@aeolus-fleet/core 0.0.0 → 0.18.0

package/src/adapters/prisma/migrations/20260930090000_crew_token/migration.sql

@@ -0,0 +1,5 @@
+-- AlterTable
+ALTER TABLE "leases" ADD COLUMN     "crew_token_hash" TEXT;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "leases_crew_token_hash_key" ON "leases"("crew_token_hash");

package/src/adapters/prisma/migrations/20260930120000_send/migration.sql

@@ -0,0 +1,30 @@
+-- No message was stored before this migration: nothing sent one yet. So the
+-- new required columns need no default for existing rows.
+
+-- CreateEnum
+CREATE TYPE "selector_kind" AS ENUM ('ship', 'type');
+
+-- AlterTable
+ALTER TABLE "messages" ADD COLUMN     "request_hash" TEXT NOT NULL,
+ADD COLUMN     "selector_kind" "selector_kind" NOT NULL,
+ADD COLUMN     "selector_ship_id" TEXT,
+ADD COLUMN     "selector_type" TEXT,
+ADD COLUMN     "sender_ship_id" TEXT NOT NULL;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "messages_fleet_id_sender_ship_id_idempotency_key_key" ON "messages"("fleet_id", "sender_ship_id", "idempotency_key");
+
+-- AddForeignKey
+ALTER TABLE "messages" ADD CONSTRAINT "messages_fleet_id_sender_ship_id_fkey" FOREIGN KEY ("fleet_id", "sender_ship_id") REFERENCES "ships"("fleet_id", "id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "messages" ADD CONSTRAINT "messages_fleet_id_selector_ship_id_fkey" FOREIGN KEY ("fleet_id", "selector_ship_id") REFERENCES "ships"("fleet_id", "id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+
+-- Written by hand from here on: rules Prisma does not model.
+
+-- A ship selector names a ship's id and no type; a type selector names a type and no ship.
+ALTER TABLE "messages" ADD CONSTRAINT "messages_one_selector" CHECK (
+  ("selector_kind" = 'ship' AND "selector_ship_id" IS NOT NULL AND "selector_type" IS NULL)
+  OR ("selector_kind" = 'type' AND "selector_type" IS NOT NULL AND "selector_ship_id" IS NULL)
+);

package/src/adapters/prisma/migrations/20260930150000_receive/migration.sql

@@ -0,0 +1,24 @@
+-- No delivery was claimed before this migration: nothing received one yet. So
+-- every existing delivery is pending, or was returned to pending, and names no
+-- claim; the check below holds for it.
+
+-- AlterTable
+ALTER TABLE "deliveries" ADD COLUMN     "claimed_by_lease_id" TEXT;
+
+-- CreateIndex
+CREATE INDEX "deliveries_fleet_id_claimed_by_lease_id_state_idx" ON "deliveries"("fleet_id", "claimed_by_lease_id", "state");
+
+-- AddForeignKey
+ALTER TABLE "deliveries" ADD CONSTRAINT "deliveries_fleet_id_claimed_by_lease_id_fkey" FOREIGN KEY ("fleet_id", "claimed_by_lease_id") REFERENCES "leases"("fleet_id", "id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+
+-- Written by hand from here on: rules Prisma does not model.
+
+-- A claim names both the ship and the lease of the crew that claimed, or
+-- neither. A delivery in flight or acknowledged names its claim; a pending one
+-- names none.
+ALTER TABLE "deliveries" ADD CONSTRAINT "deliveries_claim" CHECK (
+  num_nonnulls("claimed_by_ship_id", "claimed_by_lease_id") IN (0, 2)
+  AND ("state" NOT IN ('delivered', 'acknowledged') OR "claimed_by_ship_id" IS NOT NULL)
+  AND ("state" <> 'pending' OR "claimed_by_ship_id" IS NULL)
+);

package/src/adapters/prisma/migrations/20261001010000_event_seq/migration.sql

@@ -0,0 +1,34 @@
+-- AlterTable
+ALTER TABLE "fleets" ADD COLUMN     "last_event_seq" BIGINT NOT NULL DEFAULT 0;
+
+-- AlterTable
+ALTER TABLE "events" ADD COLUMN     "seq" BIGINT;
+
+
+-- Written by hand from here on: numbering the events already written.
+
+-- Events written before this migration have committed, so any order is a
+-- valid stream; time, then id, is the closest to the order they happened in.
+-- Events are append-only; this one-time numbering is the single exception, so
+-- the guard is off for this statement alone.
+ALTER TABLE "events" DISABLE TRIGGER "events_append_only";
+
+UPDATE "events" AS e
+SET "seq" = numbered."seq"
+FROM (
+  SELECT "id", ROW_NUMBER() OVER (PARTITION BY "fleet_id" ORDER BY "occurred_at", "id") AS "seq"
+  FROM "events"
+) AS numbered
+WHERE e."id" = numbered."id";
+
+ALTER TABLE "events" ENABLE TRIGGER "events_append_only";
+
+UPDATE "fleets" AS f
+SET "last_event_seq" = counted."last_seq"
+FROM (SELECT "fleet_id", MAX("seq") AS "last_seq" FROM "events" GROUP BY "fleet_id") AS counted
+WHERE f."id" = counted."fleet_id";
+
+ALTER TABLE "events" ALTER COLUMN "seq" SET NOT NULL;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "events_fleet_id_seq_key" ON "events"("fleet_id", "seq");

package/src/adapters/prisma/migrations/20261001020000_console_session_end_reason/migration.sql

@@ -0,0 +1,14 @@
+-- CreateEnum
+CREATE TYPE "console_session_end_reason" AS ENUM ('takenOver', 'signedOut', 'passwordReset');
+
+-- AlterTable
+ALTER TABLE "console_sessions" ADD COLUMN     "end_reason" "console_session_end_reason";
+
+
+-- Written by hand from here on: rules Prisma does not model.
+
+-- Only an ended session has a reason. Sessions that ended before this
+-- migration keep none: why they ended was not recorded.
+ALTER TABLE "console_sessions" ADD CONSTRAINT "console_sessions_end_reason" CHECK (
+  "end_reason" IS NULL OR "ended_at" IS NOT NULL
+);

package/src/adapters/prisma/migrations/20261001030000_account_theme_session_device/migration.sql

@@ -0,0 +1,8 @@
+-- CreateEnum
+CREATE TYPE "theme" AS ENUM ('light', 'dark', 'system');
+
+-- AlterTable
+ALTER TABLE "operators" ADD COLUMN     "theme" "theme" NOT NULL DEFAULT 'system';
+
+-- AlterTable
+ALTER TABLE "console_sessions" ADD COLUMN     "device" TEXT NOT NULL DEFAULT 'Unknown device';

package/src/adapters/prisma/migrations/20261001040000_lease_last_seen/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "leases" ADD COLUMN     "last_seen_at" TIMESTAMPTZ(3);

package/src/adapters/prisma/migrations/20261002190000_lease_report/migration.sql

@@ -0,0 +1,7 @@
+-- CreateEnum
+CREATE TYPE "report_state" AS ENUM ('working', 'blocked', 'idle');
+
+-- AlterTable
+ALTER TABLE "leases" ADD COLUMN     "report_state" "report_state",
+ADD COLUMN     "report_note" TEXT,
+ADD COLUMN     "reported_at" TIMESTAMPTZ(3);

package/src/adapters/prisma/migrations/20261003140000_commission_key/migration.sql

@@ -0,0 +1,7 @@
+-- AlterTable
+ALTER TABLE "ships" ADD COLUMN     "commission_key" TEXT,
+ADD COLUMN     "commission_request_hash" TEXT,
+ADD COLUMN     "commissioned_by" TEXT;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "ships_fleet_id_commissioned_by_commission_key_key" ON "ships"("fleet_id", "commissioned_by", "commission_key");

package/src/adapters/prisma/migrations/20261003200000_message_model/migration.sql

@@ -0,0 +1,5 @@
+-- AlterTable
+ALTER TABLE "messages" ADD COLUMN     "model" TEXT;
+
+-- CreateIndex
+CREATE INDEX "messages_fleet_id_sender_ship_id_created_at_idx" ON "messages"("fleet_id", "sender_ship_id", "created_at");

package/src/adapters/prisma/migrations/20261003201000_lease_harness/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "leases" ADD COLUMN     "harness" TEXT;

package/src/adapters/prisma/migrations/20261004120000_operator_without_password/migration.sql

@@ -0,0 +1,2 @@
+-- An operator a hosting installation created has no password.
+ALTER TABLE "operators" ALTER COLUMN "password_hash" DROP NOT NULL;

package/src/adapters/prisma/migrations/20261004121000_installation_requests/migration.sql

@@ -0,0 +1,21 @@
+-- CreateEnum
+CREATE TYPE "installation_request_kind" AS ENUM ('create_fleet', 'delete_fleet');
+
+-- CreateTable
+CREATE TABLE "installation_requests" (
+    "request_id" TEXT NOT NULL,
+    "kind" "installation_request_kind" NOT NULL,
+    "request_hash" TEXT NOT NULL,
+    "fleet_id" TEXT,
+    "operator_ship_id" TEXT,
+    "at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "installation_requests_pkey" PRIMARY KEY ("request_id")
+);
+
+-- CreateIndex
+CREATE INDEX "installation_requests_fleet_id_idx" ON "installation_requests"("fleet_id");
+
+-- A create names its fleet and argo; a delete names nothing of the fleet it deleted.
+ALTER TABLE "installation_requests" ADD CONSTRAINT "installation_requests_create_names_its_fleet"
+  CHECK (("kind" = 'create_fleet') = ("fleet_id" IS NOT NULL AND "operator_ship_id" IS NOT NULL));

package/src/adapters/prisma/migrations/20261004122000_events_deleted_with_their_fleet/migration.sql

@@ -0,0 +1,11 @@
+-- Events stay append-only. The one exception is deleting a whole fleet
+-- (decision 0020): its transaction names the fleet in the transaction-local
+-- setting aeolus.deleting_fleet, and only that fleet's events may go.
+CREATE OR REPLACE FUNCTION "events_reject_change"() RETURNS trigger LANGUAGE plpgsql AS $$
+BEGIN
+  IF TG_OP = 'DELETE' AND OLD."fleet_id" = current_setting('aeolus.deleting_fleet', true) THEN
+    RETURN OLD;
+  END IF;
+  RAISE EXCEPTION 'events are append-only: % is not allowed', TG_OP;
+END;
+$$;

package/src/adapters/prisma/migrations/20261004130000_sign_in_tickets/migration.sql

@@ -0,0 +1,16 @@
+-- CreateTable
+CREATE TABLE "sign_in_tickets" (
+    "token_hash" TEXT NOT NULL,
+    "fleet_id" TEXT NOT NULL,
+    "issued_at" TIMESTAMPTZ(3) NOT NULL,
+    "expires_at" TIMESTAMPTZ(3) NOT NULL,
+    "used_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "sign_in_tickets_pkey" PRIMARY KEY ("token_hash")
+);
+
+-- CreateIndex
+CREATE INDEX "sign_in_tickets_fleet_id_idx" ON "sign_in_tickets"("fleet_id");
+
+-- AddForeignKey
+ALTER TABLE "sign_in_tickets" ADD CONSTRAINT "sign_in_tickets_fleet_id_fkey" FOREIGN KEY ("fleet_id") REFERENCES "fleets"("id") ON DELETE RESTRICT ON UPDATE CASCADE;

package/src/adapters/prisma/migrations/20261004140000_fleet_limits/migration.sql

@@ -0,0 +1,6 @@
+-- How a fleet sets its ship and daily message limits: its own (null for no
+-- limit), or the installation default when not set.
+ALTER TABLE "fleets" ADD COLUMN "ship_limit_set" BOOLEAN NOT NULL DEFAULT false,
+ADD COLUMN "ship_limit" INTEGER,
+ADD COLUMN "daily_message_limit_set" BOOLEAN NOT NULL DEFAULT false,
+ADD COLUMN "daily_message_limit" INTEGER;

package/src/adapters/prisma/migrations/20261004141000_installation_settings/migration.sql

@@ -0,0 +1,12 @@
+-- CreateTable
+CREATE TABLE "installation_settings" (
+    "id" INTEGER NOT NULL DEFAULT 1,
+    "default_ship_limit" INTEGER,
+    "default_daily_message_limit" INTEGER,
+    "fleet_cap" INTEGER,
+
+    CONSTRAINT "installation_settings_pkey" PRIMARY KEY ("id")
+);
+
+-- The installation has one set of settings: one row at most.
+ALTER TABLE "installation_settings" ADD CONSTRAINT "installation_settings_one_row" CHECK ("id" = 1);

package/src/adapters/prisma/migrations/20261005090000_viewer_ship/migration.sql

@@ -0,0 +1,2 @@
+-- The viewer ship (decision 0022): a third kind of ship, the fleet's read-only door into the console.
+ALTER TYPE "ship_kind" ADD VALUE 'viewer';

package/src/adapters/prisma/migrations/20261005100000_viewer_sessions/migration.sql

@@ -0,0 +1,20 @@
+-- Viewer sessions (decision 0022): console sessions of the viewer ship, many at
+-- once, holding no lease, each with its own idle limit and a moment it ends by.
+
+-- At most one viewer ship per fleet, as one operator ship.
+CREATE UNIQUE INDEX "ships_fleet_id_viewer_key" ON "ships"("fleet_id") WHERE (kind = 'viewer'::ship_kind);
+
+ALTER TABLE "console_sessions" ALTER COLUMN "lease_id" DROP NOT NULL;
+-- Every session so far is the operator's, valid 30 days after its last use.
+ALTER TABLE "console_sessions" ADD COLUMN "idle_limit_seconds" INTEGER NOT NULL DEFAULT 2592000;
+ALTER TABLE "console_sessions" ALTER COLUMN "idle_limit_seconds" DROP DEFAULT;
+ALTER TABLE "console_sessions" ADD COLUMN "ends_by" TIMESTAMPTZ(3);
+
+-- One live session holding argo's lease per fleet; viewer sessions hold none and run beside it.
+DROP INDEX "console_sessions_fleet_id_open_key";
+CREATE UNIQUE INDEX "console_sessions_fleet_id_open_key" ON "console_sessions"("fleet_id") WHERE ("ended_at" IS NULL AND "lease_id" IS NOT NULL);
+
+-- Whom a sign-in ticket signs in as. Every ticket so far is the operator's.
+CREATE TYPE "sign_in_as" AS ENUM ('operator', 'viewer');
+ALTER TABLE "sign_in_tickets" ADD COLUMN "sign_in_as" "sign_in_as" NOT NULL DEFAULT 'operator';
+ALTER TABLE "sign_in_tickets" ALTER COLUMN "sign_in_as" DROP DEFAULT;

package/src/adapters/prisma/migrations/20261005110000_notices/migration.sql

@@ -0,0 +1,37 @@
+-- Notices (decision 0023): the installation's console notices, which belong
+-- to no fleet, and the ones each console session dismissed for itself.
+
+-- CreateEnum
+CREATE TYPE "notice_audience" AS ENUM ('everyone', 'operators', 'viewers');
+
+-- CreateTable
+CREATE TABLE "notices" (
+    "id" TEXT NOT NULL,
+    "position" INTEGER NOT NULL,
+    "audience" "notice_audience" NOT NULL,
+    "text" TEXT NOT NULL,
+    "links" JSONB NOT NULL DEFAULT '[]',
+    "is_dismissible" BOOLEAN NOT NULL DEFAULT false,
+
+    CONSTRAINT "notices_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "notice_dismissals" (
+    "fleet_id" TEXT NOT NULL,
+    "console_session_id" TEXT NOT NULL,
+    "notice_id" TEXT NOT NULL,
+    "dismissed_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "notice_dismissals_pkey" PRIMARY KEY ("console_session_id","notice_id")
+);
+
+-- CreateIndex
+CREATE INDEX "notice_dismissals_fleet_id_idx" ON "notice_dismissals"("fleet_id");
+
+-- AddForeignKey
+ALTER TABLE "notice_dismissals" ADD CONSTRAINT "notice_dismissals_fleet_id_fkey" FOREIGN KEY ("fleet_id") REFERENCES "fleets"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "notice_dismissals" ADD CONSTRAINT "notice_dismissals_console_session_id_fkey" FOREIGN KEY ("console_session_id") REFERENCES "console_sessions"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+

package/src/adapters/prisma/migrations/20261005120000_guide/migration.sql

@@ -0,0 +1,34 @@
+-- The guide (decision 0024): the installation's guide, which belongs to no
+-- fleet, and where each console session is in it.
+
+-- CreateEnum
+CREATE TYPE "guide_progress_state" AS ENUM ('open', 'skipped', 'finished');
+
+-- CreateTable
+CREATE TABLE "guides" (
+    "id" TEXT NOT NULL,
+    "audience" "notice_audience" NOT NULL,
+    "steps" JSONB NOT NULL,
+
+    CONSTRAINT "guides_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "guide_progress" (
+    "fleet_id" TEXT NOT NULL,
+    "console_session_id" TEXT NOT NULL,
+    "step" INTEGER NOT NULL,
+    "state" "guide_progress_state" NOT NULL,
+    "recorded_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "guide_progress_pkey" PRIMARY KEY ("console_session_id")
+);
+
+-- CreateIndex
+CREATE INDEX "guide_progress_fleet_id_idx" ON "guide_progress"("fleet_id");
+
+-- AddForeignKey
+ALTER TABLE "guide_progress" ADD CONSTRAINT "guide_progress_fleet_id_fkey" FOREIGN KEY ("fleet_id") REFERENCES "fleets"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "guide_progress" ADD CONSTRAINT "guide_progress_console_session_id_fkey" FOREIGN KEY ("console_session_id") REFERENCES "console_sessions"("id") ON DELETE RESTRICT ON UPDATE CASCADE;

package/src/adapters/prisma/migrations/20261006100000_fleet_crew_scope/migration.sql

@@ -0,0 +1,8 @@
+-- fleet:crew (decision 0002): a trierarch's scope, the fifth known one. argo
+-- holds every scope, so each fleet's argo gets it too.
+ALTER TABLE "ships" DROP CONSTRAINT "ships_scopes_known";
+ALTER TABLE "ships" ADD CONSTRAINT "ships_scopes_known" CHECK (
+  "scopes" IS NOT NULL AND "scopes" <@ ARRAY['messages:send', 'messages:receive', 'fleet:read', 'fleet:manage', 'fleet:crew']::TEXT[]
+);
+
+UPDATE "ships" SET "scopes" = array_append("scopes", 'fleet:crew') WHERE "kind" = 'operator' AND NOT ('fleet:crew' = ANY("scopes"));

package/src/adapters/prisma/migrations/20261006140000_lease_report_details/migration.sql

@@ -0,0 +1,3 @@
+-- AlterTable
+ALTER TABLE "leases" ADD COLUMN     "report_details" JSONB,
+ADD COLUMN     "report_details_version" INTEGER NOT NULL DEFAULT 0;

package/src/adapters/prisma/migrations/20261006160000_crew_requests/migration.sql

@@ -0,0 +1,20 @@
+-- CreateTable
+CREATE TABLE "crew_requests" (
+    "ship_id" TEXT NOT NULL,
+    "fleet_id" TEXT NOT NULL,
+    "settings" JSONB NOT NULL,
+    "settings_version" INTEGER NOT NULL,
+    "requested_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "crew_requests_pkey" PRIMARY KEY ("ship_id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "crew_requests_fleet_id_ship_id_key" ON "crew_requests"("fleet_id", "ship_id");
+
+-- AddForeignKey
+ALTER TABLE "crew_requests" ADD CONSTRAINT "crew_requests_fleet_id_fkey" FOREIGN KEY ("fleet_id") REFERENCES "fleets"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "crew_requests" ADD CONSTRAINT "crew_requests_fleet_id_ship_id_fkey" FOREIGN KEY ("fleet_id", "ship_id") REFERENCES "ships"("fleet_id", "id") ON DELETE RESTRICT ON UPDATE CASCADE;
+

package/src/adapters/prisma/migrations/20261006180000_crew_scopes/migration.sql

@@ -0,0 +1,9 @@
+-- crew:assign and crew:run (decision 0029): the trierarch plugin's and a
+-- trierarch's scopes. argo holds every scope, so each fleet's argo gets them too.
+ALTER TABLE "ships" DROP CONSTRAINT "ships_scopes_known";
+ALTER TABLE "ships" ADD CONSTRAINT "ships_scopes_known" CHECK (
+  "scopes" IS NOT NULL AND "scopes" <@ ARRAY['messages:send', 'messages:receive', 'fleet:read', 'fleet:manage', 'fleet:crew', 'crew:assign', 'crew:run']::TEXT[]
+);
+
+UPDATE "ships" SET "scopes" = array_append("scopes", 'crew:assign') WHERE "kind" = 'operator' AND NOT ('crew:assign' = ANY("scopes"));
+UPDATE "ships" SET "scopes" = array_append("scopes", 'crew:run') WHERE "kind" = 'operator' AND NOT ('crew:run' = ANY("scopes"));

package/src/adapters/prisma/migrations/20261006190000_crew_assignment/migration.sql

@@ -0,0 +1,13 @@
+-- CreateEnum
+CREATE TYPE "crew_status" AS ENUM ('crewing', 'running', 'restarting', 'crashed', 'releasing');
+
+-- AlterTable
+ALTER TABLE "crew_requests" ADD COLUMN     "assigned_to_ship_id" TEXT,
+ADD COLUMN     "status" "crew_status";
+
+-- CreateIndex
+CREATE INDEX "crew_requests_fleet_id_assigned_to_ship_id_idx" ON "crew_requests"("fleet_id", "assigned_to_ship_id");
+
+-- AddForeignKey
+ALTER TABLE "crew_requests" ADD CONSTRAINT "crew_requests_fleet_id_assigned_to_ship_id_fkey" FOREIGN KEY ("fleet_id", "assigned_to_ship_id") REFERENCES "ships"("fleet_id", "id") ON DELETE RESTRICT ON UPDATE CASCADE;
+

package/src/adapters/prisma/migrations/20261006200000_crew_request_reason/migration.sql

@@ -0,0 +1,3 @@
+-- AlterTable
+ALTER TABLE "crew_requests" ADD COLUMN     "reason" TEXT;
+

package/src/adapters/prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "postgresql"