@straiffi/archon 1.10.10 → 1.11.0

package/dist/server/db.js

@@ -8,6 +8,13 @@ import { hasConfiguredCheckPolicy } from './lib/executionProfileCheckPolicy.js';
 const dbPath = ensureParentDirectory(resolveArchonDbPath());
 const db = new Database(dbPath);
 db.pragma('foreign_keys = ON');
+db.exec(`
+  CREATE TABLE IF NOT EXISTS app_settings (
+    key        TEXT PRIMARY KEY,
+    value      TEXT NOT NULL,
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+  )
+`);
 db.exec(`
   CREATE TABLE IF NOT EXISTS tickets (
     id           TEXT PRIMARY KEY,
@@ -1588,6 +1595,7 @@ db.exec(`
     target_branch_snapshot TEXT,
     target_label_snapshot TEXT,
     claude_session_id TEXT,
+    codex_session_id TEXT,
     opencode_session_id TEXT,
     usage_snapshot_context_window INTEGER,
     usage_snapshot_max_output_tokens INTEGER,
@@ -1713,6 +1721,7 @@ db.exec(`
     target_label_snapshot TEXT,
     latest_snapshot_id TEXT,
     claude_session_id TEXT,
+    codex_session_id TEXT,
     opencode_session_id TEXT,
     usage_snapshot_context_window INTEGER,
     usage_snapshot_max_output_tokens INTEGER,
@@ -1739,6 +1748,7 @@ ensureColumn('spec_sessions', 'target_bundle_id', 'TEXT');
 ensureColumn('spec_sessions', 'target_branch_snapshot', 'TEXT');
 ensureColumn('spec_sessions', 'target_label_snapshot', 'TEXT');
 ensureColumn('spec_sessions', 'resume_source_run_id', 'TEXT');
+ensureColumn('spec_sessions', 'codex_session_id', 'TEXT');
 const backfillSpecSessionHasCompletedWork = () => {
     db.exec(`
     UPDATE spec_sessions
@@ -1874,28 +1884,6 @@ db.exec(`
 db.exec('CREATE INDEX IF NOT EXISTS idx_spec_sessions_project_updated_at ON spec_sessions(project_id, updated_at DESC)');
 db.exec('CREATE INDEX IF NOT EXISTS idx_spec_messages_session_created_at ON spec_messages(spec_session_id, created_at)');
 db.exec('CREATE INDEX IF NOT EXISTS idx_spec_message_attachments_spec_message_id_ordinal ON spec_message_attachments(spec_message_id, ordinal)');
-db.exec(`
-  CREATE TRIGGER IF NOT EXISTS reject_attachment_insert_without_active_project
-  BEFORE INSERT ON attachments
-  WHEN NOT EXISTS (
-    SELECT 1
-    FROM chat_sessions
-    INNER JOIN projects ON projects.id = chat_sessions.project_id
-    WHERE NEW.owner_type = 'chat'
-      AND chat_sessions.id = NEW.owner_session_id
-      AND projects.deletion_started_at IS NULL
-    UNION ALL
-    SELECT 1
-    FROM spec_sessions
-    INNER JOIN projects ON projects.id = spec_sessions.project_id
-    WHERE NEW.owner_type = 'spec'
-      AND spec_sessions.id = NEW.owner_session_id
-      AND projects.deletion_started_at IS NULL
-  )
-  BEGIN
-    SELECT RAISE(ABORT, 'Attachment owner project was not found or is being deleted');
-  END;
-`);
 ensureColumn('chat_sessions', 'usage_snapshot_context_window', 'INTEGER');
 ensureColumn('chat_sessions', 'usage_snapshot_max_output_tokens', 'INTEGER');
 ensureColumn('chat_sessions', 'usage_snapshot_total_tokens', 'INTEGER');
@@ -1923,6 +1911,7 @@ ensureColumn('chat_sessions', 'external_id', 'TEXT');
 ensureColumn('chat_sessions', 'external_key', 'TEXT');
 ensureColumn('chat_sessions', 'external_url', 'TEXT');
 ensureColumn('chat_sessions', 'external_metadata_json', 'TEXT');
+ensureColumn('chat_sessions', 'codex_session_id', 'TEXT');
 const createChatSessionsTableSql = `
   CREATE TABLE chat_sessions (
     id                TEXT PRIMARY KEY,
@@ -1935,12 +1924,18 @@ const createChatSessionsTableSql = `
     skills_json       TEXT,
     agent_status      TEXT,
     agent_log         TEXT,
+    agent_message_id  TEXT,
+    previous_agent_log TEXT,
+    previous_agent_message_id TEXT,
     streaming_response TEXT,
+    post_build_source_run_id TEXT,
+    resume_source_run_id TEXT,
     target_kind       TEXT NOT NULL DEFAULT 'repo_root',
     target_bundle_id  TEXT,
     target_branch_snapshot TEXT,
     target_label_snapshot TEXT,
     claude_session_id TEXT,
+    codex_session_id TEXT,
     opencode_session_id TEXT,
     usage_snapshot_context_window INTEGER,
     usage_snapshot_max_output_tokens INTEGER,
@@ -1950,6 +1945,13 @@ const createChatSessionsTableSql = `
     usage_snapshot_cache_read_tokens INTEGER,
     usage_snapshot_reasoning_tokens INTEGER,
     usage_snapshot_cost REAL,
+    origin_spec_session_id TEXT,
+    origin_spec_snapshot_id TEXT,
+    external_provider TEXT,
+    external_id TEXT,
+    external_key TEXT,
+    external_url TEXT,
+    external_metadata_json TEXT,
     created_at        DATETIME DEFAULT CURRENT_TIMESTAMP,
     updated_at        DATETIME DEFAULT CURRENT_TIMESTAMP,
     FOREIGN KEY (project_id) REFERENCES projects(id) ON DELETE CASCADE
@@ -1965,12 +1967,17 @@ const migrateChatSessionsUsageSnapshotTable = () => {
         return;
     }
     const resolveColumn = (preferred, legacy) => {
-        if (legacy && columns.some(column => column.name === legacy)) {
-            return legacy;
+        const hasPreferred = columns.some(column => column.name === preferred);
+        const hasLegacy = legacy && columns.some(column => column.name === legacy);
+        if (hasPreferred && hasLegacy) {
+            return `COALESCE(${preferred}, ${legacy})`;
         }
-        if (columns.some(column => column.name === preferred)) {
+        if (hasPreferred) {
             return preferred;
         }
+        if (hasLegacy) {
+            return legacy;
+        }
         return 'NULL';
     };
     db.exec('PRAGMA foreign_keys = OFF');
@@ -1989,8 +1996,18 @@ const migrateChatSessionsUsageSnapshotTable = () => {
         skills_json,
         agent_status,
         agent_log,
+        agent_message_id,
+        previous_agent_log,
+        previous_agent_message_id,
         streaming_response,
+        post_build_source_run_id,
+        resume_source_run_id,
+        target_kind,
+        target_bundle_id,
+        target_branch_snapshot,
+        target_label_snapshot,
         claude_session_id,
+        codex_session_id,
         opencode_session_id,
         usage_snapshot_context_window,
         usage_snapshot_max_output_tokens,
@@ -1999,6 +2016,14 @@ const migrateChatSessionsUsageSnapshotTable = () => {
         usage_snapshot_output_tokens,
         usage_snapshot_cache_read_tokens,
         usage_snapshot_reasoning_tokens,
+        usage_snapshot_cost,
+        origin_spec_session_id,
+        origin_spec_snapshot_id,
+        external_provider,
+        external_id,
+        external_key,
+        external_url,
+        external_metadata_json,
         created_at,
         updated_at
       )
@@ -2013,8 +2038,18 @@ const migrateChatSessionsUsageSnapshotTable = () => {
         skills_json,
         agent_status,
         agent_log,
+        ${resolveColumn('agent_message_id')},
+        ${resolveColumn('previous_agent_log')},
+        ${resolveColumn('previous_agent_message_id')},
         streaming_response,
+        ${resolveColumn('post_build_source_run_id')},
+        ${resolveColumn('resume_source_run_id')},
+        ${resolveColumn('target_kind')},
+        ${resolveColumn('target_bundle_id')},
+        ${resolveColumn('target_branch_snapshot')},
+        ${resolveColumn('target_label_snapshot')},
         claude_session_id,
+        ${resolveColumn('codex_session_id')},
         opencode_session_id,
         ${resolveColumn('usage_snapshot_context_window', 'latest_turn_context_window')},
         ${resolveColumn('usage_snapshot_max_output_tokens', 'latest_turn_max_output_tokens')},
@@ -2023,6 +2058,14 @@ const migrateChatSessionsUsageSnapshotTable = () => {
         ${resolveColumn('usage_snapshot_output_tokens', 'latest_turn_output_tokens')},
         ${resolveColumn('usage_snapshot_cache_read_tokens', 'latest_turn_cache_read_tokens')},
         ${resolveColumn('usage_snapshot_reasoning_tokens', 'latest_turn_reasoning_tokens')},
+        ${resolveColumn('usage_snapshot_cost')},
+        ${resolveColumn('origin_spec_session_id')},
+        ${resolveColumn('origin_spec_snapshot_id')},
+        ${resolveColumn('external_provider')},
+        ${resolveColumn('external_id')},
+        ${resolveColumn('external_key')},
+        ${resolveColumn('external_url')},
+        ${resolveColumn('external_metadata_json')},
         created_at,
         updated_at
       FROM chat_sessions
@@ -2040,6 +2083,33 @@ const migrateChatSessionsUsageSnapshotTable = () => {
     }
 };
 migrateChatSessionsUsageSnapshotTable();
+db.exec(`
+  CREATE UNIQUE INDEX IF NOT EXISTS idx_chat_sessions_post_build_source
+  ON chat_sessions(post_build_source_run_id)
+  WHERE post_build_source_run_id IS NOT NULL
+`);
+db.exec(`
+  CREATE TRIGGER IF NOT EXISTS reject_attachment_insert_without_active_project
+  BEFORE INSERT ON attachments
+  WHEN NOT EXISTS (
+    SELECT 1
+    FROM chat_sessions
+    INNER JOIN projects ON projects.id = chat_sessions.project_id
+    WHERE NEW.owner_type = 'chat'
+      AND chat_sessions.id = NEW.owner_session_id
+      AND projects.deletion_started_at IS NULL
+    UNION ALL
+    SELECT 1
+    FROM spec_sessions
+    INNER JOIN projects ON projects.id = spec_sessions.project_id
+    WHERE NEW.owner_type = 'spec'
+      AND spec_sessions.id = NEW.owner_session_id
+      AND projects.deletion_started_at IS NULL
+  )
+  BEGIN
+    SELECT RAISE(ABORT, 'Attachment owner project was not found or is being deleted');
+  END;
+`);
 const migrateProjectMemorySuggestionsTable = () => {
     const columns = db.prepare('PRAGMA table_info(project_memory_suggestions)').all();
     if (columns.length === 0) {
@@ -2695,6 +2765,15 @@ db.exec(`
     service_snapshot_json            TEXT NOT NULL,
     placement_json                   TEXT,
     interruption_scope               TEXT,
+    intended_status                  TEXT,
+    intended_event_type              TEXT,
+    intended_message                 TEXT,
+    cleanup_claim_id                 TEXT,
+    cleanup_claimed_at               DATETIME,
+    cleanup_attempts                 INTEGER NOT NULL DEFAULT 0,
+    cleanup_retry_at                 DATETIME,
+    cleanup_error_message            TEXT,
+    force_released_at                DATETIME,
     created_at                       DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
     started_at                       DATETIME,
     completed_at                     DATETIME,
@@ -2712,7 +2791,11 @@ db.exec(`
     CHECK (environment_revision IS NULL OR environment_revision >= 1),
     CHECK (length(CAST(service_snapshot_json AS BLOB)) BETWEEN 2 AND 16384),
     CHECK (placement_json IS NULL OR length(CAST(placement_json AS BLOB)) BETWEEN 2 AND 16384),
-    CHECK (interruption_scope IS NULL OR interruption_scope IN ('local_processes', 'whole_environment'))
+    CHECK (interruption_scope IS NULL OR interruption_scope IN ('local_processes', 'whole_environment')),
+    CHECK (intended_status IS NULL OR intended_status IN ('completed', 'failed', 'cancelled', 'interrupted')),
+    CHECK ((cleanup_claim_id IS NULL) = (cleanup_claimed_at IS NULL)),
+    CHECK (cleanup_attempts >= 0),
+    CHECK (cleanup_error_message IS NULL OR length(cleanup_error_message) <= 4000)
   );
 
   CREATE UNIQUE INDEX IF NOT EXISTS idx_active_service_run_context
@@ -2722,6 +2805,15 @@ db.exec(`
   CREATE INDEX IF NOT EXISTS idx_service_run_profile
     ON service_run_details(project_id, execution_profile_revision_id, created_at);
 `);
+ensureColumn('service_run_details', 'intended_status', 'TEXT');
+ensureColumn('service_run_details', 'intended_event_type', 'TEXT');
+ensureColumn('service_run_details', 'intended_message', 'TEXT');
+ensureColumn('service_run_details', 'cleanup_claim_id', 'TEXT');
+ensureColumn('service_run_details', 'cleanup_claimed_at', 'DATETIME');
+ensureColumn('service_run_details', 'cleanup_attempts', 'INTEGER NOT NULL DEFAULT 0');
+ensureColumn('service_run_details', 'cleanup_retry_at', 'DATETIME');
+ensureColumn('service_run_details', 'cleanup_error_message', 'TEXT');
+ensureColumn('service_run_details', 'force_released_at', 'DATETIME');
 const executionEnvironmentStates = "'queued', 'preparing', 'ready', 'running', 'stopped', 'retiring', 'cleanup_pending', 'retired', 'failed', 'unavailable'";
 db.exec(`
   CREATE TABLE IF NOT EXISTS execution_environments (
@@ -2789,7 +2881,7 @@ db.exec(`
     CHECK ((template_identity IS NULL) <> (template_digest IS NULL)),
     CHECK (template_identity IS NULL OR length(CAST(template_identity AS BLOB)) BETWEEN 1 AND 500),
     CHECK (template_digest IS NULL OR length(CAST(template_digest AS BLOB)) BETWEEN 1 AND 500),
-    CHECK (agent_identity IS NULL OR agent_identity IN ('opencode', 'claude')),
+    CHECK (agent_identity IS NULL OR agent_identity IN ('opencode', 'claude', 'codex')),
     CHECK (length(CAST(compatible_agents_json AS BLOB)) BETWEEN 1 AND 100),
     CHECK (length(CAST(capabilities_json AS BLOB)) BETWEEN 2 AND 16384),
     CHECK (lifecycle_state IN (${executionEnvironmentStates})),
@@ -2920,6 +3012,63 @@ db.exec(`
     SELECT RAISE(ABORT, 'Execution environment run binding identity is immutable');
   END;
 `);
+const widenExecutionEnvironmentAgentIdentityCheck = () => {
+    const tableSql = db.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'execution_environments'").get()?.sql ?? '';
+    const agentIdentityCheck = /agent_identity\s+IN\s*\([^)]*\)/i.exec(tableSql)?.[0] ?? '';
+    if (!agentIdentityCheck || /'codex'/i.test(agentIdentityCheck)) {
+        return;
+    }
+    const widenedTableSql = tableSql.replace(/agent_identity\s+IN\s*\(\s*'opencode'\s*,\s*'claude'\s*\)/i, "agent_identity IN ('opencode', 'claude', 'codex')");
+    if (widenedTableSql === tableSql) {
+        throw new Error('Unable to widen execution environment agent identity constraint');
+    }
+    const replacementTableSql = widenedTableSql.replace(/CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:"execution_environments"|execution_environments)/i, 'CREATE TABLE execution_environments_agent_identity_v2');
+    const columns = db.prepare('PRAGMA table_info(execution_environments)').all()
+        .map(column => `"${column.name.replaceAll('"', '""')}"`)
+        .join(', ');
+    const schemaObjects = db.prepare(`
+    SELECT type, name, sql FROM sqlite_master
+    WHERE sql IS NOT NULL AND (
+      (type = 'index' AND tbl_name = 'execution_environments')
+      OR (type = 'trigger' AND instr(lower(sql), 'execution_environments') > 0)
+    )
+    ORDER BY type, name
+  `).all();
+    db.pragma('foreign_keys = OFF');
+    try {
+        db.exec('BEGIN');
+        for (const object of schemaObjects) {
+            if (object.type === 'trigger') {
+                db.exec(`DROP TRIGGER "${object.name.replaceAll('"', '""')}"`);
+            }
+        }
+        db.exec(replacementTableSql);
+        db.exec(`
+      INSERT INTO execution_environments_agent_identity_v2 (${columns})
+      SELECT ${columns} FROM execution_environments
+    `);
+        db.exec('DROP TABLE execution_environments');
+        db.exec('ALTER TABLE execution_environments_agent_identity_v2 RENAME TO execution_environments');
+        for (const object of schemaObjects) {
+            db.exec(object.sql);
+        }
+        const violations = db.prepare('PRAGMA foreign_key_check').all();
+        if (violations.length > 0) {
+            throw new Error('Execution environment agent identity migration violated foreign keys');
+        }
+        db.exec('COMMIT');
+    }
+    catch (error) {
+        if (db.inTransaction) {
+            db.exec('ROLLBACK');
+        }
+        throw error;
+    }
+    finally {
+        db.pragma('foreign_keys = ON');
+    }
+};
+widenExecutionEnvironmentAgentIdentityCheck();
 ensureColumn('execution_environments', 'execution_profile_revision_id', 'TEXT');
 ensureColumn('execution_environments', 'execution_profile_fingerprint', 'TEXT');
 ensureColumn('execution_environments', 'credential_requirements_fingerprint', 'TEXT');
@@ -2932,6 +3081,7 @@ ensureColumn('execution_environments', 'operation_claimed_at', 'DATETIME');
 ensureColumn('execution_environment_run_bindings', 'execution_profile_fingerprint', 'TEXT');
 ensureColumn('execution_environment_run_bindings', 'authority_json', 'TEXT');
 ensureColumn('execution_environment_run_bindings', 'placement_json', 'TEXT');
+db.exec('DROP TRIGGER IF EXISTS protect_service_project_target');
 db.exec(`
   CREATE VIEW IF NOT EXISTS active_project_service_authorities AS
   SELECT run.id AS execution_run_id, run.project_id
@@ -3102,7 +3252,10 @@ db.exec(`
 
   CREATE TRIGGER IF NOT EXISTS protect_service_project_target
   BEFORE UPDATE OF active_target_kind, active_target_bundle_id ON projects
-  WHEN EXISTS (SELECT 1 FROM active_project_service_authorities WHERE project_id = OLD.id)
+  WHEN EXISTS (
+      SELECT 1 FROM active_project_service_authorities active
+      JOIN execution_runs run ON run.id = active.execution_run_id
+      WHERE active.project_id = OLD.id AND (run.source_kind IS NULL OR run.source_kind <> 'ticket'))
     OR OLD.deletion_started_at IS NOT NULL
   BEGIN
     SELECT RAISE(ABORT, 'Cannot change project target while service authority or deletion is active');