@moondeck/station 0.0.1 → 1.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Diogo Perillo
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,150 @@
 # @moondeck/station
-This is a placeholder package that reserves the name for Moondeck Station.
-The first release is coming soon; see https://moondeck.io.
+
+**Moondeck Station**, the host for [Moondeck](https://moondeck.io) — a self-hosted service
+that runs parallel AI coding tasks in ephemeral Docker containers on a machine
+**you** control. This package is the long-running per-user daemon that connects
+your machine to the Moondeck cloud and runs the task containers locally. It also
+serves a small read-only monitor UI on `127.0.0.1` (ADR-028).
+
+One process does three things:
+
+- **Cloud bridge** — a host-initiated *outbound* WSS to
+  `wss://app.moondeck.io/host` carrying every command/tunnel. The cloud never
+  connects in; nothing inbound is exposed.
+- **Local UI** — an HTTP server on `127.0.0.1:5876` (next free port if taken):
+  connection badge, service info, active tasks, recent events. Localhost only,
+  no auth, read-only — mutations come from the cloud, not here.
+- **MCP gateway** — a credential-injecting HTTP proxy for task containers,
+  bound to `127.0.0.1:5877` by default. Listener failures retry with capped
+  backoff and are advertised to the cloud as bounded health state.
+
+## Requirements
+
+- **Docker** (running) — tasks are containers.
+- **Node 22, 24, 25 or 26; Node 24 LTS recommended.** Those are the majors the
+  pinned SQLite dependency ships a prebuilt binary for. Tested release majors
+  are 22, 24 and 26; Node 25 warns and continues when the binding loads.
+  Anything else — including Node 20, 21 and 23 — has to compile from source
+  and fails on a machine without a C++ toolchain.
+
+## Install & enroll
+
+```bash
+npm i -g @moondeck/station
+```
+
+Then, in the Moondeck web app, open an organization and choose **“Add a host.”** It
+mints a one-time enrollment token and shows the exact command to run on this
+machine (ADR-031):
+
+```bash
+moondeck-station setup --cloud wss://app.moondeck.io/host --enroll uaienroll_…
+moondeck-station install      # per-user service: launchd (macOS) / systemd --user (Linux)
+moondeck-station start
+```
+
+The host generates its **own** bridge credential locally. The cloud persists
+only its hash; the raw credential transits authenticated TLS for bridge auth
+and existing-host attachment but is not stored there (ADR-015). Once started
+it appears in your org and can run tasks. Data + config live under `~/.moondeck`
+(`~/.moondeck/.env.local`, `~/.moondeck/data/`); from a repo checkout they stay under the
+repo instead. The monitor UI is at `http://127.0.0.1:5876` (exact port in
+`moondeck-station status`).
+
+## CLI (`moondeck-station`)
+
+```
+setup --cloud <wss-url> --enroll <token>
+                     claim this machine, or enroll its existing identity in
+                     the token's workspace
+enroll <token> [--cloud <wss-url>]
+                     first-time setup, or attach this machine to another
+                     workspace; uses the stored cloud URL when available
+install [--dry-run]  install as a per-user service for this OS
+uninstall            remove the service
+start | stop         control the installed service
+restart              stop + start
+status               connection, service info, active tasks (same data as the UI)
+logs [--follow]      tail the service log
+run                  run in the foreground (debug)
+pair <token>         store a host token directly (manual fallback for setup)
+open                 open the local UI in your browser
+```
+
+`enroll` is available in host version 0.9.15 and newer. Its compatible cloud
+endpoint is intentionally deployed before that host release.
+
+`--dry-run` on `install` (and start/stop/…) prints the unit file + load
+commands without touching launchd/systemd.
+
+## Headless
+
+Runs identically with no display: install via the same flow, skip `moondeck-station
+open`, and use `moondeck-station status` for everything the UI shows. The UI stays
+reachable over an SSH port-forward to `127.0.0.1:5876` if you want it.
+
+At boot, task and channel starts wait for the initial agent-CLI maintenance
+pass to settle before any in-container writer or station executes. The cloud
+host page shows this short preparation state. It also shows MCP gateway
+listener failures while the host retries them; gateway health is independent
+of ordinary task admission.
+
+## Security
+
+Tasks run in ephemeral containers and **do not** mount your live AI session
+dirs. Per-task credentials (GitHub tokens, SSH keys) are decrypted only on the
+host, using a host-resident master key; the cloud stores only hashes and public
+keys. See [ADR-015](https://github.com/moondeckio/uai/blob/main/docs/decisions.md)
+for the secret-blind model.
+
+## Dev (from a repo checkout)
+
+`pnpm host-agent` (from the repo root) = `moondeck-station run` — the service in the
+foreground, no install, logs to stdout. The packaged binary runs the same
+TypeScript source through [tsx](https://github.com/privatenumber/tsx); there is
+no build step (ADR-032).
+
+## More
+
+- [Moondeck on GitHub](https://github.com/moondeckio/uai)
+- [docs/host-ui.md](https://github.com/moondeckio/uai/blob/main/docs/host-ui.md) — the local UI surface.
+- [docs/host-packaging.md](https://github.com/moondeckio/uai/blob/main/docs/host-packaging.md) — how this package is built and published.
+</content>
+
+## Telemetry
+
+Installed hosts report **crashes only** to Sentry by default. Sent on a
+crash: the error and stack trace (paths and secret-shaped strings
+redacted), recent bridge-connection breadcrumbs, OS/runtime versions, the
+package version, and a pseudonymous host id. No sessions, no usage pings,
+and no request data — nothing is sent until something actually crashes.
+Telemetry is designed to exclude chat, prompts, env values, and repo
+content; error text is scrubbed for secret shapes, but redaction is
+pattern-based, not perfect. Repo checkouts and dev/test runs never report,
+and reporting only activates after this notice has been shown once (the
+`install`/`pair`/`setup`/`start`/`restart` commands print it — a silently
+upgraded service stays off until one of them runs).
+
+Opt out any time — add to `$UAI_HOME/.env.local` (default
+`~/.moondeck/.env.local`), then `moondeck-station restart`:
+
+```
+UAI_TELEMETRY_DISABLED=1
+```
+
+`UAI_SENTRY_DSN=<dsn>` redirects reports to your own Sentry instead.
+
+## Moving from the old Uai host (`@runuai/host`)
+
+A station never runs beside the old host. Remove the old one first: its
+service, runtime, `uai-host` commands and leftover task containers. `~/.uai`
+is kept unless you pass `--purge`; it refuses while the old host runs tasks
+unless you pass `--force` (their work is lost):
+
+```sh
+npx @moondeck/station uninstall-legacy      # or: moondeck-station uninstall-legacy
+npx @moondeck/station install
+moondeck-station enroll <token from app.moondeck.io>
+```
+
+With the one-line installer: `curl -fsSL https://app.moondeck.io/install | sh -s -- --uninstall-legacy --enroll <token>`.

package/bin/uai-host.mjs

@@ -0,0 +1,130 @@
+#!/usr/bin/env node
+/**
+ * Published entrypoint for `@moondeck/station`, its `moondeck-station` bin (ADR-032). The file keeps its
+ * pre-rename name: the runtime archive layout pins `agent/bin/uai-host.mjs`.
+ *
+ * The host ships TypeScript source and runs it through tsx — no build step —
+ * so every runtime path (drizzle migrations, scripts/agent/*.sh, the
+ * images/standard build context) resolves off its source file exactly as in
+ * dev. This shim verifies that the native SQLite dependency can load,
+ * registers tsx's ESM loader, then hands off to src/cli.ts. argv passes
+ * straight through: src/cli.ts reads process.argv.slice(2).
+ */
+
+// A builtin — importing it here loads nothing of the app and no tsx.
+import { stripVTControlCharacters } from "node:util";
+
+const minimumNodeMajor = 20;
+const testedNodeMajors = new Set([22, 24, 26]);
+const nodeMajor = Number.parseInt(process.versions.node.split(".")[0] ?? "", 10);
+
+/**
+ * The commands that BOOT the agent, and so genuinely need the native module.
+ *
+ * Everything else — `logs`, `status`, `open`, `stop`, `uninstall`, `setup`,
+ * `--help` — only inspects or dismantles an install, and all of them were
+ * verified to run with the module unloadable. Failing them on a broken probe
+ * takes away the diagnostic path (`logs`) and the recovery path (`stop`,
+ * `uninstall`) from precisely the user the probe exists to help: they are told
+ * to reinstall, and cannot remove the wedged service first.
+ *
+ * `start`/`restart`/`install` don't open the database in THIS process — they
+ * hand off to launchd/systemd — but they all end in a running agent, so
+ * failing fast here beats a crash-looping service the user then has to chase
+ * through the log.
+ */
+const commandsNeedingNativeSqlite = new Set([
+  "run",
+  "start",
+  "restart",
+  "install",
+]);
+
+/**
+ * Of those, the ones whose `--dry-run` prints a plan and boots nothing.
+ *
+ * `run` is deliberately absent: it ignores the flag and boots regardless, so
+ * exempting on the flag alone would wave through the one command that really
+ * does need the module.
+ */
+const dryRunnableCommands = new Set(["start", "restart", "install"]);
+
+/** Whether this invocation will actually end in a running agent. */
+function needsNativeSqlite(argv) {
+  const command = argv[2] ?? "";
+  if (!commandsNeedingNativeSqlite.has(command)) return false;
+  return !(dryRunnableCommands.has(command) && argv.includes("--dry-run"));
+}
+
+function errorSummary(error) {
+  // Native loader errors can carry ANSI colour, which lands as escape noise in
+  // a log file or a non-TTY pipe. Strip it before picking the line to show.
+  const message = stripVTControlCharacters(
+    error instanceof Error ? error.message : String(error),
+  );
+  const firstLine = message
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .find(Boolean);
+  if (!firstLine) return "unknown error";
+  return firstLine.length > 240 ? `${firstLine.slice(0, 237)}...` : firstLine;
+}
+
+function nativeRecoveryAdvice() {
+  return process.versions.electron
+    ? "Update or reinstall the Uai Host desktop app and retry."
+    : "Reinstall @moondeck/station; if that still fails, switch to Node.js 24 LTS and reinstall.";
+}
+
+async function probeNativeSqlite() {
+  try {
+    const { default: Database } = await import("better-sqlite3");
+    const database = new Database(":memory:");
+    database.close();
+    return { ok: true };
+  } catch (error) {
+    return { ok: false, error };
+  }
+}
+
+async function main() {
+  if (!Number.isInteger(nodeMajor) || nodeMajor < minimumNodeMajor) {
+    console.error(
+      `moondeck-station requires Node.js 20 or newer; found v${process.versions.node}. Install Node.js 24 LTS and retry.`,
+    );
+    process.exitCode = 1;
+    return;
+  }
+
+  const sqliteProbe = await probeNativeSqlite();
+  if (!sqliteProbe.ok) {
+    const detail =
+      `moondeck-station could not load its native SQLite module on Node.js v${process.versions.node}. ` +
+      `${nativeRecoveryAdvice()} Cause: ${errorSummary(sqliteProbe.error)}`;
+    if (needsNativeSqlite(process.argv)) {
+      console.error(detail);
+      process.exitCode = 1;
+      return;
+    }
+    // Still say it — a broken module IS why their service is down — but let
+    // the command through so they can read the log and uninstall.
+    console.warn(`${detail} Continuing — this command does not need it.`);
+  }
+
+  // Only when the probe actually succeeded — otherwise this contradicts the
+  // warning just printed, telling the user SQLite loaded right after saying it
+  // could not.
+  if (sqliteProbe.ok && !testedNodeMajors.has(nodeMajor)) {
+    console.warn(
+      `moondeck-station has not been tested on Node.js v${process.versions.node}; continuing because native SQLite loaded. Node.js 24 LTS is recommended.`,
+    );
+  }
+
+  // Keep this import behind the native probe: the preflight must run in plain
+  // Node before tsx (and the TypeScript application graph) is loaded.
+  const { register } = await import("tsx/esm/api");
+  register();
+  await import(new URL("../src/cli.ts", import.meta.url).href);
+}
+
+await main();

package/db/migrations/0000_host_tasks.sql

@@ -0,0 +1,12 @@
+CREATE TABLE `uai_host_tasks` (
+  `task_id` text PRIMARY KEY NOT NULL,
+  `code_server_port` integer,
+  `preview_ports` text DEFAULT '[]' NOT NULL,
+  `compose_project` text,
+  `worktree_path` text,
+  `status_mirror` text,
+  `locked_at` integer,
+  `started_at` integer,
+  `ended_at` integer,
+  `updated_at` integer DEFAULT (unixepoch() * 1000) NOT NULL
+);

package/db/migrations/0001_host_ui.sql

@@ -0,0 +1,11 @@
+ALTER TABLE `uai_host_tasks` ADD `owner_user_id` text;--> statement-breakpoint
+ALTER TABLE `uai_host_tasks` ADD `owner_email` text;--> statement-breakpoint
+ALTER TABLE `uai_host_tasks` ADD `project_slugs` text DEFAULT '[]' NOT NULL;--> statement-breakpoint
+CREATE TABLE `uai_host_events` (
+  `id` text PRIMARY KEY NOT NULL,
+  `task_id` text NOT NULL,
+  `kind` text NOT NULL,
+  `ts` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+  `detail` text
+);--> statement-breakpoint
+CREATE INDEX `uai_host_events_ts_idx` ON `uai_host_events` (`ts`);

package/db/migrations/0002_host_github_tokens.sql

@@ -0,0 +1,8 @@
+CREATE TABLE `host_github_tokens` (
+  `user_id` text PRIMARY KEY NOT NULL,
+  `installation_id` integer NOT NULL,
+  `refresh_token_ct` blob NOT NULL,
+  `refresh_token_nonce` blob NOT NULL,
+  `refresh_token_expires_at` integer,
+  `updated_at` integer NOT NULL
+);

package/db/migrations/0003_host_ssh_keys.sql

@@ -0,0 +1,8 @@
+CREATE TABLE `host_ssh_keys` (
+  `user_id` text PRIMARY KEY NOT NULL,
+  `public_key` text NOT NULL,
+  `private_key_ct` blob NOT NULL,
+  `private_key_nonce` blob NOT NULL,
+  `created_at` integer NOT NULL,
+  `updated_at` integer NOT NULL
+);

package/db/migrations/0004_host_owner_name.sql

@@ -0,0 +1 @@
+ALTER TABLE `uai_host_tasks` ADD `owner_name` text;

package/db/migrations/0005_host_env_vars.sql

@@ -0,0 +1,5 @@
+CREATE TABLE `host_env_vars` (
+  `key` text PRIMARY KEY NOT NULL,
+  `value_enc` text NOT NULL,
+  `updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000)
+);

package/db/migrations/0006_host_project_env.sql

@@ -0,0 +1,9 @@
+DROP TABLE IF EXISTS `host_env_vars`;
+--> statement-breakpoint
+CREATE TABLE `host_project_env` (
+  `project_id` text NOT NULL,
+  `key` text NOT NULL,
+  `value_enc` text NOT NULL,
+  `updated_at` integer NOT NULL DEFAULT (unixepoch() * 1000),
+  PRIMARY KEY (`project_id`, `key`)
+);

package/db/migrations/0007_host_github_token_kind.sql

@@ -0,0 +1,7 @@
+-- ADR-033: non-expiring per-host tokens. `kind` distinguishes the stored token:
+--   'refresh' (legacy, ADR-027) → refresh_token_ct holds a refresh token; the
+--             host exchanges it for short-lived access tokens.
+--   'access'  (ADR-033)         → refresh_token_ct holds a long-lived, non-
+--             expiring access token; injected directly, no exchange/refresh.
+-- Existing rows default to 'refresh' (their current semantics).
+ALTER TABLE `host_github_tokens` ADD `kind` text DEFAULT 'refresh' NOT NULL;

package/db/migrations/0008_host_mcp_connections.sql

@@ -0,0 +1,18 @@
+-- ADR-057: user-authed MCP connections. Secrets sealed with the host master
+-- key (ct.nonce base64, like host_project_env.value_enc); the cloud holds only
+-- non-secret metadata.
+CREATE TABLE `host_mcp_connections` (
+	`id` text PRIMARY KEY NOT NULL,
+	`user_id` text NOT NULL,
+	`url` text NOT NULL,
+	`auth_kind` text NOT NULL,
+	`token_endpoint` text,
+	`redirect_uri` text,
+	`client_id` text,
+	`client_secret_enc` text,
+	`pkce_verifier_enc` text,
+	`secret_enc` text,
+	`status` text DEFAULT 'pending' NOT NULL,
+	`scopes` text,
+	`updated_at` integer NOT NULL
+);

package/db/migrations/0009_host_agent_sessions.sql

@@ -0,0 +1,15 @@
+-- ADR-061: durable agent sessions. One row per (task, agent) tracking the
+-- live in-container runner and how far the host has consumed its outbox —
+-- the byte offset is what makes a host restart resume instead of respawn.
+CREATE TABLE `host_agent_sessions` (
+	`task_id` text NOT NULL,
+	`agent_id` text NOT NULL,
+	`session_dir` text NOT NULL,
+	`container_name` text NOT NULL,
+	`kind` text NOT NULL,
+	`outbox_offset` integer DEFAULT 0 NOT NULL,
+	`status` text DEFAULT 'running' NOT NULL,
+	`created_at` integer NOT NULL,
+	`updated_at` integer NOT NULL,
+	PRIMARY KEY(`task_id`, `agent_id`)
+);

package/db/migrations/0010_host_engine_accounts.sql

@@ -0,0 +1,13 @@
+-- ADR-076: multiple accounts per engine. One row per EXTRA (non-default)
+-- credential for an engine kind; the legacy single slot is synthesized as the
+-- "default" account and is NOT stored here. Secret material is sealed with the
+-- host master key (env kind) or lives in an isolated host dir (config-dir kind).
+CREATE TABLE `host_engine_accounts` (
+	`id` text PRIMARY KEY NOT NULL,
+	`kind` text NOT NULL,
+	`label` text NOT NULL,
+	`auth_kind` text NOT NULL,
+	`secret_enc` text,
+	`config_dir` text,
+	`created_at` integer NOT NULL
+);

package/db/migrations/0011_codex_thread_id.sql

@@ -0,0 +1,5 @@
+-- ADR-078: Codex restart-survival. Persist the app-server thread id so a
+-- respawned Codex (allowAttach:false → kill+respawn on host restart) can
+-- `thread/resume` the SAME durable thread from its on-disk rollout instead of
+-- starting a fresh one and losing the conversation. Null for non-codex kinds.
+ALTER TABLE `host_agent_sessions` ADD `codex_thread_id` text;

package/db/migrations/0012_agent_session_attach_key.sql

@@ -0,0 +1,4 @@
+-- Durable runners otherwise attach by task + agent alone. Persist the
+-- host-owned launch-policy generation so a rolling policy/tool transition can
+-- replace an incompatible live runner instead of silently inheriting it.
+ALTER TABLE `host_agent_sessions` ADD `attach_compatibility_key` text;

package/db/migrations/0013_github_credential_generations.sql

@@ -0,0 +1,11 @@
+ALTER TABLE `host_github_tokens` ADD `generation` integer DEFAULT 0 NOT NULL;
+--> statement-breakpoint
+CREATE TABLE `host_github_credential_generations` (
+	`user_id` text PRIMARY KEY NOT NULL,
+	`generation` integer DEFAULT 0 NOT NULL,
+	`mutation` text DEFAULT 'set' NOT NULL,
+	`updated_at` integer NOT NULL
+);
+--> statement-breakpoint
+INSERT INTO `host_github_credential_generations` (`user_id`, `generation`, `mutation`, `updated_at`)
+SELECT `user_id`, 0, 'set', `updated_at` FROM `host_github_tokens`;

package/db/migrations/0014_host_inventory_event_index.sql

@@ -0,0 +1 @@
+CREATE INDEX `uai_host_events_task_id_idx` ON `uai_host_events` (`task_id`);

package/db/migrations/0015_host_settings.sql

@@ -0,0 +1,9 @@
+CREATE TABLE `host_settings` (
+	`id` text PRIMARY KEY DEFAULT 'host' NOT NULL,
+	`retain_terminal_history` integer DEFAULT true NOT NULL,
+	`updated_at` integer DEFAULT (unixepoch() * 1000) NOT NULL,
+	CONSTRAINT "host_settings_singleton" CHECK (`host_settings`.`id` = 'host'),
+	CONSTRAINT "host_settings_retention_boolean" CHECK (`host_settings`.`retain_terminal_history` IN (0, 1))
+);
+--> statement-breakpoint
+INSERT INTO `host_settings` (`id`, `retain_terminal_history`) VALUES ('host', true);

package/db/migrations/0016_task_environment.sql

@@ -0,0 +1,2 @@
+ALTER TABLE `uai_host_tasks` ADD `environment_provider` text;--> statement-breakpoint
+ALTER TABLE `uai_host_tasks` ADD `environment_locator` text CONSTRAINT `uai_host_tasks_environment_pair` CHECK ((`environment_provider` IS NULL) = (`environment_locator` IS NULL));

package/db/migrations/0017_engine_account_scope.sql

@@ -0,0 +1,7 @@
+-- ADR-131 Decision 3: engine accounts carry a scope — 'host' (the owner's,
+-- today's rows) or 'org:<orgId>' (a workspace's account on a shared host).
+-- Tasks resolve accounts by their scope; org scopes never see the default
+-- slot or the host's rows.
+ALTER TABLE `host_engine_accounts` ADD `scope` text NOT NULL DEFAULT 'host';--> statement-breakpoint
+CREATE INDEX `host_engine_accounts_scope_kind_idx` ON `host_engine_accounts` (`scope`,`kind`);--> statement-breakpoint
+ALTER TABLE `uai_host_tasks` ADD `engine_account_scope` text;

package/db/migrations/0018_engine_account_position.sql

@@ -0,0 +1,3 @@
+-- Manage-v1 (host 0.9.104): explicit priority order for a kind's extra
+-- accounts within a scope. Existing rows keep 0 and fall back to created_at.
+ALTER TABLE `host_engine_accounts` ADD `position` integer NOT NULL DEFAULT 0;

package/db/migrations/0019_engine_account_store_ref.sql

@@ -0,0 +1,3 @@
+-- ADR-134 (host 0.9.111): the credential-store parameter an engine account
+-- mirrors to. Null on owned hosts and before the first successful mirror.
+ALTER TABLE `host_engine_accounts` ADD `store_ref` text;

package/db/migrations/0020_user_credential_store_ref.sql

@@ -0,0 +1,6 @@
+-- ADR-134 slice 2 (host 0.9.113): per-user credentials mirror to the
+-- credential store on Uai-operated hosts. Null on owned hosts and before the
+-- first successful mirror.
+ALTER TABLE `host_github_tokens` ADD `store_ref` text;--> statement-breakpoint
+ALTER TABLE `host_ssh_keys` ADD `store_ref` text;--> statement-breakpoint
+ALTER TABLE `host_mcp_connections` ADD `store_ref` text;

package/db/migrations/0021_project_env_store_ref.sql

@@ -0,0 +1,3 @@
+-- ADR-134 slice 3 (host 0.9.115): project env values mirror to the credential
+-- store on Uai-operated hosts. Null on owned hosts and before the first mirror.
+ALTER TABLE `host_project_env` ADD `store_ref` text;

package/db/migrations/0022_task_project_ids.sql

@@ -0,0 +1,5 @@
+-- Machine tasks (ADR-121) have no compose env, so per-project env values
+-- (ADR-015) must ride each agent session's env instead — and the host only
+-- knew a task's project SLUGS while env is keyed by project id. Lead project
+-- first. Older rows stay '[]' (Docker tasks never read it).
+ALTER TABLE `uai_host_tasks` ADD `project_ids` text NOT NULL DEFAULT '[]';

package/db/migrations/0023_project_env_org.sql

@@ -0,0 +1,4 @@
+-- ADR-133: the project's org, so the mirrored parameter can carry the `org`
+-- tag the task-machine lease policy conditions on. Null until the cloud sends
+-- it (env.var.set / env.var.list with orgId) or a stored value carries it.
+ALTER TABLE `host_project_env` ADD `org_id` text;

package/db/migrations/0024_task_env_mode.sql

@@ -0,0 +1,9 @@
+-- ADR-153: durable rollout fence for per-command project env delivery.
+-- Existing/null rows are interpreted as `baked`; new task-up writes `loader`
+-- before creating runtime resources, so recovery never launches a binary that
+-- is absent from an older container image.
+ALTER TABLE `uai_host_tasks` ADD `env_mode` text;
+--> statement-breakpoint
+-- Value-free declaration/literal metadata needed to rebuild the resolver
+-- after runner restart, before the cloud re-sends task-up.
+ALTER TABLE `uai_host_tasks` ADD `project_env_spec` text;