@omnitron-dev/omnitron 0.2.0 → 0.3.0

package/dist/database/migrations/010_metrics_raw_had_no_reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"010_metrics_raw_had_no_reader.d.ts","sourceRoot":"","sources":["../../../src/database/migrations/010_metrics_raw_had_no_reader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIrC,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3D;AAED,wBAAsB,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7D"}

package/dist/database/migrations/010_metrics_raw_had_no_reader.js

@@ -0,0 +1,26 @@
+/**
+ * Migration 010: a table with writers and no reader.
+ *
+ * `metrics_raw` on the master was written by one path — `SyncService`
+ * storing the metrics its nodes replicate — and read by none: the console's
+ * charts and the metrics RPC query titan-metrics, which the same ingest feeds
+ * through its sink with a `node` label. The write had been kept «until the
+ * console is observed showing the label»; on 2026-09-23 the master's
+ * `OmnitronMetrics.querySeries` returned 19 series labelled with the test
+ * node beside 19 of its own. Nothing pruned the table either — titan-metrics'
+ * retention applies to its own (memory) store — so it held 8 371 210 rows,
+ * 2.1 GiB, from 2026-09-14 on, ~0.93 million more a day, and `omnitron
+ * doctor` flagged the database for it.
+ *
+ * Dropped. A node's own SQLite `metrics_raw` (`slave-storage.service.ts`) is
+ * a different table — the buffer it replicates from — and is not touched.
+ * `down` recreates the table as 002 made it, empty.
+ */
+import { up as createMetricsRaw } from './002_metrics_raw.js';
+export async function up(db) {
+    await db.schema.dropTable('metrics_raw').ifExists().execute();
+}
+export async function down(db) {
+    await createMetricsRaw(db);
+}
+//# sourceMappingURL=010_metrics_raw_had_no_reader.js.map

package/dist/database/migrations/010_metrics_raw_had_no_reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"010_metrics_raw_had_no_reader.js","sourceRoot":"","sources":["../../../src/database/migrations/010_metrics_raw_had_no_reader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAE,EAAE,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB;IAC1C,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,EAAmB;IAC5C,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/dist/database/migrations/011_alerts_nobody_had_to_write.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Migration 011: alerts nobody had to write.
+ *
+ * A fresh master evaluated every rule in `alert_rules`, and there were none:
+ * nothing watched anything until an operator knew the grammar and wrote a
+ * rule. These are the ones a platform wants from its first hour — an app
+ * that crashed or is erroring, a container that is unhealthy, an app that
+ * holds nine tenths of a core or two gibibytes of resident memory for five
+ * minutes.
+ *
+ * Seeded ONCE, here, rather than at every start: a default an operator
+ * deletes stays deleted, and one they edit stays edited. `ON CONFLICT (name)`
+ * leaves alone a rule an operator already made under the same name.
+ * `down` removes only rules still exactly as seeded.
+ */
+import { type Kysely } from 'kysely';
+/** Exported for the court that checks each is one the evaluator reads. */
+export declare const DEFAULT_ALERT_RULES: readonly [{
+    readonly name: 'App crashed';
+    readonly expression: 'app.*.status == crashed';
+    readonly type: 'health';
+    readonly severity: 'critical';
+    readonly forDuration: null;
+    readonly summary: 'An app crashed';
+}, {
+    readonly name: 'App erroring';
+    readonly expression: 'app.*.status == errored';
+    readonly type: 'health';
+    readonly severity: 'critical';
+    readonly forDuration: 60;
+    readonly summary: 'An app has been in the errored state for a minute';
+}, {
+    readonly name: 'Container unhealthy';
+    readonly expression: 'infra.*.health == unhealthy';
+    readonly type: 'health';
+    readonly severity: 'critical';
+    readonly forDuration: 60;
+    readonly summary: 'A container has been unhealthy for a minute';
+}, {
+    readonly name: 'CPU above 90%';
+    readonly expression: 'app.*.cpu > 90';
+    readonly type: 'metric';
+    readonly severity: 'warning';
+    readonly forDuration: 300;
+    readonly summary: 'An app has used more than 90% of a CPU core for five minutes';
+}, {
+    readonly name: 'Memory above 2 GiB';
+    readonly expression: 'app.*.memory > 2147483648';
+    readonly type: 'metric';
+    readonly severity: 'warning';
+    readonly forDuration: 300;
+    readonly summary: 'An app has held more than 2 GiB of memory for five minutes';
+}];
+export declare function up(db: Kysely<unknown>): Promise<void>;
+export declare function down(db: Kysely<unknown>): Promise<void>;
+//# sourceMappingURL=011_alerts_nobody_had_to_write.d.ts.map

package/dist/database/migrations/011_alerts_nobody_had_to_write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"011_alerts_nobody_had_to_write.d.ts","sourceRoot":"","sources":["../../../src/database/migrations/011_alerts_nobody_had_to_write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAO,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE1C,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB;aAE5B,IAAI,EAAE,aAAa;aACnB,UAAU,EAAE,yBAAyB;aACrC,IAAI,EAAE,QAAQ;aACd,QAAQ,EAAE,UAAU;aACpB,WAAW;aACX,OAAO,EAAE,gBAAgB;;aAGzB,IAAI,EAAE,cAAc;aACpB,UAAU,EAAE,yBAAyB;aACrC,IAAI,EAAE,QAAQ;aACd,QAAQ,EAAE,UAAU;aACpB,WAAW,EAAE,EAAE;aACf,OAAO,EAAE,mDAAmD;;aAG5D,IAAI,EAAE,qBAAqB;aAC3B,UAAU,EAAE,6BAA6B;aACzC,IAAI,EAAE,QAAQ;aACd,QAAQ,EAAE,UAAU;aACpB,WAAW,EAAE,EAAE;aACf,OAAO,EAAE,6CAA6C;;aAGtD,IAAI,EAAE,eAAe;aACrB,UAAU,EAAE,gBAAgB;aAC5B,IAAI,EAAE,QAAQ;aACd,QAAQ,EAAE,SAAS;aACnB,WAAW,EAAE,GAAG;aAEhB,OAAO,EAAE,8DAA8D;;aAGvE,IAAI,EAAE,oBAAoB;aAC1B,UAAU,EAAE,2BAA2B;aACvC,IAAI,EAAE,QAAQ;aACd,QAAQ,EAAE,SAAS;aACnB,WAAW,EAAE,GAAG;aAChB,OAAO,EAAE,4DAA4D;EAE/D,CAAC;AAEX,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAS3D;AAED,wBAAsB,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAO7D"}

package/dist/database/migrations/011_alerts_nobody_had_to_write.js

@@ -0,0 +1,79 @@
+/**
+ * Migration 011: alerts nobody had to write.
+ *
+ * A fresh master evaluated every rule in `alert_rules`, and there were none:
+ * nothing watched anything until an operator knew the grammar and wrote a
+ * rule. These are the ones a platform wants from its first hour — an app
+ * that crashed or is erroring, a container that is unhealthy, an app that
+ * holds nine tenths of a core or two gibibytes of resident memory for five
+ * minutes.
+ *
+ * Seeded ONCE, here, rather than at every start: a default an operator
+ * deletes stays deleted, and one they edit stays edited. `ON CONFLICT (name)`
+ * leaves alone a rule an operator already made under the same name.
+ * `down` removes only rules still exactly as seeded.
+ */
+import { sql } from 'kysely';
+/** Exported for the court that checks each is one the evaluator reads. */
+export const DEFAULT_ALERT_RULES = [
+    {
+        name: 'App crashed',
+        expression: 'app.*.status == crashed',
+        type: 'health',
+        severity: 'critical',
+        forDuration: null,
+        summary: 'An app crashed',
+    },
+    {
+        name: 'App erroring',
+        expression: 'app.*.status == errored',
+        type: 'health',
+        severity: 'critical',
+        forDuration: 60,
+        summary: 'An app has been in the errored state for a minute',
+    },
+    {
+        name: 'Container unhealthy',
+        expression: 'infra.*.health == unhealthy',
+        type: 'health',
+        severity: 'critical',
+        forDuration: 60,
+        summary: 'A container has been unhealthy for a minute',
+    },
+    {
+        name: 'CPU above 90%',
+        expression: 'app.*.cpu > 90',
+        type: 'metric',
+        severity: 'warning',
+        forDuration: 300,
+        // `ps %cpu`: a share of one core, summed over the app's processes.
+        summary: 'An app has used more than 90% of a CPU core for five minutes',
+    },
+    {
+        name: 'Memory above 2 GiB',
+        expression: 'app.*.memory > 2147483648',
+        type: 'metric',
+        severity: 'warning',
+        forDuration: 300,
+        summary: 'An app has held more than 2 GiB of memory for five minutes',
+    },
+];
+export async function up(db) {
+    for (const rule of DEFAULT_ALERT_RULES) {
+        await sql `
+      INSERT INTO alert_rules (name, expression, type, severity, "forDuration", annotations, enabled)
+      VALUES (${rule.name}, ${rule.expression}, ${rule.type}, ${rule.severity}, ${rule.forDuration},
+              ${JSON.stringify({ summary: rule.summary })}::jsonb, true)
+      ON CONFLICT (name) DO NOTHING
+    `.execute(db);
+    }
+}
+export async function down(db) {
+    for (const rule of DEFAULT_ALERT_RULES) {
+        await sql `
+      DELETE FROM alert_rules
+      WHERE name = ${rule.name} AND expression = ${rule.expression} AND severity = ${rule.severity}
+    `.execute(db);
+    }
+}
+//# sourceMappingURL=011_alerts_nobody_had_to_write.js.map

package/dist/database/migrations/011_alerts_nobody_had_to_write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"011_alerts_nobody_had_to_write.js","sourceRoot":"","sources":["../../../src/database/migrations/011_alerts_nobody_had_to_write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,GAAG,EAAe,MAAM,QAAQ,CAAC;AAE1C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,yBAAyB;QACrC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,gBAAgB;KAC1B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,yBAAyB;QACrC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,mDAAmD;KAC7D;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,6BAA6B;QACzC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,6CAA6C;KACvD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,gBAAgB;QAC5B,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,GAAG;QAChB,mEAAmE;QACnE,OAAO,EAAE,8DAA8D;KACxE;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,2BAA2B;QACvC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,GAAG;QAChB,OAAO,EAAE,4DAA4D;KACtE;CACO,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB;IAC1C,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,MAAM,GAAG,CAAA;;gBAEG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,WAAW;gBAClF,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;;KAEpD,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,EAAmB;IAC5C,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,MAAM,GAAG,CAAA;;qBAEQ,IAAI,CAAC,IAAI,qBAAqB,IAAI,CAAC,UAAU,mBAAmB,IAAI,CAAC,QAAQ;KAC7F,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/database/migrations/012_a_disk_nobody_watched.d.ts

@@ -0,0 +1,26 @@
+/**
+ * A disk nobody watched.
+ *
+ * The master's disk reached 99% and stopped the container engine three times
+ * — 2026-07-01, 09-14, 09-29 — and nobody was warned before any of them. The
+ * only check was `omnitron doctor`'s, which runs when somebody runs it and
+ * warns below 10 GiB; the engine stopped on its own at 21 GiB free of 1.8 TiB
+ * on 09-29, with 112 GB of dead test-runner copies in ~/.tmp.
+ *
+ * One rule, seeded like the five of migration 011: `host.disk.free` below
+ * 50 GiB for a minute, critical. ON CONFLICT (name) DO NOTHING, so a rule an
+ * operator deleted stays deleted and one they edited stays theirs; `down`
+ * takes back only the row still exactly as seeded.
+ */
+import { type Kysely } from 'kysely';
+export declare const DISK_ALERT_RULE: {
+    readonly name: 'Disk space below 50 GiB';
+    readonly expression: "host.disk.free < 53687091200";
+    readonly type: 'metric';
+    readonly severity: 'critical';
+    readonly forDuration: 60;
+    readonly summary: "Less than 50 GiB free on this host's disk for a minute — the container engine stops near full";
+};
+export declare function up(db: Kysely<unknown>): Promise<void>;
+export declare function down(db: Kysely<unknown>): Promise<void>;
+//# sourceMappingURL=012_a_disk_nobody_watched.d.ts.map

package/dist/database/migrations/012_a_disk_nobody_watched.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"012_a_disk_nobody_watched.d.ts","sourceRoot":"","sources":["../../../src/database/migrations/012_a_disk_nobody_watched.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAO,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE1C,eAAO,MAAM,eAAe;aAC1B,IAAI,EAAE,yBAAyB;aAC/B,UAAU;aACV,IAAI,EAAE,QAAQ;aACd,QAAQ,EAAE,UAAU;aACpB,WAAW,EAAE,EAAE;aACf,OAAO,EAAE,+FAA+F;CAChG,CAAC;AAEX,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ3D;AAED,wBAAsB,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAM7D"}

package/dist/database/migrations/012_a_disk_nobody_watched.js

@@ -0,0 +1,40 @@
+/**
+ * A disk nobody watched.
+ *
+ * The master's disk reached 99% and stopped the container engine three times
+ * — 2026-07-01, 09-14, 09-29 — and nobody was warned before any of them. The
+ * only check was `omnitron doctor`'s, which runs when somebody runs it and
+ * warns below 10 GiB; the engine stopped on its own at 21 GiB free of 1.8 TiB
+ * on 09-29, with 112 GB of dead test-runner copies in ~/.tmp.
+ *
+ * One rule, seeded like the five of migration 011: `host.disk.free` below
+ * 50 GiB for a minute, critical. ON CONFLICT (name) DO NOTHING, so a rule an
+ * operator deleted stays deleted and one they edited stays theirs; `down`
+ * takes back only the row still exactly as seeded.
+ */
+import { sql } from 'kysely';
+export const DISK_ALERT_RULE = {
+    name: 'Disk space below 50 GiB',
+    expression: `host.disk.free < ${50 * 1024 ** 3}`,
+    type: 'metric',
+    severity: 'critical',
+    forDuration: 60,
+    summary: "Less than 50 GiB free on this host's disk for a minute — the container engine stops near full",
+};
+export async function up(db) {
+    const rule = DISK_ALERT_RULE;
+    await sql `
+    INSERT INTO alert_rules (name, expression, type, severity, "forDuration", annotations, enabled)
+    VALUES (${rule.name}, ${rule.expression}, ${rule.type}, ${rule.severity}, ${rule.forDuration},
+            ${JSON.stringify({ summary: rule.summary })}::jsonb, true)
+    ON CONFLICT (name) DO NOTHING
+  `.execute(db);
+}
+export async function down(db) {
+    const rule = DISK_ALERT_RULE;
+    await sql `
+    DELETE FROM alert_rules
+    WHERE name = ${rule.name} AND expression = ${rule.expression} AND severity = ${rule.severity}
+  `.execute(db);
+}
+//# sourceMappingURL=012_a_disk_nobody_watched.js.map

package/dist/database/migrations/012_a_disk_nobody_watched.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"012_a_disk_nobody_watched.js","sourceRoot":"","sources":["../../../src/database/migrations/012_a_disk_nobody_watched.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,GAAG,EAAe,MAAM,QAAQ,CAAC;AAE1C,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,yBAAyB;IAC/B,UAAU,EAAE,oBAAoB,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE;IAChD,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,+FAA+F;CAChG,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB;IAC1C,MAAM,IAAI,GAAG,eAAe,CAAC;IAC7B,MAAM,GAAG,CAAA;;cAEG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,WAAW;cAClF,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;;GAEpD,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,EAAmB;IAC5C,MAAM,IAAI,GAAG,eAAe,CAAC;IAC7B,MAAM,GAAG,CAAA;;mBAEQ,IAAI,CAAC,IAAI,qBAAqB,IAAI,CAAC,UAAU,mBAAmB,IAAI,CAAC,QAAQ;GAC7F,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC"}

package/dist/database/migrations/013_an_alarm_delivered.d.ts

@@ -0,0 +1,14 @@
+/**
+ * An alarm delivered.
+ *
+ * A critical alert goes to the platform's alert sink (a project's
+ * `monitoring.alertSink`) — and the sink is an app that is sometimes not
+ * running: a deploy stops it for a minute or two, exactly when «App crashed»
+ * fires. So delivery is a state, retried every evaluation tick until the sink
+ * takes it: when the firing was taken, when the resolve was, and why the last
+ * attempt failed while it keeps trying.
+ */
+import { type Kysely } from 'kysely';
+export declare function up(db: Kysely<unknown>): Promise<void>;
+export declare function down(db: Kysely<unknown>): Promise<void>;
+//# sourceMappingURL=013_an_alarm_delivered.d.ts.map

package/dist/database/migrations/013_an_alarm_delivered.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"013_an_alarm_delivered.d.ts","sourceRoot":"","sources":["../../../src/database/migrations/013_an_alarm_delivered.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAO,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE1C,wBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3D;AAED,wBAAsB,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAO7D"}

package/dist/database/migrations/013_an_alarm_delivered.js

@@ -0,0 +1,28 @@
+/**
+ * An alarm delivered.
+ *
+ * A critical alert goes to the platform's alert sink (a project's
+ * `monitoring.alertSink`) — and the sink is an app that is sometimes not
+ * running: a deploy stops it for a minute or two, exactly when «App crashed»
+ * fires. So delivery is a state, retried every evaluation tick until the sink
+ * takes it: when the firing was taken, when the resolve was, and why the last
+ * attempt failed while it keeps trying.
+ */
+import { sql } from 'kysely';
+export async function up(db) {
+    await sql `
+    ALTER TABLE alert_events
+      ADD COLUMN IF NOT EXISTS "deliveredAt" timestamptz,
+      ADD COLUMN IF NOT EXISTS "resolveDeliveredAt" timestamptz,
+      ADD COLUMN IF NOT EXISTS "deliveryError" text
+  `.execute(db);
+}
+export async function down(db) {
+    await sql `
+    ALTER TABLE alert_events
+      DROP COLUMN IF EXISTS "deliveredAt",
+      DROP COLUMN IF EXISTS "resolveDeliveredAt",
+      DROP COLUMN IF EXISTS "deliveryError"
+  `.execute(db);
+}
+//# sourceMappingURL=013_an_alarm_delivered.js.map

package/dist/database/migrations/013_an_alarm_delivered.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"013_an_alarm_delivered.js","sourceRoot":"","sources":["../../../src/database/migrations/013_an_alarm_delivered.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,GAAG,EAAe,MAAM,QAAQ,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,EAAmB;IAC1C,MAAM,GAAG,CAAA;;;;;GAKR,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,EAAmB;IAC5C,MAAM,GAAG,CAAA;;;;;GAKR,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC"}

package/dist/database/migrations/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Omnitron Migration Registry — the single ordered list of migrations.
+ *
+ * Three call sites used to keep their own hand-maintained copy of this
+ * list, and all three had drifted: the daemon knew 001–005, the
+ * infrastructure service only 001–002, and the `migrate` CLI 001–003.
+ * Whichever path ran first decided how much of the schema existed.
+ *
+ * Adding a migration now means adding it here, once. `omnitron-migrations.test.ts`
+ * fails if a `NNN_*.ts` file in this directory is missing from the list,
+ * so the registry cannot silently fall behind again.
+ */
+import type { Migration } from '@kysera/migrations';
+/**
+ * Every Omnitron migration, in apply order.
+ *
+ * Names are the on-disk basenames without extension — they are the keys
+ * recorded in the migrations table, so they must never be renamed.
+ */
+export declare const OMNITRON_MIGRATIONS: Migration[];
+//# sourceMappingURL=index.d.ts.map

package/dist/database/migrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/database/migrations/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAgBpD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,EAc1C,CAAC"}

package/dist/database/migrations/index.js

@@ -0,0 +1,47 @@
+/**
+ * Omnitron Migration Registry — the single ordered list of migrations.
+ *
+ * Three call sites used to keep their own hand-maintained copy of this
+ * list, and all three had drifted: the daemon knew 001–005, the
+ * infrastructure service only 001–002, and the `migrate` CLI 001–003.
+ * Whichever path ran first decided how much of the schema existed.
+ *
+ * Adding a migration now means adding it here, once. `omnitron-migrations.test.ts`
+ * fails if a `NNN_*.ts` file in this directory is missing from the list,
+ * so the registry cannot silently fall behind again.
+ */
+import * as m001 from './001_initial_schema.js';
+import * as m002 from './002_metrics_raw.js';
+import * as m003 from './003_pipelines_traces.js';
+import * as m004 from './004_sync_buffer.js';
+import * as m005 from './005_node_health_checks.js';
+import * as m006 from './006_login_throttle.js';
+import * as m007 from './007_sync_ingested.js';
+import * as m008 from './008_node_health_version_text.js';
+import * as m009 from './009_node_health_unmeasured.js';
+import * as m010 from './010_metrics_raw_had_no_reader.js';
+import * as m011 from './011_alerts_nobody_had_to_write.js';
+import * as m012 from './012_a_disk_nobody_watched.js';
+import * as m013 from './013_an_alarm_delivered.js';
+/**
+ * Every Omnitron migration, in apply order.
+ *
+ * Names are the on-disk basenames without extension — they are the keys
+ * recorded in the migrations table, so they must never be renamed.
+ */
+export const OMNITRON_MIGRATIONS = [
+    { name: '001_initial_schema', up: m001.up, down: m001.down },
+    { name: '002_metrics_raw', up: m002.up, down: m002.down },
+    { name: '003_pipelines_traces', up: m003.up, down: m003.down },
+    { name: '004_sync_buffer', up: m004.up, down: m004.down },
+    { name: '005_node_health_checks', up: m005.up, down: m005.down },
+    { name: '006_login_throttle', up: m006.up, down: m006.down },
+    { name: '007_sync_ingested', up: m007.up, down: m007.down },
+    { name: '008_node_health_version_text', up: m008.up, down: m008.down },
+    { name: '009_node_health_unmeasured', up: m009.up, down: m009.down },
+    { name: '010_metrics_raw_had_no_reader', up: m010.up, down: m010.down },
+    { name: '011_alerts_nobody_had_to_write', up: m011.up, down: m011.down },
+    { name: '012_a_disk_nobody_watched', up: m012.up, down: m012.down },
+    { name: '013_an_alarm_delivered', up: m013.up, down: m013.down },
+];
+//# sourceMappingURL=index.js.map

package/dist/database/migrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/migrations/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,IAAI,MAAM,yBAAyB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAC7C,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAC;AAClD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAC7C,OAAO,KAAK,IAAI,MAAM,6BAA6B,CAAC;AACpD,OAAO,KAAK,IAAI,MAAM,yBAAyB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,wBAAwB,CAAC;AAC/C,OAAO,KAAK,IAAI,MAAM,mCAAmC,CAAC;AAC1D,OAAO,KAAK,IAAI,MAAM,iCAAiC,CAAC;AACxD,OAAO,KAAK,IAAI,MAAM,oCAAoC,CAAC;AAC3D,OAAO,KAAK,IAAI,MAAM,qCAAqC,CAAC;AAC5D,OAAO,KAAK,IAAI,MAAM,gCAAgC,CAAC;AACvD,OAAO,KAAK,IAAI,MAAM,6BAA6B,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAgB;IAC9C,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IAC5D,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IACzD,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IAC9D,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IACzD,EAAE,IAAI,EAAE,wBAAwB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IAChE,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IAC5D,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IAC3D,EAAE,IAAI,EAAE,8BAA8B,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IACtE,EAAE,IAAI,EAAE,4BAA4B,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IACpE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IACvE,EAAE,IAAI,EAAE,gCAAgC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IACxE,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;IACnE,EAAE,IAAI,EAAE,wBAAwB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;CACjE,CAAC"}

package/dist/database/schema.d.ts

@@ -20,7 +20,6 @@ export interface OmnitronDatabase {
     /** Structured logs — partitioned by day in production */
     logs: LogsTable;
     /** Time-series metrics — CPU, memory, request rates, custom gauges */
-    metrics_raw: MetricsRawTable;
     /** Alert rules — metric/log/health alert definitions */
     alert_rules: AlertRulesTable;
     /** Alert events — fired/resolved alert instances */
@@ -37,6 +36,8 @@ export interface OmnitronDatabase {
     traces: TracesTable;
     /** Sync WAL buffer — slave→master replication (slave-only) */
     sync_buffer: SyncBufferTable;
+    /** Master-side dedup ledger for slave sync — see SyncIngestedTable */
+    sync_ingested: SyncIngestedTable;
     /** Node health check history — written by health-monitor worker */
     node_health_checks: NodeHealthChecksTable;
 }
@@ -63,6 +64,10 @@ export interface OmnitronUsersTable {
     pgpPublicKey: string | null;
     pgpEnabled: ColumnType<boolean, boolean, boolean>;
     lastLoginAt: Timestamp | null;
+    /** Consecutive failed sign-ins; reset to 0 on success (migration 006). */
+    failedLoginAttempts: ColumnType<number, number | undefined, number>;
+    /** Set while the account is locked out after repeated failures (migration 006). */
+    lockedUntil: Timestamp | null;
     createdAt: CreatedAt;
     updatedAt: UpdatedAt;
 }
@@ -87,15 +92,6 @@ export interface LogsTable {
     spanId: string | null;
     metadata: JsonB | null;
 }
-export interface MetricsRawTable {
-    id: Generated<string>;
-    timestamp: Timestamp;
-    nodeId: string | null;
-    app: string;
-    name: string;
-    value: number;
-    labels: JsonB | null;
-}
 export interface AlertRulesTable {
     id: Generated<string>;
     name: string;
@@ -120,6 +116,12 @@ export interface AlertEventsTable {
     resolvedAt: Timestamp | null;
     acknowledgedAt: Timestamp | null;
     acknowledgedBy: string | null;
+    /** When the platform's alert sink took the firing (monitoring.alertSink); null while it has not. */
+    deliveredAt: Timestamp | null;
+    /** When the sink took the resolve. */
+    resolveDeliveredAt: Timestamp | null;
+    /** Why the last delivery attempt failed, while it keeps being retried. */
+    deliveryError: string | null;
 }
 export interface DeploymentsTable {
     id: Generated<string>;
@@ -189,6 +191,19 @@ export interface SyncBufferTable {
     /** When the entry was successfully synced to master (null = pending) */
     syncedAt: Timestamp | null;
 }
+/**
+ * Master-side record of entries already taken from a slave.
+ *
+ * The key is the slave's own `sync_buffer.id`, stable across retries. It is
+ * what makes "sync batches are idempotent" — a claim the header of
+ * `sync.service.ts` made for a long time with nothing behind it — actually
+ * true, now that failed deliveries are retried rather than discarded.
+ */
+export interface SyncIngestedTable {
+    nodeId: string;
+    entryId: string;
+    ingestedAt: CreatedAt;
+}
 export interface NodeHealthChecksTable {
     id: Generated<string>;
     nodeId: string;
@@ -200,7 +215,8 @@ export interface NodeHealthChecksTable {
     sshConnected: ColumnType<boolean, boolean, boolean>;
     sshLatencyMs: number | null;
     sshError: string | null;
-    omnitronConnected: ColumnType<boolean, boolean, boolean>;
+    /** NULL when the check could not measure it — see migration 009. Writers always know. */
+    omnitronConnected: ColumnType<boolean | null, boolean, boolean>;
     omnitronVersion: string | null;
     omnitronPid: number | null;
     omnitronUptime: number | null;

package/dist/database/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/database/schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAMpD,KAAK,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;AAC3D,KAAK,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;AAC1D,KAAK,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;AAChE,KAAK,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;AAMhF,MAAM,WAAW,gBAAgB;IAC/B,sDAAsD;IACtD,KAAK,EAAE,UAAU,CAAC;IAClB,+CAA+C;IAC/C,cAAc,EAAE,kBAAkB,CAAC;IACnC,sDAAsD;IACtD,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,yDAAyD;IACzD,IAAI,EAAE,SAAS,CAAC;IAChB,sEAAsE;IACtE,WAAW,EAAE,eAAe,CAAC;IAC7B,wDAAwD;IACxD,WAAW,EAAE,eAAe,CAAC;IAC7B,oDAAoD;IACpD,YAAY,EAAE,gBAAgB,CAAC;IAC/B,gDAAgD;IAChD,WAAW,EAAE,gBAAgB,CAAC;IAC9B,oCAAoC;IACpC,kBAAkB,EAAE,qBAAqB,CAAC;IAC1C,iCAAiC;IACjC,SAAS,EAAE,cAAc,CAAC;IAC1B,oCAAoC;IACpC,aAAa,EAAE,iBAAiB,CAAC;IACjC,gDAAgD;IAChD,MAAM,EAAE,WAAW,CAAC;IACpB,8DAA8D;IAC9D,WAAW,EAAE,eAAe,CAAC;IAC7B,mEAAmE;IACnE,kBAAkB,EAAE,qBAAqB,CAAC;CAC3C;AAMD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,SAAS,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAC;CACxB;AAMD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC;CACtB;AAMD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,eAAe,EAAE,SAAS,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,SAAS,CAAC;IACnB,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,SAAS,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAC;CACxB;AAMD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,KAAK,CAAC;IAChB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC;CACtB;AAMD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,SAAS,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;CACpB;AAMD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,0CAA0C;IAC1C,SAAS,EAAE,SAAS,CAAC;IACrB,wEAAwE;IACxE,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;CAC5B;AAMD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IAExB,aAAa,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,YAAY,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,iBAAiB,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B,EAAE,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;CACzF"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/database/schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAMpD,KAAK,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;AAC3D,KAAK,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;AAC1D,KAAK,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;AAChE,KAAK,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;AAMhF,MAAM,WAAW,gBAAgB;IAC/B,sDAAsD;IACtD,KAAK,EAAE,UAAU,CAAC;IAClB,+CAA+C;IAC/C,cAAc,EAAE,kBAAkB,CAAC;IACnC,sDAAsD;IACtD,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,yDAAyD;IACzD,IAAI,EAAE,SAAS,CAAC;IAChB,sEAAsE;IACtE,wDAAwD;IACxD,WAAW,EAAE,eAAe,CAAC;IAC7B,oDAAoD;IACpD,YAAY,EAAE,gBAAgB,CAAC;IAC/B,gDAAgD;IAChD,WAAW,EAAE,gBAAgB,CAAC;IAC9B,oCAAoC;IACpC,kBAAkB,EAAE,qBAAqB,CAAC;IAC1C,iCAAiC;IACjC,SAAS,EAAE,cAAc,CAAC;IAC1B,oCAAoC;IACpC,aAAa,EAAE,iBAAiB,CAAC;IACjC,gDAAgD;IAChD,MAAM,EAAE,WAAW,CAAC;IACpB,8DAA8D;IAC9D,WAAW,EAAE,eAAe,CAAC;IAC7B,sEAAsE;IACtE,aAAa,EAAE,iBAAiB,CAAC;IACjC,mEAAmE;IACnE,kBAAkB,EAAE,qBAAqB,CAAC;CAC3C;AAMD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,SAAS,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,0EAA0E;IAC1E,mBAAmB,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC;IACpE,mFAAmF;IACnF,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAC;CACxB;AAMD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,eAAe,EAAE,SAAS,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,SAAS,CAAC;IACnB,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,SAAS,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,oGAAoG;IACpG,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,sCAAsC;IACtC,kBAAkB,EAAE,SAAS,GAAG,IAAI,CAAC;IACrC,0EAA0E;IAC1E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAC;CACxB;AAMD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,KAAK,CAAC;IAChB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC;CACtB;AAMD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,SAAS,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;CACpB;AAMD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,0CAA0C;IAC1C,SAAS,EAAE,SAAS,CAAC;IACrB,wEAAwE;IACxE,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,SAAS,CAAC;CACvB;AAMD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IAExB,aAAa,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,YAAY,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,yFAAyF;IACzF,iBAAiB,EAAE,UAAU,CAAC,OAAO,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B,EAAE,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;CACzF"}

package/dist/database/sqlite-date-binding.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Let a SQLite-backed Kysely accept the `Date` values the rest of the code
+ * passes it.
+ *
+ * `better-sqlite3` binds "numbers, strings, bigints, buffers, and null" and
+ * refuses everything else, a `Date` included. Postgres's driver serialises
+ * one happily. The daemon runs the SAME services against both — a master on
+ * Postgres, a slave on SQLite — so any query written with a `Date` works on
+ * one and throws on the other, and the schema types describe the master.
+ *
+ * Measured 2026-09-14 on a provisioned slave node:
+ *
+ *     ERROR  Log retention pass failed
+ *       error: "SQLite3 can only bind numbers, strings, bigints, buffers, and null"
+ *     WARN   Sync buffer retention pass failed
+ *       error: "SQLite3 can only bind numbers, strings, bigints, buffers, and null"
+ *
+ * — the second one every thirty seconds, with the buffer bound bounding
+ * nothing. Both had been unreachable until this week: the slave replication
+ * path had no producer, and the bound only ran at the end of a successful
+ * cycle. Making them run is what made them fail.
+ *
+ * Converting at the two call sites was the obvious fix and the wrong one:
+ * there are two today because there are two features, and the next query
+ * written against a slave's storage with a `Date` in it fails the same way.
+ * The driver is where the value has to be right, so the conversion goes
+ * there.
+ *
+ * ISO-8601 is what these columns hold, and it sorts chronologically as text —
+ * which is why the comparisons this fixes are correct once the bind works.
+ */
+/**
+ * Replace every `Date` in a statement's arguments with its ISO form.
+ *
+ * better-sqlite3 accepts bindings two ways — `stmt.all(a, b)` and
+ * `stmt.all([a, b])` — and Kysely's SQLite driver uses the SECOND:
+ *
+ *     rows: stmt.all(parameters)
+ *     const { changes } = stmt.run(parameters)
+ *
+ * So this is handed ONE argument which is the array of bindings, and a
+ * version that looked only at the top level found no Date and changed
+ * nothing.
+ *
+ * That is exactly what happened. The first fix converted the spread form,
+ * its test called it the spread way, both were green, and the failure it was
+ * written for went on every thirty seconds on a real node — visible only
+ * because the node was watched after the version shipped:
+ *
+ *     05:53:02  Sync buffer retention pass failed
+ *     05:53:32  Sync buffer retention pass failed   ← on the FIXED build
+ *
+ * A test that calls the code differently from its only caller tests a
+ * different thing.
+ */
+export declare function serialiseDates(args: readonly unknown[]): readonly unknown[];
+/**
+ * Wrap a better-sqlite3 database so every bound `Date` becomes a string.
+ *
+ * Done at the driver rather than as a Kysely plugin because a plugin's
+ * `transformQuery` sees the query AST, where a parameter is a
+ * `ValueNode` — reachable, but only by walking every node type Kysely can
+ * produce, and silently incomplete the moment it produces a new one. The
+ * driver sees the finished parameter list, which is the whole of what is
+ * being bound and cannot be partially traversed.
+ */
+export declare function withDateBinding<T extends {
+    prepare(sql: string): unknown;
+}>(database: T): T;
+export declare function toIsoUtc(value: unknown): string;
+//# sourceMappingURL=sqlite-date-binding.d.ts.map

package/dist/database/sqlite-date-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-date-binding.d.ts","sourceRoot":"","sources":["../../src/database/sqlite-date-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,OAAO,EAAE,CA4C3E;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS;IAAE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAkB3F;AAiCD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAqB/C"}