@omnitron-dev/omnitron 0.1.3 → 0.3.0

package/dist/database/migrate.js

@@ -1,41 +1,27 @@
 /**
- * Omnitron Database Migration Runner
+ * Omnitron Database Migration CLI
  *
- * Runs migrations on omnitron-pg (port 5480) using @kysera/migrations.
+ * Applies (or rolls back) the migrations in `migrations/index.ts` against
+ * omnitron-pg. The daemon's boot path runs the SAME registry through the
+ * SAME engine (`migration-runner.ts`) — this entry point only adds argv
+ * handling, console logging and the rollback direction.
  *
  * Usage:
  *   tsx src/database/migrate.ts          (apply all pending)
  *   tsx src/database/migrate.ts --down   (rollback last)
  */
-import pg from 'pg';
-import { Kysely, PostgresDialect } from 'kysely';
 import { createMigrationRunner } from '@kysera/migrations';
-import * as m001 from './migrations/001_initial_schema.js';
-import * as m002 from './migrations/002_metrics_raw.js';
-import * as m003 from './migrations/003_pipelines_traces.js';
-const DATABASE_URL = process.env['OMNITRON_DATABASE_URL'] || 'postgresql://omnitron:omnitron@localhost:5480/omnitron';
-const url = new URL(DATABASE_URL);
-const db = new Kysely({
-    dialect: new PostgresDialect({
-        pool: new pg.Pool({
-            host: url.hostname,
-            port: Number(url.port) || 5480,
-            database: url.pathname.slice(1),
-            user: url.username,
-            password: url.password,
-        }),
-    }),
-});
-const migrations = [
-    { name: '001_initial_schema', up: m001.up, down: m001.down },
-    { name: '002_metrics_raw', up: m002.up, down: m002.down },
-    { name: '003_pipelines_traces', up: m003.up, down: m003.down },
-];
+import { createOmnitronDb, resolveOmnitronPgConfig } from './connection.js';
+import { OMNITRON_MIGRATIONS } from './migrations/index.js';
 const isDown = process.argv.includes('--down');
 async function run() {
-    const runner = createMigrationRunner(db, migrations, {
+    const { host, port, database } = resolveOmnitronPgConfig();
+    console.log(`Target: ${host}:${port}/${database}`);
+    const db = await createOmnitronDb({ max: 2 });
+    const runner = createMigrationRunner(db, OMNITRON_MIGRATIONS, {
         verbose: true,
         useTransactions: true,
+        advisoryLock: true,
         logger: {
             info: (msg) => console.log(msg),
             warn: (msg) => console.warn(msg),
@@ -45,15 +31,19 @@ async function run() {
             fatal: (msg) => console.error(msg),
         },
     });
-    if (isDown) {
-        const result = await runner.down(1);
-        console.log(`Rolled back ${result.executed.length} migration(s).`);
+    try {
+        if (isDown) {
+            const result = await runner.down(1);
+            console.log(`Rolled back ${result.executed.length} migration(s).`);
+        }
+        else {
+            const result = await runner.up();
+            console.log(`${result.executed.length} migration(s) applied.`);
+        }
     }
-    else {
-        const result = await runner.up();
-        console.log(`${result.executed.length} migration(s) applied.`);
+    finally {
+        await db.destroy();
     }
-    await db.destroy();
 }
 run().catch((err) => {
     console.error('Migration failed:', err);

package/dist/database/migrate.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/database/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,KAAK,IAAI,MAAM,oCAAoC,CAAC;AAC3D,OAAO,KAAK,IAAI,MAAM,iCAAiC,CAAC;AACxD,OAAO,KAAK,IAAI,MAAM,sCAAsC,CAAC;AAE7D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,wDAAwD,CAAC;AACtH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;AAElC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAU;IAC7B,OAAO,EAAE,IAAI,eAAe,CAAC;QAC3B,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/B,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC;KACH,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG;IACjB,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IAC5D,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IACzD,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;CAC/D,CAAC;AAEF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAE/C,KAAK,UAAU,GAAG;IAChB,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,EAAE,UAAU,EAAE;QACnD,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YACvC,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YACxC,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YAC1C,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;YACf,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;YACf,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;SAC3C;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,wBAAwB,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAClB,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/database/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAE/C,KAAK,UAAU,GAAG;IAChB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,uBAAuB,EAAE,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;IAEnD,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAU,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,EAAE,mBAAmB,EAAE;QAC5D,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,IAAI;QACrB,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YACvC,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YACxC,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YAC1C,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;YACf,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;YACf,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;SAC3C;KACF,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,wBAAwB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAClB,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/database/migration-runner.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Omnitron Migration Runner — the one way schema gets applied.
+ *
+ * ## Why this module exists
+ *
+ * Two of the three previous runners destructured `Migrator` from `'kysely'`:
+ *
+ *     const { Kysely, PostgresDialect, Migrator } = await import('kysely');
+ *
+ * Kysely ≥0.28 does not export `Migrator` from the package root (the type is
+ * a `KyseraTypeError<"import from 'kysely/migration' instead">` marker), so
+ * `Migrator` was `undefined` at runtime and `new Migrator(...)` threw
+ * `TypeError: Migrator is not a constructor`. Both call sites wrapped that in
+ * a `catch` that logged a *warning* and continued, so the daemon booted
+ * cleanly onto a completely empty database — the failure only surfaced far
+ * downstream as an endless `relation "alert_rules" does not exist` /
+ * `relation "omnitron_sessions" does not exist` log storm.
+ *
+ * The fix is structural, not a corrected import: schema application now goes
+ * through `@kysera/migrations` — the stack this repo standardised on, already
+ * used by the `migrate` CLI — from ONE place, over ONE registry, with the
+ * failure reported instead of downgraded to a warning.
+ *
+ * `@kysera/migrations` also brings two properties the ad-hoc runners lacked:
+ * a PostgreSQL advisory lock (two daemons booting at once cannot both run the
+ * same pending migration) and per-migration transactions.
+ */
+import type { Kysely } from 'kysely';
+import type { ILogger } from '@omnitron-dev/titan/module/logger';
+export interface MigrationRunOutcome {
+    /** Names of migrations applied by THIS run (empty when already up to date). */
+    applied: string[];
+}
+/**
+ * Apply all pending migrations against an existing Kysely instance.
+ * The caller owns the connection lifecycle.
+ *
+ * @throws whatever `@kysera/migrations` throws — callers decide the policy.
+ */
+export declare function migrateOmnitronDb(db: Kysely<unknown>, logger?: ILogger): Promise<MigrationRunOutcome>;
+/**
+ * Connect to omnitron-pg, apply pending migrations, disconnect.
+ *
+ * Used by the two boot paths (daemon start-up and infrastructure
+ * provisioning). Errors propagate: a daemon running against an unmigrated
+ * database is broken in ways that only show up much later, so the caller
+ * must surface it rather than continue silently.
+ */
+export declare function runOmnitronMigrations(logger?: ILogger): Promise<MigrationRunOutcome>;
+//# sourceMappingURL=migration-runner.d.ts.map

package/dist/database/migration-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-runner.d.ts","sourceRoot":"","sources":["../../src/database/migration-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAKjE,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAyB3G;AAyED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAmB1F"}

package/dist/database/migration-runner.js

@@ -0,0 +1,143 @@
+/**
+ * Omnitron Migration Runner — the one way schema gets applied.
+ *
+ * ## Why this module exists
+ *
+ * Two of the three previous runners destructured `Migrator` from `'kysely'`:
+ *
+ *     const { Kysely, PostgresDialect, Migrator } = await import('kysely');
+ *
+ * Kysely ≥0.28 does not export `Migrator` from the package root (the type is
+ * a `KyseraTypeError<"import from 'kysely/migration' instead">` marker), so
+ * `Migrator` was `undefined` at runtime and `new Migrator(...)` threw
+ * `TypeError: Migrator is not a constructor`. Both call sites wrapped that in
+ * a `catch` that logged a *warning* and continued, so the daemon booted
+ * cleanly onto a completely empty database — the failure only surfaced far
+ * downstream as an endless `relation "alert_rules" does not exist` /
+ * `relation "omnitron_sessions" does not exist` log storm.
+ *
+ * The fix is structural, not a corrected import: schema application now goes
+ * through `@kysera/migrations` — the stack this repo standardised on, already
+ * used by the `migrate` CLI — from ONE place, over ONE registry, with the
+ * failure reported instead of downgraded to a warning.
+ *
+ * `@kysera/migrations` also brings two properties the ad-hoc runners lacked:
+ * a PostgreSQL advisory lock (two daemons booting at once cannot both run the
+ * same pending migration) and per-migration transactions.
+ */
+import { createOmnitronDb } from './connection.js';
+import { OMNITRON_MIGRATIONS } from './migrations/index.js';
+/**
+ * Apply all pending migrations against an existing Kysely instance.
+ * The caller owns the connection lifecycle.
+ *
+ * @throws whatever `@kysera/migrations` throws — callers decide the policy.
+ */
+export async function migrateOmnitronDb(db, logger) {
+    const { runMigrations } = await import('@kysera/migrations');
+    await adoptLegacyKyselyHistory(db, logger);
+    const result = await runMigrations(db, OMNITRON_MIGRATIONS, {
+        useTransactions: true,
+        stopOnError: true,
+        advisoryLock: true,
+        verbose: false,
+        ...(logger
+            ? {
+                logger: {
+                    debug: (msg, meta) => logger.debug({ meta }, msg),
+                    info: (msg, meta) => logger.info({ meta }, msg),
+                    warn: (msg, meta) => logger.warn({ meta }, msg),
+                    error: (msg, meta) => logger.error({ meta }, msg),
+                    trace: (msg, meta) => logger.trace({ meta }, msg),
+                    fatal: (msg, meta) => logger.fatal({ meta }, msg),
+                },
+            }
+            : {}),
+    });
+    return { applied: result.executed };
+}
+/**
+ * Carry a pre-existing Kysely `Migrator` history over to the `@kysera`
+ * bookkeeping table, once.
+ *
+ * Installations created before this repo standardised on `@kysera/migrations`
+ * recorded their applied migrations in `kysely_migration` — the live dev
+ * database has all five stamped 2026-03-22. `@kysera` keeps its own
+ * `migrations` table, so without this step it sees an empty history against
+ * a fully-populated schema and fails on the first migration with
+ * `relation "nodes" already exists`, which is exactly what the daemon
+ * reported on the first boot after the switch.
+ *
+ * Runs only when the new table is empty AND the legacy one exists with
+ * rows, so it is a no-op on fresh databases and on every subsequent boot.
+ * Only names present in the current registry are adopted: an unrecognised
+ * legacy row means the two lists genuinely disagree, and inventing history
+ * for a migration this build doesn't have would hide that.
+ *
+ * Deletable once no installation predating the switch remains.
+ */
+async function adoptLegacyKyselyHistory(db, logger) {
+    const { sql } = await import('kysely');
+    const { setupMigrations } = await import('@kysera/migrations');
+    await setupMigrations(db);
+    const alreadyTracked = await sql `SELECT count(*)::text AS count FROM migrations`.execute(db);
+    if (Number(alreadyTracked.rows[0]?.count ?? '0') > 0)
+        return;
+    const legacyExists = await sql `
+    SELECT to_regclass('public.kysely_migration') IS NOT NULL AS exists
+  `.execute(db);
+    if (!legacyExists.rows[0]?.exists)
+        return;
+    const legacyRows = await sql `
+    SELECT name, timestamp FROM kysely_migration
+  `.execute(db);
+    if (legacyRows.rows.length === 0)
+        return;
+    const known = new Set(OMNITRON_MIGRATIONS.map((m) => m.name));
+    const adopted = [];
+    const unknown = [];
+    for (const row of legacyRows.rows) {
+        if (!known.has(row.name)) {
+            unknown.push(row.name);
+            continue;
+        }
+        const executedAt = new Date(row.timestamp);
+        const timestamp = Number.isNaN(executedAt.getTime()) ? new Date() : executedAt;
+        await sql `
+      INSERT INTO migrations (name, executed_at) VALUES (${row.name}, ${timestamp})
+      ON CONFLICT (name) DO NOTHING
+    `.execute(db);
+        adopted.push(row.name);
+    }
+    if (unknown.length > 0) {
+        logger?.warn({ unknown }, 'Legacy migration history contains names this build does not know — left unadopted');
+    }
+    if (adopted.length > 0) {
+        logger?.info({ adopted: adopted.length }, 'Adopted legacy Kysely migration history into the @kysera bookkeeping table');
+    }
+}
+/**
+ * Connect to omnitron-pg, apply pending migrations, disconnect.
+ *
+ * Used by the two boot paths (daemon start-up and infrastructure
+ * provisioning). Errors propagate: a daemon running against an unmigrated
+ * database is broken in ways that only show up much later, so the caller
+ * must surface it rather than continue silently.
+ */
+export async function runOmnitronMigrations(logger) {
+    const db = await createOmnitronDb({ max: 2 });
+    try {
+        const outcome = await migrateOmnitronDb(db, logger);
+        if (outcome.applied.length > 0) {
+            logger?.info({ migrations: outcome.applied }, `Applied ${outcome.applied.length} Omnitron migration(s)`);
+        }
+        else {
+            logger?.debug('Omnitron database schema is up to date');
+        }
+        return outcome;
+    }
+    finally {
+        await db.destroy();
+    }
+}
+//# sourceMappingURL=migration-runner.js.map

package/dist/database/migration-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-runner.js","sourceRoot":"","sources":["../../src/database/migration-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAKH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAO5D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAmB,EAAE,MAAgB;IAC3E,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAE7D,MAAM,wBAAwB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,mBAAmB,EAAE;QAC1D,eAAe,EAAE,IAAI;QACrB,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,KAAK;QACd,GAAG,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,MAAM,EAAE;oBACN,KAAK,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC;oBACnE,IAAI,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC;oBACjE,IAAI,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC;oBACjE,KAAK,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC;oBACnE,KAAK,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC;oBACnE,KAAK,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC;iBACpE;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,wBAAwB,CAAC,EAAmB,EAAE,MAAgB;IAC3E,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAE/D,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAE1B,MAAM,cAAc,GAAG,MAAM,GAAG,CAAmB,gDAAgD,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChH,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAE7D,MAAM,YAAY,GAAG,MAAM,GAAG,CAAqB;;GAElD,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACd,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM;QAAE,OAAO;IAE1C,MAAM,UAAU,GAAG,MAAM,GAAG,CAAqC;;GAEhE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACd,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEzC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/E,MAAM,GAAG,CAAA;2DAC8C,GAAG,CAAC,IAAI,KAAK,SAAS;;KAE5E,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,IAAI,CACV,EAAE,OAAO,EAAE,EACX,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,IAAI,CACV,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAC3B,4EAA4E,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAgB;IAC1D,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAU,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAEvD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAEpD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,EAAE,IAAI,CACV,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,EAC/B,WAAW,OAAO,CAAC,OAAO,CAAC,MAAM,wBAAwB,CAC1D,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/database/migrations/006_login_throttle.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Migration 006 — Login throttling state
+ *
+ * The console's sign-in endpoint had no brute-force protection of any kind:
+ * `@Public({ auth: { allowAnonymous: true } })` straight into a scrypt
+ * comparison, unlimited attempts, no lockout, no record of failures. An
+ * attacker could grind passwords against the infrastructure control plane at
+ * whatever rate the CPU allowed.
+ *
+ * Counters live in the database rather than in daemon memory so a lockout
+ * survives a daemon restart — otherwise `omnitron down && omnitron up`, or
+ * any crash-restart the attacker can provoke, resets the defence.
+ */
+import { type Kysely } from 'kysely';
+export declare function up(db: Kysely<unknown>): Promise<void>;
+export declare function down(db: Kysely<unknown>): Promise<void>;
+//# sourceMappingURL=006_login_throttle.d.ts.map

package/dist/database/migrations/006_login_throttle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"006_login_throttle.d.ts","sourceRoot":"","sources":["../../../src/database/migrations/006_login_throttle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,MAAM,EAAO,MAAM,QAAQ,CAAC;AAE1C,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAc3D;AAED,wBAAsB,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7D"}

package/dist/database/migrations/006_login_throttle.js

@@ -0,0 +1,33 @@
+/**
+ * Migration 006 — Login throttling state
+ *
+ * The console's sign-in endpoint had no brute-force protection of any kind:
+ * `@Public({ auth: { allowAnonymous: true } })` straight into a scrypt
+ * comparison, unlimited attempts, no lockout, no record of failures. An
+ * attacker could grind passwords against the infrastructure control plane at
+ * whatever rate the CPU allowed.
+ *
+ * Counters live in the database rather than in daemon memory so a lockout
+ * survives a daemon restart — otherwise `omnitron down && omnitron up`, or
+ * any crash-restart the attacker can provoke, resets the defence.
+ */
+import { sql } from 'kysely';
+export async function up(db) {
+    await db.schema
+        .alterTable('omnitron_users')
+        .addColumn('failedLoginAttempts', 'integer', (col) => col.notNull().defaultTo(0))
+        .execute();
+    await db.schema.alterTable('omnitron_users').addColumn('lockedUntil', 'timestamptz').execute();
+    // Partial index: only locked accounts are ever scanned by the unlock sweep.
+    await sql `
+    CREATE INDEX IF NOT EXISTS idx_omnitron_users_locked_until
+      ON omnitron_users ("lockedUntil")
+      WHERE "lockedUntil" IS NOT NULL
+  `.execute(db);
+}
+export async function down(db) {
+    await sql `DROP INDEX IF EXISTS idx_omnitron_users_locked_until`.execute(db);
+    await db.schema.alterTable('omnitron_users').dropColumn('lockedUntil').execute();
+    await db.schema.alterTable('omnitron_users').dropColumn('failedLoginAttempts').execute();
+}
+//# sourceMappingURL=006_login_throttle.js.map

package/dist/database/migrations/006_login_throttle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"006_login_throttle.js","sourceRoot":"","sources":["../../../src/database/migrations/006_login_throttle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAe,GAAG,EAAE,MAAM,QAAQ,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB;IAC1C,MAAM,EAAE,CAAC,MAAM;SACZ,UAAU,CAAC,gBAAgB,CAAC;SAC5B,SAAS,CAAC,qBAAqB,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;SAChF,OAAO,EAAE,CAAC;IAEb,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;IAE/F,4EAA4E;IAC5E,MAAM,GAAG,CAAA;;;;GAIR,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,EAAmB;IAC5C,MAAM,GAAG,CAAA,sDAAsD,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;IACjF,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,CAAC;AAC3F,CAAC"}

package/dist/database/migrations/007_sync_ingested.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Migration 007: sync_ingested — the master's record of what it has taken
+ * from each slave.
+ *
+ * `sync.service.ts` promised "all sync batches are idempotent (safe to
+ * retry)" and had nothing implementing it: `batchId` was generated,
+ * transmitted, and used only inside log strings. A retried batch was
+ * ingested a second time.
+ *
+ * That was tolerable only because delivery was never retried — the slave
+ * marked everything synced whether or not the master kept it. Making
+ * delivery honest makes retries real, so the deduplication has to exist
+ * first, or silent loss simply becomes silent duplication.
+ *
+ * The key is (nodeId, entryId): the slave's own `sync_buffer.id`, which is a
+ * uuid generated once at buffer time and stable across every retry.
+ */
+import type { Kysely } from 'kysely';
+export declare function up(db: Kysely<unknown>): Promise<void>;
+export declare function down(db: Kysely<unknown>): Promise<void>;
+//# sourceMappingURL=007_sync_ingested.d.ts.map

package/dist/database/migrations/007_sync_ingested.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"007_sync_ingested.d.ts","sourceRoot":"","sources":["../../../src/database/migrations/007_sync_ingested.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB3D;AAED,wBAAsB,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAG7D"}

package/dist/database/migrations/007_sync_ingested.js

@@ -0,0 +1,39 @@
+/**
+ * Migration 007: sync_ingested — the master's record of what it has taken
+ * from each slave.
+ *
+ * `sync.service.ts` promised "all sync batches are idempotent (safe to
+ * retry)" and had nothing implementing it: `batchId` was generated,
+ * transmitted, and used only inside log strings. A retried batch was
+ * ingested a second time.
+ *
+ * That was tolerable only because delivery was never retried — the slave
+ * marked everything synced whether or not the master kept it. Making
+ * delivery honest makes retries real, so the deduplication has to exist
+ * first, or silent loss simply becomes silent duplication.
+ *
+ * The key is (nodeId, entryId): the slave's own `sync_buffer.id`, which is a
+ * uuid generated once at buffer time and stable across every retry.
+ */
+export async function up(db) {
+    await db.schema
+        .createTable('sync_ingested')
+        .ifNotExists()
+        .addColumn('nodeId', 'varchar(128)', (col) => col.notNull())
+        .addColumn('entryId', 'varchar(64)', (col) => col.notNull())
+        .addColumn('ingestedAt', 'timestamptz', (col) => col.notNull().defaultTo(db.fn('now')))
+        .addPrimaryKeyConstraint('sync_ingested_pkey', ['nodeId', 'entryId'])
+        .execute();
+    // Pruning reads by age only; the primary key serves the lookup.
+    await db.schema
+        .createIndex('idx_sync_ingested_age')
+        .ifNotExists()
+        .on('sync_ingested')
+        .columns(['ingestedAt'])
+        .execute();
+}
+export async function down(db) {
+    await db.schema.dropIndex('idx_sync_ingested_age').ifExists().execute();
+    await db.schema.dropTable('sync_ingested').ifExists().execute();
+}
+//# sourceMappingURL=007_sync_ingested.js.map

package/dist/database/migrations/007_sync_ingested.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"007_sync_ingested.js","sourceRoot":"","sources":["../../../src/database/migrations/007_sync_ingested.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB;IAC1C,MAAM,EAAE,CAAC,MAAM;SACZ,WAAW,CAAC,eAAe,CAAC;SAC5B,WAAW,EAAE;SACb,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;SAC3D,SAAS,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;SAC3D,SAAS,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;SACtF,uBAAuB,CAAC,oBAAoB,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;SACpE,OAAO,EAAE,CAAC;IAEb,gEAAgE;IAChE,MAAM,EAAE,CAAC,MAAM;SACZ,WAAW,CAAC,uBAAuB,CAAC;SACpC,WAAW,EAAE;SACb,EAAE,CAAC,eAAe,CAAC;SACnB,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;SACvB,OAAO,EAAE,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,EAAmB;IAC5C,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,CAAC;IACxE,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,CAAC;AAClE,CAAC"}

package/dist/database/migrations/008_node_health_version_text.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Migration 008: `node_health_checks."omnitronVersion"` — text, not varchar(32).
+ *
+ * A node running a bundle built from a working tree reports its version with
+ * build metadata — `0.2.0+local.<sha>.<stamp>`, 37 characters
+ * (`services/local-bundle.ts`) — and the column held 32. The health-monitor
+ * worker writes a round as ONE insert with a row per node, so the first node
+ * that answered with such a version failed the whole statement, every round,
+ * and the history of every node stopped with it. On the master, 2026-09-22:
+ * no row after 12:15:55 UTC, while Postgres logged once a minute
+ *
+ *     ERROR:  value too long for type character varying(32)
+ *
+ * — and nobody saw it, because the worker's own warning went nowhere (see
+ * `SystemWorkerManager.forwardLog`).
+ *
+ * A version is an operator's answer to «which build is on this node»;
+ * cutting it to fit would cut exactly the part that answers that. varchar to
+ * text is binary-compatible in Postgres, so the table is not rewritten.
+ */
+import { type Kysely } from 'kysely';
+export declare function up(db: Kysely<unknown>): Promise<void>;
+export declare function down(db: Kysely<unknown>): Promise<void>;
+//# sourceMappingURL=008_node_health_version_text.d.ts.map

package/dist/database/migrations/008_node_health_version_text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"008_node_health_version_text.d.ts","sourceRoot":"","sources":["../../../src/database/migrations/008_node_health_version_text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,MAAM,EAAO,MAAM,QAAQ,CAAC;AAE1C,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAK3D;AAED,wBAAsB,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAM7D"}

package/dist/database/migrations/008_node_health_version_text.js

@@ -0,0 +1,35 @@
+/**
+ * Migration 008: `node_health_checks."omnitronVersion"` — text, not varchar(32).
+ *
+ * A node running a bundle built from a working tree reports its version with
+ * build metadata — `0.2.0+local.<sha>.<stamp>`, 37 characters
+ * (`services/local-bundle.ts`) — and the column held 32. The health-monitor
+ * worker writes a round as ONE insert with a row per node, so the first node
+ * that answered with such a version failed the whole statement, every round,
+ * and the history of every node stopped with it. On the master, 2026-09-22:
+ * no row after 12:15:55 UTC, while Postgres logged once a minute
+ *
+ *     ERROR:  value too long for type character varying(32)
+ *
+ * — and nobody saw it, because the worker's own warning went nowhere (see
+ * `SystemWorkerManager.forwardLog`).
+ *
+ * A version is an operator's answer to «which build is on this node»;
+ * cutting it to fit would cut exactly the part that answers that. varchar to
+ * text is binary-compatible in Postgres, so the table is not rewritten.
+ */
+import { sql } from 'kysely';
+export async function up(db) {
+    await db.schema
+        .alterTable('node_health_checks')
+        .alterColumn('omnitronVersion', (col) => col.setDataType('text'))
+        .execute();
+}
+export async function down(db) {
+    // Back to the old width, keeping what fits: a longer value would refuse the ALTER.
+    await sql `
+    ALTER TABLE node_health_checks
+      ALTER COLUMN "omnitronVersion" TYPE varchar(32) USING left("omnitronVersion", 32)
+  `.execute(db);
+}
+//# sourceMappingURL=008_node_health_version_text.js.map

package/dist/database/migrations/008_node_health_version_text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"008_node_health_version_text.js","sourceRoot":"","sources":["../../../src/database/migrations/008_node_health_version_text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAe,GAAG,EAAE,MAAM,QAAQ,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB;IAC1C,MAAM,EAAE,CAAC,MAAM;SACZ,UAAU,CAAC,oBAAoB,CAAC;SAChC,WAAW,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;SAChE,OAAO,EAAE,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,EAAmB;IAC5C,mFAAmF;IACnF,MAAM,GAAG,CAAA;;;GAGR,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC"}

package/dist/database/migrations/009_node_health_unmeasured.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Migration 009: a check that could not tell running from stopped measured
+ * neither.
+ *
+ * Until dea8ce80 the health checker read `pid` at the top level of
+ * `omnitron status --json`, outside its `{ok, data}` envelope, so every answer
+ * from a running daemon became `omnitronConnected = false`. It did so in two
+ * eras:
+ *
+ *   - until dd38fb74 (2026-09-14) silently: `omnitron status --json
+ *     2>/dev/null || echo "{"` answered `{connected: false}` with no error
+ *     for a daemon running, stopped or not installed alike;
+ *   - from then, with words: «omnitron status reported no running daemon».
+ *
+ * Either way the reading was the same whatever the node was doing, so it
+ * measured nothing — and the console averaged it into «OMNITRON 6%» for a
+ * node whose daemon was delivering its apps' logs to the master every day
+ * from 2026-09-16.
+ *
+ * On the master, 2026-09-23, all for the test node: 7 637 rows with the words
+ * (09-14 19:01 → 09-22 07:57) and 3 895 silent ones (07-02 → 09-12), 62 of
+ * those with SSH connected, which the uptime counted as measured. The node's
+ * first check by the corrected reader, 09-22 19:27, read it connected; no row
+ * with either answer came after it.
+ *
+ * `omnitronConnected` becomes nullable — NULL is «not measured» — and those
+ * rows get it, their error with it: words the reader said about every node
+ * are not a finding about this one. Nothing is deleted; ping and SSH were
+ * measured and stay.
+ *
+ * Which rows: either answer, from a node later read connected, before its
+ * first connected check. That later check is what proves the reader was the
+ * old one; a node never read connected has no such proof and keeps its rows,
+ * and a row with either answer after a connected check came from the
+ * corrected reader, which says why whenever it says «not connected».
+ */
+import { type Kysely } from 'kysely';
+export declare function up(db: Kysely<unknown>): Promise<void>;
+export declare function down(db: Kysely<unknown>): Promise<void>;
+//# sourceMappingURL=009_node_health_unmeasured.d.ts.map

package/dist/database/migrations/009_node_health_unmeasured.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"009_node_health_unmeasured.d.ts","sourceRoot":"","sources":["../../../src/database/migrations/009_node_health_unmeasured.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,KAAK,MAAM,EAAO,MAAM,QAAQ,CAAC;AAK1C,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAe3D;AAED,wBAAsB,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAM7D"}

package/dist/database/migrations/009_node_health_unmeasured.js

@@ -0,0 +1,63 @@
+/**
+ * Migration 009: a check that could not tell running from stopped measured
+ * neither.
+ *
+ * Until dea8ce80 the health checker read `pid` at the top level of
+ * `omnitron status --json`, outside its `{ok, data}` envelope, so every answer
+ * from a running daemon became `omnitronConnected = false`. It did so in two
+ * eras:
+ *
+ *   - until dd38fb74 (2026-09-14) silently: `omnitron status --json
+ *     2>/dev/null || echo "{"` answered `{connected: false}` with no error
+ *     for a daemon running, stopped or not installed alike;
+ *   - from then, with words: «omnitron status reported no running daemon».
+ *
+ * Either way the reading was the same whatever the node was doing, so it
+ * measured nothing — and the console averaged it into «OMNITRON 6%» for a
+ * node whose daemon was delivering its apps' logs to the master every day
+ * from 2026-09-16.
+ *
+ * On the master, 2026-09-23, all for the test node: 7 637 rows with the words
+ * (09-14 19:01 → 09-22 07:57) and 3 895 silent ones (07-02 → 09-12), 62 of
+ * those with SSH connected, which the uptime counted as measured. The node's
+ * first check by the corrected reader, 09-22 19:27, read it connected; no row
+ * with either answer came after it.
+ *
+ * `omnitronConnected` becomes nullable — NULL is «not measured» — and those
+ * rows get it, their error with it: words the reader said about every node
+ * are not a finding about this one. Nothing is deleted; ping and SSH were
+ * measured and stay.
+ *
+ * Which rows: either answer, from a node later read connected, before its
+ * first connected check. That later check is what proves the reader was the
+ * old one; a node never read connected has no such proof and keeps its rows,
+ * and a row with either answer after a connected check came from the
+ * corrected reader, which says why whenever it says «not connected».
+ */
+import { sql } from 'kysely';
+/** What the old reader answered, from dd38fb74 on, for every node. */
+const OLD_READERS_WORDS = 'omnitron status reported no running daemon';
+export async function up(db) {
+    await sql `ALTER TABLE node_health_checks ALTER COLUMN "omnitronConnected" DROP NOT NULL`.execute(db);
+    await sql `
+    UPDATE node_health_checks AS c
+       SET "omnitronConnected" = NULL,
+           "omnitronError" = NULL
+     WHERE c."omnitronConnected" = false
+       AND (c."omnitronError" = ${OLD_READERS_WORDS} OR c."omnitronError" IS NULL)
+       AND c."checkedAt" < (
+             SELECT min(r."checkedAt")
+               FROM node_health_checks AS r
+              WHERE r."nodeId" = c."nodeId"
+                AND r."omnitronConnected"
+           )
+  `.execute(db);
+}
+export async function down(db) {
+    // Every NULL is one this migration wrote — no writer stores one — and each
+    // was `false` before. The old reader's words are not put back: they were
+    // the same for every node, and which rows had them is not recorded.
+    await sql `UPDATE node_health_checks SET "omnitronConnected" = false WHERE "omnitronConnected" IS NULL`.execute(db);
+    await sql `ALTER TABLE node_health_checks ALTER COLUMN "omnitronConnected" SET NOT NULL`.execute(db);
+}
+//# sourceMappingURL=009_node_health_unmeasured.js.map

package/dist/database/migrations/009_node_health_unmeasured.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"009_node_health_unmeasured.js","sourceRoot":"","sources":["../../../src/database/migrations/009_node_health_unmeasured.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAe,GAAG,EAAE,MAAM,QAAQ,CAAC;AAE1C,sEAAsE;AACtE,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AAEvE,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB;IAC1C,MAAM,GAAG,CAAA,+EAA+E,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrG,MAAM,GAAG,CAAA;;;;;kCAKuB,iBAAiB;;;;;;;GAOhD,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,EAAmB;IAC5C,2EAA2E;IAC3E,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,GAAG,CAAA,6FAA6F,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnH,MAAM,GAAG,CAAA,8EAA8E,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACtG,CAAC"}

package/dist/database/migrations/010_metrics_raw_had_no_reader.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Migration 010: a table with writers and no reader.
+ *
+ * `metrics_raw` on the master was written by one path — `SyncService`
+ * storing the metrics its nodes replicate — and read by none: the console's
+ * charts and the metrics RPC query titan-metrics, which the same ingest feeds
+ * through its sink with a `node` label. The write had been kept «until the
+ * console is observed showing the label»; on 2026-09-23 the master's
+ * `OmnitronMetrics.querySeries` returned 19 series labelled with the test
+ * node beside 19 of its own. Nothing pruned the table either — titan-metrics'
+ * retention applies to its own (memory) store — so it held 8 371 210 rows,
+ * 2.1 GiB, from 2026-09-14 on, ~0.93 million more a day, and `omnitron
+ * doctor` flagged the database for it.
+ *
+ * Dropped. A node's own SQLite `metrics_raw` (`slave-storage.service.ts`) is
+ * a different table — the buffer it replicates from — and is not touched.
+ * `down` recreates the table as 002 made it, empty.
+ */
+import type { Kysely } from 'kysely';
+export declare function up(db: Kysely<unknown>): Promise<void>;
+export declare function down(db: Kysely<unknown>): Promise<void>;
+//# sourceMappingURL=010_metrics_raw_had_no_reader.d.ts.map