@opentrust/db 7.3.9 → 7.3.11

package/drizzle/sqlite/meta/_journal.json

@@ -8,6 +8,13 @@
       "when": 1772680703827,
       "tag": "0000_serious_martin_li",
       "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "6",
+      "when": 1772695182037,
+      "tag": "0001_ambitious_grandmaster",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opentrust/db",
-  "version": "7.3.9",
+  "version": "7.3.11",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -19,7 +19,7 @@
     "better-sqlite3": "^11.0.0",
     "dotenv": "^17.3.1",
     "drizzle-orm": "^0.36.0",
-    "@opentrust/shared": "7.3.9"
+    "@opentrust/shared": "7.3.11"
   },
   "optionalDependencies": {
     "mysql2": "^3.11.0",

package/src/index.ts

@@ -9,4 +9,5 @@ export { usageQueries } from "./queries/usage.js";
 export { detectionResultQueries } from "./queries/detection-results.js";
 export { settingsQueries } from "./queries/settings.js";
 export { observationQueries, inferCategory, inferAccessPattern } from "./queries/observations.js";
+export { commandQueries } from "./queries/commands.js";
 export { authQueries } from "./queries/auth.js";

package/src/queries/commands.ts

@@ -0,0 +1,67 @@
+import { eq, and, desc } from "drizzle-orm";
+import type { Database } from "../client.js";
+import { commands } from "../schema/index.js";
+import { DEFAULT_TENANT_ID } from "@opentrust/shared";
+
+export function commandQueries(db: Database) {
+  return {
+    async create(data: {
+      agentId: string;
+      type: string;
+      payload?: Record<string, unknown>;
+      tenantId?: string;
+    }) {
+      const now = new Date().toISOString();
+      const tenantId = data.tenantId ?? DEFAULT_TENANT_ID;
+
+      await db.insert(commands).values({
+        tenantId,
+        agentId: data.agentId,
+        type: data.type,
+        payload: data.payload ?? null,
+        status: "pending",
+        createdAt: now,
+        updatedAt: now,
+      });
+    },
+
+    async findPending(agentId: string, tenantId: string = DEFAULT_TENANT_ID) {
+      return db
+        .select()
+        .from(commands)
+        .where(
+          and(
+            eq(commands.tenantId, tenantId),
+            eq(commands.agentId, agentId),
+            eq(commands.status, "pending"),
+          ),
+        )
+        .orderBy(commands.createdAt);
+    },
+
+    async findByAgent(agentId: string, tenantId: string = DEFAULT_TENANT_ID, limit = 50) {
+      return db
+        .select()
+        .from(commands)
+        .where(
+          and(
+            eq(commands.tenantId, tenantId),
+            eq(commands.agentId, agentId),
+          ),
+        )
+        .orderBy(desc(commands.createdAt))
+        .limit(limit);
+    },
+
+    async ack(id: string, status: "running" | "completed" | "failed", result?: Record<string, unknown>) {
+      await db
+        .update(commands)
+        .set({
+          status,
+          result: result ?? null,
+          updatedAt: new Date().toISOString(),
+        })
+        .where(eq(commands.id, id));
+    },
+  };
+}

package/src/schema/index.ts

@@ -17,6 +17,7 @@ export const policies = mod.policies;
 export const usageLogs = mod.usageLogs;
 export const detectionResults = mod.detectionResults;
 export const toolCallObservations = mod.toolCallObservations;
+export const commands = mod.commands;
 export const agentPermissions = mod.agentPermissions;
 export const magicLinks = mod.magicLinks;
 export const userSessions = mod.userSessions;

package/src/schema/mysql.ts

@@ -149,6 +149,26 @@ export const toolCallObservations = mysqlTable(
   })
 );
 
+// ─── Commands ─────────────────────────────────────────────────
+export const commands = mysqlTable(
+  "commands",
+  {
+    id: varchar("id", { length: 36 }).primaryKey().$defaultFn(() => crypto.randomUUID()),
+    tenantId: varchar("tenant_id", { length: 64 }).notNull().default("default"),
+    agentId: varchar("agent_id", { length: 36 }).notNull(),
+    type: varchar("type", { length: 64 }).notNull(),
+    payload: json("payload"),
+    status: varchar("status", { length: 32 }).notNull().default("pending"),
+    result: json("result"),
+    createdAt: datetime("created_at").notNull().$defaultFn(() => new Date()),
+    updatedAt: datetime("updated_at").notNull().$defaultFn(() => new Date()),
+  },
+  (table) => ({
+    agentStatusIdx: index("idx_commands_agent_status").on(table.tenantId, table.agentId, table.status),
+    createdAtIdx: index("idx_commands_created_at").on(table.createdAt),
+  })
+);
+
 // ─── Agent Permissions ────────────────────────────────────────
 export const agentPermissions = mysqlTable(
   "agent_permissions",

package/src/schema/pg.ts

@@ -150,6 +150,26 @@ export const toolCallObservations = pgTable(
   })
 );
 
+// ─── Commands ─────────────────────────────────────────────────
+export const commands = pgTable(
+  "commands",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    tenantId: varchar("tenant_id", { length: 64 }).notNull().default("default"),
+    agentId: uuid("agent_id").notNull(),
+    type: varchar("type", { length: 64 }).notNull(),
+    payload: jsonb("payload"),
+    status: varchar("status", { length: 32 }).notNull().default("pending"),
+    result: jsonb("result"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
+  },
+  (table) => ({
+    agentStatusIdx: index("idx_commands_agent_status").on(table.tenantId, table.agentId, table.status),
+    createdAtIdx: index("idx_commands_created_at").on(table.createdAt),
+  })
+);
+
 // ─── Agent Permissions ────────────────────────────────────────
 export const agentPermissions = pgTable(
   "agent_permissions",

package/src/schema/sqlite.ts

@@ -174,6 +174,26 @@ export const userSessions = sqliteTable(
   })
 );
 
+// ─── Commands ─────────────────────────────────────────────────
+export const commands = sqliteTable(
+  "commands",
+  {
+    id: text("id").primaryKey().$defaultFn(() => crypto.randomUUID()),
+    tenantId: text("tenant_id").notNull().default("default"),
+    agentId: text("agent_id").notNull(),
+    type: text("type").notNull(),
+    payload: text("payload", { mode: "json" }),
+    status: text("status").notNull().default("pending"),
+    result: text("result", { mode: "json" }),
+    createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString()),
+    updatedAt: text("updated_at").notNull().$defaultFn(() => new Date().toISOString()),
+  },
+  (table) => ({
+    agentStatusIdx: index("idx_commands_agent_status").on(table.tenantId, table.agentId, table.status),
+    createdAtIdx: index("idx_commands_created_at").on(table.createdAt),
+  })
+);
+
 // ─── Agent Permissions ────────────────────────────────────────
 export const agentPermissions = sqliteTable(
   "agent_permissions",