openship 0.1.11 → 0.2.0

package/dist/server/lua/rules_lib.lua

@@ -0,0 +1,176 @@
+-- rules_lib.lua
+-- Per-worker helpers + parsed-rule cache for rules_guard.lua (access phase).
+-- Loaded ONCE per worker via require("openship.rules_lib"). The access file is
+-- re-executed on every request, so all parsing/compiling/matching lives here to
+-- avoid re-creating closures and re-decoding JSON on the hot path.
+--
+-- Shared-dict value `rules[host]` = JSON array of { pathPrefix, spec } where
+-- spec matches @repo/core RouteRuleSpec. parse() decodes + precompiles CIDRs to
+-- integers, lowercases UA/referer needles, and builds O(1) sets for
+-- countries/methods ONCE; the compiled result is LRU-cached per host and reused
+-- until the raw string changes (rule edits are rare, requests are hot).
+--
+-- SECURITY: nothing here turns a rule value into Lua code or a Lua pattern.
+-- Strings are compared with `==`/set-lookups; user-agent matching is
+-- string.find(hay, needle, 1, true) — PLAIN, never a regex.
+
+local cjson = require "cjson.safe"
+local lrucache = require "resty.lrucache"
+
+local M = {}
+
+local cache = lrucache.new(1024) -- compiled rules, per worker, ~1024 hosts
+
+-- ── IPv4 helpers ──
+local function ipv4_to_int(s)
+    local a, b, c, d = string.match(s, "^(%d+)%.(%d+)%.(%d+)%.(%d+)$")
+    if not a then return nil end
+    a, b, c, d = tonumber(a), tonumber(b), tonumber(c), tonumber(d)
+    if a > 255 or b > 255 or c > 255 or d > 255 then return nil end
+    return a * 16777216 + b * 65536 + c * 256 + d
+end
+M.ipv4_to_int = ipv4_to_int
+
+-- Precompile a CIDR / bare-IP string into a cheap match descriptor.
+local function compile_cidr(s)
+    local base, bits = string.match(s, "^([^/]+)/(%d+)$")
+    if base then
+        bits = tonumber(bits)
+        local basei = ipv4_to_int(base)
+        if not basei or bits < 0 or bits > 32 then return { exact = s } end
+        if bits == 0 then return { all = true } end
+        local div = 2 ^ (32 - bits) -- compare the top `bits` bits
+        return { net = math.floor(basei / div), div = div }
+    end
+    local i = ipv4_to_int(s)
+    if i then return { ip = i } end
+    return { exact = s } -- IPv6 / unparseable → literal string compare
+end
+
+local function compile_list(list)
+    if type(list) ~= "table" then return nil end
+    local out, n = {}, 0
+    for _, s in ipairs(list) do
+        if type(s) == "string" and s ~= "" then
+            n = n + 1
+            out[n] = compile_cidr(s)
+        end
+    end
+    return n > 0 and out or nil
+end
+
+-- Match a client (int form `ipi`, may be nil for non-IPv4; raw `ips`) against a
+-- compiled CIDR/IP list.
+local function match_compiled(compiled, ipi, ips)
+    if not compiled then return false end
+    for i = 1, #compiled do
+        local c = compiled[i]
+        if c.all then
+            return true
+        elseif c.ip then
+            if ipi and ipi == c.ip then return true end
+        elseif c.net then
+            if ipi and math.floor(ipi / c.div) == c.net then return true end
+        elseif c.exact == ips then
+            return true
+        end
+    end
+    return false
+end
+M.match_compiled = match_compiled
+
+local function lower_list(list)
+    if type(list) ~= "table" then return nil end
+    local out, n = {}, 0
+    for _, s in ipairs(list) do
+        if type(s) == "string" and s ~= "" then
+            n = n + 1
+            out[n] = string.lower(s)
+        end
+    end
+    return n > 0 and out or nil
+end
+
+-- Build an O(1) lookup set from a string list (optionally lowercased).
+local function to_set(list, lower)
+    if type(list) ~= "table" then return nil end
+    local set, any = {}, false
+    for _, s in ipairs(list) do
+        if type(s) == "string" and s ~= "" then
+            set[lower and string.lower(s) or s] = true
+            any = true
+        end
+    end
+    return any and set or nil
+end
+
+-- Compile one RouteRuleSpec into a fast-match shape.
+local function compile_spec(spec)
+    if type(spec) ~= "table" then return { blockStatus = 403 } end
+    local out = {}
+
+    local rl = spec.rateLimit
+    local rps = rl and tonumber(rl.rps)
+    if rps and rps > 0 then
+        out.rl = {
+            limit = math.floor(rps) + math.floor(tonumber(rl.burst) or 0),
+            status = tonumber(rl.status) or 429,
+        }
+    end
+
+    local ban = spec.ban
+    if type(ban) == "table" then
+        out.ban = {
+            ips = compile_list(ban.ips),
+            cidrs = compile_list(ban.cidrs),
+            countries = to_set(ban.countries),
+            uas = lower_list(ban.userAgents),
+            emptyUA = ban.emptyUserAgent == true,
+        }
+    end
+
+    local acc = spec.access
+    if type(acc) == "table" then
+        out.access = {
+            allow = compile_list(acc.allowCidrs),
+            deny = compile_list(acc.denyCidrs),
+            allowCountries = to_set(acc.allowCountries),
+            methods = to_set(acc.methods),
+        }
+    end
+
+    local hot = spec.hotlink
+    if type(hot) == "table" then
+        local refs = to_set(hot.allowReferers, true)
+        if refs then
+            out.hotlink = { referers = refs, allowEmpty = hot.allowEmpty ~= false }
+        end
+    end
+
+    out.blockStatus = (type(spec.block) == "table" and tonumber(spec.block.status)) or 403
+    return out
+end
+
+local function parse(raw)
+    local entries = cjson.decode(raw)
+    if type(entries) ~= "table" then return {} end
+    local out, n = {}, 0
+    for _, e in ipairs(entries) do
+        if type(e) == "table" then
+            n = n + 1
+            out[n] = { pathPrefix = e.pathPrefix, spec = compile_spec(e.spec) }
+        end
+    end
+    return out
+end
+
+-- LRU-cached parse: reuse the compiled form until the raw dict string changes.
+function M.get(host, raw)
+    local hit = cache:get(host)
+    if hit and hit.raw == raw then return hit.parsed end
+    local parsed = parse(raw)
+    cache:set(host, { raw = raw, parsed = parsed })
+    return parsed
+end
+
+return M

package/dist/server/lua/site_logger.lua

@@ -0,0 +1,182 @@
+-- site_logger.lua
+-- OpenResty log_by_lua - runs AFTER the response is sent.
+-- Pure shared-dict analytics.  No Redis, no timers for counters, no batching.
+-- Every incr() is atomic across workers.
+--
+-- Shared dict key schema (analytics zone):
+--   s:{domain}:{epoch_min}:r        request count               (TTL 24h)
+--   s:{domain}:{epoch_min}:i        bandwidth in  bytes         (TTL 24h)
+--   s:{domain}:{epoch_min}:o        bandwidth out bytes         (TTL 24h)
+--   s:{domain}:{epoch_min}:t        response time sum (seconds) (TTL 24h)
+--   s:{domain}:{epoch_min}:u        unique (non-static) reqs    (TTL 24h)
+--   g:{domain}:{YYYYMMDD}:{CC}      country hit count           (TTL 48h)
+--   c:{domain}:{epoch_min}:{CC}     country per minute          (TTL 24h)
+--   t:{domain}:r / :i / :o          lifetime totals             (no TTL)
+--   d:{domain}                      domain index marker         (no TTL)
+--
+-- Shared dict key schema (request_data zone):
+--   rlog:{domain}:seq               monotonic write pointer
+--   rlog:{domain}:{slot}            JSON entry (ring buf)       (TTL 1h)
+--   log_pipe:sub:{domain}           live subscriber flag        (TTL 30s)
+--   log_pipe:q:{domain}             live log queue entries
+
+local cjson = require "cjson.safe"
+
+-- SAFE LOAD: GeoIP Module (per-worker, cached by require)
+local geo_ok, geo = pcall(require, "openship.geo_country")
+if not geo_ok then
+    geo = nil
+    ngx.log(ngx.WARN, "[site_logger] geo_country module not available. GeoIP disabled.")
+end
+
+-- SAFE LOAD: Pipe module (per-worker, cached by require)
+local pipe_ok, pipe_log = pcall(require, "openship.pipe_log")
+if not pipe_ok then pipe_log = nil end
+
+local analytics    = ngx.shared.analytics
+local request_data = ngx.shared.request_data
+if not analytics or not request_data then return end
+
+-- ── Helpers ──────────────────────────────────────────────────────────────────
+
+local function normalize(host)
+    if not host then return nil end
+    local h = host:lower()
+    if h:sub(1, 4) == "www." then h = h:sub(5) end
+    return h
+end
+
+local _day = { str = "", ts = 0 }
+local function today()
+    local now = ngx.now()
+    if now - _day.ts > 60 then
+        _day.str = os.date("!%Y%m%d", now)
+        _day.ts = now
+    end
+    return _day.str
+end
+
+-- Fast check if URI is a static asset (for unique_requests counter)
+local function is_static_asset(u)
+    local lower = u:lower()
+
+    -- Static file extensions
+    if lower:match("%.js$") or lower:match("%.css$") or
+       lower:match("%.jpg$") or lower:match("%.jpeg$") or
+       lower:match("%.png$") or lower:match("%.gif$") or
+       lower:match("%.svg$") or lower:match("%.webp$") or
+       lower:match("%.ico$") or lower:match("%.bmp$") or
+       lower:match("%.woff2?$") or lower:match("%.ttf$") or
+       lower:match("%.eot$") or lower:match("%.otf$") or
+       lower:match("%.mp4$") or lower:match("%.webm$") or
+       lower:match("%.mp3$") or lower:match("%.wav$") or
+       lower:match("%.pdf$") or lower:match("%.zip$") or
+       lower:match("%.tar$") or lower:match("%.gz$") or
+       lower:match("%.xml$") or lower:match("%.json$") or
+       lower:match("%.txt$") or lower:match("%.map$") then
+        return true
+    end
+
+    -- Common static paths
+    if lower:match("^/_next/static/") or
+       lower:match("^/static/") or
+       lower:match("^/assets/") or
+       lower:match("^/public/") or
+       lower:match("/favicon%.ico") then
+        return true
+    end
+
+    return false
+end
+
+local RING   = 1000
+local D24H   = 86400
+local D48H   = 172800
+local D1H    = 3600
+
+-- ── Capture ──────────────────────────────────────────────────────────────────
+
+local host = normalize(ngx.var.host)
+if not host then return end
+
+local ip      = ngx.var.remote_addr    or "0.0.0.0"
+local ts      = ngx.now()
+local ua      = ngx.var.http_user_agent or ""
+local uri     = ngx.var.request_uri    or "/"
+local req_len = tonumber(ngx.var.request_length) or 0
+local bytes   = tonumber(ngx.var.bytes_sent)     or 0
+local rt      = tonumber(ngx.var.request_time)   or 0  -- seconds (float)
+local method  = ngx.var.request_method or "GET"
+local status  = ngx.var.status         or "0"
+
+-- ── 1. Minute-bucket counters ────────────────────────────────────────────────
+
+local minute = math.floor(ts / 60)
+local p = "s:" .. host .. ":" .. minute
+
+analytics:incr(p .. ":r", 1,      0, D24H)
+analytics:incr(p .. ":i", req_len, 0, D24H)
+analytics:incr(p .. ":o", bytes,   0, D24H)
+
+-- Response time as float seconds (matches original precision)
+if rt > 0 then
+    -- safe_add initializes, incr adds - emulate HINCRBYFLOAT with integer micros
+    local rt_us = math.floor(rt * 1000000)
+    analytics:incr(p .. ":t", rt_us, 0, D24H)
+end
+
+-- Unique (non-static) request counter
+if not is_static_asset(uri) then
+    analytics:incr(p .. ":u", 1, 0, D24H)
+end
+
+-- ── 2. Lifetime totals ──────────────────────────────────────────────────────
+
+analytics:incr("t:" .. host .. ":r", 1,       0)
+analytics:incr("t:" .. host .. ":i", req_len, 0)
+analytics:incr("t:" .. host .. ":o", bytes,   0)
+
+-- Domain index (set once, ignore subsequent "exists" errors)
+analytics:safe_add("d:" .. host, 1)
+
+-- ── 3. GeoIP ─────────────────────────────────────────────────────────────────
+
+if geo then
+    local cc = geo.get_country_code(ip)
+    if cc and cc ~= "" then
+        -- Daily geo (for /analytics/geo endpoint)
+        analytics:incr("g:" .. host .. ":" .. today() .. ":" .. cc, 1, 0, D48H)
+        -- Per-minute geo (for time-series country breakdown)
+        analytics:incr("c:" .. host .. ":" .. minute .. ":" .. cc, 1, 0, D24H)
+    end
+end
+
+-- ── 4. Raw request ring buffer ──────────────────────────────────────────────
+
+pcall(function()
+    local ok_j, j = pcall(cjson.encode, {
+        ip     = ip,
+        ts     = ts,
+        method = method,
+        status = status,
+        uri    = uri,
+        ua     = ua,
+        bw_in  = req_len,
+        bw_out = bytes,
+        rt     = rt,
+    })
+    if ok_j and j then
+        local seq  = request_data:incr("rlog:" .. host .. ":seq", 1, 0)
+        local slot = seq % RING
+        request_data:set("rlog:" .. host .. ":" .. slot, j, D1H)
+    end
+end)
+
+-- ── 5. Live-log pipe (only when a subscriber is watching) ───────────────────
+-- Fire via timer to avoid blocking the log phase
+
+if pipe_log and pipe_log.pipe_request_log
+   and request_data:get("log_pipe:sub:" .. host) then
+    ngx.timer.at(0, pipe_log.pipe_request_log,
+                 host, ip, ts, ua, uri, req_len, bytes, rt, method, status)
+end

package/dist/server/lua/webhook_handler.lua

@@ -0,0 +1,126 @@
+-- webhook_handler.lua
+-- Handles incoming webhook events forwarded from the SaaS edge.
+-- Internal management port only (127.0.0.1:9145).
+--
+-- Routes:
+--   POST /_hooks/push          - receive a forwarded GitHub push event
+--   GET  /_hooks/pending       - fetch stored events (for local app polling)
+--   POST /_hooks/ack           - acknowledge consumed events
+--
+-- Behavior on POST /_hooks/push:
+--   1. Try to proxy to a local Openship API (configurable via X-Openship-Url header)
+--   2. If Openship is not reachable, store the event in shared dict for later polling
+
+local cjson = require "cjson.safe"
+
+local webhook_events = ngx.shared.webhook_events
+local uri            = ngx.var.uri
+local method         = ngx.req.get_method()
+
+local function json_response(data, code)
+    ngx.status = code or 200
+    ngx.header["Content-Type"] = "application/json"
+    ngx.say(cjson.encode(data))
+    return ngx.exit(ngx.status)
+end
+
+-- ── POST /_hooks/push ────────────────────────────────────────────────────────
+-- Receives forwarded webhook payload from SaaS.
+-- Headers:
+--   X-Openship-Url: http://127.0.0.1:3456 (if Openship runs on this server)
+--   X-Hook-Id: the subscription hookId (for correlation)
+
+if uri == "/_hooks/push" and method == "POST" then
+    ngx.req.read_body()
+    local body = ngx.req.get_body_data()
+    if not body then
+        return json_response({ error = "empty body" }, 400)
+    end
+
+    local openship_url = ngx.req.get_headers()["x-openship-url"]
+
+    -- If Openship runs on this server, proxy directly
+    if openship_url and openship_url ~= "" then
+        local http = require "resty.http"
+        local httpc = http.new()
+        httpc:set_timeout(5000)
+
+        local target = openship_url .. "/api/webhooks/push"
+        local res, err = httpc:request_uri(target, {
+            method  = "POST",
+            body    = body,
+            headers = {
+                ["Content-Type"] = "application/json",
+                ["X-Hook-Id"]    = ngx.req.get_headers()["x-hook-id"] or "",
+            },
+        })
+
+        if res and res.status < 500 then
+            -- Openship handled it (2xx or 4xx)
+            return json_response({ ok = true, proxied = true, status = res.status })
+        end
+
+        -- Openship unreachable or errored - fall through to store
+    end
+
+    -- Store for later polling by local/desktop app
+    local event_id = ngx.now() .. ":" .. math.random(100000, 999999)
+    local event = cjson.encode({
+        id       = event_id,
+        hook_id  = ngx.req.get_headers()["x-hook-id"] or "",
+        payload  = body,
+        received = ngx.now(),
+    })
+
+    -- Use a slot-based ring buffer (max 200 events)
+    local max_events = 200
+    local idx = webhook_events:incr("_idx", 1, 0) or 0
+    local slot = (idx % max_events)
+    webhook_events:set("evt:" .. slot, event, 3600) -- 1h TTL
+    webhook_events:set("_count", math.min(idx, max_events))
+
+    return json_response({ ok = true, stored = true, event_id = event_id })
+end
+
+-- ── GET /_hooks/pending ──────────────────────────────────────────────────────
+-- Returns stored webhook events for local app to consume.
+
+if uri == "/_hooks/pending" and method == "GET" then
+    if not webhook_events then
+        return json_response({ events = {} })
+    end
+
+    local count = webhook_events:get("_count") or 0
+    local idx   = webhook_events:get("_idx") or 0
+    local events = {}
+
+    -- Read all stored events (newest first)
+    local max_events = 200
+    local start = math.max(0, idx - count)
+    for i = start, idx - 1 do
+        local slot = i % max_events
+        local raw = webhook_events:get("evt:" .. slot)
+        if raw then
+            local parsed = cjson.decode(raw)
+            if parsed then
+                events[#events + 1] = parsed
+            end
+        end
+    end
+
+    return json_response({ events = events })
+end
+
+-- ── POST /_hooks/ack ─────────────────────────────────────────────────────────
+-- Acknowledge events have been consumed - clears the store.
+
+if uri == "/_hooks/ack" and method == "POST" then
+    if webhook_events then
+        webhook_events:flush_all()
+        webhook_events:flush_expired()
+    end
+    return json_response({ ok = true })
+end
+
+-- ── Fallback ─────────────────────────────────────────────────────────────────
+return json_response({ error = "not found" }, 404)

package/dist/server/migrations/0035_thankful_morgan_stark.sql

@@ -0,0 +1 @@
+ALTER TABLE "domain" ADD COLUMN "external_ingress" boolean DEFAULT false NOT NULL;

package/dist/server/migrations/0036_gorgeous_scalphunter.sql

@@ -0,0 +1,17 @@
+CREATE TABLE "route_rule" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"project_id" text NOT NULL,
+	"domain_id" text,
+	"path_prefix" text,
+	"spec" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "route_rule" ADD CONSTRAINT "route_rule_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "route_rule" ADD CONSTRAINT "route_rule_project_id_project_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."project"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "route_rule" ADD CONSTRAINT "route_rule_domain_id_domain_id_fk" FOREIGN KEY ("domain_id") REFERENCES "public"."domain"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_route_rule_project" ON "route_rule" USING btree ("project_id");--> statement-breakpoint
+CREATE INDEX "idx_route_rule_domain" ON "route_rule" USING btree ("domain_id");

package/dist/server/migrations/0037_clever_makkari.sql

@@ -0,0 +1,28 @@
+CREATE TABLE "docker_migration_run" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"source_server_id" text,
+	"target_server_id" text,
+	"project_id" text,
+	"project_name" text NOT NULL,
+	"service_names" jsonb DEFAULT '[]'::jsonb NOT NULL,
+	"status" text DEFAULT 'queued' NOT NULL,
+	"mode" text DEFAULT 'cross_server' NOT NULL,
+	"deployment_id" text,
+	"kill_originals" boolean DEFAULT false NOT NULL,
+	"confirmation_token" text,
+	"volume_plan" jsonb DEFAULT '[]'::jsonb,
+	"scanned_container_ids" jsonb DEFAULT '{}'::jsonb,
+	"bytes_moved" bigint,
+	"error_message" text,
+	"started_at" timestamp DEFAULT now() NOT NULL,
+	"finished_at" timestamp,
+	"last_event_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "docker_migration_run" ADD CONSTRAINT "docker_migration_run_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "docker_migration_run" ADD CONSTRAINT "docker_migration_run_source_server_id_servers_id_fk" FOREIGN KEY ("source_server_id") REFERENCES "public"."servers"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "docker_migration_run" ADD CONSTRAINT "docker_migration_run_target_server_id_servers_id_fk" FOREIGN KEY ("target_server_id") REFERENCES "public"."servers"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "docker_migration_run" ADD CONSTRAINT "docker_migration_run_project_id_project_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."project"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_docker_migration_run_org_started" ON "docker_migration_run" USING btree ("organization_id","started_at");--> statement-breakpoint
+CREATE INDEX "idx_docker_migration_run_in_flight" ON "docker_migration_run" USING btree ("status") WHERE "docker_migration_run"."status" IN ('queued','adopting','moving_data','deploying','verifying','awaiting_cutover','cutover');

package/dist/server/migrations/0038_young_magneto.sql

@@ -0,0 +1 @@
+ALTER TABLE "domain" ADD COLUMN "manual_ssl" boolean DEFAULT false NOT NULL;

package/dist/server/migrations/0039_secret_lady_ursula.sql

@@ -0,0 +1,15 @@
+CREATE TABLE "job_run" (
+	"id" text PRIMARY KEY NOT NULL,
+	"job_id" text NOT NULL,
+	"kind" text DEFAULT 'system' NOT NULL,
+	"trigger" text DEFAULT 'schedule' NOT NULL,
+	"status" text NOT NULL,
+	"started_at" timestamp DEFAULT now() NOT NULL,
+	"finished_at" timestamp,
+	"duration_ms" integer,
+	"summary" jsonb,
+	"error" text,
+	"created_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "job_run_job_started_idx" ON "job_run" USING btree ("job_id","started_at");

package/dist/server/migrations/0040_sharp_red_wolf.sql

@@ -0,0 +1,16 @@
+CREATE TABLE "job" (
+	"id" text PRIMARY KEY NOT NULL,
+	"key" text NOT NULL,
+	"kind" text DEFAULT 'system' NOT NULL,
+	"label" text NOT NULL,
+	"cron_expression" text NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"action_type" text DEFAULT 'builtin' NOT NULL,
+	"action_config" jsonb,
+	"created_by" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "job_key_unique" UNIQUE("key")
+);
+--> statement-breakpoint
+CREATE INDEX "job_kind_idx" ON "job" USING btree ("kind");

package/dist/server/migrations/0041_round_spyke.sql

@@ -0,0 +1,4 @@
+ALTER TABLE "project" ADD COLUMN "is_app" boolean DEFAULT false NOT NULL;--> statement-breakpoint
+ALTER TABLE "project" ADD COLUMN "app_template_id" text;--> statement-breakpoint
+-- Backfill: existing webmail projects are managed apps → move them to the Apps tab.
+UPDATE "project" SET "is_app" = true, "app_template_id" = 'mail-webmail' WHERE "framework" = 'webmail';

package/dist/server/migrations/0042_dapper_havok.sql

@@ -0,0 +1 @@
+ALTER TABLE "job_run" ADD COLUMN "output" text;

package/dist/server/migrations/0043_fast_sharon_ventura.sql

@@ -0,0 +1,15 @@
+CREATE TABLE "system_notice" (
+	"id" text PRIMARY KEY NOT NULL,
+	"severity" text DEFAULT 'info' NOT NULL,
+	"title" text NOT NULL,
+	"message" text NOT NULL,
+	"action_label" text,
+	"action_url" text,
+	"active" boolean DEFAULT true NOT NULL,
+	"starts_at" timestamp,
+	"ends_at" timestamp,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "idx_system_notice_active" ON "system_notice" USING btree ("active");

package/dist/server/migrations/0044_amused_shape.sql

@@ -0,0 +1,8 @@
+ALTER TABLE "job" ALTER COLUMN "cron_expression" DROP NOT NULL;--> statement-breakpoint
+ALTER TABLE "job" ADD COLUMN "schedule_type" text DEFAULT 'recurring' NOT NULL;--> statement-breakpoint
+ALTER TABLE "job" ADD COLUMN "run_at" timestamp;--> statement-breakpoint
+ALTER TABLE "job" ADD COLUMN "depends_on" text[];--> statement-breakpoint
+ALTER TABLE "job" ADD COLUMN "trigger_events" text[];--> statement-breakpoint
+ALTER TABLE "job" ADD COLUMN "notify_config" jsonb;--> statement-breakpoint
+ALTER TABLE "job_run" ADD COLUMN "server_id" text;--> statement-breakpoint
+ALTER TABLE "job_run" ADD COLUMN "attempt" integer DEFAULT 1 NOT NULL;

package/dist/server/migrations/0045_amusing_korath.sql

@@ -0,0 +1 @@
+ALTER TABLE "service" ADD COLUMN "public_endpoints" jsonb DEFAULT '[]'::jsonb;

package/dist/server/migrations/0046_white_harrier.sql

@@ -0,0 +1,35 @@
+CREATE TABLE "github_deploy_key" (
+	"id" text PRIMARY KEY NOT NULL,
+	"server_id" text NOT NULL,
+	"organization_id" text NOT NULL,
+	"owner" text NOT NULL,
+	"repo" text NOT NULL,
+	"github_key_id" integer,
+	"private_key_encrypted" text NOT NULL,
+	"public_key" text NOT NULL,
+	"read_only" boolean DEFAULT true NOT NULL,
+	"created_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "server_github_auth" (
+	"id" text PRIMARY KEY NOT NULL,
+	"server_id" text NOT NULL,
+	"organization_id" text NOT NULL,
+	"mode" text NOT NULL,
+	"token_encrypted" text,
+	"token_source" text,
+	"token_login" text,
+	"server_key_private_encrypted" text,
+	"server_key_public" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "github_deploy_key" ADD CONSTRAINT "github_deploy_key_server_id_servers_id_fk" FOREIGN KEY ("server_id") REFERENCES "public"."servers"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "github_deploy_key" ADD CONSTRAINT "github_deploy_key_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "server_github_auth" ADD CONSTRAINT "server_github_auth_server_id_servers_id_fk" FOREIGN KEY ("server_id") REFERENCES "public"."servers"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "server_github_auth" ADD CONSTRAINT "server_github_auth_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_github_deploy_key_server_repo" ON "github_deploy_key" USING btree ("server_id","owner","repo");--> statement-breakpoint
+CREATE INDEX "idx_github_deploy_key_org_server" ON "github_deploy_key" USING btree ("organization_id","server_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_server_github_auth_server" ON "server_github_auth" USING btree ("server_id");--> statement-breakpoint
+CREATE INDEX "idx_server_github_auth_org" ON "server_github_auth" USING btree ("organization_id");

package/dist/server/migrations/0047_sloppy_strong_guy.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "deployment" ADD COLUMN "release_version" text;--> statement-breakpoint
+ALTER TABLE "project" ADD COLUMN "release_source" jsonb;

package/dist/server/migrations/0048_funny_emma_frost.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "user_settings" ADD COLUMN "transfer_mode" text DEFAULT 'auto' NOT NULL;--> statement-breakpoint
+ALTER TABLE "user_settings" ADD COLUMN "transfer_compression" text DEFAULT 'auto' NOT NULL;

package/dist/server/migrations/0049_nappy_piledriver.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "domain" ADD COLUMN "verify_attempts" integer DEFAULT 0 NOT NULL;--> statement-breakpoint
+ALTER TABLE "domain" ADD COLUMN "last_verify_error" text;--> statement-breakpoint
+ALTER TABLE "domain" ADD COLUMN "last_checked_at" timestamp;