@kky42/pievo-server 1.0.0

package/drizzle/0000_round_marauders.sql

@@ -0,0 +1,193 @@
+CREATE TABLE "artifact_files" (
+	"id" text PRIMARY KEY NOT NULL,
+	"loop_id" text NOT NULL,
+	"path" text NOT NULL,
+	"hash" text,
+	"size" integer,
+	"binary" boolean DEFAULT false NOT NULL,
+	"oversize" boolean DEFAULT false NOT NULL,
+	"deleted" boolean DEFAULT false NOT NULL,
+	"updated_at" text NOT NULL,
+	"last_run_id" text
+);
+--> statement-breakpoint
+CREATE TABLE "blobs" (
+	"hash" text PRIMARY KEY NOT NULL,
+	"size" integer NOT NULL,
+	"binary" boolean DEFAULT false NOT NULL,
+	"meta" jsonb,
+	"created_at" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "loops" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text NOT NULL,
+	"team_id" text,
+	"channel_id" text,
+	"machine_id" text NOT NULL,
+	"name" text,
+	"cron" text NOT NULL,
+	"timezone" text,
+	"workdir" text,
+	"task_file" text,
+	"task_file_content" text,
+	"task_file_synced_at" text,
+	"workflow" text,
+	"ui" text,
+	"state_schema" jsonb,
+	"notify" text DEFAULT 'auto' NOT NULL,
+	"allow_control" boolean DEFAULT true NOT NULL,
+	"goal" text,
+	"completed_at" text,
+	"completion_reason" text,
+	"model" text,
+	"agent" text DEFAULT 'claude-code' NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"next_run_at" text,
+	"state" jsonb,
+	"evolved_run_count" integer,
+	"evolve_due" boolean,
+	"edit_request" text,
+	"created_at" text NOT NULL,
+	"updated_at" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "machines" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text NOT NULL,
+	"team_id" text,
+	"name" text NOT NULL,
+	"hostname" text,
+	"platform" text,
+	"arch" text,
+	"daemon_version" text,
+	"token_hash" text NOT NULL,
+	"token" text,
+	"roots" jsonb,
+	"last_seen" text,
+	"online" boolean DEFAULT false NOT NULL,
+	"created_at" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "notification_channels" (
+	"id" text PRIMARY KEY NOT NULL,
+	"team_id" text NOT NULL,
+	"type" text NOT NULL,
+	"name" text NOT NULL,
+	"config" jsonb NOT NULL,
+	"created_at" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "run_snapshots" (
+	"run_id" text PRIMARY KEY NOT NULL,
+	"loop_id" text NOT NULL,
+	"manifest" jsonb NOT NULL,
+	"created_at" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "runs" (
+	"id" text PRIMARY KEY NOT NULL,
+	"loop_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"machine_id" text NOT NULL,
+	"phase" text NOT NULL,
+	"role" text NOT NULL,
+	"ts" text NOT NULL,
+	"outcome" text,
+	"status" text,
+	"message" text,
+	"duration_ms" integer,
+	"error" text,
+	"state" jsonb,
+	"control" jsonb,
+	"session_id" text,
+	"cost_usd" double precision,
+	"usage" jsonb,
+	"artifacts" jsonb,
+	"transcript" jsonb,
+	"progress" jsonb
+);
+--> statement-breakpoint
+CREATE TABLE "team_members" (
+	"id" text PRIMARY KEY NOT NULL,
+	"team_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"role" text DEFAULT 'member' NOT NULL,
+	"created_at" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "teams" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"owner_user_id" text,
+	"created_at" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "account" (
+	"id" text PRIMARY KEY NOT NULL,
+	"account_id" text NOT NULL,
+	"provider_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"access_token" text,
+	"refresh_token" text,
+	"id_token" text,
+	"access_token_expires_at" timestamp,
+	"refresh_token_expires_at" timestamp,
+	"scope" text,
+	"password" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "session" (
+	"id" text PRIMARY KEY NOT NULL,
+	"expires_at" timestamp NOT NULL,
+	"token" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp NOT NULL,
+	"ip_address" text,
+	"user_agent" text,
+	"user_id" text NOT NULL,
+	CONSTRAINT "session_token_unique" UNIQUE("token")
+);
+--> statement-breakpoint
+CREATE TABLE "user" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"email" text NOT NULL,
+	"email_verified" boolean DEFAULT false NOT NULL,
+	"image" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "user_email_unique" UNIQUE("email")
+);
+--> statement-breakpoint
+CREATE TABLE "verification" (
+	"id" text PRIMARY KEY NOT NULL,
+	"identifier" text NOT NULL,
+	"value" text NOT NULL,
+	"expires_at" timestamp NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "account" ADD CONSTRAINT "account_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "session" ADD CONSTRAINT "session_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "artifact_files_loop_idx" ON "artifact_files" USING btree ("loop_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "artifact_files_loop_path_idx" ON "artifact_files" USING btree ("loop_id","path");--> statement-breakpoint
+CREATE INDEX "artifact_files_hash_idx" ON "artifact_files" USING btree ("hash");--> statement-breakpoint
+CREATE INDEX "loops_user_idx" ON "loops" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "loops_team_idx" ON "loops" USING btree ("team_id");--> statement-breakpoint
+CREATE INDEX "loops_machine_idx" ON "loops" USING btree ("machine_id");--> statement-breakpoint
+CREATE INDEX "machines_user_idx" ON "machines" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "machines_team_idx" ON "machines" USING btree ("team_id");--> statement-breakpoint
+CREATE INDEX "notification_channels_team_idx" ON "notification_channels" USING btree ("team_id");--> statement-breakpoint
+CREATE INDEX "run_snapshots_loop_idx" ON "run_snapshots" USING btree ("loop_id");--> statement-breakpoint
+CREATE INDEX "runs_loop_idx" ON "runs" USING btree ("loop_id");--> statement-breakpoint
+CREATE INDEX "runs_phase_idx" ON "runs" USING btree ("phase");--> statement-breakpoint
+CREATE INDEX "runs_loop_ts_idx" ON "runs" USING btree ("loop_id","ts");--> statement-breakpoint
+CREATE INDEX "team_members_team_idx" ON "team_members" USING btree ("team_id");--> statement-breakpoint
+CREATE INDEX "team_members_user_idx" ON "team_members" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "account_userId_idx" ON "account" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "session_userId_idx" ON "session" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "verification_identifier_idx" ON "verification" USING btree ("identifier");

package/drizzle/0001_naive_silver_fox.sql

@@ -0,0 +1,25 @@
+CREATE TABLE "connect_keys" (
+	"machine_id" text PRIMARY KEY NOT NULL,
+	"user_id" text NOT NULL,
+	"team_id" text,
+	"minted_at" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "run_leases" (
+	"token_hash" text PRIMARY KEY NOT NULL,
+	"run_id" text NOT NULL,
+	"loop_id" text NOT NULL,
+	"machine_id" text NOT NULL,
+	"role" text NOT NULL,
+	"allow_control" boolean DEFAULT false NOT NULL,
+	"can_set_ui" boolean DEFAULT false NOT NULL,
+	"can_set_schema" boolean DEFAULT false NOT NULL,
+	"can_set_workflow" boolean DEFAULT false NOT NULL,
+	"can_finish" boolean DEFAULT false NOT NULL,
+	"state" text DEFAULT 'active' NOT NULL,
+	"expires_at" text,
+	"created_at" text NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "run_leases_run_idx" ON "run_leases" USING btree ("run_id");--> statement-breakpoint
+CREATE INDEX "run_leases_loop_idx" ON "run_leases" USING btree ("loop_id");

package/drizzle/0002_funny_sage.sql

@@ -0,0 +1,12 @@
+CREATE TABLE "team_invites" (
+	"token" text PRIMARY KEY NOT NULL,
+	"team_id" text NOT NULL,
+	"role" text DEFAULT 'member' NOT NULL,
+	"invited_by_user_id" text NOT NULL,
+	"expires_at" text NOT NULL,
+	"redeemed_at" text,
+	"redeemed_by_user_id" text,
+	"created_at" text NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "team_invites_team_idx" ON "team_invites" USING btree ("team_id");

package/drizzle/0003_optimal_slapstick.sql

@@ -0,0 +1,102 @@
+ALTER TABLE "loops" ADD COLUMN "schedule_mode" text DEFAULT 'cron' NOT NULL;--> statement-breakpoint
+ALTER TABLE "loops" ADD COLUMN "continuous_delay_minutes" integer DEFAULT 1 NOT NULL;--> statement-breakpoint
+ALTER TABLE "loops" ADD COLUMN "next_cadence_at" text;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "requested_by" text DEFAULT 'system' NOT NULL;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "request_text" text;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "created_at" text;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "updated_at" text;--> statement-breakpoint
+-- Runs previously had one mutable timestamp. Preserve it as the immutable age
+-- anchor and mutation stamp so existing history remains ordered and pending-row
+-- retention never depends on a coalescing refresh.
+UPDATE "runs" SET "created_at" = "ts", "updated_at" = "ts";--> statement-breakpoint
+ALTER TABLE "runs" ALTER COLUMN "created_at" SET NOT NULL;--> statement-breakpoint
+ALTER TABLE "runs" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP::text;--> statement-breakpoint
+ALTER TABLE "runs" ALTER COLUMN "updated_at" SET NOT NULL;--> statement-breakpoint
+ALTER TABLE "runs" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP::text;--> statement-breakpoint
+-- Convert the two legacy loop markers exactly once. An already-open role owns the
+-- marker conservatively; otherwise persist one queue row before clearing the
+-- marker. Every legacy edit is owner authority.
+UPDATE "runs" SET "requested_by" = 'owner' WHERE "role" = 'edit';--> statement-breakpoint
+UPDATE "runs" AS r
+SET "requested_by" = 'owner', "request_text" = l."edit_request", "updated_at" = l."updated_at"
+FROM "loops" AS l
+WHERE r."loop_id" = l."id" AND r."role" = 'edit' AND r."phase" = 'pending'
+  AND l."edit_request" IS NOT NULL;--> statement-breakpoint
+INSERT INTO "runs" (
+  "id", "loop_id", "user_id", "machine_id", "phase", "role", "requested_by",
+  "request_text", "ts", "created_at", "updated_at"
+)
+SELECT
+  'legacy-edit-' || l."id", l."id", l."user_id", l."machine_id", 'pending', 'edit',
+  'owner', l."edit_request", l."updated_at", l."updated_at", l."updated_at"
+FROM "loops" AS l
+WHERE l."edit_request" IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1 FROM "runs" AS r
+    WHERE r."loop_id" = l."id" AND r."role" = 'edit' AND r."phase" IN ('pending', 'running')
+  );--> statement-breakpoint
+INSERT INTO "runs" (
+  "id", "loop_id", "user_id", "machine_id", "phase", "role", "requested_by",
+  "ts", "created_at", "updated_at"
+)
+SELECT
+  'legacy-evolve-' || l."id", l."id", l."user_id", l."machine_id", 'pending', 'evolve',
+  'system', l."updated_at", l."updated_at", l."updated_at"
+FROM "loops" AS l
+WHERE l."evolve_due" = true
+  AND NOT EXISTS (
+    SELECT 1 FROM "runs" AS r
+    WHERE r."loop_id" = l."id" AND r."role" = 'evolve' AND r."phase" IN ('pending', 'running')
+  );--> statement-breakpoint
+-- Legacy edit/evolve markers sometimes borrowed next_run_at as their wake-up.
+-- Clear only a due/past pin at migration time. Every future pin is preserved:
+-- losing a genuine self-reschedule is worse than retaining an ambiguous old wake.
+UPDATE "loops" AS l
+SET "next_run_at" = NULL
+WHERE (l."edit_request" IS NOT NULL OR l."evolve_due" = true)
+  AND l."next_run_at" IS NOT NULL
+  AND l."next_run_at"::timestamptz <= CURRENT_TIMESTAMP;--> statement-breakpoint
+-- Retain deprecated columns/defaults to reduce old-image SELECT/INSERT breakage,
+-- then clear converted values. This is not a rollback protocol: an old image that
+-- writes markers after this forward-only migration is unsupported and they will
+-- not be drained by the new runtime.
+UPDATE "loops" SET "edit_request" = NULL, "evolve_due" = false
+WHERE "edit_request" IS NOT NULL OR "evolve_due" = true;--> statement-breakpoint
+-- Normalize lifecycle state before installing the queue uniqueness invariant.
+UPDATE "runs" AS r
+SET "phase" = 'canceled', "outcome" = 'skipped',
+    "message" = 'canceled - loop completed before this queued run was claimed',
+    "updated_at" = l."updated_at", "ts" = l."updated_at"
+FROM "loops" AS l
+WHERE r."loop_id" = l."id" AND r."phase" = 'pending'
+  AND l."completed_at" IS NOT NULL
+  AND (r."role" IN ('exec', 'evolve') OR (r."role" = 'edit' AND r."requested_by" = 'system'));--> statement-breakpoint
+UPDATE "runs" AS r
+SET "phase" = 'canceled', "outcome" = 'skipped',
+    "message" = 'canceled - loop paused before this system run was claimed',
+    "updated_at" = l."updated_at", "ts" = l."updated_at"
+FROM "loops" AS l
+WHERE r."loop_id" = l."id" AND r."phase" = 'pending'
+  AND l."enabled" = false AND r."requested_by" = 'system';--> statement-breakpoint
+WITH ranked AS (
+  SELECT "id", row_number() OVER (
+    PARTITION BY "loop_id", "role"
+    ORDER BY CASE "requested_by" WHEN 'owner' THEN 0 ELSE 1 END, "updated_at" DESC, "id" DESC
+  ) AS n
+  FROM "runs"
+  WHERE "phase" = 'pending'
+)
+UPDATE "runs" AS r
+SET "phase" = 'canceled', "outcome" = 'skipped',
+    "message" = 'canceled - coalesced during durable queue migration'
+FROM ranked
+WHERE r."id" = ranked."id" AND ranked.n > 1;--> statement-breakpoint
+-- Auto-evolve now counts terminal exec evidence only.
+UPDATE "loops" AS l
+SET "evolved_run_count" = (
+  SELECT count(*)::integer FROM "runs" AS r
+  WHERE r."loop_id" = l."id" AND r."role" = 'exec' AND r."phase" IN ('done', 'error')
+)
+WHERE l."evolved_run_count" IS NOT NULL;--> statement-breakpoint
+CREATE INDEX "runs_machine_phase_ready_idx" ON "runs" USING btree ("machine_id","phase");--> statement-breakpoint
+CREATE UNIQUE INDEX "runs_loop_role_pending_idx" ON "runs" USING btree ("loop_id","role") WHERE "runs"."phase" = 'pending';

package/drizzle/0004_remove_grok_agent.sql

@@ -0,0 +1,5 @@
+-- Grok CLI execution support was removed. Existing loops must remain runnable,
+-- so move the retired agent value to the default supported executor.
+UPDATE "loops"
+SET "agent" = 'claude-code', "model" = NULL
+WHERE "agent" = 'grok';

package/drizzle/0005_heavy_gauntlet.sql

@@ -0,0 +1,8 @@
+ALTER TABLE "runs" ADD COLUMN "exit_code" integer;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "final_text" text;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "heartbeat_at" text;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "deferred_at" text;--> statement-breakpoint
+ALTER TABLE "runs" DROP COLUMN "cost_usd";--> statement-breakpoint
+ALTER TABLE "runs" DROP COLUMN "artifacts";--> statement-breakpoint
+ALTER TABLE "runs" DROP COLUMN "transcript";--> statement-breakpoint
+ALTER TABLE "runs" DROP COLUMN "progress";

package/drizzle/0006_tranquil_sharon_carter.sql

@@ -0,0 +1 @@
+ALTER TABLE "runs" ADD COLUMN "agent" text;

package/drizzle/0007_faulty_starbolt.sql

@@ -0,0 +1,30 @@
+CREATE TABLE "run_report_receipts" (
+	"report_id" text PRIMARY KEY NOT NULL,
+	"run_id" text NOT NULL,
+	"payload_digest" text NOT NULL,
+	"ack_status" integer NOT NULL,
+	"ack_body" jsonb NOT NULL,
+	"created_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "loops" ADD COLUMN "delete_requested_at" timestamp with time zone;--> statement-breakpoint
+ALTER TABLE "machines" ADD COLUMN "daemon_protocol" integer;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "cancel_requested_at" timestamp with time zone;--> statement-breakpoint
+CREATE INDEX "report_receipts_created" ON "run_report_receipts" USING btree ("created_at");--> statement-breakpoint
+CREATE INDEX "delete_requested_loops" ON "loops" USING btree ("delete_requested_at") WHERE "loops"."delete_requested_at" IS NOT NULL;--> statement-breakpoint
+-- Pre-v2 servers could run one row per loop on the same machine. Conservatively
+-- terminalize every extra row before installing the machine-wide invariant; its
+-- lease remains in grace, so a late real report can still reconcile it and the
+-- machine stays blocked rather than multiplying uncertain execution.
+WITH ranked AS (
+  SELECT id, row_number() OVER (PARTITION BY machine_id ORDER BY ts, id) AS n
+  FROM runs WHERE phase = 'running'
+), extras AS (
+  UPDATE runs SET phase = 'error', outcome = 'error', error = 'protocol v2 migration: overlapping machine run', updated_at = CURRENT_TIMESTAMP::text
+  WHERE id IN (SELECT id FROM ranked WHERE n > 1)
+  RETURNING id
+)
+UPDATE run_leases SET state = 'terminal-grace', expires_at = to_char(CURRENT_TIMESTAMP + interval '24 hours', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')
+WHERE run_id IN (SELECT id FROM extras) AND state = 'active';
+--> statement-breakpoint
+CREATE UNIQUE INDEX "one_running_run_per_machine" ON "runs" USING btree ("machine_id") WHERE "runs"."phase" = 'running';

package/drizzle/0008_durable_lifecycle_evidence.sql

@@ -0,0 +1,15 @@
+-- A terminal run can never retain active machine authority. Give any legacy or
+-- crash-window row the same short enrichment window as a freshly-finished run.
+UPDATE "run_leases"
+SET "state" = 'terminal-grace',
+    "expires_at" = to_char((CURRENT_TIMESTAMP AT TIME ZONE 'UTC') + interval '10 minutes', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')
+WHERE "state" = 'active'
+  AND EXISTS (
+    SELECT 1 FROM "runs"
+    WHERE "runs"."id" = "run_leases"."run_id"
+      AND "runs"."phase" IN ('done', 'error', 'canceled')
+  );
+--> statement-breakpoint
+-- Retired rows are durable non-authorizing tombstones. Their only deletion path
+-- is the transaction that commits a matching 410 report receipt.
+UPDATE "run_leases" SET "expires_at" = NULL WHERE "state" = 'retired';