@intx/db 0.2.2 → 0.4.0

package/migrations/0078_workflow_run_dispatch_kind.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "workflow_run_dispatch" ADD COLUMN "kind" text DEFAULT 'mail' NOT NULL;--> statement-breakpoint
+ALTER TABLE "workflow_run_dispatch" ADD CONSTRAINT "workflow_run_dispatch_kind_check" CHECK ("workflow_run_dispatch"."kind" in ('mail', 'signal'));

package/migrations/0079_rename_workflow_run_deployment_id_to_anchor_run_id.sql

@@ -0,0 +1,4 @@
+ALTER TABLE "workflow_run" RENAME COLUMN "deployment_id" TO "anchor_run_id";--> statement-breakpoint
+ALTER TABLE "workflow_run" DROP CONSTRAINT "workflow_run_deployment_id_workflow_run_id_fk";
+--> statement-breakpoint
+ALTER TABLE "workflow_run" ADD CONSTRAINT "workflow_run_anchor_run_id_workflow_run_id_fk" FOREIGN KEY ("anchor_run_id") REFERENCES "public"."workflow_run"("id") ON DELETE cascade ON UPDATE no action;

package/migrations/0080_rename_correlation_approval_deployment_id_to_anchor_run_id.sql

@@ -0,0 +1,9 @@
+ALTER TABLE "signal_correlation" RENAME COLUMN "deployment_id" TO "anchor_run_id";--> statement-breakpoint
+ALTER TABLE "approval" RENAME COLUMN "deployment_id" TO "anchor_run_id";--> statement-breakpoint
+ALTER TABLE "approval" DROP CONSTRAINT "approval_deployment_id_workflow_run_id_fk";
+--> statement-breakpoint
+ALTER TABLE "signal_correlation" DROP CONSTRAINT "signal_correlation_deployment_id_workflow_run_id_fk";
+--> statement-breakpoint
+ALTER INDEX "approval_deployment_idx" RENAME TO "approval_anchor_run_idx";--> statement-breakpoint
+ALTER TABLE "approval" ADD CONSTRAINT "approval_anchor_run_id_workflow_run_id_fk" FOREIGN KEY ("anchor_run_id") REFERENCES "public"."workflow_run"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "signal_correlation" ADD CONSTRAINT "signal_correlation_anchor_run_id_workflow_run_id_fk" FOREIGN KEY ("anchor_run_id") REFERENCES "public"."workflow_run"("id") ON DELETE cascade ON UPDATE no action;

package/migrations/0081_workflow_definition_content_hash_and_approved_wire_hash.sql

@@ -0,0 +1,4 @@
+DROP INDEX "workflow_definition_asset_idx";--> statement-breakpoint
+ALTER TABLE "workflow_definition" ADD COLUMN "wire_hash" text;--> statement-breakpoint
+ALTER TABLE "workflow_definition_version" ADD COLUMN "approved_wire_hash" text;--> statement-breakpoint
+CREATE UNIQUE INDEX "workflow_definition_asset_wire_hash_idx" ON "workflow_definition" USING btree ("asset_id","wire_hash");

package/migrations/0082_blue_black_queen.sql

@@ -0,0 +1 @@
+ALTER TABLE "workflow_definition_version" ADD COLUMN "grant_snapshot" jsonb;

package/migrations/0083_replace_launch_spec_snapshot_with_frozen_bundle.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "workflow_run_launch_spec" ADD COLUMN "frozen_approval_bundle" jsonb NOT NULL;--> statement-breakpoint
+ALTER TABLE "workflow_run_launch_spec" DROP COLUMN "definition_snapshot";--> statement-breakpoint
+ALTER TABLE "workflow_run_launch_spec" DROP COLUMN "definition_hash";

package/migrations/0084_delete_orphaned_credential_grants.sql

@@ -0,0 +1,22 @@
+-- Remove `credential:{id}` grant rows that reference a credential that no longer
+-- exists. Before credential DELETE cleaned up its per-credential grants, deleting
+-- a personal credential left its `credential:{id}` grant behind, and migration
+-- 0037 backfilled the same shape for pre-existing personal credentials, so a
+-- credential hard-deleted before that cleanup shipped left an orphaned grant.
+--
+-- The coarse wildcard `credential:*` role resource is excluded explicitly: no
+-- credential has the id `*`, so the NOT EXISTS guard alone would wrongly match
+-- it. There is no tenant scope: credential ids are globally unique, so an
+-- orphaned grant is one whose id matches no credential in any tenant. This
+-- removes every action on an orphaned resource, matching the credential DELETE
+-- handler.
+--
+-- Idempotent: after this runs no orphaned row remains, so a re-run is a no-op.
+DELETE FROM "grant"
+WHERE "resource" LIKE 'credential:%'
+  AND "resource" <> 'credential:*'
+  AND NOT EXISTS (
+    SELECT 1
+    FROM "credential" c
+    WHERE c."id" = substr("grant"."resource", length('credential:') + 1)
+  );

package/migrations/0085_add_approval_run_idx.sql

@@ -0,0 +1 @@
+CREATE INDEX "approval_run_idx" ON "approval" USING btree ("run_id");

package/migrations/0086_cool_human_cannonball.sql

@@ -0,0 +1 @@
+ALTER TABLE "workflow_run" ADD COLUMN "credential_refs" jsonb;

package/migrations/0087_drop_sidecar_placement.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "sidecar_allocation" DROP CONSTRAINT "sidecar_allocation_placement_check";--> statement-breakpoint
+ALTER TABLE "sidecar_allocation" DROP COLUMN "placement_sharing";--> statement-breakpoint
+ALTER TABLE "sidecar_allocation" DROP COLUMN "sidecar_reuse";

package/migrations/0088_thick_sprite.sql

@@ -0,0 +1,32 @@
+CREATE TABLE "workflow_probe" (
+	"id" text PRIMARY KEY NOT NULL,
+	"tenant_id" text NOT NULL,
+	"definition_asset_id" text NOT NULL,
+	"source" jsonb NOT NULL,
+	"entry" text NOT NULL,
+	"pin" text,
+	"status" text DEFAULT 'pending' NOT NULL,
+	"provisioner_id" text NOT NULL,
+	"provisioner_api_version" integer NOT NULL,
+	"provisioner_binding_fingerprint" text NOT NULL,
+	"sidecar_id" text,
+	"generation" integer DEFAULT 0 NOT NULL,
+	"external_ref" text,
+	"result" jsonb,
+	"failure_code" text,
+	"failure_message" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "workflow_probe_status_check" CHECK ("workflow_probe"."status" in ('pending', 'provisioning', 'probing', 'releasing', 'succeeded', 'failed')),
+	CONSTRAINT "workflow_probe_succeeded_result_check" CHECK ("workflow_probe"."status" <> 'succeeded' or "workflow_probe"."result" is not null),
+	CONSTRAINT "workflow_probe_generation_check" CHECK ("workflow_probe"."generation" >= 0)
+);
+--> statement-breakpoint
+DELETE FROM "sidecar" WHERE "credential_scope" = 'shared';--> statement-breakpoint
+ALTER TABLE "sidecar" DROP CONSTRAINT "sidecar_credential_scope_check";--> statement-breakpoint
+ALTER TABLE "workflow_probe" ADD CONSTRAINT "workflow_probe_tenant_id_tenant_id_fk" FOREIGN KEY ("tenant_id") REFERENCES "public"."tenant"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "workflow_probe" ADD CONSTRAINT "workflow_probe_definition_asset_id_asset_id_fk" FOREIGN KEY ("definition_asset_id") REFERENCES "public"."asset"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "workflow_probe" ADD CONSTRAINT "workflow_probe_sidecar_id_sidecar_id_fk" FOREIGN KEY ("sidecar_id") REFERENCES "public"."sidecar"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "workflow_probe_active_idx" ON "workflow_probe" USING btree ("created_at") WHERE "workflow_probe"."status" in ('pending', 'provisioning', 'probing', 'releasing');--> statement-breakpoint
+CREATE INDEX "workflow_probe_sidecar_idx" ON "workflow_probe" USING btree ("sidecar_id");--> statement-breakpoint
+ALTER TABLE "sidecar" DROP COLUMN "credential_scope";

package/migrations/0089_tense_selene.sql

@@ -0,0 +1,13 @@
+CREATE TABLE "principal_key" (
+	"id" text PRIMARY KEY NOT NULL,
+	"principal_id" text NOT NULL,
+	"public_key" text NOT NULL,
+	"private_key" text NOT NULL,
+	"status" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "principal_key_public_key_unique" UNIQUE("public_key")
+);
+--> statement-breakpoint
+ALTER TABLE "principal_key" ADD CONSTRAINT "principal_key_principal_id_principal_id_fk" FOREIGN KEY ("principal_id") REFERENCES "public"."principal"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "principal_key_one_active" ON "principal_key" USING btree ("principal_id") WHERE "principal_key"."status" = 'active';

package/migrations/0090_tenant_domain_lower_unique.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "tenant" DROP CONSTRAINT "tenant_domain_unique";--> statement-breakpoint
+CREATE UNIQUE INDEX "tenant_domain_lower_idx" ON "tenant" USING btree (lower("domain"));

package/migrations/0091_workflow_run_dispatch_sender_address.sql

@@ -0,0 +1,21 @@
+ALTER TABLE "workflow_run_dispatch" ADD COLUMN "sender_address" text;--> statement-breakpoint
+-- Fail in-flight mail dispatches that predate the authenticated-sender
+-- requirement. They carry no persisted hub-verified sender, and neither
+-- fabricating one nor re-reading the signed From is permitted, so they are
+-- failed in place rather than delivered unauthenticated. Only unsettled
+-- (pending/acknowledged) mail rows are ever re-dispatched and reconstruct a
+-- mail.inbound frame; terminal (settled/failed) mail rows never do, so they
+-- keep their NULL sender under the status-scoped check below. On a fresh
+-- database this affects zero rows.
+UPDATE "workflow_run_dispatch"
+SET "status" = 'failed',
+	"failure_code" = 'sender_address_migration',
+	"failure_message" = 'in-flight mail dispatch predates the authenticated-sender requirement and carries no hub-verified sender',
+	"next_attempt_at" = NULL,
+	"delivery_lease_id" = NULL,
+	"delivery_lease_expires_at" = NULL,
+	"updated_at" = now()
+WHERE "kind" = 'mail'
+	AND "status" IN ('pending', 'acknowledged')
+	AND "sender_address" IS NULL;--> statement-breakpoint
+ALTER TABLE "workflow_run_dispatch" ADD CONSTRAINT "workflow_run_dispatch_mail_sender_check" CHECK ("workflow_run_dispatch"."kind" <> 'mail' or "workflow_run_dispatch"."status" in ('settled', 'failed') or "workflow_run_dispatch"."sender_address" is not null);

package/migrations/0092_sidecar_destroy_failed.sql

@@ -0,0 +1,4 @@
+ALTER TABLE "sidecar_allocation" DROP CONSTRAINT "sidecar_allocation_status_check";--> statement-breakpoint
+DROP INDEX "sidecar_allocation_active_sidecar_idx";--> statement-breakpoint
+CREATE UNIQUE INDEX "sidecar_allocation_active_sidecar_idx" ON "sidecar_allocation" USING btree ("sidecar_id") WHERE "sidecar_allocation"."status" in ('provisioning', 'allocated', 'replacing', 'releasing', 'destroy_failed');--> statement-breakpoint
+ALTER TABLE "sidecar_allocation" ADD CONSTRAINT "sidecar_allocation_status_check" CHECK ("sidecar_allocation"."status" in ('pending', 'provisioning', 'allocated', 'replacing', 'releasing', 'destroy_failed', 'released', 'failed'));

package/migrations/0093_sidecar_initialization.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "sidecar_allocation" ADD COLUMN "initialization_lease_id" text;--> statement-breakpoint
+ALTER TABLE "sidecar_allocation" ADD CONSTRAINT "sidecar_allocation_initialization_check" CHECK ("sidecar_allocation"."initialization_lease_id" is null or ("sidecar_allocation"."status" = 'allocated' and "sidecar_allocation"."ensure_accepted_generation" is not null and "sidecar_allocation"."ensure_accepted_generation" = "sidecar_allocation"."generation"));