openship 0.6.8 → 0.7.0

package/dist/server/lua/site_logger.lua

@@ -127,6 +127,23 @@ local function normalize_path(u)
     return path
 end
 
+-- Raw request telemetry must never retain credentials from a URL. Query
+-- strings routinely carry OAuth codes, signed URLs and tokens, so exclude them
+-- completely. Invitation claim ids are bearer credentials in the path itself;
+-- collapse those two known routes before either top-path aggregation or the
+-- one-hour request ring can observe them.
+local function telemetry_uri(u)
+    local path = u:match("^([^?#]*)") or "/"
+    if path == "" then return "/" end
+    if path:match("^/accept%-invite/[^/]+") then
+        return "/accept-invite/:token"
+    end
+    if path:match("^/api/auth/invitation%-preview/[^/]+") then
+        return "/api/auth/invitation-preview/:token"
+    end
+    return path
+end
+
 -- ── Enumerable sets, without a zone scan ─────────────────────────────────────
 --
 -- Reading these counters back used to need key DISCOVERY, and a shared dict offers exactly
@@ -183,7 +200,7 @@ if not host then return end
 local ip      = ngx.var.remote_addr    or "0.0.0.0"
 local ts      = ngx.now()
 local ua      = ngx.var.http_user_agent or ""
-local uri     = ngx.var.request_uri    or "/"
+local uri     = telemetry_uri(ngx.var.request_uri or "/")
 local req_len = tonumber(ngx.var.request_length) or 0
 local bytes   = tonumber(ngx.var.bytes_sent)     or 0
 local rt      = tonumber(ngx.var.request_time)   or 0  -- seconds (float)

package/dist/server/migrations/0117_github_installation_workspace_scope.sql

@@ -0,0 +1,24 @@
+-- GitHub App installations belong to an Openship workspace, not to whichever
+-- user happened to connect them. Keep the most recently reconciled legacy row
+-- for each workspace/owner before installing the new uniqueness boundary.
+ALTER TABLE "git_installation" ADD COLUMN IF NOT EXISTS "suspended_at" timestamp;
+--> statement-breakpoint
+
+WITH ranked AS (
+  SELECT
+    id,
+    row_number() OVER (
+      PARTITION BY provider, lower(owner), organization_id
+      ORDER BY updated_at DESC, created_at DESC, id DESC
+    ) AS rn
+  FROM git_installation
+)
+DELETE FROM git_installation
+WHERE id IN (SELECT id FROM ranked WHERE rn > 1);
+--> statement-breakpoint
+
+DROP INDEX IF EXISTS "uq_git_installation_provider_owner_user";
+--> statement-breakpoint
+
+CREATE UNIQUE INDEX IF NOT EXISTS "uq_git_installation_provider_owner_org"
+  ON "git_installation" ("provider", "owner", "organization_id");

package/dist/server/migrations/0118_git_sources.sql

@@ -0,0 +1,66 @@
+CREATE TABLE "git_source" (
+	"id" text PRIMARY KEY NOT NULL,
+	"organization_id" text NOT NULL,
+	"provider" text DEFAULT 'github' NOT NULL,
+	"name" text NOT NULL,
+	"app_id" integer NOT NULL,
+	"slug" text NOT NULL,
+	"client_id" text,
+	"app_name" text,
+	"avatar_url" text,
+	"api_base_url" text DEFAULT 'https://api.github.com' NOT NULL,
+	"web_base_url" text DEFAULT 'https://github.com' NOT NULL,
+	"webhook_url" text NOT NULL,
+	"secrets_enc" text NOT NULL,
+	"is_default" boolean DEFAULT false NOT NULL,
+	"status" text DEFAULT 'active' NOT NULL,
+	"last_verified_at" timestamp,
+	"last_error" text,
+	"created_at" timestamp DEFAULT now() NOT NULL,
+	"updated_at" timestamp DEFAULT now() NOT NULL,
+	CONSTRAINT "git_source_organization_id_organization_id_fk"
+		FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id")
+		ON DELETE cascade ON UPDATE no action
+);
+--> statement-breakpoint
+CREATE INDEX "idx_git_source_org_provider"
+	ON "git_source" USING btree ("organization_id", "provider");
+--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_git_source_org_provider_name"
+	ON "git_source" USING btree ("organization_id", "provider", lower("name"));
+--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_git_source_org_provider_app"
+	ON "git_source" USING btree ("organization_id", "provider", "api_base_url", "app_id");
+--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_git_source_org_provider_default"
+	ON "git_source" USING btree ("organization_id", "provider")
+	WHERE "git_source"."is_default" = true;
+--> statement-breakpoint
+ALTER TABLE "git_installation" ADD COLUMN "source_id" text;
+--> statement-breakpoint
+ALTER TABLE "git_installation" ADD CONSTRAINT "git_installation_source_id_git_source_id_fk"
+	FOREIGN KEY ("source_id") REFERENCES "public"."git_source"("id")
+	ON DELETE cascade ON UPDATE no action;
+--> statement-breakpoint
+DROP INDEX IF EXISTS "uq_git_installation_provider_owner_org";
+--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_git_installation_provider_owner_org_legacy"
+	ON "git_installation" USING btree ("provider", "owner", "organization_id")
+	WHERE "git_installation"."source_id" IS NULL;
+--> statement-breakpoint
+CREATE UNIQUE INDEX "uq_git_installation_provider_owner_org_source"
+	ON "git_installation" USING btree ("provider", "owner", "organization_id", "source_id")
+	WHERE "git_installation"."source_id" IS NOT NULL;
+--> statement-breakpoint
+CREATE INDEX "idx_git_installation_source"
+	ON "git_installation" USING btree ("source_id", "installation_id");
+--> statement-breakpoint
+ALTER TABLE "github_install_state" ADD COLUMN "source_id" text;
+--> statement-breakpoint
+ALTER TABLE "github_install_state" ADD COLUMN "flow" text DEFAULT 'install' NOT NULL;
+--> statement-breakpoint
+ALTER TABLE "github_install_state" ADD COLUMN "payload" jsonb DEFAULT '{}'::jsonb NOT NULL;
+--> statement-breakpoint
+ALTER TABLE "github_install_state" ADD CONSTRAINT "github_install_state_source_id_git_source_id_fk"
+	FOREIGN KEY ("source_id") REFERENCES "public"."git_source"("id")
+	ON DELETE cascade ON UPDATE no action;

package/dist/server/migrations/0119_backup_run_batch.sql

@@ -0,0 +1,8 @@
+-- A project-default policy creates one child run per enabled service. Persist
+-- the enqueue identity so read models can aggregate exact siblings without
+-- co-mingling unrelated triggers that happened close together.
+ALTER TABLE "backup_run" ADD COLUMN "batch_id" text;
+--> statement-breakpoint
+CREATE INDEX "idx_backup_run_policy_batch"
+  ON "backup_run" ("policy_id", "batch_id")
+  WHERE "batch_id" IS NOT NULL AND "deleted_at" IS NULL;

package/dist/server/migrations/0120_domain_primary_unique.sql

@@ -0,0 +1,24 @@
+-- Older route-sync writes could mark a new primary without clearing the old
+-- one. Keep the most recently touched row: it is the best durable signal for
+-- the user's last selection, with creation time and id as deterministic ties.
+WITH ranked_primaries AS (
+  SELECT
+    "id",
+    row_number() OVER (
+      PARTITION BY "project_id"
+      ORDER BY "updated_at" DESC, "created_at" DESC, "id" DESC
+    ) AS "rank"
+  FROM "domain"
+  WHERE "project_id" IS NOT NULL AND "is_primary" = true
+)
+UPDATE "domain"
+SET "is_primary" = false, "updated_at" = now()
+WHERE "id" IN (
+  SELECT "id" FROM ranked_primaries WHERE "rank" > 1
+);
+--> statement-breakpoint
+-- Repository transactions make promotion orderly; this index makes the
+-- invariant impossible to bypass through another writer or a concurrent race.
+CREATE UNIQUE INDEX IF NOT EXISTS "uq_domain_project_primary"
+  ON "domain" ("project_id")
+  WHERE "is_primary" = true AND "project_id" IS NOT NULL;

package/dist/server/migrations/0121_host_port_claim_overlap.sql

@@ -0,0 +1,14 @@
+-- A routed workload may need a new loopback port while its previous route is
+-- still live. Keep both claims through that make-before-break window; the
+-- route-aware convergence pass removes the old claim only after a fresh edge
+-- scan proves no vhost still dials it. The target/port unique index remains the
+-- collision authority, so this does not permit two workloads to share a port.
+DROP INDEX IF EXISTS "uq_host_port_claim_target_owner";
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "idx_host_port_claim_target_owner"
+  ON "host_port_claim" (
+    "target_key",
+    "project_id",
+    COALESCE("service_id", ''),
+    COALESCE("container_port", 0)
+  );

package/dist/server/migrations/meta/_journal.json

@@ -820,6 +820,41 @@
       "when": 1788992507325,
       "tag": "0116_domain_ssl_challenge",
       "breakpoints": true
+    },
+    {
+      "idx": 117,
+      "version": "7",
+      "when": 1789078907325,
+      "tag": "0117_github_installation_workspace_scope",
+      "breakpoints": true
+    },
+    {
+      "idx": 118,
+      "version": "7",
+      "when": 1789165307325,
+      "tag": "0118_git_sources",
+      "breakpoints": true
+    },
+    {
+      "idx": 119,
+      "version": "7",
+      "when": 1789251707325,
+      "tag": "0119_backup_run_batch",
+      "breakpoints": true
+    },
+    {
+      "idx": 120,
+      "version": "7",
+      "when": 1789338107325,
+      "tag": "0120_domain_primary_unique",
+      "breakpoints": true
+    },
+    {
+      "idx": 121,
+      "version": "7",
+      "when": 1789424507325,
+      "tag": "0121_host_port_claim_overlap",
+      "breakpoints": true
     }
   ]
 }

package/dist/{setup-IFIMPQZJ.js → setup-ERGE5XNW.js}

@@ -4,21 +4,21 @@ import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   SystemManager
-} from "./chunk-R5DC5PEF.js";
-import "./chunk-NIYD7MD2.js";
-import "./chunk-IAMOUDHY.js";
-import "./chunk-7PEXM2UI.js";
+} from "./chunk-GYDROM4W.js";
+import "./chunk-7MKZP4TW.js";
+import "./chunk-AUBB5DLY.js";
+import "./chunk-BOD2IQ3P.js";
 import "./chunk-I3DPMTSF.js";
 import "./chunk-R4VDPFLS.js";
-import "./chunk-T46BQOLY.js";
-import "./chunk-GNOMEMNI.js";
-import "./chunk-NPSRGIHV.js";
-import "./chunk-P7RCYELG.js";
-import "./chunk-X53JXRS4.js";
-import "./chunk-BO6CY4V2.js";
-import "./chunk-D6HU4VUZ.js";
+import "./chunk-RHHCAWW3.js";
+import "./chunk-3LWGDMJU.js";
+import "./chunk-JWW5YAFL.js";
+import "./chunk-J2NDOB7D.js";
+import "./chunk-YGA52DHX.js";
+import "./chunk-GEHV7JBS.js";
+import "./chunk-CMGRMPRQ.js";
 import "./chunk-N5YZMO33.js";
-import "./chunk-WEZFTL4V.js";
+import "./chunk-IVRTIKNZ.js";
 import "./chunk-PXKCZB2I.js";
 export {
   SystemManager

package/dist/{ssh-client-2XWZCMGI.js → ssh-client-WVLLOAYK.js}

@@ -12,9 +12,9 @@ import {
   openSftp,
   openSshExecChannel,
   openSshUnixSocket
-} from "./chunk-TAZZZKYO.js";
+} from "./chunk-HBQWOJRP.js";
 import "./chunk-N5YZMO33.js";
-import "./chunk-WEZFTL4V.js";
+import "./chunk-IVRTIKNZ.js";
 import "./chunk-PXKCZB2I.js";
 export {
   DOCKER_DIAL_STDIO_COMMAND,

package/dist/up-EFCE6KA6.js

@@ -0,0 +1,61 @@
+#!/usr/bin/env sh
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
+import { createRequire as __ospCreateRequire } from "node:module";
+const require = __ospCreateRequire(import.meta.url);
+import {
+  normalizeUrl,
+  runHeadlessProvision,
+  startService,
+  upCommand
+} from "./chunk-KYTTPWRP.js";
+import "./chunk-TT7P5ZZ3.js";
+import "./chunk-LL7M7GL4.js";
+import "./chunk-SPR7N2EK.js";
+import "./chunk-QWHBRY2K.js";
+import "./chunk-5D27WZBW.js";
+import "./chunk-ELGRMZOW.js";
+import "./chunk-GYDROM4W.js";
+import "./chunk-ONKEYSMY.js";
+import "./chunk-XZYFZ6A5.js";
+import "./chunk-PDW4L3NV.js";
+import "./chunk-DOD2BXHQ.js";
+import "./chunk-42WQABXM.js";
+import "./chunk-DRK3MEDS.js";
+import "./chunk-3NQQXMDR.js";
+import "./chunk-ZWLDLTJP.js";
+import "./chunk-XQC6KYZD.js";
+import "./chunk-DZBXOF5Q.js";
+import "./chunk-7MKZP4TW.js";
+import "./chunk-AUBB5DLY.js";
+import "./chunk-BOD2IQ3P.js";
+import "./chunk-I3DPMTSF.js";
+import "./chunk-WNWQBB7F.js";
+import "./chunk-NRU2EBYZ.js";
+import "./chunk-RHLNVZMS.js";
+import "./chunk-TPGBT5UR.js";
+import "./chunk-QNQFS37A.js";
+import "./chunk-5CFUYMPE.js";
+import "./chunk-ZFA3MZ5N.js";
+import "./chunk-MZYD3LFP.js";
+import "./chunk-SYQ3FOLE.js";
+import "./chunk-3KUW2UC6.js";
+import "./chunk-R4VDPFLS.js";
+import "./chunk-JAKVPLHT.js";
+import "./chunk-HBQWOJRP.js";
+import "./chunk-J4SYG2LC.js";
+import "./chunk-RHHCAWW3.js";
+import "./chunk-3LWGDMJU.js";
+import "./chunk-JWW5YAFL.js";
+import "./chunk-J2NDOB7D.js";
+import "./chunk-YGA52DHX.js";
+import "./chunk-GEHV7JBS.js";
+import "./chunk-CMGRMPRQ.js";
+import "./chunk-N5YZMO33.js";
+import "./chunk-IVRTIKNZ.js";
+import "./chunk-PXKCZB2I.js";
+export {
+  normalizeUrl,
+  runHeadlessProvision,
+  startService,
+  upCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openship",
-  "version": "0.6.8",
+  "version": "0.7.0",
   "description": "Openship CLI - deploy, manage, and open your Openship platform from the terminal",
   "license": "Apache-2.0",
   "repository": {

package/dist/bare-FA66N7GC.js

@@ -1,29 +0,0 @@
-#!/usr/bin/env sh
-":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
-import { createRequire as __ospCreateRequire } from "node:module";
-const require = __ospCreateRequire(import.meta.url);
-import {
-  BareRuntime,
-  STATIC_RELEASE_BASE
-} from "./chunk-ENKJ7XIF.js";
-import "./chunk-5DJOB7IX.js";
-import "./chunk-SK4FFCFR.js";
-import "./chunk-AHJYP7DG.js";
-import "./chunk-UAWY6X7V.js";
-import "./chunk-R4VDPFLS.js";
-import "./chunk-VAI5VOOI.js";
-import "./chunk-TAZZZKYO.js";
-import "./chunk-T6DVUX4F.js";
-import "./chunk-T46BQOLY.js";
-import "./chunk-GNOMEMNI.js";
-import "./chunk-NPSRGIHV.js";
-import "./chunk-P7RCYELG.js";
-import "./chunk-BO6CY4V2.js";
-import "./chunk-D6HU4VUZ.js";
-import "./chunk-N5YZMO33.js";
-import "./chunk-WEZFTL4V.js";
-import "./chunk-PXKCZB2I.js";
-export {
-  BareRuntime,
-  STATIC_RELEASE_BASE
-};

package/dist/up-HQS7IR7H.js

@@ -1,61 +0,0 @@
-#!/usr/bin/env sh
-":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
-import { createRequire as __ospCreateRequire } from "node:module";
-const require = __ospCreateRequire(import.meta.url);
-import {
-  normalizeUrl,
-  runHeadlessProvision,
-  startService,
-  upCommand
-} from "./chunk-RCMERVBL.js";
-import "./chunk-5I3COAFH.js";
-import "./chunk-7YBWXEM6.js";
-import "./chunk-5UXHT6ED.js";
-import "./chunk-QWHBRY2K.js";
-import "./chunk-NUT6HKK6.js";
-import "./chunk-ELGRMZOW.js";
-import "./chunk-R5DC5PEF.js";
-import "./chunk-ONKEYSMY.js";
-import "./chunk-XZYFZ6A5.js";
-import "./chunk-PDW4L3NV.js";
-import "./chunk-DOD2BXHQ.js";
-import "./chunk-42WQABXM.js";
-import "./chunk-DRK3MEDS.js";
-import "./chunk-3NQQXMDR.js";
-import "./chunk-ZWLDLTJP.js";
-import "./chunk-D3OEMXYP.js";
-import "./chunk-MUWVC5R4.js";
-import "./chunk-NIYD7MD2.js";
-import "./chunk-IAMOUDHY.js";
-import "./chunk-7PEXM2UI.js";
-import "./chunk-I3DPMTSF.js";
-import "./chunk-WNWQBB7F.js";
-import "./chunk-NRU2EBYZ.js";
-import "./chunk-RHLNVZMS.js";
-import "./chunk-3MP6ACKM.js";
-import "./chunk-6GU6JSK6.js";
-import "./chunk-ENKJ7XIF.js";
-import "./chunk-5DJOB7IX.js";
-import "./chunk-SK4FFCFR.js";
-import "./chunk-AHJYP7DG.js";
-import "./chunk-UAWY6X7V.js";
-import "./chunk-R4VDPFLS.js";
-import "./chunk-VAI5VOOI.js";
-import "./chunk-TAZZZKYO.js";
-import "./chunk-T6DVUX4F.js";
-import "./chunk-T46BQOLY.js";
-import "./chunk-GNOMEMNI.js";
-import "./chunk-NPSRGIHV.js";
-import "./chunk-P7RCYELG.js";
-import "./chunk-X53JXRS4.js";
-import "./chunk-BO6CY4V2.js";
-import "./chunk-D6HU4VUZ.js";
-import "./chunk-N5YZMO33.js";
-import "./chunk-WEZFTL4V.js";
-import "./chunk-PXKCZB2I.js";
-export {
-  normalizeUrl,
-  runHeadlessProvision,
-  startService,
-  upCommand
-};