agent-valley 2.3.0 → 3.0.0

package/README.md

@@ -90,9 +90,10 @@ bun av down               # Stop background daemon
 bun av status             # Query orchestrator status
 bun av top                # Live actor status monitor
 bun av logs               # Tail dashboard logs (-n for line count)
-bun av login              # Login to team (Supabase auth)
+bun av login              # Verify and save an opaque AV user team token
 bun av logout             # Logout from team
 bun av invite             # Copy team config to clipboard
+bun av team --help        # Central-server team administration and legacy data import
 bun av order --help       # Give a Chief Director a goal; --verify supplies an optional trusted command
 bun av missions           # List saved local Chief Director orders
 bun av missions --watch   # Resume eligible saved orders and scheduled observations
@@ -155,12 +156,16 @@ server:
 
 # Team Dashboard (optional)
 team:
-  supabase_url: https://xxx.supabase.co
-  supabase_anon_key: your-anon-key
-  id: my-team
+  relay_url: https://av.example.com
+  id: 11111111-1111-4111-8111-111111111111
   display_name: my-node
 ```
 
+Workers receive the gateway URL, team UUID and an AV user token through `av login`.
+The central server also configures `team.turso_url` and `team.turso_auth_token_env`
+(default `TURSO_AUTH_TOKEN`). The database token stays on the central server or an
+explicit administration machine. See [team ledger setup and migration](./docs/guides/team-ledger.md).
+
 ### Project Config (`av.yaml`)
 
 ```yaml
@@ -360,7 +365,7 @@ PixiJS-rendered office scene showing real-time actor status:
 - **Operations panel** — dependency blockers, retry reasons and next retry times
 - **System metrics** — CPU, memory, uptime
 - **SSE real-time events** — instant updates on actor.start, actor.done, actor.failed
-- **Team HUD** — multi-node view (requires Supabase config)
+- **Team HUD** — multi-node view through the AV gateway and Turso ledger; the browser polls its local relay every five seconds
 
 ### API Endpoints
 
@@ -373,6 +378,10 @@ PixiJS-rendered office scene showing real-time actor status:
 | `/api/health` | GET | Health check (503 if the orchestrator is unavailable or stopped) |
 | `/api/intervention` | POST | Live actor intervention; local by default, token-authenticated when configured |
 | `/api/metrics` | GET | Prometheus-format metrics (enabled via `observability.prometheus.enabled`) |
+| `/api/team/ledger` | GET | Replayed team state for the local browser; dashboard status authentication applies |
+| `/api/team/session` | GET | Validate an AV team bearer token for `team_id` |
+| `/api/team/relay` | GET | Read team events after a sequence cursor using an AV team bearer token |
+| `/api/team/relay` | POST | Publish a validated event using an AV team bearer token; enforces node ownership |
 
 ---
 

package/dist/assets/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "av",
-  "version": "2.3.0",
+  "version": "3.0.0",
   "description": "Delegate repository goals to Agent Valley and inspect mission progress and verification evidence.",
   "author": {
     "name": "Agent Valley"

package/dist/assets/turso/migrations/0000_team_ledger.sql

@@ -0,0 +1,56 @@
+CREATE TABLE `ledger_events` (
+	`seq` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`team_id` text NOT NULL,
+	`event_id` text NOT NULL,
+	`node_id` text NOT NULL,
+	`user_id` text NOT NULL,
+	`type` text NOT NULL,
+	`payload` text NOT NULL,
+	`client_timestamp` text NOT NULL,
+	`created_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	`source` text DEFAULT 'native' NOT NULL,
+	FOREIGN KEY (`team_id`) REFERENCES `teams`(`id`) ON UPDATE no action ON DELETE no action,
+	CONSTRAINT "ledger_event_id_length" CHECK(length("ledger_events"."event_id") between 1 and 200),
+	CONSTRAINT "ledger_event_type" CHECK("ledger_events"."type" in ('node.join','node.reconnect','node.leave','agent.start','agent.done','agent.failed','agent.cancelled')),
+	CONSTRAINT "ledger_payload_object" CHECK(json_valid("ledger_events"."payload") and json_type("ledger_events"."payload") = 'object'),
+	CONSTRAINT "ledger_source" CHECK("ledger_events"."source" in ('native','supabase-import')),
+	CONSTRAINT "ledger_native_node_owner" CHECK("ledger_events"."source" = 'supabase-import' or (lower(substr("ledger_events"."node_id", 1, length("ledger_events"."user_id") + 1)) = lower("ledger_events"."user_id") || ':' and length("ledger_events"."node_id") > length("ledger_events"."user_id") + 1))
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `ledger_events_team_event_unique` ON `ledger_events` (`team_id`,`event_id`);--> statement-breakpoint
+CREATE INDEX `idx_ledger_team_seq` ON `ledger_events` (`team_id`,`seq`);--> statement-breakpoint
+CREATE TABLE `team_members` (
+	`team_id` text NOT NULL,
+	`user_id` text NOT NULL,
+	`role` text NOT NULL,
+	`display_name` text NOT NULL,
+	`joined_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	PRIMARY KEY(`team_id`, `user_id`),
+	FOREIGN KEY (`team_id`) REFERENCES `teams`(`id`) ON UPDATE no action ON DELETE cascade,
+	CONSTRAINT "team_members_role" CHECK("team_members"."role" in ('owner', 'admin', 'member')),
+	CONSTRAINT "team_members_display_name_length" CHECK(length(trim("team_members"."display_name")) between 1 and 200)
+);
+--> statement-breakpoint
+CREATE INDEX `idx_team_members_user` ON `team_members` (`user_id`);--> statement-breakpoint
+CREATE TABLE `team_tokens` (
+	`token_hash` text PRIMARY KEY NOT NULL,
+	`team_id` text NOT NULL,
+	`user_id` text NOT NULL,
+	`expires_at` integer NOT NULL,
+	`revoked_at` integer,
+	FOREIGN KEY (`team_id`,`user_id`) REFERENCES `team_members`(`team_id`,`user_id`) ON UPDATE no action ON DELETE cascade,
+	CONSTRAINT "team_tokens_hash_length" CHECK(length("team_tokens"."token_hash") = 64),
+	CONSTRAINT "team_tokens_expiry" CHECK("team_tokens"."expires_at" > 0)
+);
+--> statement-breakpoint
+CREATE INDEX `idx_team_tokens_member` ON `team_tokens` (`team_id`,`user_id`);--> statement-breakpoint
+CREATE TABLE `teams` (
+	`id` text PRIMARY KEY NOT NULL,
+	`name` text NOT NULL,
+	`slug` text NOT NULL,
+	`created_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	CONSTRAINT "teams_name_length" CHECK(length(trim("teams"."name")) between 1 and 200),
+	CONSTRAINT "teams_slug_length" CHECK(length(trim("teams"."slug")) between 1 and 200)
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `teams_slug_unique` ON `teams` (`slug`);

package/dist/assets/turso/migrations/meta/_journal.json

@@ -0,0 +1,13 @@
+{
+  "version": "7",
+  "dialect": "sqlite",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "6",
+      "when": 1792540298327,
+      "tag": "0000_team_ledger",
+      "breakpoints": true
+    }
+  ]
+}