@agent-team-foundation/first-tree-hub 0.12.5 → 0.12.6

package/dist/drizzle/0037_github_app_installations.sql

@@ -0,0 +1,52 @@
+-- GitHub App installation registry. See packages/server/src/db/schema/github-app-installations.ts
+-- for the Drizzle types, and docs/github-app-design-zh.md for the design rationale.
+--
+-- One row per (GitHub account ↔ Hub team) binding. Replaces the per-repo
+-- OAuth + webhook-secret model that lived in
+-- `organization_settings.github_integration.webhookSecretCipher` — both
+-- coexist during the transition, the old path is dropped in a later PR
+-- (D3 hard cut, design doc §7 step 7).
+--
+-- Per the team's "integrity in service layer" convention, NO foreign-key
+-- constraints on hub_organization_id beyond the optional reference — the
+-- 1:1 binding (D2 / §8 Q1) is enforced by a UNIQUE INDEX rather than by
+-- ON DELETE CASCADE so deleting a Hub org doesn't tombstone the
+-- GitHub-side record (which still exists upstream).
+
+CREATE TABLE IF NOT EXISTS "github_app_installations" (
+  "id" text PRIMARY KEY NOT NULL,
+  "installation_id" bigint NOT NULL,
+  "account_type" text NOT NULL,
+  "account_login" text NOT NULL,
+  "account_github_id" bigint NOT NULL,
+  "hub_organization_id" text,
+  "permissions" jsonb NOT NULL,
+  "events" jsonb NOT NULL,
+  "suspended_at" timestamp with time zone,
+  "created_at" timestamp with time zone NOT NULL DEFAULT now(),
+  "updated_at" timestamp with time zone NOT NULL DEFAULT now(),
+  CONSTRAINT "ck_github_app_installations_account_type"
+    CHECK ("account_type" IN ('User', 'Organization'))
+);
+
+--> statement-breakpoint
+DO $$ BEGIN
+  ALTER TABLE "github_app_installations"
+    ADD CONSTRAINT "github_app_installations_hub_organization_id_organizations_id_fk"
+    FOREIGN KEY ("hub_organization_id") REFERENCES "organizations"("id")
+    ON DELETE SET NULL ON UPDATE NO ACTION;
+EXCEPTION
+  WHEN duplicate_object THEN null;
+END $$;
+
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "uq_github_app_installations_installation_id"
+  ON "github_app_installations" ("installation_id");
+
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "uq_github_app_installations_hub_org"
+  ON "github_app_installations" ("hub_organization_id");
+
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "idx_github_app_installations_account"
+  ON "github_app_installations" ("account_github_id");

package/dist/drizzle/meta/_journal.json

@@ -260,6 +260,13 @@
       "when": 1778544000000,
       "tag": "0036_github_entity_chat_mappings",
       "breakpoints": true
+    },
+    {
+      "idx": 37,
+      "version": "7",
+      "when": 1778803200000,
+      "tag": "0037_github_app_installations",
+      "breakpoints": true
     }
   ]
 }

package/dist/{feishu-CKGzIamp.mjs → feishu-CsfadBKa.mjs}

@@ -1,6 +1,6 @@
 import { r as __exportAll } from "./chunk-BSw8zbkd.mjs";
 import { t as cliFetch } from "./cli-fetch--tiwKm5S.mjs";
-import { r as AGENT_SELECTOR_HEADER } from "./dist-BwPlBZWi.mjs";
+import { r as AGENT_SELECTOR_HEADER } from "./dist-xP6NpdMp.mjs";
 //#region src/core/feishu.ts
 var feishu_exports = /* @__PURE__ */ __exportAll({
 	bindFeishuBot: () => bindFeishuBot,

package/dist/index.mjs

@@ -1,12 +1,12 @@
 import "./observability-BAScT_5S-BcW9HgkG.mjs";
-import { A as checkDocker, B as isServiceSupported, E as checkAgentConfigs, F as checkWebSocket, G as uninstallClientService, H as restartClientService, I as printResults, J as stopPostgres, K as ensurePostgres, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, V as resolveCliInvocation, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, Z as rotateClientIdWithBackup, _ as formatCheckReport, b as onboardCreate, d as startServer, g as promptMissingFields, h as promptAddAgent, j as checkNodeVersion, k as checkDatabase, lt as FirstTreeHubSDK, m as isInteractive, n as deriveHubUrlFromToken, nt as hasUser, q as isDockerAvailable, t as HubUrlDerivationError, tt as createOwner, ut as SdkError, y as onboardCheck, z as installClientService } from "./saas-connect-DYjvx5yr.mjs";
+import { A as checkDocker, B as isServiceSupported, E as checkAgentConfigs, F as checkWebSocket, G as uninstallClientService, H as restartClientService, I as printResults, J as stopPostgres, K as ensurePostgres, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, V as resolveCliInvocation, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, Z as rotateClientIdWithBackup, _ as formatCheckReport, b as onboardCreate, d as startServer, g as promptMissingFields, h as promptAddAgent, j as checkNodeVersion, k as checkDatabase, lt as FirstTreeHubSDK, m as isInteractive, n as deriveHubUrlFromToken, nt as hasUser, q as isDockerAvailable, t as HubUrlDerivationError, tt as createOwner, ut as SdkError, y as onboardCheck, z as installClientService } from "./saas-connect-RCN8zL5e.mjs";
 import "./logger-core-BTmvdflj-DjW8FM4T.mjs";
-import { a as ensureFreshAdminToken, c as resolveServerUrl, i as ensureFreshAccessToken, n as AuthRefreshRateLimitedError, s as resolveAccessToken, t as AuthRefreshFailedError } from "./bootstrap-C_K2CKXC.mjs";
+import { a as ensureFreshAdminToken, c as resolveServerUrl, i as ensureFreshAccessToken, n as AuthRefreshRateLimitedError, s as resolveAccessToken, t as AuthRefreshFailedError } from "./bootstrap-BCZC1ki6.mjs";
 import { i as blank, s as status } from "./cli-fetch--tiwKm5S.mjs";
-import "./dist-BwPlBZWi.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-CKGzIamp.mjs";
+import "./dist-xP6NpdMp.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-CsfadBKa.mjs";
 import "./errors-CF5evtJt-B0NTIVPt.mjs";
 import "./src-DNBS5Yjj.mjs";
-import "./client-DL5vHhvQ-CnYGq2x-.mjs";
+import "./client-B89AKi3Q-DAyGdQSq.mjs";
 import "./invitation-Bg0TRiyx-BsZH4GCS.mjs";
 export { AuthRefreshFailedError, AuthRefreshRateLimitedError, ClientRuntime, FirstTreeHubSDK, HubUrlDerivationError, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkDatabase, checkDocker, checkNodeVersion, checkServerConfig, checkServerHealth, checkServerReachable, checkWebSocket, createOwner, deriveHubUrlFromToken, ensureFreshAccessToken, ensureFreshAdminToken, ensurePostgres, formatCheckReport, getClientServiceStatus, handleClientOrgMismatch, hasUser, installClientService, isDockerAvailable, isInteractive, isServiceSupported, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveCliInvocation, resolveServerUrl, restartClientService, rotateClientIdWithBackup, runHomeMigration, runMigrations, startClientService, startServer, status, stopClientService, stopPostgres, uninstallClientService };

package/dist/{invitation-C299fxkP-Dts66QTU.mjs → invitation-C299fxkP-DFBBuUcj.mjs}

@@ -1,4 +1,4 @@
-import "./dist-BwPlBZWi.mjs";
+import "./dist-xP6NpdMp.mjs";
 import "./errors-CF5evtJt-B0NTIVPt.mjs";
 import { s as previewInvitation } from "./invitation-Bg0TRiyx-BsZH4GCS.mjs";
 export { previewInvitation };