create-windy 0.1.0

package/template/packages/database/drizzle/0006_groovy_overlord.sql

@@ -0,0 +1,146 @@
+-- Preserve every prototype row under an explicit legacy namespace before creating V1 tables.
+ALTER TABLE "license_issue_records" RENAME TO "legacy_license_issue_records";--> statement-breakpoint
+ALTER TABLE "license_projects" RENAME TO "legacy_license_projects";--> statement-breakpoint
+ALTER TABLE "licenses" RENAME TO "legacy_licenses";--> statement-breakpoint
+ALTER INDEX "uk_license_issue_license_id" RENAME TO "uk_legacy_license_issue_license_id";--> statement-breakpoint
+ALTER INDEX "idx_license_issue_project" RENAME TO "idx_legacy_license_issue_project";--> statement-breakpoint
+ALTER INDEX "idx_license_issue_operator" RENAME TO "idx_legacy_license_issue_operator";--> statement-breakpoint
+ALTER INDEX "idx_license_issue_machine" RENAME TO "idx_legacy_license_issue_machine";--> statement-breakpoint
+ALTER INDEX "idx_license_issue_key" RENAME TO "idx_legacy_license_issue_key";--> statement-breakpoint
+ALTER INDEX "idx_license_issue_status" RENAME TO "idx_legacy_license_issue_status";--> statement-breakpoint
+ALTER INDEX "idx_license_issue_issued" RENAME TO "idx_legacy_license_issue_issued";--> statement-breakpoint
+ALTER INDEX "uk_license_projects_code" RENAME TO "uk_legacy_license_projects_code";--> statement-breakpoint
+ALTER INDEX "idx_license_projects_status" RENAME TO "idx_legacy_license_projects_status";--> statement-breakpoint
+ALTER INDEX "idx_licenses_machine" RENAME TO "idx_legacy_licenses_machine";--> statement-breakpoint
+ALTER INDEX "idx_licenses_key" RENAME TO "idx_legacy_licenses_key";--> statement-breakpoint
+ALTER INDEX "idx_licenses_status" RENAME TO "idx_legacy_licenses_status";--> statement-breakpoint
+CREATE TABLE "license_customers" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"code" varchar(80) NOT NULL,
+	"name" varchar(160) NOT NULL,
+	"status" varchar(32) DEFAULT 'active' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" varchar(64) NOT NULL,
+	"archived_at" timestamp with time zone,
+	"archived_by" varchar(64)
+);--> statement-breakpoint
+CREATE TABLE "license_projects" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"customer_id" varchar(64) NOT NULL,
+	"code" varchar(80) NOT NULL,
+	"name" varchar(160) NOT NULL,
+	"status" varchar(32) DEFAULT 'active' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" varchar(64) NOT NULL,
+	"archived_at" timestamp with time zone,
+	"archived_by" varchar(64)
+);--> statement-breakpoint
+CREATE TABLE "license_contract_versions" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"project_id" varchar(64) NOT NULL,
+	"contract_number" varchar(120) NOT NULL,
+	"version" varchar(40) NOT NULL,
+	"edition_label" varchar(80),
+	"entitlements" jsonb DEFAULT '[]'::jsonb NOT NULL,
+	"status" varchar(32) DEFAULT 'active' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" varchar(64) NOT NULL,
+	"archived_at" timestamp with time zone,
+	"archived_by" varchar(64)
+);--> statement-breakpoint
+CREATE TABLE "license_nodes" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"project_id" varchar(64) NOT NULL,
+	"code" varchar(80) NOT NULL,
+	"name" varchar(160) NOT NULL,
+	"purpose" varchar(160),
+	"machine_code" varchar(256) NOT NULL,
+	"status" varchar(32) DEFAULT 'active' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" varchar(64) NOT NULL,
+	"archived_at" timestamp with time zone,
+	"archived_by" varchar(64)
+);--> statement-breakpoint
+CREATE TABLE "licenses" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"format_version" integer DEFAULT 1 NOT NULL,
+	"product_code" varchar(120) NOT NULL,
+	"customer_id" varchar(64) NOT NULL,
+	"project_id" varchar(64) NOT NULL,
+	"contract_version_id" varchar(64) NOT NULL,
+	"node_id" varchar(64) NOT NULL,
+	"machine_code" varchar(256) NOT NULL,
+	"edition_label" varchar(80),
+	"entitlements" jsonb NOT NULL,
+	"claims" jsonb NOT NULL,
+	"signed_payload" text NOT NULL,
+	"payload_digest" varchar(128) NOT NULL,
+	"public_key_id" varchar(160) NOT NULL,
+	"algorithm" varchar(40) DEFAULT 'ED25519' NOT NULL,
+	"signature" text NOT NULL,
+	"issued_at" timestamp with time zone NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"issued_by" varchar(64) NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "ck_licenses_format_v1" CHECK ("licenses"."format_version" = 1),
+	CONSTRAINT "ck_licenses_expiry_after_issue" CHECK ("licenses"."expires_at" > "licenses"."issued_at")
+);--> statement-breakpoint
+CREATE TABLE "license_replacements" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"replaced_license_id" varchar(64) NOT NULL,
+	"replacement_license_id" varchar(64) NOT NULL,
+	"reason" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	CONSTRAINT "ck_license_replacements_distinct" CHECK ("license_replacements"."replaced_license_id" <> "license_replacements"."replacement_license_id")
+);--> statement-breakpoint
+CREATE TABLE "license_events" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"license_id" varchar(64) NOT NULL,
+	"type" varchar(80) NOT NULL,
+	"actor_id" varchar(64) NOT NULL,
+	"occurred_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"payload" jsonb NOT NULL
+);--> statement-breakpoint
+ALTER TABLE "license_projects" ADD CONSTRAINT "license_projects_customer_id_license_customers_id_fk" FOREIGN KEY ("customer_id") REFERENCES "public"."license_customers"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "license_contract_versions" ADD CONSTRAINT "license_contract_versions_project_id_license_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."license_projects"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "license_nodes" ADD CONSTRAINT "license_nodes_project_id_license_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."license_projects"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "licenses" ADD CONSTRAINT "licenses_customer_id_license_customers_id_fk" FOREIGN KEY ("customer_id") REFERENCES "public"."license_customers"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "licenses" ADD CONSTRAINT "licenses_project_id_license_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."license_projects"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "licenses" ADD CONSTRAINT "licenses_contract_version_id_license_contract_versions_id_fk" FOREIGN KEY ("contract_version_id") REFERENCES "public"."license_contract_versions"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "licenses" ADD CONSTRAINT "licenses_node_id_license_nodes_id_fk" FOREIGN KEY ("node_id") REFERENCES "public"."license_nodes"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "license_replacements" ADD CONSTRAINT "license_replacements_replaced_license_id_licenses_id_fk" FOREIGN KEY ("replaced_license_id") REFERENCES "public"."licenses"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "license_replacements" ADD CONSTRAINT "license_replacements_replacement_license_id_licenses_id_fk" FOREIGN KEY ("replacement_license_id") REFERENCES "public"."licenses"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "license_events" ADD CONSTRAINT "license_events_license_id_licenses_id_fk" FOREIGN KEY ("license_id") REFERENCES "public"."licenses"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_customers_code" ON "license_customers" USING btree ("code");--> statement-breakpoint
+CREATE INDEX "idx_license_customers_status" ON "license_customers" USING btree ("status");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_projects_customer_code" ON "license_projects" USING btree ("customer_id","code");--> statement-breakpoint
+CREATE INDEX "idx_license_projects_customer" ON "license_projects" USING btree ("customer_id");--> statement-breakpoint
+CREATE INDEX "idx_license_projects_status" ON "license_projects" USING btree ("status");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_contract_project_number_version" ON "license_contract_versions" USING btree ("project_id","contract_number","version");--> statement-breakpoint
+CREATE INDEX "idx_license_contract_project" ON "license_contract_versions" USING btree ("project_id");--> statement-breakpoint
+CREATE INDEX "idx_license_contract_status" ON "license_contract_versions" USING btree ("status");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_nodes_project_code" ON "license_nodes" USING btree ("project_id","code");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_nodes_machine" ON "license_nodes" USING btree ("machine_code");--> statement-breakpoint
+CREATE INDEX "idx_license_nodes_project" ON "license_nodes" USING btree ("project_id");--> statement-breakpoint
+CREATE INDEX "idx_license_nodes_status" ON "license_nodes" USING btree ("status");--> statement-breakpoint
+CREATE INDEX "idx_license_v1_customer" ON "licenses" USING btree ("customer_id");--> statement-breakpoint
+CREATE INDEX "idx_license_v1_project" ON "licenses" USING btree ("project_id");--> statement-breakpoint
+CREATE INDEX "idx_license_v1_contract" ON "licenses" USING btree ("contract_version_id");--> statement-breakpoint
+CREATE INDEX "idx_license_v1_node" ON "licenses" USING btree ("node_id");--> statement-breakpoint
+CREATE INDEX "idx_license_v1_machine_issued" ON "licenses" USING btree ("machine_code","issued_at");--> statement-breakpoint
+CREATE INDEX "idx_license_v1_key" ON "licenses" USING btree ("public_key_id");--> statement-breakpoint
+CREATE INDEX "idx_license_v1_expires" ON "licenses" USING btree ("expires_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_replacements_old" ON "license_replacements" USING btree ("replaced_license_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_replacements_new" ON "license_replacements" USING btree ("replacement_license_id");--> statement-breakpoint
+CREATE INDEX "idx_license_events_license_time" ON "license_events" USING btree ("license_id","occurred_at");--> statement-breakpoint
+CREATE INDEX "idx_license_events_type_time" ON "license_events" USING btree ("type","occurred_at");--> statement-breakpoint
+CREATE INDEX "idx_license_events_actor_time" ON "license_events" USING btree ("actor_id","occurred_at");

package/template/packages/database/drizzle/0007_chubby_may_parker.sql

@@ -0,0 +1,9 @@
+WITH ranked_active_keys AS (
+	SELECT "id", row_number() OVER (ORDER BY "created_at" DESC, "id" DESC) AS "rank"
+	FROM "license_keys"
+	WHERE "status" = 'active'
+)
+UPDATE "license_keys"
+SET "status" = 'retired', "retired_at" = now(), "retired_by" = 'migration-0007'
+WHERE "id" IN (SELECT "id" FROM ranked_active_keys WHERE "rank" > 1);--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_keys_single_active" ON "license_keys" USING btree ("status") WHERE "license_keys"."status" = 'active';

package/template/packages/database/drizzle/0008_secret_toxin.sql

@@ -0,0 +1,21 @@
+CREATE TABLE "license_operator_sessions" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"operator_id" varchar(64) NOT NULL,
+	"token_hash" varchar(128) NOT NULL,
+	"status" varchar(32) DEFAULT 'active' NOT NULL,
+	"issued_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"revoked_at" timestamp with time zone,
+	"last_seen_at" timestamp with time zone,
+	"ip" varchar(80),
+	"user_agent" text
+);
+--> statement-breakpoint
+ALTER TABLE "license_operators" ALTER COLUMN "token_hash" DROP NOT NULL;--> statement-breakpoint
+ALTER TABLE "license_operators" ADD COLUMN "password_hash" text;--> statement-breakpoint
+ALTER TABLE "license_operators" ADD COLUMN "role" varchar(40) DEFAULT 'readonly' NOT NULL;--> statement-breakpoint
+ALTER TABLE "license_operator_sessions" ADD CONSTRAINT "license_operator_sessions_operator_id_license_operators_id_fk" FOREIGN KEY ("operator_id") REFERENCES "public"."license_operators"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_operator_sessions_token_hash" ON "license_operator_sessions" USING btree ("token_hash");--> statement-breakpoint
+CREATE INDEX "idx_license_operator_sessions_operator" ON "license_operator_sessions" USING btree ("operator_id");--> statement-breakpoint
+CREATE INDEX "idx_license_operator_sessions_status" ON "license_operator_sessions" USING btree ("status");--> statement-breakpoint
+CREATE INDEX "idx_license_operator_sessions_expires" ON "license_operator_sessions" USING btree ("expires_at");

package/template/packages/database/drizzle/0009_ambiguous_adam_warlock.sql

@@ -0,0 +1,46 @@
+CREATE TABLE "license_governance_events" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"type" varchar(100) NOT NULL,
+	"resource_type" varchar(80) NOT NULL,
+	"resource_id" varchar(160) NOT NULL,
+	"actor_id" varchar(64) NOT NULL,
+	"occurred_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"payload" jsonb NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "license_key_compatibilities" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"product_code" varchar(120) NOT NULL,
+	"software_version" varchar(80) NOT NULL,
+	"public_key_id" varchar(160) NOT NULL,
+	"declared_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"declared_by" varchar(64) NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "license_keys" ADD COLUMN "retain_until" timestamp with time zone;--> statement-breakpoint
+ALTER TABLE "licenses" ADD COLUMN "target_software_version" varchar(80);--> statement-breakpoint
+ALTER TABLE "license_key_compatibilities" ADD CONSTRAINT "license_key_compatibilities_public_key_id_license_keys_key_id_fk" FOREIGN KEY ("public_key_id") REFERENCES "public"."license_keys"("key_id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_license_governance_resource_time" ON "license_governance_events" USING btree ("resource_type","resource_id","occurred_at");--> statement-breakpoint
+CREATE INDEX "idx_license_governance_type_time" ON "license_governance_events" USING btree ("type","occurred_at");--> statement-breakpoint
+CREATE INDEX "idx_license_governance_actor_time" ON "license_governance_events" USING btree ("actor_id","occurred_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_key_compatibility" ON "license_key_compatibilities" USING btree ("product_code","software_version","public_key_id");--> statement-breakpoint
+CREATE INDEX "idx_license_key_compatibility_version" ON "license_key_compatibilities" USING btree ("product_code","software_version");--> statement-breakpoint
+CREATE INDEX "idx_license_key_compatibility_key" ON "license_key_compatibilities" USING btree ("public_key_id");--> statement-breakpoint
+CREATE FUNCTION "reject_license_immutable_mutation"() RETURNS trigger AS $$
+BEGIN
+	RAISE EXCEPTION 'License immutable record % does not allow %', TG_TABLE_NAME, TG_OP
+		USING ERRCODE = '55000';
+END;
+$$ LANGUAGE plpgsql;--> statement-breakpoint
+CREATE TRIGGER "trg_licenses_immutable" BEFORE UPDATE OR DELETE ON "licenses"
+FOR EACH ROW EXECUTE FUNCTION "reject_license_immutable_mutation"();--> statement-breakpoint
+CREATE TRIGGER "trg_license_events_append_only" BEFORE UPDATE OR DELETE ON "license_events"
+FOR EACH ROW EXECUTE FUNCTION "reject_license_immutable_mutation"();--> statement-breakpoint
+CREATE TRIGGER "trg_license_replacements_append_only" BEFORE UPDATE OR DELETE ON "license_replacements"
+FOR EACH ROW EXECUTE FUNCTION "reject_license_immutable_mutation"();--> statement-breakpoint
+CREATE TRIGGER "trg_license_governance_events_append_only" BEFORE UPDATE OR DELETE ON "license_governance_events"
+FOR EACH ROW EXECUTE FUNCTION "reject_license_immutable_mutation"();--> statement-breakpoint
+CREATE TRIGGER "trg_license_key_compatibilities_append_only" BEFORE UPDATE OR DELETE ON "license_key_compatibilities"
+FOR EACH ROW EXECUTE FUNCTION "reject_license_immutable_mutation"();--> statement-breakpoint
+CREATE TRIGGER "trg_license_keys_no_delete" BEFORE DELETE ON "license_keys"
+FOR EACH ROW EXECUTE FUNCTION "reject_license_immutable_mutation"();

package/template/packages/database/drizzle/0010_complex_orphan.sql

@@ -0,0 +1,42 @@
+CREATE TABLE "scheduled_task_runs" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"task_key" varchar(160) NOT NULL,
+	"trigger" varchar(32) NOT NULL,
+	"status" varchar(32) NOT NULL,
+	"attempt" integer DEFAULT 1 NOT NULL,
+	"requested_by" varchar(64) NOT NULL,
+	"retry_of_run_id" varchar(64),
+	"scheduled_for" timestamp with time zone NOT NULL,
+	"started_at" timestamp with time zone NOT NULL,
+	"finished_at" timestamp with time zone,
+	"next_attempt_at" timestamp with time zone,
+	"error" text,
+	"result" jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "scheduled_tasks" (
+	"key" varchar(160) PRIMARY KEY NOT NULL,
+	"label" varchar(160) NOT NULL,
+	"description" text,
+	"feature_key" varchar(160) NOT NULL,
+	"permission_key" varchar(160) NOT NULL,
+	"interval_seconds" integer NOT NULL,
+	"max_attempts" integer DEFAULT 1 NOT NULL,
+	"retry_delay_seconds" integer DEFAULT 60 NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"status" varchar(32) DEFAULT 'active' NOT NULL,
+	"next_run_at" timestamp with time zone NOT NULL,
+	"last_run_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" varchar(64) NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "scheduled_task_runs" ADD CONSTRAINT "scheduled_task_runs_task_key_scheduled_tasks_key_fk" FOREIGN KEY ("task_key") REFERENCES "public"."scheduled_tasks"("key") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_scheduled_task_runs_single_running" ON "scheduled_task_runs" USING btree ("task_key") WHERE "scheduled_task_runs"."status" = 'running';--> statement-breakpoint
+CREATE INDEX "idx_scheduled_task_runs_task_started" ON "scheduled_task_runs" USING btree ("task_key","started_at");--> statement-breakpoint
+CREATE INDEX "idx_scheduled_task_runs_retry_due" ON "scheduled_task_runs" USING btree ("status","next_attempt_at");--> statement-breakpoint
+CREATE INDEX "idx_scheduled_tasks_due" ON "scheduled_tasks" USING btree ("status","enabled","next_run_at");--> statement-breakpoint
+CREATE INDEX "idx_scheduled_tasks_feature" ON "scheduled_tasks" USING btree ("feature_key");

package/template/packages/database/drizzle/0011_lowly_maria_hill.sql

@@ -0,0 +1,42 @@
+CREATE TABLE "bulk_data_artifacts" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"job_id" varchar(64) NOT NULL,
+	"kind" varchar(24) NOT NULL,
+	"filename" varchar(240) NOT NULL,
+	"content_type" varchar(120) NOT NULL,
+	"content" text NOT NULL,
+	"sha256" varchar(64) NOT NULL,
+	"byte_size" integer NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "bulk_data_jobs" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"kind" varchar(24) NOT NULL,
+	"resource" varchar(80) NOT NULL,
+	"mode" varchar(24),
+	"status" varchar(32) NOT NULL,
+	"idempotency_key" varchar(160) NOT NULL,
+	"request_digest" varchar(64) NOT NULL,
+	"requested_by" varchar(64) NOT NULL,
+	"total_rows" integer DEFAULT 0 NOT NULL,
+	"processed_rows" integer DEFAULT 0 NOT NULL,
+	"succeeded_rows" integer DEFAULT 0 NOT NULL,
+	"failed_rows" integer DEFAULT 0 NOT NULL,
+	"attempt" integer DEFAULT 0 NOT NULL,
+	"max_attempts" integer DEFAULT 3 NOT NULL,
+	"next_attempt_at" timestamp with time zone,
+	"error" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"started_at" timestamp with time zone,
+	"finished_at" timestamp with time zone,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "bulk_data_artifacts" ADD CONSTRAINT "bulk_data_artifacts_job_id_bulk_data_jobs_id_fk" FOREIGN KEY ("job_id") REFERENCES "public"."bulk_data_jobs"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_bulk_data_artifacts_job_kind" ON "bulk_data_artifacts" USING btree ("job_id","kind");--> statement-breakpoint
+CREATE INDEX "idx_bulk_data_artifacts_expiry" ON "bulk_data_artifacts" USING btree ("expires_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_bulk_data_jobs_idempotency" ON "bulk_data_jobs" USING btree ("requested_by","kind","resource","idempotency_key");--> statement-breakpoint
+CREATE INDEX "idx_bulk_data_jobs_claim" ON "bulk_data_jobs" USING btree ("status","next_attempt_at","created_at");--> statement-breakpoint
+CREATE INDEX "idx_bulk_data_jobs_actor_created" ON "bulk_data_jobs" USING btree ("requested_by","created_at");

package/template/packages/database/drizzle/0012_serious_marvex.sql

@@ -0,0 +1,11 @@
+CREATE TABLE "platform_branding_settings" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"software_name" varchar(120) NOT NULL,
+	"logo_url" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" varchar(64) NOT NULL,
+	"deleted_at" timestamp with time zone,
+	"deleted_by" varchar(64)
+);

package/template/packages/database/drizzle/0013_mysterious_miek.sql

@@ -0,0 +1,48 @@
+CREATE TABLE "license_versions" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"key" varchar(80) NOT NULL,
+	"name" varchar(120) NOT NULL,
+	"description" text,
+	"status" varchar(32) DEFAULT 'active' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" varchar(64) NOT NULL,
+	"archived_at" timestamp with time zone,
+	"archived_by" varchar(64)
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_versions_key" ON "license_versions" USING btree ("key");--> statement-breakpoint
+CREATE INDEX "idx_license_versions_status" ON "license_versions" USING btree ("status");--> statement-breakpoint
+INSERT INTO "license_versions" ("id", "key", "name", "description", "created_by", "updated_by") VALUES
+	('license-version-free-trial', 'free-trial', '免费试用版', '用于评估和有限期试用的 License 版本。', 'migration', 'migration'),
+	('license-version-standard', 'standard', '普通付费版', '面向常规付费客户的 License 版本。', 'migration', 'migration'),
+	('license-version-advanced', 'advanced', '高级付费版', '面向高级付费客户的 License 版本。', 'migration', 'migration')
+ON CONFLICT ("key") DO NOTHING;--> statement-breakpoint
+ALTER TABLE "license_contract_versions" ADD COLUMN "license_version_id" varchar(64);--> statement-breakpoint
+UPDATE "license_contract_versions"
+SET "license_version_id" = CASE
+	WHEN lower(coalesce("edition_label", '')) IN ('enterprise', 'professional', '企业版', '专业版', '高级付费版') THEN 'license-version-advanced'
+	WHEN lower(coalesce("edition_label", '')) IN ('community', 'trial', '社区版', '试用版', '免费试用版') THEN 'license-version-free-trial'
+	ELSE 'license-version-standard'
+END;--> statement-breakpoint
+ALTER TABLE "license_contract_versions" ALTER COLUMN "license_version_id" SET NOT NULL;--> statement-breakpoint
+ALTER TABLE "licenses" ADD COLUMN "license_version_key" varchar(80);--> statement-breakpoint
+ALTER TABLE "licenses" ADD COLUMN "license_version_name" varchar(120);--> statement-breakpoint
+DROP TRIGGER "trg_licenses_immutable" ON "licenses";--> statement-breakpoint
+UPDATE "licenses" AS "license"
+SET
+	"license_version_key" = "version"."key",
+	"license_version_name" = "version"."name"
+FROM "license_contract_versions" AS "contract"
+INNER JOIN "license_versions" AS "version" ON "version"."id" = "contract"."license_version_id"
+WHERE "contract"."id" = "license"."contract_version_id";--> statement-breakpoint
+ALTER TABLE "licenses" ALTER COLUMN "license_version_key" SET NOT NULL;--> statement-breakpoint
+ALTER TABLE "licenses" ALTER COLUMN "license_version_name" SET NOT NULL;--> statement-breakpoint
+ALTER TABLE "license_contract_versions" ADD CONSTRAINT "license_contract_versions_license_version_id_license_versions_id_fk" FOREIGN KEY ("license_version_id") REFERENCES "public"."license_versions"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "license_contract_versions" DROP COLUMN "edition_label";--> statement-breakpoint
+ALTER TABLE "license_contract_versions" DROP COLUMN "entitlements";--> statement-breakpoint
+ALTER TABLE "licenses" DROP COLUMN "edition_label";--> statement-breakpoint
+ALTER TABLE "licenses" DROP COLUMN "entitlements";--> statement-breakpoint
+CREATE TRIGGER "trg_licenses_immutable" BEFORE UPDATE OR DELETE ON "licenses"
+FOR EACH ROW EXECUTE FUNCTION "reject_license_immutable_mutation"();

package/template/packages/database/drizzle/0014_graceful_husk.sql

@@ -0,0 +1 @@
+ALTER TABLE "platform_branding_settings" ADD COLUMN "description" varchar(500);

package/template/packages/database/drizzle/0015_illegal_jazinda.sql

@@ -0,0 +1,29 @@
+CREATE TABLE "notification_reads" (
+	"notification_id" varchar(64) NOT NULL,
+	"user_id" varchar(64) NOT NULL,
+	"read_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "notification_reads_notification_id_user_id_pk" PRIMARY KEY("notification_id","user_id")
+);
+--> statement-breakpoint
+CREATE TABLE "platform_notifications" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"title" varchar(120) NOT NULL,
+	"summary" varchar(240) NOT NULL,
+	"content" text NOT NULL,
+	"category" varchar(40) NOT NULL,
+	"status" varchar(32) NOT NULL,
+	"published_at" timestamp with time zone NOT NULL,
+	"archived_at" timestamp with time zone,
+	"archived_by" varchar(64),
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" varchar(64) NOT NULL,
+	"deleted_at" timestamp with time zone,
+	"deleted_by" varchar(64)
+);
+--> statement-breakpoint
+ALTER TABLE "notification_reads" ADD CONSTRAINT "notification_reads_notification_id_platform_notifications_id_fk" FOREIGN KEY ("notification_id") REFERENCES "public"."platform_notifications"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "notification_reads" ADD CONSTRAINT "notification_reads_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_notification_reads_user" ON "notification_reads" USING btree ("user_id","read_at");--> statement-breakpoint
+CREATE INDEX "idx_platform_notifications_status_published" ON "platform_notifications" USING btree ("status","published_at");

package/template/packages/database/drizzle/0016_seed_platform_roles.sql

@@ -0,0 +1,21 @@
+INSERT INTO "roles" (
+  "id", "code", "name", "data_scope", "permission_keys", "menu_keys",
+  "department_ids", "status", "created_by", "updated_by"
+) VALUES
+  ('role_super_admin', 'super-admin', '超级管理员', 'all', '[]'::jsonb, '[]'::jsonb, '[]'::jsonb, 'active', 'system', 'system'),
+  ('role_department_manager', 'department-manager', '部门负责人', 'department-and-children', '[]'::jsonb, '[]'::jsonb, '[]'::jsonb, 'active', 'system', 'system'),
+  ('role_user', 'user', '普通用户', 'self', '[]'::jsonb, '[]'::jsonb, '[]'::jsonb, 'active', 'system', 'system'),
+  ('role_developer', 'developer', '开发运维', 'all', '[]'::jsonb, '[]'::jsonb, '[]'::jsonb, 'active', 'system', 'system')
+ON CONFLICT DO NOTHING;
+--> statement-breakpoint
+UPDATE "users"
+SET
+  "role_ids" = CASE
+    WHEN COALESCE("role_ids", '[]'::jsonb) @> '["role_super_admin"]'::jsonb
+      THEN COALESCE("role_ids", '[]'::jsonb)
+    ELSE COALESCE("role_ids", '[]'::jsonb) || '["role_super_admin"]'::jsonb
+  END,
+  "department_id" = COALESCE("department_id", 'dept_platform'),
+  "updated_at" = now(),
+  "updated_by" = 'system'
+WHERE "id" = 'user_dev_admin';

package/template/packages/database/drizzle/0017_silly_thunderbolt.sql

@@ -0,0 +1,35 @@
+DROP INDEX "uk_license_versions_key";--> statement-breakpoint
+ALTER TABLE "license_versions" ADD COLUMN "project_id" varchar(64);--> statement-breakpoint
+INSERT INTO "license_versions" (
+	"id", "project_id", "key", "name", "description", "status",
+	"created_at", "created_by", "updated_at", "updated_by", "archived_at", "archived_by"
+)
+SELECT
+	'lv_' || md5("project"."id" || ':' || "source"."id"),
+	"project"."id",
+	"source"."key",
+	"source"."name",
+	"source"."description",
+	"source"."status",
+	"source"."created_at",
+	"source"."created_by",
+	"source"."updated_at",
+	"source"."updated_by",
+	"source"."archived_at",
+	"source"."archived_by"
+FROM "license_projects" AS "project"
+CROSS JOIN "license_versions" AS "source"
+WHERE "source"."project_id" IS NULL
+ON CONFLICT ("id") DO NOTHING;--> statement-breakpoint
+UPDATE "license_contract_versions" AS "contract"
+SET "license_version_id" = "project_version"."id"
+FROM "license_versions" AS "source", "license_versions" AS "project_version"
+WHERE "contract"."license_version_id" = "source"."id"
+	AND "source"."project_id" IS NULL
+	AND "project_version"."project_id" = "contract"."project_id"
+	AND "project_version"."key" = "source"."key";--> statement-breakpoint
+DELETE FROM "license_versions" WHERE "project_id" IS NULL;--> statement-breakpoint
+ALTER TABLE "license_versions" ALTER COLUMN "project_id" SET NOT NULL;--> statement-breakpoint
+ALTER TABLE "license_versions" ADD CONSTRAINT "license_versions_project_id_license_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."license_projects"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_license_versions_project_key" ON "license_versions" USING btree ("project_id","key");--> statement-breakpoint
+CREATE INDEX "idx_license_versions_project" ON "license_versions" USING btree ("project_id");

package/template/packages/database/drizzle/0018_cheerful_alex_power.sql

@@ -0,0 +1,22 @@
+CREATE TABLE "work_orders" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"title" varchar(120) NOT NULL,
+	"description" text NOT NULL,
+	"priority" varchar(24) NOT NULL,
+	"workflow_status" varchar(32) NOT NULL,
+	"owner_id" varchar(64) NOT NULL,
+	"department_id" varchar(64),
+	"status" varchar(32) NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_by" varchar(64) NOT NULL,
+	"deleted_at" timestamp with time zone,
+	"deleted_by" varchar(64)
+);
+--> statement-breakpoint
+ALTER TABLE "feature_flags" ADD COLUMN "allowed_license_versions" jsonb;--> statement-breakpoint
+CREATE INDEX "idx_work_orders_owner" ON "work_orders" USING btree ("owner_id");--> statement-breakpoint
+CREATE INDEX "idx_work_orders_department" ON "work_orders" USING btree ("department_id");--> statement-breakpoint
+CREATE INDEX "idx_work_orders_status" ON "work_orders" USING btree ("status");--> statement-breakpoint
+CREATE INDEX "idx_work_orders_workflow" ON "work_orders" USING btree ("workflow_status");

package/template/packages/database/drizzle/0019_omniscient_luckman.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "users" ADD COLUMN "credential_state" varchar(40) DEFAULT 'active' NOT NULL;--> statement-breakpoint
+ALTER TABLE "users" ADD COLUMN "password_changed_at" timestamp with time zone;--> statement-breakpoint
+ALTER TABLE "users" ADD CONSTRAINT "users_credential_state_check" CHECK ("users"."credential_state" in ('active', 'must-change-password'));

package/template/packages/database/drizzle/0020_handy_vertigo.sql

@@ -0,0 +1,18 @@
+CREATE TABLE "module_config_versions" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"module_key" varchar(80) NOT NULL,
+	"version" integer NOT NULL,
+	"values" jsonb NOT NULL,
+	"diff" jsonb NOT NULL,
+	"apply_status" varchar(24) NOT NULL,
+	"apply_error" varchar(500),
+	"rollback_of_version" integer,
+	"reason" varchar(500),
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" varchar(64) NOT NULL,
+	"applied_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_module_config_versions_module_version" ON "module_config_versions" USING btree ("module_key","version");--> statement-breakpoint
+CREATE INDEX "idx_module_config_versions_module_status" ON "module_config_versions" USING btree ("module_key","apply_status");--> statement-breakpoint
+CREATE INDEX "idx_module_config_versions_created_at" ON "module_config_versions" USING btree ("created_at");

package/template/packages/database/drizzle/0021_plain_paladin.sql

@@ -0,0 +1,51 @@
+CREATE TABLE "file_metadata" (
+	"id" varchar(40) PRIMARY KEY NOT NULL,
+	"owner_id" varchar(64) NOT NULL,
+	"purpose" varchar(80) NOT NULL,
+	"filename" varchar(240) NOT NULL,
+	"extension" varchar(24) NOT NULL,
+	"mime_type" varchar(120) NOT NULL,
+	"artifact_ref" varchar(37) NOT NULL,
+	"byte_size" bigint NOT NULL,
+	"sha256" varchar(64) NOT NULL,
+	"expires_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "file_upload_parts" (
+	"session_id" varchar(40) NOT NULL,
+	"part_number" integer NOT NULL,
+	"byte_offset" bigint NOT NULL,
+	"artifact_ref" varchar(37) NOT NULL,
+	"byte_size" bigint NOT NULL,
+	"sha256" varchar(64) NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "file_upload_sessions" (
+	"id" varchar(40) PRIMARY KEY NOT NULL,
+	"owner_id" varchar(64) NOT NULL,
+	"purpose" varchar(80) NOT NULL,
+	"filename" varchar(240) NOT NULL,
+	"extension" varchar(24) NOT NULL,
+	"mime_type" varchar(120) NOT NULL,
+	"expected_byte_size" bigint NOT NULL,
+	"expected_sha256" varchar(64),
+	"received_byte_size" bigint DEFAULT 0 NOT NULL,
+	"next_part_number" integer DEFAULT 0 NOT NULL,
+	"status" varchar(24) NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"file_expires_at" timestamp with time zone,
+	"file_id" varchar(40),
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "file_upload_parts" ADD CONSTRAINT "file_upload_parts_session_id_file_upload_sessions_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."file_upload_sessions"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_file_metadata_artifact_ref" ON "file_metadata" USING btree ("artifact_ref");--> statement-breakpoint
+CREATE INDEX "idx_file_metadata_owner_created" ON "file_metadata" USING btree ("owner_id","created_at");--> statement-breakpoint
+CREATE INDEX "idx_file_metadata_expiry" ON "file_metadata" USING btree ("expires_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_file_upload_parts_session_part" ON "file_upload_parts" USING btree ("session_id","part_number");--> statement-breakpoint
+CREATE UNIQUE INDEX "uk_file_upload_parts_artifact_ref" ON "file_upload_parts" USING btree ("artifact_ref");--> statement-breakpoint
+CREATE INDEX "idx_file_upload_sessions_owner_created" ON "file_upload_sessions" USING btree ("owner_id","created_at");--> statement-breakpoint
+CREATE INDEX "idx_file_upload_sessions_expiry" ON "file_upload_sessions" USING btree ("status","expires_at");

package/template/packages/database/drizzle/0022_icy_rhodey.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "bulk_data_artifacts" ALTER COLUMN "content" DROP NOT NULL;--> statement-breakpoint
+ALTER TABLE "bulk_data_artifacts" ADD COLUMN "artifact_ref" varchar(37);