@jingyi0605/codingns 0.4.0 → 0.5.1

package/dist/server/storage/sqlite/schema.sql

@@ -23,6 +23,8 @@ CREATE TABLE IF NOT EXISTS auth_tokens (
   user_id TEXT NOT NULL,
   token_type TEXT NOT NULL CHECK (token_type IN ('access', 'refresh')),
   token_hash TEXT NOT NULL UNIQUE,
+  device_session_id TEXT,
+  caller_kind TEXT CHECK (caller_kind IN ('interactive_user', 'assistant_runtime')),
   expires_at TEXT NOT NULL,
   revoked_at TEXT,
   created_at TEXT NOT NULL,
@@ -31,6 +33,59 @@ CREATE TABLE IF NOT EXISTS auth_tokens (
 
 CREATE INDEX IF NOT EXISTS idx_auth_tokens_user_id ON auth_tokens(user_id);
 CREATE INDEX IF NOT EXISTS idx_auth_tokens_expires_at ON auth_tokens(expires_at);
+CREATE INDEX IF NOT EXISTS idx_auth_tokens_device_session_id ON auth_tokens(device_session_id);
+
+CREATE TABLE IF NOT EXISTS auth_devices (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  client_type TEXT NOT NULL CHECK (client_type IN ('desktop', 'web', 'ios', 'android', 'unknown')),
+  client_instance_id TEXT,
+  display_name TEXT,
+  user_agent TEXT,
+  is_primary INTEGER NOT NULL DEFAULT 0 CHECK (is_primary IN (0, 1)),
+  last_source_address TEXT,
+  last_seen_at TEXT NOT NULL,
+  primary_set_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  FOREIGN KEY (user_id) REFERENCES auth_users(id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_auth_devices_user_id ON auth_devices(user_id, updated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_auth_devices_client_lookup
+  ON auth_devices(user_id, client_type, client_instance_id);
+
+CREATE TABLE IF NOT EXISTS auth_device_sessions (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  device_id TEXT,
+  access_token_id TEXT,
+  refresh_token_id TEXT,
+  revoked_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  FOREIGN KEY (user_id) REFERENCES auth_users(id),
+  FOREIGN KEY (device_id) REFERENCES auth_devices(id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_auth_device_sessions_user_id
+  ON auth_device_sessions(user_id, updated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_auth_device_sessions_device_id
+  ON auth_device_sessions(device_id, updated_at DESC);
+
+CREATE TABLE IF NOT EXISTS auth_login_events (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  device_id TEXT,
+  client_type TEXT NOT NULL CHECK (client_type IN ('desktop', 'web', 'ios', 'android', 'unknown')),
+  source_address TEXT,
+  occurred_at TEXT NOT NULL,
+  FOREIGN KEY (user_id) REFERENCES auth_users(id),
+  FOREIGN KEY (device_id) REFERENCES auth_devices(id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_auth_login_events_user_id
+  ON auth_login_events(user_id, occurred_at DESC);
 
 CREATE TABLE IF NOT EXISTS auth_login_attempts (
   username TEXT PRIMARY KEY,
@@ -789,7 +844,7 @@ CREATE TABLE IF NOT EXISTS assistant_sandboxes (
   source_kind TEXT NOT NULL CHECK (source_kind IN ('blank', 'clone')),
   source_ref TEXT,
   visibility TEXT NOT NULL CHECK (visibility IN ('assistant_only', 'pinned')),
-  status TEXT NOT NULL CHECK (status IN ('active', 'archived', 'expired', 'deleted')),
+  status TEXT NOT NULL CHECK (status IN ('active', 'archived', 'expired', 'orphaned', 'deleted')),
   purpose TEXT,
   expires_at TEXT,
   promoted_at TEXT,
@@ -905,6 +960,9 @@ CREATE TABLE IF NOT EXISTS butler_follow_up_tasks (
   project_id TEXT NOT NULL,
   butler_session_id TEXT NOT NULL,
   session_id TEXT NOT NULL,
+  provider_id TEXT NOT NULL CHECK (provider_id IN ('codex', 'claude-code')),
+  assistant_butler_session_id TEXT NOT NULL,
+  assistant_session_id TEXT NOT NULL,
   created_by_user_id TEXT NOT NULL,
   objective TEXT NOT NULL,
   completion_criteria TEXT NOT NULL DEFAULT '',
@@ -929,6 +987,8 @@ CREATE TABLE IF NOT EXISTS butler_follow_up_tasks (
   FOREIGN KEY (project_id) REFERENCES butler_projects(id) ON DELETE CASCADE,
   FOREIGN KEY (butler_session_id) REFERENCES butler_sessions(id) ON DELETE CASCADE,
   FOREIGN KEY (session_id) REFERENCES session_bindings(session_id) ON DELETE CASCADE,
+  FOREIGN KEY (assistant_butler_session_id) REFERENCES butler_sessions(id) ON DELETE CASCADE,
+  FOREIGN KEY (assistant_session_id) REFERENCES session_bindings(session_id) ON DELETE CASCADE,
   FOREIGN KEY (created_by_user_id) REFERENCES auth_users(id)
 );
 
@@ -1085,6 +1145,7 @@ CREATE INDEX IF NOT EXISTS idx_verification_runs_project_status
 
 CREATE TABLE IF NOT EXISTS instance_tailscale_config (
   id TEXT PRIMARY KEY CHECK (id = 'default'),
+  activated INTEGER NOT NULL DEFAULT 0 CHECK (activated IN (0, 1)),
   enabled INTEGER NOT NULL DEFAULT 0 CHECK (enabled IN (0, 1)),
   control_server_url TEXT,
   hostname TEXT,
@@ -1118,20 +1179,77 @@ CREATE TABLE IF NOT EXISTS instance_tailscale_status (
   observed_at TEXT
 );
 
+CREATE TABLE IF NOT EXISTS instance_relay_tunnel_config (
+  id TEXT PRIMARY KEY CHECK (id = 'default'),
+  activated INTEGER NOT NULL DEFAULT 0 CHECK (activated IN (0, 1)),
+  enabled INTEGER NOT NULL DEFAULT 0 CHECK (enabled IN (0, 1)),
+  provider TEXT NOT NULL CHECK (provider = 'codingns_relay'),
+  relay_base_url TEXT,
+  control_base_url TEXT,
+  control_access_token_ciphertext TEXT,
+  control_account_email TEXT,
+  control_session_expires_at TEXT,
+  account_id TEXT,
+  tunnel_domain TEXT,
+  binding_id TEXT,
+  host_public_key TEXT,
+  host_key_fingerprint TEXT,
+  local_target_base_url TEXT NOT NULL,
+  local_target_source TEXT NOT NULL DEFAULT 'default' CHECK (local_target_source IN ('default', 'custom')),
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS instance_relay_tunnel_identity (
+  id TEXT PRIMARY KEY CHECK (id = 'default'),
+  key_algorithm TEXT NOT NULL CHECK (key_algorithm = 'x25519'),
+  private_key_pem TEXT NOT NULL,
+  public_key_pem TEXT NOT NULL,
+  key_fingerprint TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS instance_relay_tunnel_status (
+  id TEXT PRIMARY KEY CHECK (id = 'default'),
+  phase TEXT NOT NULL CHECK (
+    phase IN (
+      'disabled',
+      'blocked_uninitialized',
+      'unbound',
+      'binding',
+      'connecting',
+      'running',
+      'quota_exhausted',
+      'error'
+    )
+  ),
+  connected INTEGER NOT NULL DEFAULT 0 CHECK (connected IN (0, 1)),
+  binding_id TEXT,
+  tunnel_domain TEXT,
+  host_fingerprint TEXT,
+  traffic_used_bytes TEXT,
+  traffic_remaining_bytes TEXT,
+  quota_reset_at TEXT,
+  last_error TEXT,
+  observed_at TEXT
+);
+
 CREATE TABLE IF NOT EXISTS managed_skills (
   id TEXT PRIMARY KEY,
   name TEXT NOT NULL,
-  directory_name TEXT NOT NULL UNIQUE,
+  scope TEXT NOT NULL CHECK (scope IN ('workspace', 'assistant')),
+  directory_name TEXT NOT NULL,
   source_type TEXT NOT NULL CHECK (source_type IN ('builtin', 'local-import', 'managed-copy')),
   source_path TEXT,
   content_hash TEXT NOT NULL,
   managed_state TEXT NOT NULL CHECK (managed_state IN ('active', 'conflicted', 'missing')),
   created_at TEXT NOT NULL,
-  updated_at TEXT NOT NULL
+  updated_at TEXT NOT NULL,
+  UNIQUE(scope, directory_name)
 );
 
 CREATE INDEX IF NOT EXISTS idx_managed_skills_state
-  ON managed_skills(managed_state, updated_at DESC);
+  ON managed_skills(scope, managed_state, updated_at DESC);
 
 CREATE TABLE IF NOT EXISTS skill_target_bindings (
   skill_id TEXT NOT NULL,

package/dist/server/types/domain.d.ts

@@ -25,10 +25,45 @@ export interface AuthTokenRecord {
     userId: string;
     tokenType: "access" | "refresh";
     tokenHash: string;
+    deviceSessionId: string | null;
+    callerKind: "interactive_user" | "assistant_runtime" | null;
     expiresAt: string;
     revokedAt: string | null;
     createdAt: string;
 }
+export type AuthClientType = "desktop" | "web" | "ios" | "android" | "unknown";
+export interface AuthDeviceRecord {
+    id: string;
+    userId: string;
+    clientType: AuthClientType;
+    clientInstanceId: string | null;
+    displayName: string | null;
+    userAgent: string | null;
+    isPrimary: boolean;
+    lastSourceAddress: string | null;
+    lastSeenAt: string;
+    primarySetAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface AuthDeviceSessionRecord {
+    id: string;
+    userId: string;
+    deviceId: string | null;
+    accessTokenId: string | null;
+    refreshTokenId: string | null;
+    revokedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface AuthLoginEventRecord {
+    id: string;
+    userId: string;
+    deviceId: string | null;
+    clientType: AuthClientType;
+    sourceAddress: string | null;
+    occurredAt: string;
+}
 export interface AuthLoginAttemptRecord {
     username: string;
     failedAttemptCount: number;
@@ -316,7 +351,7 @@ export type AssistantAutomationStatus = "active" | "paused" | "completed" | "can
 export type AssistantAutomationTriggerType = "once" | "interval" | "cron" | "condition";
 export type AssistantAutomationActionType = "send_control_message";
 export type AssistantAutomationRunStatus = "queued" | "running" | "succeeded" | "failed" | "cancelled" | "skipped";
-export type AssistantSandboxStatus = "active" | "archived" | "expired" | "deleted";
+export type AssistantSandboxStatus = "active" | "archived" | "expired" | "orphaned" | "deleted";
 export type AssistantSandboxSourceKind = "blank" | "clone";
 export type AssistantSandboxVisibility = "assistant_only" | "pinned";
 export type ButlerControlEventKind = "action";
@@ -542,6 +577,9 @@ export interface ButlerFollowUpTask {
     projectId: string;
     butlerSessionId: string;
     sessionId: string;
+    providerId: ButlerProfileProviderId;
+    assistantButlerSessionId: string;
+    assistantSessionId: string;
     createdByUserId: string;
     objective: string;
     completionCriteria: string;
@@ -972,12 +1010,14 @@ export interface TerminalTemplateRuntimeStatus {
     terminationScope?: "process" | "process_group" | null;
 }
 export type SkillSourceType = "builtin" | "local-import" | "managed-copy";
+export type SkillScope = "workspace" | "assistant";
 export type ManagedSkillState = "active" | "conflicted" | "missing";
 export type SkillTargetCli = "codex" | "claude-code" | "gemini" | "opencode";
 export type SkillTargetSyncStatus = "synced" | "pending" | "failed" | "conflicted";
 export interface ManagedSkillRecord {
     id: string;
     name: string;
+    scope: SkillScope;
     directoryName: string;
     sourceType: SkillSourceType;
     sourcePath: string | null;
@@ -1023,6 +1063,7 @@ export interface SkillScanResult {
 }
 export type TailscalePhase = "disabled" | "blocked_uninitialized" | "starting" | "needs_login" | "running" | "stopping" | "error";
 export interface InstanceTailscaleConfig {
+    activated: boolean;
     enabled: boolean;
     controlServerUrl: string | null;
     hostname: string | null;
@@ -1043,3 +1084,52 @@ export interface InstanceTailscaleStatus {
     lastError: string | null;
     observedAt: string | null;
 }
+export type RelayTunnelProvider = "codingns_relay";
+export type HostCandidateEndpointKind = "relay" | "lan" | "loopback" | "tailscale" | "custom";
+export interface HostCandidateEndpoint {
+    endpointId: string;
+    kind: HostCandidateEndpointKind;
+    url: string;
+    priority: number;
+    expiresAt: string | null;
+    source: "host_reported" | "desktop_scan" | "user_saved";
+}
+export type RelayTunnelPhase = "disabled" | "blocked_uninitialized" | "unbound" | "binding" | "connecting" | "running" | "quota_exhausted" | "error";
+export interface InstanceRelayTunnelConfig {
+    activated: boolean;
+    enabled: boolean;
+    provider: RelayTunnelProvider;
+    relayBaseUrl: string | null;
+    controlBaseUrl: string | null;
+    controlAccessTokenCiphertext: string | null;
+    controlAccountEmail: string | null;
+    controlSessionExpiresAt: string | null;
+    accountId: string | null;
+    tunnelDomain: string | null;
+    bindingId: string | null;
+    hostPublicKey: string | null;
+    hostKeyFingerprint: string | null;
+    localTargetBaseUrl: string;
+    localTargetBaseUrlSource?: "default" | "custom";
+    updatedAt: string;
+}
+export interface InstanceRelayTunnelIdentity {
+    keyAlgorithm: "x25519";
+    privateKeyPem: string;
+    publicKeyPem: string;
+    keyFingerprint: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface InstanceRelayTunnelStatus {
+    phase: RelayTunnelPhase;
+    connected: boolean;
+    bindingId: string | null;
+    tunnelDomain: string | null;
+    hostFingerprint: string | null;
+    trafficUsedBytes: string | null;
+    trafficRemainingBytes: string | null;
+    quotaResetAt: string | null;
+    lastError: string | null;
+    observedAt: string | null;
+}