@moondeck/station 0.0.1 → 1.0.0

package/db/migrations/0025_project_env_authority.sql

@@ -0,0 +1,147 @@
+-- ADR-153: the owned runner's durable, value-free project-env authority.
+--
+-- This migration deliberately does not backfill host_project_env. An older
+-- runtime may keep writing that table after the migration lands but before
+-- the first bindings-v1 reconciliation. After its caller takes the capability
+-- floor, the first begin transaction snapshots the then-current rows and
+-- activates the permanent legacy-write journal below.
+CREATE TABLE `host_project_env_records` (
+	`project_id` text NOT NULL,
+	`key` text NOT NULL,
+	`revision` integer NOT NULL,
+	`generation` integer NOT NULL,
+	`tombstone` integer NOT NULL,
+	`binding_json` text,
+	`policy_epoch` integer,
+	`listing_generation` integer NOT NULL,
+	`updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	PRIMARY KEY(`project_id`, `key`),
+	CONSTRAINT `host_project_env_records_head` CHECK (
+		(`tombstone` = 0 AND `revision` >= 1 AND `generation` >= 1) OR
+		(`tombstone` = 1 AND `revision` = 1 AND `generation` = 0) OR
+		(`tombstone` = 1 AND `revision` >= 2 AND `generation` >= 2)
+	),
+	CONSTRAINT `host_project_env_records_binding` CHECK (
+		(`generation` = 0 AND `binding_json` IS NULL AND `policy_epoch` IS NULL
+			AND `listing_generation` >= 2 AND (`listing_generation` % 2) = 0) OR
+		(`generation` > 0 AND `policy_epoch` >= 1)
+	),
+	CONSTRAINT `host_project_env_records_listing` CHECK (`listing_generation` >= 0),
+	CONSTRAINT `host_project_env_records_boolean` CHECK (`tombstone` IN (0, 1))
+);
+--> statement-breakpoint
+CREATE TABLE `host_project_env_projects` (
+	`project_id` text PRIMARY KEY NOT NULL,
+	`record_version` integer NOT NULL DEFAULT 0,
+	CONSTRAINT `host_project_env_projects_version` CHECK (`record_version` >= 0)
+);
+--> statement-breakpoint
+CREATE TABLE `host_project_env_authority` (
+	`id` text PRIMARY KEY NOT NULL DEFAULT 'host',
+	`activated` integer NOT NULL DEFAULT 0,
+	`gate_open` integer NOT NULL DEFAULT 1,
+	`stream_id` text,
+	`applied_sequence` integer NOT NULL DEFAULT 0,
+	`attempt_id` text,
+	`attempt_legacy_version` integer,
+	`legacy_version` integer NOT NULL DEFAULT 0,
+	`policy_epochs_json` text NOT NULL DEFAULT '[1]',
+	`modern_write` integer NOT NULL DEFAULT 0,
+	`updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	CONSTRAINT `host_project_env_authority_singleton` CHECK (`id` = 'host'),
+	CONSTRAINT `host_project_env_authority_booleans` CHECK (
+		`activated` IN (0, 1) AND `gate_open` IN (0, 1) AND `modern_write` IN (0, 1)
+	),
+	CONSTRAINT `host_project_env_authority_cursor` CHECK (
+		`applied_sequence` >= 0 AND `legacy_version` >= 0 AND
+		(`attempt_legacy_version` IS NULL OR `attempt_legacy_version` >= 0)
+	),
+	CONSTRAINT `host_project_env_authority_stream` CHECK (
+		(`activated` = 0 AND `stream_id` IS NULL AND `applied_sequence` = 0 AND `attempt_id` IS NULL) OR
+		(`activated` = 1 AND `stream_id` IS NOT NULL)
+	),
+	CONSTRAINT `host_project_env_authority_attempt` CHECK (
+		(`attempt_id` IS NULL AND `attempt_legacy_version` IS NULL) OR
+		(`attempt_id` IS NOT NULL AND `attempt_legacy_version` IS NOT NULL AND `gate_open` = 0)
+	),
+	CONSTRAINT `host_project_env_authority_open` CHECK (`gate_open` = 0 OR `attempt_id` IS NULL)
+);
+--> statement-breakpoint
+INSERT INTO `host_project_env_authority` (`id`) VALUES ('host');
+--> statement-breakpoint
+CREATE TABLE `host_project_env_delivery_receipts` (
+	`stream_id` text NOT NULL,
+	`sequence` integer NOT NULL,
+	`request_kind` text NOT NULL,
+	`request_mac` text NOT NULL,
+	`ok` integer NOT NULL,
+	`state_json` text,
+	`record_version` integer,
+	`code` text,
+	`created_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	PRIMARY KEY(`stream_id`, `sequence`),
+	CONSTRAINT `host_project_env_delivery_receipts_sequence` CHECK (`sequence` >= 1),
+	CONSTRAINT `host_project_env_delivery_receipts_boolean` CHECK (`ok` IN (0, 1)),
+	CONSTRAINT `host_project_env_delivery_receipts_outcome` CHECK (
+		(`ok` = 1 AND `code` IS NULL) OR (`ok` = 0 AND `code` IS NOT NULL)
+	),
+	CONSTRAINT `host_project_env_delivery_receipts_version` CHECK (
+		`record_version` IS NULL OR `record_version` >= 0
+	)
+);
+--> statement-breakpoint
+CREATE TABLE `host_project_env_legacy_journal` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`project_id` text NOT NULL,
+	`key` text NOT NULL,
+	`mutation` text NOT NULL,
+	`created_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	CONSTRAINT `host_project_env_legacy_journal_mutation` CHECK (`mutation` IN ('set', 'delete'))
+);
+--> statement-breakpoint
+CREATE INDEX `host_project_env_legacy_journal_key_idx`
+	ON `host_project_env_legacy_journal` (`project_id`, `key`);
+--> statement-breakpoint
+-- These triggers are inert until the first modern reconciliation activates
+-- the authority. Afterwards, any old process that changes plaintext storage
+-- leaves durable evidence and closes the serving gate. Metadata-only updates
+-- do neither. Modern writes raise modern_write in their enclosing transaction.
+CREATE TRIGGER `host_project_env_legacy_insert`
+AFTER INSERT ON `host_project_env`
+WHEN (SELECT `activated` = 1 AND `modern_write` = 0
+	FROM `host_project_env_authority` WHERE `id` = 'host')
+BEGIN
+	INSERT INTO `host_project_env_legacy_journal` (`project_id`, `key`, `mutation`)
+	VALUES (NEW.`project_id`, NEW.`key`, 'set');
+	UPDATE `host_project_env_authority`
+	SET `gate_open` = 0, `legacy_version` = `legacy_version` + 1,
+		`updated_at` = unixepoch() * 1000
+	WHERE `id` = 'host';
+END;
+--> statement-breakpoint
+CREATE TRIGGER `host_project_env_legacy_update`
+AFTER UPDATE OF `value_enc` ON `host_project_env`
+WHEN OLD.`value_enc` IS NOT NEW.`value_enc`
+	AND (SELECT `activated` = 1 AND `modern_write` = 0
+		FROM `host_project_env_authority` WHERE `id` = 'host')
+BEGIN
+	INSERT INTO `host_project_env_legacy_journal` (`project_id`, `key`, `mutation`)
+	VALUES (NEW.`project_id`, NEW.`key`, 'set');
+	UPDATE `host_project_env_authority`
+	SET `gate_open` = 0, `legacy_version` = `legacy_version` + 1,
+		`updated_at` = unixepoch() * 1000
+	WHERE `id` = 'host';
+END;
+--> statement-breakpoint
+CREATE TRIGGER `host_project_env_legacy_delete`
+AFTER DELETE ON `host_project_env`
+WHEN (SELECT `activated` = 1 AND `modern_write` = 0
+	FROM `host_project_env_authority` WHERE `id` = 'host')
+BEGIN
+	INSERT INTO `host_project_env_legacy_journal` (`project_id`, `key`, `mutation`)
+	VALUES (OLD.`project_id`, OLD.`key`, 'delete');
+	UPDATE `host_project_env_authority`
+	SET `gate_open` = 0, `legacy_version` = `legacy_version` + 1,
+		`updated_at` = unixepoch() * 1000
+	WHERE `id` = 'host';
+END;

package/db/migrations/0026_project_env_replica.sql

@@ -0,0 +1,150 @@
+-- ADR-153: durable Uai Cloud task-machine project-env replica.
+--
+-- The live and staged views are separate from both one another and the owned
+-- runner authority. A page can therefore materialise values without making
+-- them visible, and commit can replace the complete task view atomically.
+CREATE TABLE `host_project_env_replica_authority` (
+	`id` text PRIMARY KEY NOT NULL DEFAULT 'replica',
+	`activated` integer NOT NULL DEFAULT 0,
+	`gate_open` integer NOT NULL DEFAULT 0,
+	`stream_id` text,
+	`applied_sequence` integer NOT NULL DEFAULT 0,
+	`attempt_id` text,
+	`org_id` text,
+	`policy_epochs_json` text NOT NULL DEFAULT '[1]',
+	`updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	CONSTRAINT `host_project_env_replica_authority_singleton` CHECK (`id` = 'replica'),
+	CONSTRAINT `host_project_env_replica_authority_booleans` CHECK (`activated` IN (0, 1) AND `gate_open` IN (0, 1)),
+	CONSTRAINT `host_project_env_replica_authority_cursor` CHECK (`applied_sequence` >= 0),
+	CONSTRAINT `host_project_env_replica_authority_stream` CHECK (
+		(`activated` = 0 AND `stream_id` IS NULL AND `applied_sequence` = 0 AND `attempt_id` IS NULL AND `org_id` IS NULL AND `gate_open` = 0) OR
+		(`activated` = 1 AND `stream_id` IS NOT NULL AND `org_id` IS NOT NULL)
+	),
+	CONSTRAINT `host_project_env_replica_authority_gate` CHECK (`gate_open` = 0 OR `attempt_id` IS NULL)
+);
+--> statement-breakpoint
+INSERT INTO `host_project_env_replica_authority` (`id`) VALUES ('replica');
+--> statement-breakpoint
+CREATE TABLE `host_project_env_replica_projects` (
+	`project_id` text PRIMARY KEY NOT NULL,
+	`record_version` integer NOT NULL,
+	CONSTRAINT `host_project_env_replica_projects_version` CHECK (`record_version` >= 0)
+);
+--> statement-breakpoint
+CREATE TABLE `host_project_env_replica_records` (
+	`project_id` text NOT NULL,
+	`key` text NOT NULL,
+	`revision` integer NOT NULL,
+	`generation` integer NOT NULL,
+	`tombstone` integer NOT NULL,
+	`value_ref_json` text,
+	`binding_json` text,
+	`policy_epoch` integer,
+	`listing_generation` integer NOT NULL,
+	`materialization` text NOT NULL,
+	`materialization_reason` text,
+	`updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	PRIMARY KEY(`project_id`, `key`),
+	CONSTRAINT `host_project_env_replica_records_head` CHECK (
+		(`tombstone` = 0 AND `revision` >= 1 AND `generation` >= 1 AND `value_ref_json` IS NOT NULL) OR
+		(`tombstone` = 1 AND `revision` = 1 AND `generation` = 0 AND `value_ref_json` IS NULL) OR
+		(`tombstone` = 1 AND `revision` >= 2 AND `generation` >= 2 AND `value_ref_json` IS NULL)
+	),
+	CONSTRAINT `host_project_env_replica_records_binding` CHECK (
+		(`generation` = 0 AND `binding_json` IS NULL AND `policy_epoch` IS NULL AND `listing_generation` >= 2 AND (`listing_generation` % 2) = 0) OR
+		(`generation` > 0 AND `policy_epoch` >= 1)
+	),
+	CONSTRAINT `host_project_env_replica_records_listing` CHECK (`listing_generation` >= 0),
+	CONSTRAINT `host_project_env_replica_records_boolean` CHECK (`tombstone` IN (0, 1)),
+	CONSTRAINT `host_project_env_replica_records_materialization` CHECK (
+		(`materialization` = 'installed' AND `tombstone` = 0 AND `materialization_reason` IS NULL) OR
+		(`materialization` IN ('withheld', 'unavailable') AND `materialization_reason` IS NOT NULL)
+	)
+);
+--> statement-breakpoint
+CREATE TABLE `host_project_env_replica_values` (
+	`project_id` text NOT NULL,
+	`key` text NOT NULL,
+	`revision` integer NOT NULL,
+	`generation` integer NOT NULL,
+	`value_ref_json` text NOT NULL,
+	`value_enc` text NOT NULL,
+	`updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	PRIMARY KEY(`project_id`, `key`),
+	CONSTRAINT `host_project_env_replica_values_head` CHECK (`revision` >= 1 AND `generation` >= 1)
+);
+--> statement-breakpoint
+CREATE TABLE `host_project_env_replica_stage_projects` (
+	`attempt_id` text NOT NULL,
+	`project_id` text NOT NULL,
+	`record_version` integer,
+	`last_key` text,
+	`complete` integer NOT NULL DEFAULT 0,
+	PRIMARY KEY(`attempt_id`, `project_id`),
+	CONSTRAINT `host_project_env_replica_stage_projects_version` CHECK (`record_version` IS NULL OR `record_version` >= 0),
+	CONSTRAINT `host_project_env_replica_stage_projects_complete` CHECK (`complete` IN (0, 1))
+);
+--> statement-breakpoint
+CREATE TABLE `host_project_env_replica_stage_records` (
+	`attempt_id` text NOT NULL,
+	`project_id` text NOT NULL,
+	`key` text NOT NULL,
+	`revision` integer NOT NULL,
+	`generation` integer NOT NULL,
+	`tombstone` integer NOT NULL,
+	`value_ref_json` text,
+	`binding_json` text,
+	`policy_epoch` integer,
+	`listing_generation` integer NOT NULL,
+	`materialization` text NOT NULL,
+	`materialization_reason` text,
+	`updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	`present` integer NOT NULL DEFAULT 0,
+	PRIMARY KEY(`attempt_id`, `project_id`, `key`),
+	CONSTRAINT `host_project_env_replica_stage_records_head` CHECK (
+		(`tombstone` = 0 AND `revision` >= 1 AND `generation` >= 1 AND `value_ref_json` IS NOT NULL) OR
+		(`tombstone` = 1 AND `revision` = 1 AND `generation` = 0 AND `value_ref_json` IS NULL) OR
+		(`tombstone` = 1 AND `revision` >= 2 AND `generation` >= 2 AND `value_ref_json` IS NULL)
+	),
+	CONSTRAINT `host_project_env_replica_stage_records_binding` CHECK (
+		(`generation` = 0 AND `binding_json` IS NULL AND `policy_epoch` IS NULL AND `listing_generation` >= 2 AND (`listing_generation` % 2) = 0) OR
+		(`generation` > 0 AND `policy_epoch` >= 1)
+	),
+	CONSTRAINT `host_project_env_replica_stage_records_listing` CHECK (`listing_generation` >= 0),
+	CONSTRAINT `host_project_env_replica_stage_records_boolean` CHECK (`tombstone` IN (0, 1) AND `present` IN (0, 1)),
+	CONSTRAINT `host_project_env_replica_stage_records_materialization` CHECK (
+		(`materialization` = 'installed' AND `tombstone` = 0 AND `materialization_reason` IS NULL) OR
+		(`materialization` IN ('withheld', 'unavailable') AND `materialization_reason` IS NOT NULL)
+	)
+);
+--> statement-breakpoint
+CREATE TABLE `host_project_env_replica_stage_values` (
+	`attempt_id` text NOT NULL,
+	`project_id` text NOT NULL,
+	`key` text NOT NULL,
+	`revision` integer NOT NULL,
+	`generation` integer NOT NULL,
+	`value_ref_json` text NOT NULL,
+	`value_enc` text NOT NULL,
+	`updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	PRIMARY KEY(`attempt_id`, `project_id`, `key`),
+	CONSTRAINT `host_project_env_replica_stage_values_head` CHECK (`revision` >= 1 AND `generation` >= 1)
+);
+--> statement-breakpoint
+CREATE TABLE `host_project_env_replica_receipts` (
+	`stream_id` text NOT NULL,
+	`sequence` integer NOT NULL,
+	`request_mac` text NOT NULL,
+	`result_json` text,
+	`record_version` integer,
+	`ok` integer NOT NULL,
+	`code` text,
+	`created_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	PRIMARY KEY(`stream_id`, `sequence`),
+	CONSTRAINT `host_project_env_replica_receipts_sequence` CHECK (`sequence` >= 1),
+	CONSTRAINT `host_project_env_replica_receipts_boolean` CHECK (`ok` IN (0, 1)),
+	CONSTRAINT `host_project_env_replica_receipts_outcome` CHECK (
+		(`ok` = 1 AND `result_json` IS NOT NULL AND `record_version` IS NOT NULL AND `code` IS NULL) OR
+		(`ok` = 0 AND `result_json` IS NULL AND `record_version` IS NULL AND `code` IS NOT NULL)
+	)
+);

package/db/migrations/0027_cloud_credential_foundation.sql

@@ -0,0 +1,51 @@
+-- ADR-154 runner persistence foundation. A run epoch is non-secret
+-- assignment identity; cleanup rows contain paths and ids only, never values.
+ALTER TABLE `uai_host_tasks` ADD `run_epoch` integer NOT NULL DEFAULT 0
+  CONSTRAINT `uai_host_tasks_run_epoch` CHECK (`run_epoch` >= 0);
+--> statement-breakpoint
+CREATE TABLE `host_task_run_assignments` (
+	`task_id` text PRIMARY KEY NOT NULL,
+	`highest_run_epoch` integer NOT NULL,
+	`assignment_open` integer NOT NULL DEFAULT 1,
+	`created_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	`updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	CONSTRAINT `host_task_run_assignments_epoch` CHECK (`highest_run_epoch` >= 1),
+	CONSTRAINT `host_task_run_assignments_open` CHECK (`assignment_open` IN (0, 1)),
+	CONSTRAINT `host_task_run_assignments_task_id` CHECK (length(`task_id`) > 0)
+);
+--> statement-breakpoint
+CREATE TABLE `host_credential_cleanup_paths` (
+	`task_id` text NOT NULL,
+	`run_epoch` integer NOT NULL,
+	`runtime_locator` text NOT NULL,
+	`lane` text NOT NULL,
+	`path` text NOT NULL,
+	`credential_id` text NOT NULL,
+	`created_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	`updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	PRIMARY KEY(`task_id`, `run_epoch`, `runtime_locator`, `path`),
+	CONSTRAINT `host_credential_cleanup_paths_run_epoch` CHECK (`run_epoch` >= 1),
+	CONSTRAINT `host_credential_cleanup_paths_identity` CHECK (
+		length(`task_id`) > 0 AND length(`runtime_locator`) > 0 AND length(`credential_id`) > 0
+	),
+	CONSTRAINT `host_credential_cleanup_paths_lane` CHECK (
+		`lane` IN ('engine-auth', 'github', 'ssh', 'files-session')
+	),
+	CONSTRAINT `host_credential_cleanup_paths_absolute_path` CHECK (substr(`path`, 1, 1) = '/')
+);
+--> statement-breakpoint
+CREATE INDEX `host_credential_cleanup_paths_task_credential_idx`
+	ON `host_credential_cleanup_paths` (`task_id`, `run_epoch`, `credential_id`);
+--> statement-breakpoint
+CREATE TABLE `host_credential_cleanup_pending` (
+	`task_id` text PRIMARY KEY NOT NULL,
+	`run_epoch` integer NOT NULL,
+	`reason` text NOT NULL,
+	`created_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	`updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	CONSTRAINT `host_credential_cleanup_pending_run_epoch` CHECK (`run_epoch` >= 1),
+	CONSTRAINT `host_credential_cleanup_pending_reason` CHECK (
+		`reason` IN ('removed', 'denied', 'expired', 'assignment', 'restart', 'stop', 'park', 'teardown')
+	),
+	CONSTRAINT `host_credential_cleanup_pending_task_id` CHECK (length(`task_id`) > 0)
+);

package/db/migrations/0028_leased_engine_runtimes.sql

@@ -0,0 +1,11 @@
+CREATE TABLE `host_leased_engine_runtimes` (
+	`task_id` text NOT NULL,
+	`run_epoch` integer NOT NULL,
+	`runtime_locator` text NOT NULL,
+	`created_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	PRIMARY KEY(`task_id`, `run_epoch`, `runtime_locator`),
+	CONSTRAINT `host_leased_engine_runtimes_run_epoch` CHECK (`run_epoch` >= 1),
+	CONSTRAINT `host_leased_engine_runtimes_identity` CHECK (
+		length(`task_id`) > 0 AND length(`runtime_locator`) > 0
+	)
+);

package/db/migrations/0029_task_shared_files_mode.sql

@@ -0,0 +1,5 @@
+-- ADR-154 Files v1: persist the cloud-issued mode for crash recovery. The
+-- task-owned `.uai/files-mounted` marker is an observation, never authority.
+ALTER TABLE `uai_host_tasks` ADD `shared_files_mode` text
+	CONSTRAINT `uai_host_tasks_shared_files_mode`
+	CHECK (`shared_files_mode` IS NULL OR `shared_files_mode` IN ('off', 'ro', 'rw'));

package/db/migrations/0030_credential_cleanup_restops.sql

@@ -0,0 +1,12 @@
+CREATE TABLE IF NOT EXISTS `host_credential_cleanup_restops` (
+	`task_id` text NOT NULL,
+	`container_id` text NOT NULL,
+	`run_epoch` integer NOT NULL,
+	`runtime_locator` text NOT NULL,
+	`created_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+	PRIMARY KEY(`task_id`, `container_id`),
+	CONSTRAINT `host_credential_cleanup_restops_run_epoch` CHECK (`run_epoch` >= 1),
+	CONSTRAINT `host_credential_cleanup_restops_identity` CHECK (
+		length(`task_id`) > 0 AND length(`container_id`) > 0 AND length(`runtime_locator`) > 0
+	)
+);

package/db/migrations/meta/_journal.json

@@ -0,0 +1,223 @@
+{
+  "version": "7",
+  "dialect": "sqlite",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "6",
+      "when": 1779900001000,
+      "tag": "0000_host_tasks",
+      "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "6",
+      "when": 1779900002000,
+      "tag": "0001_host_ui",
+      "breakpoints": true
+    },
+    {
+      "idx": 2,
+      "version": "6",
+      "when": 1779900003000,
+      "tag": "0002_host_github_tokens",
+      "breakpoints": true
+    },
+    {
+      "idx": 3,
+      "version": "6",
+      "when": 1779900004000,
+      "tag": "0003_host_ssh_keys",
+      "breakpoints": true
+    },
+    {
+      "idx": 4,
+      "version": "6",
+      "when": 1779900005000,
+      "tag": "0004_host_owner_name",
+      "breakpoints": true
+    },
+    {
+      "idx": 5,
+      "version": "6",
+      "when": 1779900006000,
+      "tag": "0005_host_env_vars",
+      "breakpoints": true
+    },
+    {
+      "idx": 6,
+      "version": "6",
+      "when": 1779900007000,
+      "tag": "0006_host_project_env",
+      "breakpoints": true
+    },
+    {
+      "idx": 7,
+      "version": "6",
+      "when": 1779900008000,
+      "tag": "0007_host_github_token_kind",
+      "breakpoints": true
+    },
+    {
+      "idx": 8,
+      "version": "6",
+      "when": 1779900009000,
+      "tag": "0008_host_mcp_connections",
+      "breakpoints": true
+    },
+    {
+      "idx": 9,
+      "version": "6",
+      "when": 1779900010000,
+      "tag": "0009_host_agent_sessions",
+      "breakpoints": true
+    },
+    {
+      "idx": 10,
+      "version": "6",
+      "when": 1779900011000,
+      "tag": "0010_host_engine_accounts",
+      "breakpoints": true
+    },
+    {
+      "idx": 11,
+      "version": "6",
+      "when": 1779900012000,
+      "tag": "0011_codex_thread_id",
+      "breakpoints": true
+    },
+    {
+      "idx": 12,
+      "version": "6",
+      "when": 1779900013000,
+      "tag": "0012_agent_session_attach_key",
+      "breakpoints": true
+    },
+    {
+      "idx": 13,
+      "version": "6",
+      "when": 1786045000000,
+      "tag": "0013_github_credential_generations",
+      "breakpoints": true
+    },
+    {
+      "idx": 14,
+      "version": "6",
+      "when": 1786406400000,
+      "tag": "0014_host_inventory_event_index",
+      "breakpoints": true
+    },
+    {
+      "idx": 15,
+      "version": "6",
+      "when": 1786406401000,
+      "tag": "0015_host_settings",
+      "breakpoints": true
+    },
+    {
+      "idx": 16,
+      "version": "6",
+      "when": 1786406402000,
+      "tag": "0016_task_environment",
+      "breakpoints": true
+    },
+    {
+      "idx": 17,
+      "version": "6",
+      "when": 1788820000000,
+      "tag": "0017_engine_account_scope",
+      "breakpoints": true
+    },
+    {
+      "idx": 18,
+      "version": "6",
+      "when": 1788900000000,
+      "tag": "0018_engine_account_position",
+      "breakpoints": true
+    },
+    {
+      "idx": 19,
+      "version": "6",
+      "when": 1788900000001,
+      "tag": "0019_engine_account_store_ref",
+      "breakpoints": true
+    },
+    {
+      "idx": 20,
+      "version": "6",
+      "when": 1788900000002,
+      "tag": "0020_user_credential_store_ref",
+      "breakpoints": true
+    },
+    {
+      "idx": 21,
+      "version": "6",
+      "when": 1788900000003,
+      "tag": "0021_project_env_store_ref",
+      "breakpoints": true
+    },
+    {
+      "idx": 22,
+      "version": "6",
+      "when": 1788900000004,
+      "tag": "0022_task_project_ids",
+      "breakpoints": true
+    },
+    {
+      "idx": 23,
+      "version": "6",
+      "when": 1788900000005,
+      "tag": "0023_project_env_org",
+      "breakpoints": true
+    },
+    {
+      "idx": 24,
+      "version": "6",
+      "when": 1788900000006,
+      "tag": "0024_task_env_mode",
+      "breakpoints": true
+    },
+    {
+      "idx": 25,
+      "version": "6",
+      "when": 1788900000007,
+      "tag": "0025_project_env_authority",
+      "breakpoints": true
+    },
+    {
+      "idx": 26,
+      "version": "6",
+      "when": 1788900000008,
+      "tag": "0026_project_env_replica",
+      "breakpoints": true
+    },
+    {
+      "idx": 27,
+      "version": "6",
+      "when": 1791331200000,
+      "tag": "0027_cloud_credential_foundation",
+      "breakpoints": true
+    },
+    {
+      "idx": 28,
+      "version": "6",
+      "when": 1791331200001,
+      "tag": "0028_leased_engine_runtimes",
+      "breakpoints": true
+    },
+    {
+      "idx": 29,
+      "version": "6",
+      "when": 1791590400000,
+      "tag": "0029_task_shared_files_mode",
+      "breakpoints": true
+    },
+    {
+      "idx": 30,
+      "version": "6",
+      "when": 1793318400000,
+      "tag": "0030_credential_cleanup_restops",
+      "breakpoints": true
+    }
+  ]
+}