@aeolus-fleet/core 0.20.5 → 0.22.0

package/src/adapters/prisma/migrations/20261010110000_network_rules_through_plugin/migration.sql

@@ -0,0 +1,4 @@
+-- Rules exist only through a registered networking plugin (decision 0035):
+-- rules argo set before then go, all-to-all. The version stays, as it names
+-- the settings past refusals were checked against.
+UPDATE "network_settings" SET "rules" = NULL WHERE "plugin_ship_id" IS NULL;

package/src/adapters/prisma/migrations/20261010130000_cleared_network_rules_on_record/migration.sql

@@ -0,0 +1,57 @@
+-- Every state change writes its event: the rules the migration before this
+-- one cleared get theirs. A fleet it cleared has no plugin and no rules, yet
+-- the change at its current version is a NetworkRulesSet that gave rules.
+-- Each such fleet moves to the next version with NetworkRulesSet for none,
+-- by the system, taking the next number of the fleet's stream. Its id is an
+-- evt_ id as common/src/ids makes them: the time in milliseconds, then 80
+-- random bits, in lowercase Crockford base32.
+DO $$
+DECLARE
+  alphabet CONSTANT text := '0123456789abcdefghjkmnpqrstvwxyz';
+  cleared record;
+  at timestamptz;
+  millis bigint;
+  body text;
+  next_version integer;
+  next_seq bigint;
+BEGIN
+  FOR cleared IN
+    SELECT settings."fleet_id", settings."version"
+    FROM "network_settings" settings
+    WHERE settings."plugin_ship_id" IS NULL
+      AND settings."rules" IS NULL
+      AND EXISTS (
+        SELECT 1 FROM "events" event
+        WHERE event."fleet_id" = settings."fleet_id"
+          AND event."type" = 'NetworkRulesSet'
+          AND event."details" -> 'version' = to_jsonb(settings."version")
+          AND event."details" -> 'rules' <> 'null'::jsonb
+      )
+    ORDER BY settings."fleet_id"
+  LOOP
+    at := clock_timestamp();
+    millis := floor(extract(epoch FROM at) * 1000)::bigint;
+    body := '';
+    FOR position IN REVERSE 9..0 LOOP
+      body := body || substr(alphabet, ((millis >> (position * 5)) & 31)::integer + 1, 1);
+    END LOOP;
+    FOR position IN 1..16 LOOP
+      body := body || substr(alphabet, floor(random() * 32)::integer + 1, 1);
+    END LOOP;
+
+    next_version := cleared."version" + 1;
+    UPDATE "network_settings" SET "version" = next_version WHERE "fleet_id" = cleared."fleet_id";
+    UPDATE "fleets" SET "last_event_seq" = "last_event_seq" + 1 WHERE "id" = cleared."fleet_id"
+      RETURNING "last_event_seq" INTO next_seq;
+    INSERT INTO "events" ("id", "fleet_id", "type", "occurred_at", "details", "seq")
+    VALUES (
+      'evt_' || body,
+      cleared."fleet_id",
+      'NetworkRulesSet',
+      at,
+      jsonb_build_object('version', next_version, 'rules', NULL),
+      next_seq
+    );
+  END LOOP;
+END;
+$$;

package/src/adapters/prisma/migrations/20261010210000_declared_network_rules/migration.sql

@@ -0,0 +1,16 @@
+-- The network rules each ship declared on the labels it owns (decision 0037):
+-- one row per declaring ship, none while it declares none.
+-- CreateTable
+CREATE TABLE "declared_network_rules" (
+    "fleet_id" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "rules" JSONB NOT NULL,
+
+    CONSTRAINT "declared_network_rules_pkey" PRIMARY KEY ("fleet_id","ship_id")
+);
+
+-- AddForeignKey
+ALTER TABLE "declared_network_rules" ADD CONSTRAINT "declared_network_rules_fleet_id_fkey" FOREIGN KEY ("fleet_id") REFERENCES "fleets"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "declared_network_rules" ADD CONSTRAINT "declared_network_rules_fleet_id_ship_id_fkey" FOREIGN KEY ("fleet_id", "ship_id") REFERENCES "ships"("fleet_id", "id") ON DELETE RESTRICT ON UPDATE CASCADE;

package/src/adapters/prisma/schema.prisma

@@ -52,6 +52,7 @@ model Fleet {
   labelValues      LabelValue[]
   shipLabels       ShipLabel[]
   networkSettings  NetworkSettings?
+  declaredNetworkRules DeclaredNetworkRules[]
   reachRefusals    ReachRefusal[]
   credentials      Credential[]
   messages         Message[]
@@ -110,6 +111,7 @@ model Ship {
   requestedClears   WorktreeClearRequest[] @relation("WorktreeClearRequestRequester")
   ownedLabels       Label[]          @relation("LabelOwner")
   labels            ShipLabel[]      @relation("ShipLabelShip")
+  declaredNetworkRules DeclaredNetworkRules[]
 
   @@unique([fleetId, id])
   /// An idempotency key is used once per commissioning ship.
@@ -344,6 +346,21 @@ model NetworkSettings {
   @@map("network_settings")
 }
 
+/// The network rules a ship declared on the labels it owns (decision 0037),
+/// its whole list as JSON, at most 20. No row while it declares none; a retire
+/// removes its row.
+model DeclaredNetworkRules {
+  fleetId String @map("fleet_id")
+  shipId  String @map("ship_id")
+  rules   Json
+
+  fleet Fleet @relation(fields: [fleetId], references: [id])
+  ship  Ship  @relation(fields: [fleetId, shipId], references: [fleetId, id])
+
+  @@id([fleetId, shipId])
+  @@map("declared_network_rules")
+}
+
 /// A send the network rules refused (decision 0034), recorded in the
 /// transaction that refused it. Ids start with rfs_. Sender and recipient are
 /// as they were then: ids, names and the label values they carried, as JSON,