@coffre/db 0.11.0 → 0.12.0

package/src/migrations/sqlite/meta/_journal.json

@@ -113,6 +113,13 @@
       "when": 1792803757926,
       "tag": "0015_workload_access",
       "breakpoints": true
+    },
+    {
+      "idx": 16,
+      "version": "6",
+      "when": 1792835446455,
+      "tag": "0016_capped_alerts",
+      "breakpoints": true
     }
   ]
 }

package/src/schema.sqlite.ts

@@ -558,6 +558,16 @@ export const consumedTokens = sqliteTable(
   (table) => [check('consumed_tokens_hash_check', sql`octet_length(${table.hash}) = 32`)],
 );
 
+export const cappedAlerts = sqliteTable(
+  'capped_alerts',
+  {
+    service: text().notNull(),
+    kind: text().notNull(),
+    raisedAt: time('raised_at').notNull(),
+  },
+  (table) => [primaryKey({ name: 'capped_alerts_pkey', columns: [table.service, table.kind] })],
+);
+
 /**
  * MCP clients that registered themselves (RFC 7591), the fallback to Client
  * ID Metadata Documents, which need no row. The ID is the client's

package/src/schema.ts

@@ -613,6 +613,24 @@ export const consumedTokens = pgTable(
   (table) => [check('consumed_tokens_hash_check', sql`octet_length(${table.hash}) = 32`)],
 );
 
+/**
+ * When a service's capped alert was last raised, by kind: the refusal of a
+ * token signed by a key its uploaded keys lack (`unknown_key`) alerts once
+ * an hour, however many isolates see it. One conditional write per refusal
+ * decides (`claimAlert`), so that the many it caps never reach the log's
+ * head. Only a request that a binding of the service on the token's issuer
+ * gets as far as its keys writes here: a row per service, at most, per kind.
+ */
+export const cappedAlerts = pgTable(
+  'capped_alerts',
+  {
+    service: text().notNull(),
+    kind: text().notNull(),
+    raisedAt: timestamp('raised_at', { withTimezone: true }).notNull(),
+  },
+  (table) => [primaryKey({ name: 'capped_alerts_pkey', columns: [table.service, table.kind] })],
+);
+
 /**
  * MCP clients that registered themselves (RFC 7591), the fallback to Client
  * ID Metadata Documents, which need no row. The ID is the client's