From 42789dbe9ebf5d1f3405048173ee1406997bec0b Mon Sep 17 00:00:00 2001
From: Your Name <you@example.com>
Date: Wed, 13 May 2026 10:07:20 +0800
Subject: [PATCH] fix(awooop): enable awoooi mcp gateway shadow

---
 ..._mcp_gateway_project_shadow_2026-05-13.sql | 25 +++++++++++++++++++
 ...gateway_project_shadow_2026-05-13_down.sql | 20 +++++++++++++++
 2 files changed, 45 insertions(+)
 create mode 100644 apps/api/migrations/awooop_awoooi_mcp_gateway_project_shadow_2026-05-13.sql
 create mode 100644 apps/api/migrations/awooop_awoooi_mcp_gateway_project_shadow_2026-05-13_down.sql

diff --git a/apps/api/migrations/awooop_awoooi_mcp_gateway_project_shadow_2026-05-13.sql b/apps/api/migrations/awooop_awoooi_mcp_gateway_project_shadow_2026-05-13.sql
new file mode 100644
index 00000000..10f28d48
--- /dev/null
+++ b/apps/api/migrations/awooop_awoooi_mcp_gateway_project_shadow_2026-05-13.sql
@@ -0,0 +1,25 @@
+-- =============================================================================
+-- AwoooP / AWOOOI MCP Gateway Shadow Onboarding
+-- 2026-05-13 Codex + ogt
+--
+-- 背景：
+--   AWOOOI 已完成 read-only MCP tool registry / grants seed，但 project 本身仍停在
+--   legacy_awoooi_default，會被 MCP Gateway Gate 1 正確攔截。
+--
+-- 邊界：
+--   只把 AWOOOI 租戶升到 shadow，讓既有 Gate 1 生效。
+--   write/admin tool 仍未授權；自動修復/破壞性動作不因本 migration 開放。
+-- =============================================================================
+
+BEGIN;
+
+SELECT set_config('app.project_id', 'awoooi', FALSE);
+
+UPDATE awooop_projects
+SET
+    migration_mode = 'shadow',
+    updated_at = NOW()
+WHERE project_id = 'awoooi'
+  AND migration_mode = 'legacy_awoooi_default';
+
+COMMIT;
diff --git a/apps/api/migrations/awooop_awoooi_mcp_gateway_project_shadow_2026-05-13_down.sql b/apps/api/migrations/awooop_awoooi_mcp_gateway_project_shadow_2026-05-13_down.sql
new file mode 100644
index 00000000..d972b967
--- /dev/null
+++ b/apps/api/migrations/awooop_awoooi_mcp_gateway_project_shadow_2026-05-13_down.sql
@@ -0,0 +1,20 @@
+-- =============================================================================
+-- Rollback: AwoooP / AWOOOI MCP Gateway Shadow Onboarding
+-- 2026-05-13 Codex + ogt
+--
+-- 只回退仍停在 shadow 的 AWOOOI；若已由人工/後續 migration 推進到 canary/active，
+-- 不自動降級。
+-- =============================================================================
+
+BEGIN;
+
+SELECT set_config('app.project_id', 'awoooi', FALSE);
+
+UPDATE awooop_projects
+SET
+    migration_mode = 'legacy_awoooi_default',
+    updated_at = NOW()
+WHERE project_id = 'awoooi'
+  AND migration_mode = 'shadow';
+
+COMMIT;