@rakay-technology/kraft 0.7.4

package/dist/server/migrations/0031_conscious_catseye.sql

@@ -0,0 +1,13 @@
+CREATE TABLE "personal_access_token_grant" (
+	"id" text PRIMARY KEY NOT NULL,
+	"token_id" text NOT NULL,
+	"resource_type" text NOT NULL,
+	"resource_id" text NOT NULL,
+	"permissions_json" text DEFAULT '[]' NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "personal_access_token" ADD COLUMN "scoped" boolean DEFAULT false NOT NULL;--> statement-breakpoint
+ALTER TABLE "personal_access_token_grant" ADD CONSTRAINT "personal_access_token_grant_token_id_personal_access_token_id_fk" FOREIGN KEY ("token_id") REFERENCES "public"."personal_access_token"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "pat_grant_unique" ON "personal_access_token_grant" USING btree ("token_id","resource_type","resource_id");--> statement-breakpoint
+CREATE INDEX "pat_grant_token_idx" ON "personal_access_token_grant" USING btree ("token_id");

package/dist/server/migrations/0032_wet_mimic.sql

@@ -0,0 +1,51 @@
+CREATE TABLE "oauth_access_token" (
+	"id" text PRIMARY KEY NOT NULL,
+	"access_token" text NOT NULL,
+	"refresh_token" text,
+	"access_token_expires_at" timestamp NOT NULL,
+	"refresh_token_expires_at" timestamp,
+	"client_id" text NOT NULL,
+	"user_id" text,
+	"scopes" text NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "oauth_access_token_access_token_unique" UNIQUE("access_token"),
+	CONSTRAINT "oauth_access_token_refresh_token_unique" UNIQUE("refresh_token")
+);
+--> statement-breakpoint
+CREATE TABLE "oauth_application" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"icon" text,
+	"metadata" text,
+	"client_id" text NOT NULL,
+	"client_secret" text,
+	"redirect_urls" text NOT NULL,
+	"type" text NOT NULL,
+	"disabled" boolean DEFAULT false NOT NULL,
+	"user_id" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "oauth_application_client_id_unique" UNIQUE("client_id")
+);
+--> statement-breakpoint
+CREATE TABLE "oauth_consent" (
+	"id" text PRIMARY KEY NOT NULL,
+	"client_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"scopes" text NOT NULL,
+	"consent_given" boolean NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "oauth_access_token" ADD CONSTRAINT "oauth_access_token_client_id_oauth_application_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "public"."oauth_application"("client_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_access_token" ADD CONSTRAINT "oauth_access_token_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_application" ADD CONSTRAINT "oauth_application_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_consent" ADD CONSTRAINT "oauth_consent_client_id_oauth_application_client_id_fk" FOREIGN KEY ("client_id") REFERENCES "public"."oauth_application"("client_id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "oauth_consent" ADD CONSTRAINT "oauth_consent_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "oauth_access_token_client_idx" ON "oauth_access_token" USING btree ("client_id");--> statement-breakpoint
+CREATE INDEX "oauth_access_token_user_idx" ON "oauth_access_token" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "oauth_application_user_idx" ON "oauth_application" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "oauth_consent_client_idx" ON "oauth_consent" USING btree ("client_id");--> statement-breakpoint
+CREATE INDEX "oauth_consent_user_idx" ON "oauth_consent" USING btree ("user_id");

package/dist/server/migrations/0033_eminent_molly_hayes.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "personal_access_token" ADD COLUMN "oauth_client_id" text;--> statement-breakpoint
+CREATE UNIQUE INDEX "personal_access_token_oauth_binding_idx" ON "personal_access_token" USING btree ("user_id","oauth_client_id");

package/dist/server/migrations/0034_nervous_surge.sql

@@ -0,0 +1 @@
+ALTER TABLE "project" ADD COLUMN "routing_config" jsonb;

package/dist/server/migrations/0035_thankful_morgan_stark.sql

@@ -0,0 +1 @@
+ALTER TABLE "domain" ADD COLUMN "external_ingress" boolean DEFAULT false NOT NULL;

package/dist/server/migrations/0036_gorgeous_scalphunter.sql

@@ -0,0 +1,17 @@
+CREATE TABLE "route_rule" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"project_id" text NOT NULL,
+	"domain_id" text,
+	"path_prefix" text,
+	"spec" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "route_rule" ADD CONSTRAINT "route_rule_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "route_rule" ADD CONSTRAINT "route_rule_project_id_project_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."project"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "route_rule" ADD CONSTRAINT "route_rule_domain_id_domain_id_fk" FOREIGN KEY ("domain_id") REFERENCES "public"."domain"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_route_rule_project" ON "route_rule" USING btree ("project_id");--> statement-breakpoint
+CREATE INDEX "idx_route_rule_domain" ON "route_rule" USING btree ("domain_id");

package/dist/server/migrations/0037_clever_makkari.sql

@@ -0,0 +1,28 @@
+CREATE TABLE "docker_migration_run" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"source_server_id" text,
+	"target_server_id" text,
+	"project_id" text,
+	"project_name" text NOT NULL,
+	"service_names" jsonb DEFAULT '[]'::jsonb NOT NULL,
+	"status" text DEFAULT 'queued' NOT NULL,
+	"mode" text DEFAULT 'cross_server' NOT NULL,
+	"deployment_id" text,
+	"kill_originals" boolean DEFAULT false NOT NULL,
+	"confirmation_token" text,
+	"volume_plan" jsonb DEFAULT '[]'::jsonb,
+	"scanned_container_ids" jsonb DEFAULT '{}'::jsonb,
+	"bytes_moved" bigint,
+	"error_message" text,
+	"started_at" timestamp DEFAULT now() NOT NULL,
+	"finished_at" timestamp,
+	"last_event_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "docker_migration_run" ADD CONSTRAINT "docker_migration_run_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "docker_migration_run" ADD CONSTRAINT "docker_migration_run_source_server_id_servers_id_fk" FOREIGN KEY ("source_server_id") REFERENCES "public"."servers"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "docker_migration_run" ADD CONSTRAINT "docker_migration_run_target_server_id_servers_id_fk" FOREIGN KEY ("target_server_id") REFERENCES "public"."servers"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "docker_migration_run" ADD CONSTRAINT "docker_migration_run_project_id_project_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."project"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_docker_migration_run_org_started" ON "docker_migration_run" USING btree ("organization_id","started_at");--> statement-breakpoint
+CREATE INDEX "idx_docker_migration_run_in_flight" ON "docker_migration_run" USING btree ("status") WHERE "docker_migration_run"."status" IN ('queued','adopting','moving_data','deploying','verifying','awaiting_cutover','cutover');

package/dist/server/migrations/0038_young_magneto.sql

@@ -0,0 +1 @@
+ALTER TABLE "domain" ADD COLUMN "manual_ssl" boolean DEFAULT false NOT NULL;

package/dist/server/migrations/0039_secret_lady_ursula.sql

@@ -0,0 +1,15 @@
+CREATE TABLE "job_run" (
+	"id" text PRIMARY KEY NOT NULL,
+	"job_id" text NOT NULL,
+	"kind" text DEFAULT 'system' NOT NULL,
+	"trigger" text DEFAULT 'schedule' NOT NULL,
+	"status" text NOT NULL,
+	"started_at" timestamp DEFAULT now() NOT NULL,
+	"finished_at" timestamp,
+	"duration_ms" integer,
+	"summary" jsonb,
+	"error" text,
+	"created_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "job_run_job_started_idx" ON "job_run" USING btree ("job_id","started_at");

package/dist/server/migrations/0040_sharp_red_wolf.sql

@@ -0,0 +1,16 @@
+CREATE TABLE "job" (
+	"id" text PRIMARY KEY NOT NULL,
+	"key" text NOT NULL,
+	"kind" text DEFAULT 'system' NOT NULL,
+	"label" text NOT NULL,
+	"cron_expression" text NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"action_type" text DEFAULT 'builtin' NOT NULL,
+	"action_config" jsonb,
+	"created_by" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "job_key_unique" UNIQUE("key")
+);
+--> statement-breakpoint
+CREATE INDEX "job_kind_idx" ON "job" USING btree ("kind");

package/dist/server/migrations/0041_round_spyke.sql

@@ -0,0 +1,4 @@
+ALTER TABLE "project" ADD COLUMN "is_app" boolean DEFAULT false NOT NULL;--> statement-breakpoint
+ALTER TABLE "project" ADD COLUMN "app_template_id" text;--> statement-breakpoint
+-- Backfill: existing webmail projects are managed apps → move them to the Apps tab.
+UPDATE "project" SET "is_app" = true, "app_template_id" = 'mail-webmail' WHERE "framework" = 'webmail';

package/dist/server/migrations/0042_dapper_havok.sql

@@ -0,0 +1 @@
+ALTER TABLE "job_run" ADD COLUMN "output" text;

package/dist/server/migrations/0043_fast_sharon_ventura.sql

@@ -0,0 +1,15 @@
+CREATE TABLE "system_notice" (
+	"id" text PRIMARY KEY NOT NULL,
+	"severity" text DEFAULT 'info' NOT NULL,
+	"title" text NOT NULL,
+	"message" text NOT NULL,
+	"action_label" text,
+	"action_url" text,
+	"active" boolean DEFAULT true NOT NULL,
+	"starts_at" timestamp,
+	"ends_at" timestamp,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "idx_system_notice_active" ON "system_notice" USING btree ("active");

package/dist/server/migrations/0044_amused_shape.sql

@@ -0,0 +1,8 @@
+ALTER TABLE "job" ALTER COLUMN "cron_expression" DROP NOT NULL;--> statement-breakpoint
+ALTER TABLE "job" ADD COLUMN "schedule_type" text DEFAULT 'recurring' NOT NULL;--> statement-breakpoint
+ALTER TABLE "job" ADD COLUMN "run_at" timestamp;--> statement-breakpoint
+ALTER TABLE "job" ADD COLUMN "depends_on" text[];--> statement-breakpoint
+ALTER TABLE "job" ADD COLUMN "trigger_events" text[];--> statement-breakpoint
+ALTER TABLE "job" ADD COLUMN "notify_config" jsonb;--> statement-breakpoint
+ALTER TABLE "job_run" ADD COLUMN "server_id" text;--> statement-breakpoint
+ALTER TABLE "job_run" ADD COLUMN "attempt" integer DEFAULT 1 NOT NULL;

package/dist/server/migrations/0045_amusing_korath.sql

@@ -0,0 +1 @@
+ALTER TABLE "service" ADD COLUMN "public_endpoints" jsonb DEFAULT '[]'::jsonb;

package/dist/server/migrations/0046_white_harrier.sql

@@ -0,0 +1,35 @@
+CREATE TABLE "github_deploy_key" (
+	"id" text PRIMARY KEY NOT NULL,
+	"server_id" text NOT NULL,
+	"organization_id" text NOT NULL,
+	"owner" text NOT NULL,
+	"repo" text NOT NULL,
+	"github_key_id" integer,
+	"private_key_encrypted" text NOT NULL,
+	"public_key" text NOT NULL,
+	"read_only" boolean DEFAULT true NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "server_github_auth" (
+	"id" text PRIMARY KEY NOT NULL,
+	"server_id" text NOT NULL,
+	"organization_id" text NOT NULL,
+	"mode" text NOT NULL,
+	"token_encrypted" text,
+	"token_source" text,
+	"token_login" text,
+	"server_key_private_encrypted" text,
+	"server_key_public" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "github_deploy_key" ADD CONSTRAINT "github_deploy_key_server_id_servers_id_fk" FOREIGN KEY ("server_id") REFERENCES "public"."servers"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "github_deploy_key" ADD CONSTRAINT "github_deploy_key_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "server_github_auth" ADD CONSTRAINT "server_github_auth_server_id_servers_id_fk" FOREIGN KEY ("server_id") REFERENCES "public"."servers"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "server_github_auth" ADD CONSTRAINT "server_github_auth_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_github_deploy_key_server_repo" ON "github_deploy_key" USING btree ("server_id","owner","repo");--> statement-breakpoint
+CREATE INDEX "idx_github_deploy_key_org_server" ON "github_deploy_key" USING btree ("organization_id","server_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_server_github_auth_server" ON "server_github_auth" USING btree ("server_id");--> statement-breakpoint
+CREATE INDEX "idx_server_github_auth_org" ON "server_github_auth" USING btree ("organization_id");

package/dist/server/migrations/0047_sloppy_strong_guy.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "deployment" ADD COLUMN "release_version" text;--> statement-breakpoint
+ALTER TABLE "project" ADD COLUMN "release_source" jsonb;

package/dist/server/migrations/0048_funny_emma_frost.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "user_settings" ADD COLUMN "transfer_mode" text DEFAULT 'auto' NOT NULL;--> statement-breakpoint
+ALTER TABLE "user_settings" ADD COLUMN "transfer_compression" text DEFAULT 'auto' NOT NULL;

package/dist/server/migrations/0049_nappy_piledriver.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "domain" ADD COLUMN "verify_attempts" integer DEFAULT 0 NOT NULL;--> statement-breakpoint
+ALTER TABLE "domain" ADD COLUMN "last_verify_error" text;--> statement-breakpoint
+ALTER TABLE "domain" ADD COLUMN "last_checked_at" timestamp;

package/dist/server/migrations/0050_add_service_deployment_image_digest.sql

@@ -0,0 +1 @@
+ALTER TABLE "service_deployment" ADD COLUMN "image_digest" text;

package/dist/server/migrations/0051_add_update_status.sql

@@ -0,0 +1,19 @@
+CREATE TABLE "update_status" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"project_id" text NOT NULL,
+	"kind" text NOT NULL,
+	"behind" boolean DEFAULT false NOT NULL,
+	"latest_in_progress" boolean DEFAULT false NOT NULL,
+	"current_label" text,
+	"latest_label" text,
+	"detail" jsonb,
+	"checked_at" timestamp DEFAULT now() NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "update_status" ADD CONSTRAINT "update_status_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "update_status" ADD CONSTRAINT "update_status_project_id_project_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."project"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_update_status_project" ON "update_status" USING btree ("project_id");--> statement-breakpoint
+CREATE INDEX "idx_update_status_org_behind" ON "update_status" USING btree ("organization_id","behind");

package/dist/server/migrations/0052_add_notice_target.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "system_notice" ADD COLUMN "target_type" text;--> statement-breakpoint
+ALTER TABLE "system_notice" ADD COLUMN "target_id" text;

package/dist/server/migrations/0053_colossal_sandman.sql

@@ -0,0 +1,14 @@
+CREATE TABLE "billing_usage_snapshot" (
+	"organization_id" text PRIMARY KEY NOT NULL,
+	"balance" double precision,
+	"credits_used" double precision,
+	"cpu_time_minutes" double precision,
+	"memory_gb_minutes" double precision,
+	"disk_io_gb" double precision,
+	"network_gb" double precision,
+	"period_start" timestamp,
+	"period_end" timestamp,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "billing_usage_snapshot" ADD CONSTRAINT "billing_usage_snapshot_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;

package/dist/server/migrations/0054_add_instance_smtp.sql

@@ -0,0 +1,5 @@
+ALTER TABLE "instance_settings" ADD COLUMN "smtp_host" text;--> statement-breakpoint
+ALTER TABLE "instance_settings" ADD COLUMN "smtp_port" integer;--> statement-breakpoint
+ALTER TABLE "instance_settings" ADD COLUMN "smtp_user" text;--> statement-breakpoint
+ALTER TABLE "instance_settings" ADD COLUMN "smtp_password_encrypted" text;--> statement-breakpoint
+ALTER TABLE "instance_settings" ADD COLUMN "smtp_from" text;

package/dist/server/migrations/0055_rainy_klaw.sql

@@ -0,0 +1,22 @@
+CREATE TABLE "server_module_status" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text,
+	"server_id" text NOT NULL,
+	"module_name" text NOT NULL,
+	"installed_version" text,
+	"migration_version" text,
+	"available_version" text,
+	"behind" boolean DEFAULT false NOT NULL,
+	"latest_in_progress" boolean DEFAULT false NOT NULL,
+	"current_label" text,
+	"latest_label" text,
+	"detail" jsonb,
+	"checked_at" timestamp DEFAULT now() NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "server_module_status" ADD CONSTRAINT "server_module_status_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "server_module_status" ADD CONSTRAINT "server_module_status_server_id_servers_id_fk" FOREIGN KEY ("server_id") REFERENCES "public"."servers"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_server_module_status" ON "server_module_status" USING btree ("server_id","module_name");--> statement-breakpoint
+CREATE INDEX "idx_server_module_status_org_behind" ON "server_module_status" USING btree ("organization_id","behind");

package/dist/server/migrations/0056_moaning_daredevil.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "cloud_handoff_code" ADD COLUMN "state" text;--> statement-breakpoint
+CREATE INDEX "cloud_handoff_code_state_idx" ON "cloud_handoff_code" USING btree ("state");

package/dist/server/migrations/0057_complete_prism.sql

@@ -0,0 +1,18 @@
+CREATE TABLE "webhook_source" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"kind" text NOT NULL,
+	"label" text NOT NULL,
+	"secret" text NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "domain" ALTER COLUMN "project_id" DROP NOT NULL;--> statement-breakpoint
+ALTER TABLE "domain" ADD COLUMN "owner_type" text DEFAULT 'project' NOT NULL;--> statement-breakpoint
+ALTER TABLE "domain" ADD COLUMN "webhook_source_id" text;--> statement-breakpoint
+ALTER TABLE "webhook_source" ADD CONSTRAINT "webhook_source_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_webhook_source_org" ON "webhook_source" USING btree ("organization_id");--> statement-breakpoint
+ALTER TABLE "domain" ADD CONSTRAINT "domain_webhook_source_id_webhook_source_id_fk" FOREIGN KEY ("webhook_source_id") REFERENCES "public"."webhook_source"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_domain_webhook_source" ON "domain" USING btree ("webhook_source_id");

package/dist/server/migrations/0058_add_server_is_local.sql

@@ -0,0 +1 @@
+ALTER TABLE "servers" ADD COLUMN "is_local" boolean DEFAULT false NOT NULL;

package/dist/server/migrations/0059_legal_fixer.sql

@@ -0,0 +1,18 @@
+CREATE TABLE "project_connection" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"source_project_id" text NOT NULL,
+	"target_project_id" text NOT NULL,
+	"output_id" text NOT NULL,
+	"env_key" text NOT NULL,
+	"mode" text DEFAULT 'public' NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "project_connection" ADD CONSTRAINT "project_connection_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "project_connection" ADD CONSTRAINT "project_connection_source_project_id_project_id_fk" FOREIGN KEY ("source_project_id") REFERENCES "public"."project"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "project_connection" ADD CONSTRAINT "project_connection_target_project_id_project_id_fk" FOREIGN KEY ("target_project_id") REFERENCES "public"."project"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_project_connection_target_env" ON "project_connection" USING btree ("target_project_id","env_key");--> statement-breakpoint
+CREATE INDEX "idx_project_connection_target" ON "project_connection" USING btree ("target_project_id");--> statement-breakpoint
+CREATE INDEX "idx_project_connection_source" ON "project_connection" USING btree ("source_project_id");

package/dist/server/migrations/0060_add_route_strategy_host_port.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "project" ADD COLUMN "host_port" integer;--> statement-breakpoint
+ALTER TABLE "project" ADD COLUMN "route_strategy" text DEFAULT 'auto';--> statement-breakpoint
+ALTER TABLE "user_settings" ADD COLUMN "route_strategy" text DEFAULT 'auto' NOT NULL;

package/dist/server/migrations/0061_notification_default_multi_kind.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "notification_default" ADD COLUMN "default_channel_kinds" jsonb DEFAULT '["email"]'::jsonb NOT NULL;--> statement-breakpoint
+UPDATE "notification_default" SET "default_channel_kinds" = jsonb_build_array("default_channel_kind");--> statement-breakpoint
+ALTER TABLE "notification_default" DROP COLUMN "default_channel_kind";

package/dist/server/migrations/0062_add_incoming_webhook.sql

@@ -0,0 +1,21 @@
+CREATE TABLE "incoming_webhook" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"project_id" text NOT NULL,
+	"name" text NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"action_type" text NOT NULL,
+	"action_config" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"auth_mode" text DEFAULT 'token' NOT NULL,
+	"token_encrypted" text,
+	"hmac_secret_encrypted" text,
+	"created_by" text,
+	"last_fired_at" timestamp,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "incoming_webhook" ADD CONSTRAINT "incoming_webhook_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "incoming_webhook" ADD CONSTRAINT "incoming_webhook_project_id_project_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."project"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_incoming_webhook_project" ON "incoming_webhook" USING btree ("project_id");--> statement-breakpoint
+CREATE INDEX "idx_incoming_webhook_org" ON "incoming_webhook" USING btree ("organization_id");

package/dist/server/migrations/0063_add_migration_logs.sql

@@ -0,0 +1 @@
+ALTER TABLE "docker_migration_run" ADD COLUMN "logs" text;

package/dist/server/migrations/0064_add_migration_partial.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "docker_migration_run" ADD COLUMN IF NOT EXISTS "pending_items" jsonb DEFAULT '[]'::jsonb;--> statement-breakpoint
+ALTER TABLE "docker_migration_run" ADD COLUMN IF NOT EXISTS "input_snapshot" jsonb;

package/dist/server/migrations/0065_custom_app_template.sql

@@ -0,0 +1,14 @@
+CREATE TABLE "custom_app_template" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"app_id" text NOT NULL,
+	"template" jsonb NOT NULL,
+	"created_by_user_id" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "custom_app_template" ADD CONSTRAINT "custom_app_template_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "custom_app_template" ADD CONSTRAINT "custom_app_template_created_by_user_id_user_id_fk" FOREIGN KEY ("created_by_user_id") REFERENCES "public"."user"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_custom_app_template_org_app" ON "custom_app_template" USING btree ("organization_id","app_id");--> statement-breakpoint
+CREATE INDEX "idx_custom_app_template_org" ON "custom_app_template" USING btree ("organization_id");

package/dist/server/migrations/0066_ensure_migration_partial_columns.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "docker_migration_run" ADD COLUMN IF NOT EXISTS "pending_items" jsonb DEFAULT '[]'::jsonb;--> statement-breakpoint
+ALTER TABLE "docker_migration_run" ADD COLUMN IF NOT EXISTS "input_snapshot" jsonb;

package/dist/server/migrations/0067_webhook_delivery.sql

@@ -0,0 +1,28 @@
+CREATE TABLE "webhook_delivery" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text,
+	"project_id" text,
+	"source" text NOT NULL,
+	"hook_id" text,
+	"delivery_id" text,
+	"event" text NOT NULL,
+	"auth_result" text,
+	"outcome" text NOT NULL,
+	"action_ref" text,
+	"status_code" integer,
+	"error" text,
+	"summary" jsonb,
+	"client_ip" text,
+	"user_agent" text,
+	"duration_ms" integer,
+	"received_at" timestamp DEFAULT now() NOT NULL,
+	"processed_at" timestamp
+);
+--> statement-breakpoint
+DROP TABLE IF EXISTS "github_webhook_event";--> statement-breakpoint
+ALTER TABLE "webhook_delivery" ADD CONSTRAINT "webhook_delivery_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "webhook_delivery" ADD CONSTRAINT "webhook_delivery_project_id_project_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."project"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_webhook_delivery_github_delivery" ON "webhook_delivery" USING btree ("source","delivery_id") WHERE "webhook_delivery"."source" = 'github' AND "webhook_delivery"."delivery_id" IS NOT NULL;--> statement-breakpoint
+CREATE INDEX "idx_webhook_delivery_project" ON "webhook_delivery" USING btree ("project_id","received_at");--> statement-breakpoint
+CREATE INDEX "idx_webhook_delivery_org" ON "webhook_delivery" USING btree ("organization_id","received_at");--> statement-breakpoint
+CREATE INDEX "idx_webhook_delivery_hook" ON "webhook_delivery" USING btree ("hook_id","received_at");

package/dist/server/migrations/0068_add_migration_target_volumes.sql

@@ -0,0 +1 @@
+ALTER TABLE "docker_migration_run" ADD COLUMN IF NOT EXISTS "target_volumes" jsonb DEFAULT '[]'::jsonb;

package/dist/server/migrations/0069_add_project_composite_routes.sql

@@ -0,0 +1 @@
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "composite_routes" jsonb;

package/dist/server/migrations/0070_forward_git_to_server.sql

@@ -0,0 +1 @@
+ALTER TABLE "user_settings" ADD COLUMN IF NOT EXISTS "forward_git_to_server" boolean DEFAULT false NOT NULL;

package/dist/server/migrations/0071_gh_device_token.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "instance_settings" ADD COLUMN IF NOT EXISTS "gh_device_token_encrypted" text;
+--> statement-breakpoint
+ALTER TABLE "instance_settings" ADD COLUMN IF NOT EXISTS "gh_device_token_set_at" timestamp;

package/dist/server/migrations/0072_gh_device_token_method.sql

@@ -0,0 +1 @@
+ALTER TABLE "instance_settings" ADD COLUMN IF NOT EXISTS "gh_device_token_method" text;

package/dist/server/migrations/0073_project_volumes_object_storage.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "volumes" jsonb;
+--> statement-breakpoint
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "object_storage" jsonb;

package/dist/server/migrations/0074_project_compose_path.sql

@@ -0,0 +1 @@
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "compose_path" text;

package/dist/server/migrations/0075_service_command_argv.sql

@@ -0,0 +1 @@
+ALTER TABLE "service" ADD COLUMN IF NOT EXISTS "command_argv" jsonb;

package/dist/server/migrations/0076_rollback_retention.sql

@@ -0,0 +1,17 @@
+-- Rollback retention: auto-sized window inputs on the project, and the removal
+-- of a per-service artifact flag that was never written or read.
+--
+-- `rollback_window` keeps its existing meaning with one addition: NULL now means
+-- "auto" — resolve to `rollback_window_computed` (measured from the deploy host's
+-- free disk and this project's average snapshot size), falling back to
+-- instance_settings.default_rollback_window when nothing was measured yet. A
+-- non-null `rollback_window` is still an explicit operator override.
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "snapshot_size_bytes" bigint;
+--> statement-breakpoint
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "rollback_window_computed" integer;
+--> statement-breakpoint
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "capacity_measured_at" timestamp;
+--> statement-breakpoint
+-- Dead since it was introduced: the deployment-level `artifact_retained_at` is
+-- the only retention flag any code path writes or reads.
+ALTER TABLE "service_deployment" DROP COLUMN IF EXISTS "artifact_retained_at";

package/dist/server/migrations/0077_domain_redirect.sql

@@ -0,0 +1,13 @@
+-- Per-domain canonical redirect: this hostname answers with a redirect to another
+-- of the project's hostnames instead of serving the app.
+--
+-- Lives on `domain` rather than in a routing blob because the domain table IS the
+-- store for a project's public endpoints (deriveProjectRouteState builds
+-- publicEndpoints FROM these rows), and a redirect is a property of one hostname.
+--
+-- `redirect_to` NULL = serve the app (every existing row, unchanged).
+-- `redirect_status` NULL = 301. Kept nullable rather than DEFAULT 301 so "no
+-- redirect" is one state, not a status attached to a row that doesn't redirect.
+ALTER TABLE "domain" ADD COLUMN IF NOT EXISTS "redirect_to" text;
+--> statement-breakpoint
+ALTER TABLE "domain" ADD COLUMN IF NOT EXISTS "redirect_status" integer;

package/dist/server/migrations/0078_grant_source_scope.sql

@@ -0,0 +1,30 @@
+-- Per-repo source access scope on every grant-bearing table.
+--
+-- A grant already carries a VERB in `permissions_json` (read / write / admin).
+-- This column adds the SURFACE: may the holder read file CONTENT, and under which
+-- paths. The two do not overlap, and the absence of a scope is meaningful:
+--
+--   read + scope_json NULL                        -> metadata only (branches,
+--                                                    detect, deploy). THE DEFAULT.
+--   read + {"v":1,"read":{"paths":["src/**"]}}    -> file content under src only
+--   write + {"v":1,"write":{"paths":[...]}}       -> content writes under those paths
+--
+-- So a repo grant no longer implies the right to crawl the repository. NULL is the
+-- restrictive state, which is why this is nullable with no default and no backfill:
+-- every existing row correctly reads as metadata-only.
+--
+-- Encoded as JSON text (not jsonb, not text[]) to match `permissions_json` — the
+-- column types have to behave identically across PGlite and Postgres without
+-- driver-specific casting, and the repos already own (de)serialisation.
+--
+-- Shape + matching semantics: packages/core/src/source-access.ts. Malformed JSON,
+-- an unknown "v", or an unparseable pattern all resolve to NO access rather than
+-- unrestricted access.
+ALTER TABLE "resource_grant" ADD COLUMN IF NOT EXISTS "scope_json" text;
+--> statement-breakpoint
+ALTER TABLE "personal_access_token_grant" ADD COLUMN IF NOT EXISTS "scope_json" text;
+--> statement-breakpoint
+-- Pending invite grants carry the scope through acceptance; without it, a
+-- restricted invitee would materialise into a metadata-only grant and silently
+-- lose the content access the inviter picked.
+ALTER TABLE "invitation_pending_grant" ADD COLUMN IF NOT EXISTS "scope_json" text;

package/dist/server/migrations/0079_project_readiness.sql

@@ -0,0 +1,18 @@
+-- Deploy-time readiness gate, per project.
+--
+-- Named `readiness`, NOT `health_check`, on purpose: a compose service already
+-- carries a `healthcheck` (the Docker HEALTHCHECK directive, stored in
+-- `service.advanced`) which the daemon runs and which has nothing to do with
+-- whether a DEPLOY is allowed to finish. Two fields one capital letter apart in
+-- the same kraft.json would be a footgun.
+--
+-- Nullable with NO default, and no backfill: NULL means "off", so every existing
+-- project moves to the new off-by-default behaviour. Previously the 15s
+-- stabilization watch and the 45s TCP probe were hardcoded on every deploy and
+-- could fail (and then force-remove) a container that was running fine. Opting
+-- in is now explicit.
+--
+-- Shape (all fields optional, all defaults off) — see KraftReadiness:
+--   { enabled, path, port, timeoutSeconds,
+--     stabilization, stabilizationSeconds, onFailure: "warn" | "fail" }
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "readiness" jsonb;