integer NOT NULL,
+  `updated_at` integer NOT NULL,
+  CONSTRAINT `model_provider_bindings_adapter_check`
+    CHECK (`adapter` IN ('claude','opencode','codex','kimi','pi','mcode')),
+  CONSTRAINT `model_provider_bindings_auth_mode_check`
+    CHECK (`auth_mode` IN ('managed_credential','native_cli_login','host_environment','none')),
+  CONSTRAINT `model_provider_bindings_status_check`
+    CHECK (`status` IN ('active','revoked')),
+  CONSTRAINT `model_provider_bindings_scope_check` CHECK (
+    (`scope` = 'global' AND `scope_key` = 'global' AND `project_id` IS NULL)
+    OR (`scope` = 'project' AND `project_id` IS NOT NULL AND `scope_key` = 'project_id')
+  ),
+  CONSTRAINT `model_provider_bindings_credential_check` CHECK (
+    (`auth_mode` = 'managed_credential' AND `provider_credential_id` IS NOT NULL)
+    OR (`auth_mode` <> 'managed_credential' AND `provider_credential_id` IS NULL)
+  ),
+  FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade,
+  FOREIGN KEY (`project_id`,`user_id`) REFERENCES `projects`(`id`,`user_id`) ON UPDATE no action ON DELETE restrict,
+  FOREIGN KEY (`provider_profile_id`,`user_id`) REFERENCES `model_provider_profiles`(`id`,`user_id`) ON UPDATE no action ON DELETE restrict,
+  FOREIGN KEY (`model_profile_id`,`user_id`,`provider_profile_id`) REFERENCES `model_profiles`(`id`,`user_id`,`provider_profile_id`) ON UPDATE no action ON DELETE restrict,
+  FOREIGN KEY (`provider_credential_id`,`user_id`,`provider_profile_id`) REFERENCES `provider_credentials`(`id`,`user_id`,`provider_profile_id`) ON UPDATE no action ON DELETE restrict
+);
+--> statement-breakpoint
+INSERT INTO `model_provider_bindings_mcode` (
+  `id`,`user_id`,`adapter`,`scope`,`scope_key`,`project_id`,`provider_profile_id`,
+  `model_profile_id`,`provider_credential_id`,`auth_mode`,`target_locator_hash`,
+  `target_realpath_hash`,`desired_revision`,`applied_revision`,`observed_fingerprint`,
+  `backup_revision`,`status`,`revoked_at`,`created_at`,`updated_at`
+)
+SELECT
+  `id`,`user_id`,`adapter`,`scope`,`scope_key`,`project_id`,`provider_profile_id`,
+  `model_profile_id`,`provider_credential_id`,`auth_mode`,`target_locator_hash`,
+  `target_realpath_hash`,`desired_revision`,`applied_revision`,`observed_fingerprint`,
+  `backup_revision`,`status`,`revoked_at`,`created_at`,`updated_at`
+FROM `model_provider_bindings`;
+--> statement-breakpoint
+CREATE TEMP TABLE `_mcode_binding_copy_guard` (`ok` integer NOT NULL CHECK (`ok` = 0));
+--> statement-breakpoint
+INSERT INTO `_mcode_binding_copy_guard` (`ok`)
+SELECT CASE
+  WHEN (SELECT count(*) FROM `model_provider_bindings_mcode`)
+       = (SELECT count(*) FROM `model_provider_bindings`) THEN 0
+  ELSE 1
+END;
+--> statement-breakpoint
+DROP TABLE `_mcode_binding_copy_guard`;
+--> statement-breakpoint
+DROP TABLE `model_provider_bindings`;
+--> statement-breakpoint
+ALTER TABLE `model_provider_bindings_mcode` RENAME TO `model_provider_bindings`;
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_model_provider_bindings_id_user`
+  ON `model_provider_bindings` (`id`,`user_id`);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_model_provider_bindings_active_scope`
+  ON `model_provider_bindings` (`user_id`,`adapter`,`scope`,`scope_key`)
+  WHERE `status` = 'active';
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_model_provider_bindings_active_locator`
+  ON `model_provider_bindings` (`target_locator_hash`)
+  WHERE `status` = 'active';
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_model_provider_bindings_active_realpath`
+  ON `model_provider_bindings` (`target_realpath_hash`)
+  WHERE `status` = 'active' AND `target_realpath_hash` IS NOT NULL;
+--> statement-breakpoint
+CREATE INDEX `idx_model_provider_bindings_user_provider`
+  ON `model_provider_bindings` (`user_id`,`provider_profile_id`);
+--> statement-breakpoint
+PRAGMA foreign_keys=ON;

package/dist/gateway/src/db/migrations/0123_mcode_supported_adapters_backfill.sql

@@ -0,0 +1,16 @@
+-- MiniMax Code became a first-class apply-provider target after providers
+-- were created: existing profiles predate the adapter, so their
+-- supported_adapters lists never mention it. Backfill "mcode" for every API
+-- format the mcode apply branch can write (anthropic-messages,
+-- openai-responses, openai-completions), following the 0072/0088 pattern used
+-- when Kimi Code and PI became first-class adapters, so the Apply-to-CLI dialog
+-- offers MiniMax Code for existing providers too. google/bedrock/local have
+-- no corresponding `api` value in config.yaml and are excluded.
+UPDATE `model_provider_profiles`
+SET `supported_adapters` = json_insert(`supported_adapters`, '$[#]', 'mcode')
+WHERE `api_format` IN ('anthropic', 'openai', 'openai-compatible')
+	AND NOT EXISTS (
+		SELECT 1
+		FROM json_each(`model_provider_profiles`.`supported_adapters`)
+		WHERE json_each.`value` = 'mcode'
+	);

package/dist/gateway/src/db/migrations/0124_user_adapter_order.sql

@@ -0,0 +1,4 @@
+-- Per-user Code CLI display order preference (Settings → AI adapters drag
+-- sort). user_settings.adapter_order stores a JSON array of canonical adapter
+-- ids; null means "no preference, use gateway discovery order".
+ALTER TABLE `user_settings` ADD COLUMN `adapter_order` TEXT;

package/dist/gateway/src/db/migrations/0125_copilot_approval_clock.sql

@@ -0,0 +1,15 @@
+ALTER TABLE copilot_runs ADD COLUMN approval_wait_ms integer NOT NULL DEFAULT 0;
+--> statement-breakpoint
+ALTER TABLE copilot_runs ADD COLUMN approval_wait_started_at integer;
+--> statement-breakpoint
+-- Backfill only a candidate backed by matching pending/awaiting evidence.
+-- Runtime additionally verifies SHA256(input_json) before granting time credit.
+-- Preserve all prior state, fences, started_at values, and completed waits.
+UPDATE copilot_runs AS r SET approval_wait_started_at = (
+  SELECT MIN(a.created_at) FROM copilot_pending_actions a
+  JOIN copilot_run_steps s ON s.user_id=a.user_id AND s.run_id=a.run_id AND s.id=a.step_id
+  WHERE a.user_id=r.user_id AND a.run_id=r.id AND a.status='pending'
+    AND s.status='awaiting_approval' AND s.kind='tool' AND a.tool=s.tool_name
+    AND a.tool_call_id IS s.tool_call_id AND a.input_json=s.input_json
+    AND a.input_digest=s.input_digest AND a.created_at>=r.started_at
+) WHERE r.runtime_version=1 AND r.status='awaiting_approval' AND r.started_at IS NOT NULL;

package/dist/gateway/src/db/migrations/0126_development_execution_identity.sql

@@ -0,0 +1,3 @@
+ALTER TABLE copilot_development_tasks ADD COLUMN execution_identity_json TEXT;
+--> statement-breakpoint
+ALTER TABLE copilot_development_tasks ADD COLUMN reconciliation_json TEXT;

package/dist/gateway/src/db/migrations/0127_cli_observation_summaries.sql

@@ -0,0 +1,17 @@
+ALTER TABLE feishu_notification_settings ADD COLUMN content_level TEXT NOT NULL DEFAULT 'status' CHECK(content_level IN ('status','summary'));
+--> statement-breakpoint
+CREATE TABLE cli_observation_runtimes (
+ user_id TEXT NOT NULL, session_id TEXT NOT NULL, epoch TEXT NOT NULL, token_fingerprint TEXT NOT NULL,
+ current_native_session_id TEXT, current_turn_id TEXT,
+ PRIMARY KEY(user_id,session_id),
+ FOREIGN KEY(user_id,session_id) REFERENCES sessions(user_id,id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE TABLE cli_observations (
+ user_id TEXT NOT NULL, session_id TEXT NOT NULL, runtime_epoch TEXT NOT NULL,
+ native_session_id TEXT NOT NULL, turn_id TEXT NOT NULL, summary_json TEXT NOT NULL, observed_at INTEGER NOT NULL,
+ PRIMARY KEY(user_id,session_id,runtime_epoch,native_session_id,turn_id),
+ FOREIGN KEY(user_id,session_id) REFERENCES sessions(user_id,id) ON DELETE CASCADE
+);
+--> statement-breakpoint
+CREATE INDEX cli_observation_latest ON cli_observations(user_id,session_id,observed_at);

package/dist/gateway/src/db/migrations/0128_feishu_builtin_summaries.sql

@@ -0,0 +1,11 @@
+-- Cancel only queued work affected by the default-content revision. Do this
+-- before normalizing the settings so the affected users remain identifiable.
+UPDATE feishu_notification_deliveries
+SET status = 'cancelled', error_code = 'SUBSCRIPTION_CHANGED'
+WHERE status = 'pending' AND user_id IN (
+  SELECT user_id FROM feishu_notification_settings WHERE content_level = 'status'
+);
+--> statement-breakpoint
+UPDATE feishu_notification_settings
+SET content_level = 'summary', revision = revision + 1
+WHERE content_level = 'status';