@kky42/pievo-server 1.0.0

package/.output/server/drizzle/0003_optimal_slapstick.sql

@@ -0,0 +1,102 @@
+ALTER TABLE "loops" ADD COLUMN "schedule_mode" text DEFAULT 'cron' NOT NULL;--> statement-breakpoint
+ALTER TABLE "loops" ADD COLUMN "continuous_delay_minutes" integer DEFAULT 1 NOT NULL;--> statement-breakpoint
+ALTER TABLE "loops" ADD COLUMN "next_cadence_at" text;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "requested_by" text DEFAULT 'system' NOT NULL;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "request_text" text;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "created_at" text;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "updated_at" text;--> statement-breakpoint
+-- Runs previously had one mutable timestamp. Preserve it as the immutable age
+-- anchor and mutation stamp so existing history remains ordered and pending-row
+-- retention never depends on a coalescing refresh.
+UPDATE "runs" SET "created_at" = "ts", "updated_at" = "ts";--> statement-breakpoint
+ALTER TABLE "runs" ALTER COLUMN "created_at" SET NOT NULL;--> statement-breakpoint
+ALTER TABLE "runs" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP::text;--> statement-breakpoint
+ALTER TABLE "runs" ALTER COLUMN "updated_at" SET NOT NULL;--> statement-breakpoint
+ALTER TABLE "runs" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP::text;--> statement-breakpoint
+-- Convert the two legacy loop markers exactly once. An already-open role owns the
+-- marker conservatively; otherwise persist one queue row before clearing the
+-- marker. Every legacy edit is owner authority.
+UPDATE "runs" SET "requested_by" = 'owner' WHERE "role" = 'edit';--> statement-breakpoint
+UPDATE "runs" AS r
+SET "requested_by" = 'owner', "request_text" = l."edit_request", "updated_at" = l."updated_at"
+FROM "loops" AS l
+WHERE r."loop_id" = l."id" AND r."role" = 'edit' AND r."phase" = 'pending'
+  AND l."edit_request" IS NOT NULL;--> statement-breakpoint
+INSERT INTO "runs" (
+  "id", "loop_id", "user_id", "machine_id", "phase", "role", "requested_by",
+  "request_text", "ts", "created_at", "updated_at"
+)
+SELECT
+  'legacy-edit-' || l."id", l."id", l."user_id", l."machine_id", 'pending', 'edit',
+  'owner', l."edit_request", l."updated_at", l."updated_at", l."updated_at"
+FROM "loops" AS l
+WHERE l."edit_request" IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1 FROM "runs" AS r
+    WHERE r."loop_id" = l."id" AND r."role" = 'edit' AND r."phase" IN ('pending', 'running')
+  );--> statement-breakpoint
+INSERT INTO "runs" (
+  "id", "loop_id", "user_id", "machine_id", "phase", "role", "requested_by",
+  "ts", "created_at", "updated_at"
+)
+SELECT
+  'legacy-evolve-' || l."id", l."id", l."user_id", l."machine_id", 'pending', 'evolve',
+  'system', l."updated_at", l."updated_at", l."updated_at"
+FROM "loops" AS l
+WHERE l."evolve_due" = true
+  AND NOT EXISTS (
+    SELECT 1 FROM "runs" AS r
+    WHERE r."loop_id" = l."id" AND r."role" = 'evolve' AND r."phase" IN ('pending', 'running')
+  );--> statement-breakpoint
+-- Legacy edit/evolve markers sometimes borrowed next_run_at as their wake-up.
+-- Clear only a due/past pin at migration time. Every future pin is preserved:
+-- losing a genuine self-reschedule is worse than retaining an ambiguous old wake.
+UPDATE "loops" AS l
+SET "next_run_at" = NULL
+WHERE (l."edit_request" IS NOT NULL OR l."evolve_due" = true)
+  AND l."next_run_at" IS NOT NULL
+  AND l."next_run_at"::timestamptz <= CURRENT_TIMESTAMP;--> statement-breakpoint
+-- Retain deprecated columns/defaults to reduce old-image SELECT/INSERT breakage,
+-- then clear converted values. This is not a rollback protocol: an old image that
+-- writes markers after this forward-only migration is unsupported and they will
+-- not be drained by the new runtime.
+UPDATE "loops" SET "edit_request" = NULL, "evolve_due" = false
+WHERE "edit_request" IS NOT NULL OR "evolve_due" = true;--> statement-breakpoint
+-- Normalize lifecycle state before installing the queue uniqueness invariant.
+UPDATE "runs" AS r
+SET "phase" = 'canceled', "outcome" = 'skipped',
+    "message" = 'canceled - loop completed before this queued run was claimed',
+    "updated_at" = l."updated_at", "ts" = l."updated_at"
+FROM "loops" AS l
+WHERE r."loop_id" = l."id" AND r."phase" = 'pending'
+  AND l."completed_at" IS NOT NULL
+  AND (r."role" IN ('exec', 'evolve') OR (r."role" = 'edit' AND r."requested_by" = 'system'));--> statement-breakpoint
+UPDATE "runs" AS r
+SET "phase" = 'canceled', "outcome" = 'skipped',
+    "message" = 'canceled - loop paused before this system run was claimed',
+    "updated_at" = l."updated_at", "ts" = l."updated_at"
+FROM "loops" AS l
+WHERE r."loop_id" = l."id" AND r."phase" = 'pending'
+  AND l."enabled" = false AND r."requested_by" = 'system';--> statement-breakpoint
+WITH ranked AS (
+  SELECT "id", row_number() OVER (
+    PARTITION BY "loop_id", "role"
+    ORDER BY CASE "requested_by" WHEN 'owner' THEN 0 ELSE 1 END, "updated_at" DESC, "id" DESC
+  ) AS n
+  FROM "runs"
+  WHERE "phase" = 'pending'
+)
+UPDATE "runs" AS r
+SET "phase" = 'canceled', "outcome" = 'skipped',
+    "message" = 'canceled - coalesced during durable queue migration'
+FROM ranked
+WHERE r."id" = ranked."id" AND ranked.n > 1;--> statement-breakpoint
+-- Auto-evolve now counts terminal exec evidence only.
+UPDATE "loops" AS l
+SET "evolved_run_count" = (
+  SELECT count(*)::integer FROM "runs" AS r
+  WHERE r."loop_id" = l."id" AND r."role" = 'exec' AND r."phase" IN ('done', 'error')
+)
+WHERE l."evolved_run_count" IS NOT NULL;--> statement-breakpoint
+CREATE INDEX "runs_machine_phase_ready_idx" ON "runs" USING btree ("machine_id","phase");--> statement-breakpoint
+CREATE UNIQUE INDEX "runs_loop_role_pending_idx" ON "runs" USING btree ("loop_id","role") WHERE "runs"."phase" = 'pending';

package/.output/server/drizzle/0004_remove_grok_agent.sql

@@ -0,0 +1,5 @@
+-- Grok CLI execution support was removed. Existing loops must remain runnable,
+-- so move the retired agent value to the default supported executor.
+UPDATE "loops"
+SET "agent" = 'claude-code', "model" = NULL
+WHERE "agent" = 'grok';

package/.output/server/drizzle/0005_heavy_gauntlet.sql

@@ -0,0 +1,8 @@
+ALTER TABLE "runs" ADD COLUMN "exit_code" integer;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "final_text" text;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "heartbeat_at" text;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "deferred_at" text;--> statement-breakpoint
+ALTER TABLE "runs" DROP COLUMN "cost_usd";--> statement-breakpoint
+ALTER TABLE "runs" DROP COLUMN "artifacts";--> statement-breakpoint
+ALTER TABLE "runs" DROP COLUMN "transcript";--> statement-breakpoint
+ALTER TABLE "runs" DROP COLUMN "progress";

package/.output/server/drizzle/0006_tranquil_sharon_carter.sql

@@ -0,0 +1 @@
+ALTER TABLE "runs" ADD COLUMN "agent" text;

package/.output/server/drizzle/0007_faulty_starbolt.sql

@@ -0,0 +1,30 @@
+CREATE TABLE "run_report_receipts" (
+	"report_id" text PRIMARY KEY NOT NULL,
+	"run_id" text NOT NULL,
+	"payload_digest" text NOT NULL,
+	"ack_status" integer NOT NULL,
+	"ack_body" jsonb NOT NULL,
+	"created_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "loops" ADD COLUMN "delete_requested_at" timestamp with time zone;--> statement-breakpoint
+ALTER TABLE "machines" ADD COLUMN "daemon_protocol" integer;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "cancel_requested_at" timestamp with time zone;--> statement-breakpoint
+CREATE INDEX "report_receipts_created" ON "run_report_receipts" USING btree ("created_at");--> statement-breakpoint
+CREATE INDEX "delete_requested_loops" ON "loops" USING btree ("delete_requested_at") WHERE "loops"."delete_requested_at" IS NOT NULL;--> statement-breakpoint
+-- Pre-v2 servers could run one row per loop on the same machine. Conservatively
+-- terminalize every extra row before installing the machine-wide invariant; its
+-- lease remains in grace, so a late real report can still reconcile it and the
+-- machine stays blocked rather than multiplying uncertain execution.
+WITH ranked AS (
+  SELECT id, row_number() OVER (PARTITION BY machine_id ORDER BY ts, id) AS n
+  FROM runs WHERE phase = 'running'
+), extras AS (
+  UPDATE runs SET phase = 'error', outcome = 'error', error = 'protocol v2 migration: overlapping machine run', updated_at = CURRENT_TIMESTAMP::text
+  WHERE id IN (SELECT id FROM ranked WHERE n > 1)
+  RETURNING id
+)
+UPDATE run_leases SET state = 'terminal-grace', expires_at = to_char(CURRENT_TIMESTAMP + interval '24 hours', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')
+WHERE run_id IN (SELECT id FROM extras) AND state = 'active';
+--> statement-breakpoint
+CREATE UNIQUE INDEX "one_running_run_per_machine" ON "runs" USING btree ("machine_id") WHERE "runs"."phase" = 'running';

package/.output/server/drizzle/0008_durable_lifecycle_evidence.sql

@@ -0,0 +1,15 @@
+-- A terminal run can never retain active machine authority. Give any legacy or
+-- crash-window row the same short enrichment window as a freshly-finished run.
+UPDATE "run_leases"
+SET "state" = 'terminal-grace',
+    "expires_at" = to_char((CURRENT_TIMESTAMP AT TIME ZONE 'UTC') + interval '10 minutes', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')
+WHERE "state" = 'active'
+  AND EXISTS (
+    SELECT 1 FROM "runs"
+    WHERE "runs"."id" = "run_leases"."run_id"
+      AND "runs"."phase" IN ('done', 'error', 'canceled')
+  );
+--> statement-breakpoint
+-- Retired rows are durable non-authorizing tombstones. Their only deletion path
+-- is the transaction that commits a matching 410 report receipt.
+UPDATE "run_leases" SET "expires_at" = NULL WHERE "state" = 'retired';