@highstate/backend 0.9.18 → 0.9.19

package/prisma/project/api-key.prisma

@@ -0,0 +1,27 @@
+model ApiKey {
+    /// The CUIDv2 of the API key.
+    id String @id @default(cuid(2))
+
+    /// The metadata of the API key managed by the backend.
+    ///
+    /// [ApiKeyMeta]
+    meta Json
+
+    /// The ID of the service account impersonated by this API key.
+    serviceAccountId String
+
+    /// The API token for authentication.
+    token String @unique
+
+    /// The time when the API key was created.
+    createdAt DateTime @default(now())
+
+    /// The time when the API key was last updated.
+    updatedAt DateTime @updatedAt
+
+    /// The worker version that owns this API key.
+    worker WorkerVersion?
+
+    /// The service account which this API key impersonates.
+    serviceAccount ServiceAccount @relation(fields: [serviceAccountId], references: [id], onDelete: Cascade)
+}

package/prisma/project/artifact.prisma

@@ -0,0 +1,52 @@
+/// The artifact represents a file or folder stored in the system.
+///
+/// It can be produced by units or manually uploaded via API by service accounts.
+///
+/// Since different actors can produce the same artifact with the same content and hash,
+/// there is the ownership/usage concept to track which entities produce or use the artifact.
+/// The "ownership" and "usage" are synonymous in this context and often referred to as "usage".
+///
+/// When no usages are present, the artifact will be automatically garbage collected after a certain period.
+model Artifact {
+    /// The CUIDv2 of the artifact.
+    id String @id @default(cuid(2))
+
+    /// The metadata of the artifact managed by the backend.
+    ///
+    /// Since multiple actors can produce the same artifact,
+    /// this metadata is the last one provided by any actor.
+    ///
+    /// [CommonObjectMeta]
+    meta Json
+
+    /// The SHA256 hash of the artifact content.
+    hash String @unique
+
+    /// The size of the compressed artifact content in bytes.
+    ///
+    /// Does not represent the size of the original file or folder,
+    /// but the size used to store the artifact in the system.
+    size Int
+
+    /// The chunk size of the artifact content in bytes.
+    /// Used to split the artifact into smaller chunks for storage.
+    chunkSize Int
+
+    /// The timestamp when the artifact fist appeared in the system.
+    createdAt DateTime @default(now())
+
+    /// The timestamp when the artifact was last updated.
+    updatedAt DateTime @updatedAt
+
+    /// The service accounts using this artifact.
+    serviceAccounts ServiceAccount[]
+
+    /// The instances using this artifact.
+    instances InstanceState[]
+
+    /// The terminals using this artifact.
+    terminals Terminal[]
+
+    /// The pages using this artifact.
+    pages Page[]
+}

package/prisma/project/custom-status.prisma

@@ -0,0 +1,46 @@
+model InstanceCustomStatus {
+    /// The ID of the instance state this status belongs to.
+    stateId String
+
+    /// The ID of the service account which attached this custom status.
+    serviceAccountId String
+
+    /// The name of the custom status unique within the instance and service account.
+    name String
+
+    /// The metadata of the custom status managed by the backend.
+    ///
+    /// [CommonObjectMeta]
+    meta Json
+
+    /// The status value of the custom status.
+    value String
+
+    /// The message describing the instance's custom status.
+    /// 
+    /// Can be used to provide additional context or information about the status.
+    ///
+    /// The message will be displayed in the 800x600 ANSI terminal in the UI,
+    /// so differenet TUI elements should be drawn within this area.
+    message String?
+
+    /// The order of the custom status in the list of statuses.
+    ///
+    /// Should be values from 0 to 100, where 0 is the highest priority.
+    /// By default, the order is 50.
+    order Int @default(50)
+
+    /// The time when the custom status was first attached to the instance.
+    createdAt DateTime @default(now())
+
+    /// The time when the custom status was last updated.
+    updatedAt DateTime @updatedAt
+
+    /// The instance this custom status belongs to.
+    state InstanceState @relation(fields: [stateId], references: [id])
+
+    /// The service account this custom status belongs to.
+    serviceAccount ServiceAccount @relation(fields: [serviceAccountId], references: [id])
+
+    @@id([stateId, serviceAccountId, name]) // the name must be unique within the instance and service account
+}

package/prisma/project/evaluation.prisma

@@ -0,0 +1,35 @@
+enum InstanceEvaluationStatus {
+    /// transient statuses (not persisted in the database)
+    evaluating
+
+    /// stable statuses
+    evaluated
+    error
+}
+
+model InstanceEvaluationState {
+    /// The ID of the state of the instance.
+    stateId String @id
+
+    /// The status of the instance evaluation.
+    status InstanceEvaluationStatus
+
+    /// The message describing the evaluation status.
+    /// If the evaluation is failed, this message will contain the error description.
+    message String?
+
+    /// The model produced by the evaluation.
+    ///
+    /// Will be `null` if the evaluation is failed.
+    ///
+    /// Can be set for both: real composite instances and virtual instances produced by the evaluation.
+    ///
+    /// [InstanceModel]
+    model Json?
+
+    /// The time when the last evaluation was finished.
+    evaluatedAt DateTime @updatedAt
+
+    /// The instance this state belongs to.
+    state InstanceState @relation(fields: [stateId], references: [id])
+}

package/prisma/project/instance.prisma

@@ -0,0 +1,160 @@
+enum InstanceStatus {
+    /// The instance is exists in the model (resident or virtual), but not yet deployed or was completely destroyed.
+    ///
+    /// "attempted", "deployed" and "failed" instances cannot be transitioned back to "undeployed" after
+    /// successful "destroy" operation.
+    undeployed
+
+    /// The instance was tryied to be initially deployed.
+    ///
+    /// Normally, this status is very short-lived, and here to indicate that the instance
+    /// cannot be safely deleted from the the model until it will be completely destroyed.
+    attempted
+
+    /// The initial deployment of the instance was successful.
+    ///
+    /// The transition of "deployed -> failed" is not possible, so consequent failed operations
+    /// will not affect this status.
+    ///
+    /// Like "attempted", that instance cannot be safely deleted from the model until it will be completely destroyed.
+    deployed
+
+    /// The initial deployment of the instance failed.
+    /// It can still be transitioned to "deployed" by a successful operation
+    ///
+    /// Like "attempted", that instance cannot be safely deleted from the model until it will be completely destroyed.
+    failed
+}
+
+enum InstanceSource {
+    /// The instance is defined in the project model.
+    resident
+
+    /// The instance is produced by evaluation of composite instance.
+    virtual
+}
+
+model InstanceState {
+    /// The surrogate CUIDv2 primary key of the instance to allow renaming instances.
+    id String @id @default(cuid(2))
+
+    /// The ID of the instance managed by the system.
+    ///
+    /// [InstanceId]
+    instanceId String @unique
+
+    /// The status of the instance.
+    status InstanceStatus
+
+    /// The source of the instance.
+    source InstanceSource
+
+    /// The kind of the instance.
+    ///
+    /// [InstanceKind]
+    kind String
+
+    /// The ID of the parent instance state, if this instance is a child of another composite instance.
+    parentId String?
+
+    /// The 32-bit nonce used to invalidate the input hash when secrets are updated.
+    inputHashNonce Int?
+
+    /// The status fields produced by the last operation.
+    ///
+    /// [InstanceStatusFields]
+    statusFields Json?
+
+    /// The calculated instance CRC32 input hash at the moment of last operation completion.
+    ///
+    /// This hash covers:
+    /// - the instance's configuration (name, args, secret hashes);
+    /// - tWorkerVersionponent definition hash;
+    /// - the unit's source hash (if applicable);
+    /// - the input hashes and output hashes of all input instances.
+    inputHash Int?
+
+    /// The CRC32 of the output produced by the instance at the moment of last operation completion.
+    ///
+    /// Does not depend on anything except the instance's output.
+    outputHash Int?
+
+    /// The calculated CRC32 dependency output hash at the moment of last operation completion.
+    ///
+    /// This hash is calculated as combination of output hashes of all input instances and nothing else.
+    ///
+    /// The primary use case of this hash is to "short-circuit" execution:
+    /// if the outputs of input instances have not changed, dependent instances can skip execution,
+    /// even if their input hashes changed due to upstream config changes.
+    /// This prevents unnecessary re-execution of the entire dependency graph when only non-output-affecting inputs are modified.
+    dependencyOutputHash Int?
+
+    /// The mapping of instance output names to artifact IDs passed via them.
+    ///
+    /// Used to authorize access to artifacts for other instances connected to these outputs.
+    ///
+    /// [InstanceArtifactIds]
+    exportedArtifactIds Json?
+
+    /// The count of Pulumi resources currently managed by this instance.
+    currentResourceCount Int?
+
+    /// The message describing the current state of the instance.
+    message String?
+
+    /// The snapshot of the instance model at the moment of last non-preview operation start.
+    ///
+    /// Null if the instance was never operated on.
+    ///
+    /// [InstanceModel]
+    model Json?
+
+    /// The snapshot of the resolved inputs at the moment of last non-preview operation start.
+    ///
+    /// Null if the instance was never operated on.
+    ///
+    /// [InstanceResolvedInputs]
+    resolvedInputs Json?
+
+    /// The parent instance.
+    parent InstanceState? @relation("InstanceHierarchy", fields: [parentId], references: [id])
+
+    /// The child instances, if any.
+    children InstanceState[] @relation("InstanceHierarchy")
+
+    /// The evaluation state of this instance.
+    evaluationState InstanceEvaluationState?
+
+    /// The operation states associated with this instance.
+    operationStates InstanceOperationState[]
+
+    /// The secrets associated with this instance.
+    secrets Secret[]
+
+    /// The terminals associated with this instance.
+    terminals Terminal[]
+
+    /// The pages associated with this instance.
+    pages Page[]
+
+    /// The triggers associated with this instance.
+    triggers Trigger[]
+
+    /// Custom statuses for this instance.
+    customStatuses InstanceCustomStatus[]
+
+    /// The lock that is currently held on this instance.
+    lock InstanceLock?
+
+    /// Worker registrations associated with this instance.
+    workerRegistrations WorkerUnitRegistration[]
+
+    /// The artifacts produced or used by this instance.
+    artifacts Artifact[]
+
+    /// The operation logs associated with this instance.
+    operationLogs OperationLog[]
+
+    /// The user viewports associated with this instance.
+    userViewports UserCompositeViewport[]
+}

package/prisma/project/layout.prisma

@@ -0,0 +1,23 @@
+model UserProjectViewport {
+    /// The opaque ID of the user to which this viewport belongs.
+    userId String @id
+
+    /// The viewport of the user project managed by the frontend.
+    viewport Json
+}
+
+model UserCompositeViewport {
+    /// The opaque ID of the user to which this viewport belongs.
+    userId String
+
+    /// The ID of the state of the composite instance to which this viewport belongs.
+    stateId String
+
+    /// The viewport of the user composite instance managed by the frontend.
+    viewport Json
+
+    /// The instance state to which this viewport belongs.
+    state InstanceState @relation(fields: [stateId], references: [id])
+
+    @@id([userId, stateId])
+}

package/prisma/project/lock.prisma

@@ -0,0 +1,18 @@
+model InstanceLock {
+    /// The ID of the instance state being locked.
+    stateId String @id
+
+    /// The metadata of the lock managed by the backend.
+    ///
+    /// [CommonObjectMeta]
+    meta Json
+
+    /// The CUIDv2 token to ensure ownership of the lock.
+    token String
+
+    /// The time when the lock was acquired.
+    acquiredAt DateTime @default(now())
+
+    /// The instance being locked.
+    state InstanceState @relation(fields: [stateId], references: [id])
+}

package/prisma/project/main.prisma

@@ -0,0 +1,17 @@
+datasource db {
+    provider  = "sqlite"
+    directUrl = env("HIGHSTATE_MIGRATION_DATABASE_URL")
+}
+
+generator client {
+    provider               = "prisma-client"
+    previewFeatures        = ["queryCompiler", "driverAdapters"]
+    output                 = "../../src/database/_generated/project"
+    moduleFormat           = "esm"
+    generatedFileExtension = "ts"
+    importFileExtension    = "ts"
+}
+
+generator json {
+    provider = "prisma-json-types-generator"
+}

package/prisma/project/migrations/20250816081310_initial/migration.sql

@@ -0,0 +1,300 @@
+-- CreateTable
+CREATE TABLE "ApiKey" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL,
+    "scopes" JSONB NOT NULL,
+    "token" TEXT NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "Artifact" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL,
+    "hash" TEXT NOT NULL,
+    "size" INTEGER NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "InstanceCustomStatus" (
+    "instanceId" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "meta" JSONB NOT NULL,
+    "value" TEXT NOT NULL,
+    "message" TEXT,
+    "order" INTEGER NOT NULL DEFAULT 50,
+
+    PRIMARY KEY ("instanceId", "name"),
+    CONSTRAINT "InstanceCustomStatus_instanceId_fkey" FOREIGN KEY ("instanceId") REFERENCES "InstanceState" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "InstanceEvaluationState" (
+    "instanceId" TEXT NOT NULL PRIMARY KEY,
+    "status" TEXT NOT NULL,
+    "message" TEXT,
+    "model" JSONB,
+    CONSTRAINT "InstanceEvaluationState_instanceId_fkey" FOREIGN KEY ("instanceId") REFERENCES "InstanceState" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "InstanceState" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "status" TEXT NOT NULL,
+    "kind" TEXT NOT NULL,
+    "inputHashNonce" INTEGER,
+    "lastOperationId" TEXT,
+    "statusFields" JSONB,
+    "inputHash" INTEGER,
+    "outputHash" INTEGER,
+    "dependencyOutputHash" INTEGER,
+    CONSTRAINT "InstanceState_lastOperationId_fkey" FOREIGN KEY ("lastOperationId") REFERENCES "Operation" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "InstanceState_id_lastOperationId_fkey" FOREIGN KEY ("id", "lastOperationId") REFERENCES "InstanceOperationState" ("instanceId", "operationId") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "InstanceLock" (
+    "instanceId" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL,
+    CONSTRAINT "InstanceLock_instanceId_fkey" FOREIGN KEY ("instanceId") REFERENCES "InstanceState" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "Operation" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL,
+    "type" TEXT NOT NULL,
+    "options" JSONB NOT NULL,
+    "requestedInstanceIds" JSONB NOT NULL,
+    "startedAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "completedAt" DATETIME
+);
+
+-- CreateTable
+CREATE TABLE "InstanceOperationState" (
+    "operationId" TEXT NOT NULL,
+    "instanceId" TEXT NOT NULL,
+    "parentId" TEXT,
+    "status" TEXT NOT NULL,
+    "message" TEXT,
+    "currentResourceCount" INTEGER,
+    "totalResourceCount" INTEGER,
+    "args" JSONB NOT NULL,
+    "resolvedInputs" JSONB NOT NULL,
+
+    PRIMARY KEY ("operationId", "instanceId"),
+    CONSTRAINT "InstanceOperationState_operationId_fkey" FOREIGN KEY ("operationId") REFERENCES "Operation" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "InstanceOperationState_instanceId_fkey" FOREIGN KEY ("instanceId") REFERENCES "InstanceState" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "OperationLog" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "operationId" TEXT NOT NULL,
+    "instanceId" TEXT,
+    "content" TEXT NOT NULL,
+    CONSTRAINT "OperationLog_operationId_fkey" FOREIGN KEY ("operationId") REFERENCES "Operation" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "OperationLog_instanceId_fkey" FOREIGN KEY ("instanceId") REFERENCES "InstanceState" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "Page" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL,
+    "instanceId" TEXT,
+    "serviceAccountId" TEXT,
+    "content" JSONB NOT NULL,
+    CONSTRAINT "Page_instanceId_fkey" FOREIGN KEY ("instanceId") REFERENCES "InstanceState" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "Page_serviceAccountId_fkey" FOREIGN KEY ("serviceAccountId") REFERENCES "ServiceAccount" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "Secret" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL,
+    "instanceId" TEXT,
+    "name" TEXT,
+    "systemName" TEXT,
+    "serviceAccountId" TEXT,
+    "content" JSONB NOT NULL,
+    CONSTRAINT "Secret_instanceId_fkey" FOREIGN KEY ("instanceId") REFERENCES "InstanceState" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "Secret_serviceAccountId_fkey" FOREIGN KEY ("serviceAccountId") REFERENCES "ServiceAccount" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "ServiceAccount" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "Terminal" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL,
+    "spec" JSONB NOT NULL,
+    "instanceId" TEXT,
+    "name" TEXT,
+    "serviceAccountId" TEXT,
+    CONSTRAINT "Terminal_instanceId_fkey" FOREIGN KEY ("instanceId") REFERENCES "InstanceState" ("id") ON DELETE SET NULL ON UPDATE CASCADE,
+    CONSTRAINT "Terminal_serviceAccountId_fkey" FOREIGN KEY ("serviceAccountId") REFERENCES "ServiceAccount" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "TerminalSession" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL,
+    "terminalId" TEXT NOT NULL,
+    CONSTRAINT "TerminalSession_terminalId_fkey" FOREIGN KEY ("terminalId") REFERENCES "Terminal" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "TerminalSessionLog" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "sessionId" TEXT NOT NULL,
+    "content" TEXT NOT NULL,
+    CONSTRAINT "TerminalSessionLog_sessionId_fkey" FOREIGN KEY ("sessionId") REFERENCES "TerminalSession" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "Trigger" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL,
+    "instanceId" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "spec" JSONB NOT NULL,
+    CONSTRAINT "Trigger_instanceId_fkey" FOREIGN KEY ("instanceId") REFERENCES "InstanceState" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "UnlockMethod" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "meta" JSONB NOT NULL,
+    "type" TEXT NOT NULL,
+    "encryptedIdentity" TEXT NOT NULL,
+    "recipient" TEXT NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "Worker" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "identity" TEXT NOT NULL,
+    "serviceAccountId" TEXT NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "Worker_serviceAccountId_fkey" FOREIGN KEY ("serviceAccountId") REFERENCES "ServiceAccount" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "WorkerVersion" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "workerId" TEXT NOT NULL,
+    "digest" TEXT NOT NULL,
+    "apiKeyId" TEXT NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "WorkerVersion_apiKeyId_fkey" FOREIGN KEY ("apiKeyId") REFERENCES "ApiKey" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "WorkerUnitRegistration" (
+    "workerVersionId" TEXT NOT NULL,
+    "instanceId" TEXT NOT NULL,
+    "params" JSONB NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+
+    PRIMARY KEY ("workerVersionId", "instanceId"),
+    CONSTRAINT "WorkerUnitRegistration_workerVersionId_fkey" FOREIGN KEY ("workerVersionId") REFERENCES "WorkerVersion" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "WorkerUnitRegistration_instanceId_fkey" FOREIGN KEY ("instanceId") REFERENCES "InstanceState" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "_ArtifactToServiceAccount" (
+    "A" TEXT NOT NULL,
+    "B" TEXT NOT NULL,
+    CONSTRAINT "_ArtifactToServiceAccount_A_fkey" FOREIGN KEY ("A") REFERENCES "Artifact" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "_ArtifactToServiceAccount_B_fkey" FOREIGN KEY ("B") REFERENCES "ServiceAccount" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "_ArtifactToInstanceState" (
+    "A" TEXT NOT NULL,
+    "B" TEXT NOT NULL,
+    CONSTRAINT "_ArtifactToInstanceState_A_fkey" FOREIGN KEY ("A") REFERENCES "Artifact" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "_ArtifactToInstanceState_B_fkey" FOREIGN KEY ("B") REFERENCES "InstanceState" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "_ArtifactToTerminal" (
+    "A" TEXT NOT NULL,
+    "B" TEXT NOT NULL,
+    CONSTRAINT "_ArtifactToTerminal_A_fkey" FOREIGN KEY ("A") REFERENCES "Artifact" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "_ArtifactToTerminal_B_fkey" FOREIGN KEY ("B") REFERENCES "Terminal" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "_ArtifactToPage" (
+    "A" TEXT NOT NULL,
+    "B" TEXT NOT NULL,
+    CONSTRAINT "_ArtifactToPage_A_fkey" FOREIGN KEY ("A") REFERENCES "Artifact" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "_ArtifactToPage_B_fkey" FOREIGN KEY ("B") REFERENCES "Page" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "ApiKey_token_key" ON "ApiKey"("token");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Artifact_hash_key" ON "Artifact"("hash");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "InstanceState_id_lastOperationId_key" ON "InstanceState"("id", "lastOperationId");
+
+-- CreateIndex
+CREATE INDEX "Page_instanceId_idx" ON "Page"("instanceId");
+
+-- CreateIndex
+CREATE INDEX "Page_serviceAccountId_idx" ON "Page"("serviceAccountId");
+
+-- CreateIndex
+CREATE INDEX "Terminal_serviceAccountId_idx" ON "Terminal"("serviceAccountId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Terminal_instanceId_name_key" ON "Terminal"("instanceId", "name");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Trigger_instanceId_name_key" ON "Trigger"("instanceId", "name");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Worker_identity_key" ON "Worker"("identity");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Worker_serviceAccountId_key" ON "Worker"("serviceAccountId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "WorkerVersion_digest_key" ON "WorkerVersion"("digest");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "WorkerVersion_apiKeyId_key" ON "WorkerVersion"("apiKeyId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "_ArtifactToServiceAccount_AB_unique" ON "_ArtifactToServiceAccount"("A", "B");
+
+-- CreateIndex
+CREATE INDEX "_ArtifactToServiceAccount_B_index" ON "_ArtifactToServiceAccount"("B");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "_ArtifactToInstanceState_AB_unique" ON "_ArtifactToInstanceState"("A", "B");
+
+-- CreateIndex
+CREATE INDEX "_ArtifactToInstanceState_B_index" ON "_ArtifactToInstanceState"("B");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "_ArtifactToTerminal_AB_unique" ON "_ArtifactToTerminal"("A", "B");
+
+-- CreateIndex
+CREATE INDEX "_ArtifactToTerminal_B_index" ON "_ArtifactToTerminal"("B");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "_ArtifactToPage_AB_unique" ON "_ArtifactToPage"("A", "B");
+
+-- CreateIndex
+CREATE INDEX "_ArtifactToPage_B_index" ON "_ArtifactToPage"("B");