aegis-stack 0.13.1__tar.gz → 0.13.2__tar.gz

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/CHANGELOG.md

@@ -7,6 +7,92 @@
 
 ## [Unreleased]
 
+## [0.13.2] - 2026-09-25
+
+### Changed
+
+- **The worker modal's live feed connects when the modal opens.** Every
+  dashboard tab used to open `/events/worker/stream` and start a 10 Hz
+  flush loop at page load, then discard every event until someone opened
+  the worker modal - one long-lived stream and Redis subscription per tab.
+  Both now start on show and stop on hide; the stream's per-connect
+  baseline means the counts are the same. Its log lines carry the page's
+  `session_id`, so several tabs no longer read as one listener started
+  twice.
+
+### Fixed
+
+- **Startup no longer stamps past a migration that never ran.** Adoption
+  stamped every pending revision whose objects already existed, so
+  APScheduler's job table (built by the scheduler on first boot) proved
+  the scheduler revision ahead of AI revisions that had not run, and the
+  version moved over their DDL. Adoption now stops at the first revision
+  it cannot prove, and startup upgrades one revision at a time, adopting
+  again after each, so a revision is adopted only once the ones before it
+  exist. Order comes from the revision chain, not string comparison.
+- **Only migrations that touch the LLM catalog empty it.** Every AI
+  revision cleared the catalog tables before its DDL, so any AI change
+  (a new voice table) wiped the synced catalog until the next sync. The
+  clear is now emitted only when a revision's upgrade operates on those
+  tables.
+- **The scheduler survives a failed job-store write.** APScheduler 3.x
+  retries loading due jobs but not the write-back after a run; a failed
+  `update_job` (SQLite "database is locked") escaped before the timer was
+  re-armed, so the scheduler never woke again while its process stayed up
+  and Docker never restarted it. A failed pass now logs and retries after
+  `jobstore_retry_interval`.
+- **The scheduler shares the object store again.** Its own `volumes:` list
+  replaced the shared one (YAML merge keys never join lists), so it lost
+  `storage-data` and every scheduled job ran against a private, empty
+  `/data/storage`. The backup mount moved onto the shared block, and a test
+  holds every app container to the store and every mounted volume to a
+  declaration.
+- **The scheduler healthcheck runs the heartbeat module.** The beacon path
+  and the 60-second window lived in the module and again in an inline
+  compose string; `python -m app.components.scheduler.heartbeat` now
+  decides. The dev asset watcher no longer inherits an HTTP healthcheck for
+  a server it does not run, so it stops reading unhealthy.
+- **AI chat errors reach the client as what they are, and no further.**
+  `ProviderError` and `ConversationError` subclass `AIServiceError`, and the
+  handlers caught the base first, so both surfaced as a 503. The chat
+  endpoint, its stream, voice chat and `/ai/health` also sent unexpected
+  exceptions' text to the client; it is logged instead. The `ai record`
+  command creates its speech file rather than naming one with
+  `tempfile.mktemp`.
+
+- **A failed `add-service` leaves the project as it found it.** A failure
+  after the first file was written - migration generation, say - left the
+  service's code in the tree, the answers file saying it was enabled, and
+  no schema: the project would not start, and a retry stopped at "already
+  enabled". The command now requires a clean git tree, marks a backup
+  point, and resets to it on any failure, so it can simply be run again.
+- **Adding a service re-renders what other installed services branch on
+  it.** A service's files were copied once and never rendered again, so a
+  template that depends on another service's flag kept its first render:
+  `add-service auth` left the scheduler, worker, blog, comms, insights, AI
+  and htmx routers without the auth guards they render once auth exists,
+  and finance and payment models without their owner keys. Those files now
+  go through the same three-way merge as shared files, and only the ones
+  whose output changes are touched.
+- **Adding auth to an existing finance project creates the owner keys.**
+  Generated together, finance's owner columns reference `user`; added
+  later, none did, and nothing said so. Beyond the models not re-rendering,
+  the generator dropped a new key whose column an index already covered,
+  and routed keys on existing tables to whichever revision ran first. The
+  keys now land in the finance/auth link revision, after the sentinel row
+  they point at, so Postgres accepts rows owned by it; both paths produce
+  the same schema.
+
+- **A closed dashboard tab stops polling within a minute, not an hour.**
+  Page loops check whether their tab is still open, and the check read
+  Flet's connection object, which Flet keeps through a disconnect and drops
+  only when the session is reaped, an hour later by default. So the
+  30-second grace never started: a closed tab kept refreshing the dashboard,
+  flushing the worker modal and listening for worker events for that hour,
+  and held a granian worker open across a reload. The check now reads
+  `page.expires_at`, the state Flet itself sets on disconnect and clears on
+  reconnect.
+
 ## [0.13.1] - 2026-09-23
 
 ### Changed

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: aegis-stack
-Version: 0.13.1
+Version: 0.13.2
 Summary: A production-ready FastAPI platform with modular components and a built-in control plane. Try: uvx aegis-stack init my-project
 Project-URL: Homepage, https://aegis-stack.io
 Project-URL: Documentation, https://docs.aegis-stack.io/
@@ -123,7 +123,7 @@ uvx aegis-stack init full-app --services auth,payment,comms --components worker,
 
 **Components** are infrastructure pieces (database, workers, scheduler, cache). **Services** are business capabilities (auth, AI, payments, comms).
 
-**Don't worry about what you pick today.** Add anything later with a single command, remove what you outgrow, no rework required.
+**Don't worry about what you pick today.** Add anything later with a single command and remove what you outgrow. Where a change touches files you've edited, your edits are merged in, and anything that can't merge cleanly is marked for you to review.
 
 ### Components
 
@@ -248,7 +248,7 @@ aegis update
 | Starter | Add Later? | Remove Later? | Git Conflicts? |
 |-----------|------------|---------------|----------------|
 | **Others** | Locked at init | Manual deletion | High risk |
-| **Aegis Stack** | One command | One command | Auto-handled |
+| **Aegis Stack** | One command | One command | Merged, conflicts marked for review |
 
 <img src="docs/images/aegis-evolution-demo.gif" alt="Component Evolution Demo" width="480">
 

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/README.md

@@ -63,7 +63,7 @@ uvx aegis-stack init full-app --services auth,payment,comms --components worker,
 
 **Components** are infrastructure pieces (database, workers, scheduler, cache). **Services** are business capabilities (auth, AI, payments, comms).
 
-**Don't worry about what you pick today.** Add anything later with a single command, remove what you outgrow, no rework required.
+**Don't worry about what you pick today.** Add anything later with a single command and remove what you outgrow. Where a change touches files you've edited, your edits are merged in, and anything that can't merge cleanly is marked for you to review.
 
 ### Components
 
@@ -188,7 +188,7 @@ aegis update
 | Starter | Add Later? | Remove Later? | Git Conflicts? |
 |-----------|------------|---------------|----------------|
 | **Others** | Locked at init | Manual deletion | High risk |
-| **Aegis Stack** | One command | One command | Auto-handled |
+| **Aegis Stack** | One command | One command | Merged, conflicts marked for review |
 
 <img src="docs/images/aegis-evolution-demo.gif" alt="Component Evolution Demo" width="480">
 

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/__init__.py

@@ -2,4 +2,4 @@
 Aegis Stack CLI - Component generation and project management tools.
 """
 
-__version__ = "0.13.1"
+__version__ = "0.13.2"

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/commands/add_service.py

@@ -28,6 +28,12 @@ from ..core.component_utils import (
 )
 from ..core.components import COMPONENTS, CORE_COMPONENTS
 from ..core.copier_manager import load_copier_answers
+from ..core.copier_updater import (
+    cleanup_backup_tag,
+    create_backup_point,
+    rollback_to_backup,
+    validate_clean_git_tree,
+)
 from ..core.manual_updater import ManualUpdater
 from ..core.migration_generator import (
     MIGRATION_SPECS,
@@ -166,6 +172,13 @@ def add_service_command(
 
     # Verify project is in a git repository (required for Copier updates)
     validate_git_repository(target_path)
+    # A failed add is undone by resetting to a backup point, which is only
+    # safe when there is nothing uncommitted for the reset to take.
+    is_clean, git_message = validate_clean_git_tree(target_path)
+    if not is_clean:
+        brand.error(git_message, err=True)
+        typer.echo(f"   {t('add_service.commit_or_stash')}", err=True)
+        raise typer.Exit(1)
 
     # Parse services (respecting bracket syntax like ai[langchain,sqlite])
     assert services is not None  # Already validated by check above
@@ -352,7 +365,11 @@ def add_service_command(
         include_key = AnswerKeys.include_key(base_component)
         update_data[include_key] = True
 
-    # Add services using ManualUpdater
+    # Add services using ManualUpdater. Everything from here writes, so a
+    # failure anywhere resets to this point: files, the answers file and
+    # conflict markers all go back, and the add can simply be run again.
+    backup_tag = create_backup_point(target_path)
+    succeeded = False
     try:
         updater = ManualUpdater(target_path)
 
@@ -624,6 +641,13 @@ def add_service_command(
             cmd = typer.style(f"{project_slug} ai chat", bold=True)
             typer.echo(t("add_service.ai_test_cli", cmd=cmd))
 
+        succeeded = True
     except Exception as e:
         brand.error(f"\n{t('add_service.failed', error=e)}", err=True)
-        raise typer.Exit(1)
+        raise typer.Exit(1) from None
+    finally:
+        if backup_tag and not succeeded:
+            _, message = rollback_to_backup(target_path, backup_tag)
+            typer.echo(f"   {t('add_service.rolled_back', detail=message)}", err=True)
+        if backup_tag:
+            cleanup_backup_tag(target_path, backup_tag)

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/core/component_files.py

@@ -6,7 +6,7 @@ components by parsing the Copier template's exclusion rules.
 """
 
 import re
-from collections.abc import Iterable
+from collections.abc import Callable, Iterable
 from pathlib import Path
 from typing import Any
 
@@ -516,3 +516,24 @@ def get_shared_scope(all_paths: Iterable[str]) -> list[str]:
     scope = (candidates - owned) | (candidates & OWNED_BUT_SHARED_PATHS)
     scope -= _ENGINE_UNSAFE_PATHS
     return sorted(scope)
+
+
+def get_cross_spec_scope(
+    all_paths: Iterable[str], exists: Callable[[str], bool], operated: str
+) -> list[str]:
+    """Other specs' owned files that are on disk, for an add/remove of ``operated``.
+
+    A spec's files are copied once, when it is added, and never rendered
+    again - so a template that branches on ANOTHER spec's flag kept its
+    first render: ``add-service auth`` left ``finance/models/base.py`` with
+    no owner keys (#1217) and several routers without their auth guards.
+    Handing these to the render-diff engine is safe because it renders each
+    one before and after the operation and touches only those whose output
+    changes; the rest are no-ops. ``exists`` keeps existence manifest-owned:
+    a file not on disk is never created by an unrelated operation.
+    """
+    own = set(get_component_files(operated, full=True))
+    owned = get_all_owned_paths() - own
+    return sorted(
+        p for p in set(all_paths) & owned if p not in _ENGINE_UNSAFE_PATHS and exists(p)
+    )

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/core/manual_updater.py

@@ -36,6 +36,7 @@ from .component_files import (
     get_component_cleanup_paths,
     get_component_files,
     get_copier_defaults,
+    get_cross_spec_scope,
     get_shared_scope,
     get_template_path,
 )
@@ -557,7 +558,7 @@ class ManualUpdater:
                 shared_files_updated,
                 shared_files_backed_up,
                 shared_files_need_manual_merge,
-            ) = self._regenerate_shared_files(updated_answers)
+            ) = self._regenerate_shared_files(updated_answers, component)
 
             # Cross-spec: the shared cards/__init__.py just regenerated to
             # import ServicesCard if a service is now present — make sure the
@@ -776,7 +777,7 @@ class ManualUpdater:
                 shared_files_updated,
                 shared_files_backed_up,
                 shared_files_need_manual_merge,
-            ) = self._regenerate_shared_files(updated_answers)
+            ) = self._regenerate_shared_files(updated_answers, component)
 
             # Update .copier-answers.yml
             self._save_answers(updated_answers)
@@ -938,7 +939,7 @@ class ManualUpdater:
         spec.post_render(self.project_path, updated_answers)
 
     def _regenerate_shared_files(
-        self, updated_answers: dict[str, Any]
+        self, updated_answers: dict[str, Any], operated: str | None = None
     ) -> tuple[list[str], list[str], list[str]]:
         """
         Regenerate shared template files with updated answers.
@@ -952,8 +953,15 @@ class ManualUpdater:
         diffing, rather than from a hand-maintained file list — see
         ``aegis.core.render_diff`` for the full decision table.
 
+        Other specs' owned files that are on disk join the scope too
+        (``get_cross_spec_scope``): a file finance owns but that branches on
+        ``include_auth`` is re-rendered when auth is added (#1217).
+
         Args:
             updated_answers: Updated Copier answers with component changes
+            operated: The spec being added or removed; its own files are
+                copied or deleted by the caller, not re-rendered here.
+                ``None`` leaves other specs' files out of scope.
 
         Returns:
             Tuple of (updated_files, backed_up_files, need_manual_merge_files)
@@ -975,6 +983,13 @@ class ManualUpdater:
             for p in self._shared_scope
             if p not in OWNED_BUT_SHARED_PATHS or (self.project_path / p).exists()
         ]
+        if operated is not None:
+            scope += get_cross_spec_scope(
+                self._render_diff_engine.discover_paths(),
+                lambda rel: (self.project_path / rel).exists(),
+                operated,
+            )
+            scope = sorted(set(scope))
 
         engine = self._render_diff_engine
         plans = engine.plan(self.answers, updated_answers, paths=scope)
@@ -1445,7 +1460,7 @@ class ManualUpdater:
                 shared_updated,
                 shared_backed_up,
                 shared_manual_merge,
-            ) = self._regenerate_shared_files(updated_answers)
+            ) = self._regenerate_shared_files(updated_answers, spec.name)
 
             # Persist. If the disk cleanup below fails, the answers still
             # reflect reality and a re-run picks up where we left off.
@@ -1560,7 +1575,7 @@ class ManualUpdater:
                 shared_updated,
                 shared_backed_up,
                 shared_manual_merge,
-            ) = self._regenerate_shared_files(updated_answers)
+            ) = self._regenerate_shared_files(updated_answers, spec.name)
             files_modified.extend(shared_updated)
 
             # Persist once regen has its pre-operation baseline. Still

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/core/migration_generator.py

@@ -531,14 +531,31 @@ def _prepend_to_upgrade(name: str, src: str, tables: list[str]) -> str:
     CREATES it on a fresh project: there the clear runs against nothing and
     must not be an error.
     """
+    clears = "\n".join(_CLEAR_TABLE.format(table=t) for t in tables)
+    return _prepend_body(name, src, clears)
+
+
+def _prepend_body(name: str, src: str, body: str) -> str:
+    """Put ``body`` first in ``upgrade()``, ahead of the generated DDL."""
     marker = "def upgrade() -> None:\n"
     if marker not in src:
         raise MigrationGenerationError(
             f"{name}: no upgrade() to anchor data statements"
         )
     head, _, tail = src.partition(marker)
-    clears = "\n".join(_CLEAR_TABLE.format(table=t) for t in tables)
-    return f"{head}{marker}{clears}\n{tail}"
+    return f"{head}{marker}{body}\n{tail}"
+
+
+def _tables_changed(src: str, tables: list[str]) -> list[str]:
+    """The ``tables`` this revision's ``upgrade()`` actually operates on.
+
+    ``cleared_tables`` exists for the revision that adds a column old rows
+    cannot supply. Every later revision of the service inherited the clear,
+    so adding voice - new tables only - emptied the synced LLM catalog
+    (#1259). A table is cleared only when the revision names it.
+    """
+    upgrade = src.partition("def upgrade() -> None:")[2].partition("def downgrade")[0]
+    return [t for t in tables if f'"{t}"' in upgrade or f"'{t}'" in upgrade]
 
 
 def _place_data_statements(
@@ -547,10 +564,12 @@ def _place_data_statements(
     """Give every service's ``data_sql`` a revision to run in.
 
     The models decide the DDL; ``data_sql`` is the one thing they cannot
-    describe (a row a new FK points at, #1110). It rides in the revision
-    the run just wrote for its service, or - when the models produced
-    nothing for that service, as ``finance_auth_link`` does now that its
-    FKs are inline in ``finance`` - in a data-only revision written here.
+    describe (a row a new FK points at, #1110). It runs FIRST in the
+    revision the run just wrote for its service - the row has to exist
+    before the key that points at it, which Postgres checks on ``ADD
+    CONSTRAINT`` (#1217) - or, when the models produced nothing for that
+    service (``finance_auth_link`` on a fresh project, where the keys are
+    inline in ``finance``), in a data-only revision written here.
     Each statement must be idempotent: ``aegis update`` can deliver a
     revision to a database that already holds the row.
 
@@ -565,15 +584,12 @@ def _place_data_statements(
         own = [p for p in written if p.name.endswith(f"_{service}.py")]
         if own:
             src = own[0].read_text()
-            if spec.cleared_tables:
-                src = _prepend_to_upgrade(own[0].name, src, spec.cleared_tables)
+            # Prepended in reverse: clears end up first, then the data.
             if spec.data_sql or spec.data_body:
-                head, sep, tail = src.rpartition("\n\n\ndef downgrade")
-                if not sep:
-                    raise MigrationGenerationError(
-                        f"{own[0].name}: no downgrade() to anchor data statements"
-                    )
-                src = f"{head}\n{_upgrade_body(spec)}{sep}{tail}"
+                src = _prepend_body(own[0].name, src, _upgrade_body(spec))
+            touched = _tables_changed(src, spec.cleared_tables)
+            if touched:
+                src = _prepend_to_upgrade(own[0].name, src, touched)
             own[0].write_text(src)
         elif (spec.data_sql or spec.data_body) and not service_has_migration(
             project_path, service

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/i18n/locales/de.py

@@ -492,6 +492,11 @@ MESSAGES: dict[str, str] = {
     ),
     "add_service.success": "Services hinzugefügt!",
     "add_service.failed": "Services konnten nicht hinzugefügt werden: {error}",
+    "add_service.commit_or_stash": (
+        "Commit or stash your changes before running 'aegis add-service': "
+        "a failed add is undone by resetting to the last commit."
+    ),
+    "add_service.rolled_back": "Nothing was added. {detail}",
     "add_service.auth_setup": "Auth Service Einrichtung:",
     "add_service.auth_create_users": "   1. Testbenutzer erstellen: {cmd}",
     "add_service.auth_view_routes": "   2. Auth-Routen anzeigen: {url}",

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/i18n/locales/en.py

@@ -505,6 +505,11 @@ MESSAGES: dict[str, str] = {
     ),
     "add_service.success": "Services added successfully!",
     "add_service.failed": "Failed to add services: {error}",
+    "add_service.commit_or_stash": (
+        "Commit or stash your changes before running 'aegis add-service': "
+        "a failed add is undone by resetting to the last commit."
+    ),
+    "add_service.rolled_back": "Nothing was added. {detail}",
     "add_service.auth_setup": "Auth Service Setup:",
     "add_service.auth_create_users": "   1. Create test users: {cmd}",
     "add_service.auth_view_routes": "   2. View auth routes: {url}",

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/i18n/locales/es.py

@@ -494,6 +494,11 @@ MESSAGES: dict[str, str] = {
     ),
     "add_service.success": "¡Servicios agregados!",
     "add_service.failed": "Error al agregar servicios: {error}",
+    "add_service.commit_or_stash": (
+        "Commit or stash your changes before running 'aegis add-service': "
+        "a failed add is undone by resetting to the last commit."
+    ),
+    "add_service.rolled_back": "Nothing was added. {detail}",
     "add_service.auth_setup": "Configuración de Auth:",
     "add_service.auth_create_users": "   1. Crear usuarios de prueba: {cmd}",
     "add_service.auth_view_routes": "   2. Ver rutas de auth: {url}",

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/i18n/locales/fr.py

@@ -494,6 +494,11 @@ MESSAGES: dict[str, str] = {
     ),
     "add_service.success": "Services ajoutés !",
     "add_service.failed": "Échec de l'ajout des services : {error}",
+    "add_service.commit_or_stash": (
+        "Commit or stash your changes before running 'aegis add-service': "
+        "a failed add is undone by resetting to the last commit."
+    ),
+    "add_service.rolled_back": "Nothing was added. {detail}",
     "add_service.auth_setup": "Configuration du service Auth :",
     "add_service.auth_create_users": "   1. Créer des utilisateurs de test : {cmd}",
     "add_service.auth_view_routes": "   2. Voir les routes d'authentification : {url}",

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/i18n/locales/ja.py

@@ -480,6 +480,11 @@ MESSAGES: dict[str, str] = {
     ),
     "add_service.success": "サービス追加完了！",
     "add_service.failed": "サービス追加失敗：{error}",
+    "add_service.commit_or_stash": (
+        "Commit or stash your changes before running 'aegis add-service': "
+        "a failed add is undone by resetting to the last commit."
+    ),
+    "add_service.rolled_back": "Nothing was added. {detail}",
     "add_service.auth_setup": "Auth サービスのセットアップ：",
     "add_service.auth_create_users": "   1. テストユーザーを作成：{cmd}",
     "add_service.auth_view_routes": "   2. 認証ルートを確認：{url}",

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/i18n/locales/ko.py

@@ -465,6 +465,11 @@ MESSAGES: dict[str, str] = {
     ),
     "add_service.success": "서비스 추가 완료!",
     "add_service.failed": "서비스 추가 실패: {error}",
+    "add_service.commit_or_stash": (
+        "Commit or stash your changes before running 'aegis add-service': "
+        "a failed add is undone by resetting to the last commit."
+    ),
+    "add_service.rolled_back": "Nothing was added. {detail}",
     "add_service.auth_setup": "Auth 서비스 설정:",
     "add_service.auth_create_users": "   1. 테스트 사용자 생성: {cmd}",
     "add_service.auth_view_routes": "   2. 인증 라우트 확인: {url}",

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/i18n/locales/ru.py

@@ -470,6 +470,11 @@ MESSAGES: dict[str, str] = {
     ),
     "add_service.success": "Сервисы добавлены!",
     "add_service.failed": "Не удалось добавить сервисы: {error}",
+    "add_service.commit_or_stash": (
+        "Commit or stash your changes before running 'aegis add-service': "
+        "a failed add is undone by resetting to the last commit."
+    ),
+    "add_service.rolled_back": "Nothing was added. {detail}",
     "add_service.auth_setup": "Настройка Auth:",
     "add_service.auth_create_users": "   1. Создайте тестовых пользователей: {cmd}",
     "add_service.auth_view_routes": "   2. Просмотр маршрутов аутентификации: {url}",

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/i18n/locales/zh.py

@@ -388,6 +388,11 @@ MESSAGES: dict[str, str] = {
     "add_service.migration_failed": ("提示：自动迁移未成功，请手动执行 make migrate"),
     "add_service.success": "服务已添加成功",
     "add_service.failed": "服务添加失败：{error}",
+    "add_service.commit_or_stash": (
+        "Commit or stash your changes before running 'aegis add-service': "
+        "a failed add is undone by resetting to the last commit."
+    ),
+    "add_service.rolled_back": "Nothing was added. {detail}",
     "add_service.auth_setup": "认证服务配置：",
     "add_service.auth_create_users": "   1. 创建测试用户：{cmd}",
     "add_service.auth_view_routes": "   2. 查看认证路由：{url}",

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/i18n/locales/zh_hant.py

@@ -388,6 +388,11 @@ MESSAGES: dict[str, str] = {
     "add_service.migration_failed": ("提示：自動遷移未成功，請手動執行 make migrate"),
     "add_service.success": "服務已添加成功",
     "add_service.failed": "服務添加失敗：{error}",
+    "add_service.commit_or_stash": (
+        "Commit or stash your changes before running 'aegis add-service': "
+        "a failed add is undone by resetting to the last commit."
+    ),
+    "add_service.rolled_back": "Nothing was added. {detail}",
     "add_service.auth_setup": "認證服務設定：",
     "add_service.auth_create_users": "   1. 創建測試用戶：{cmd}",
     "add_service.auth_view_routes": "   2. 查看認證路由：{url}",

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/templates/copier-aegis-project/{{ project_slug }}/app/cli/ai/record.py.jinja

@@ -302,9 +302,13 @@ def record(
                         speech_result = await ai_service.tts.synthesize(speech_request)
 
                     # Save and play audio
-                    speech_path = Path(tempfile.mktemp(suffix=".mp3"))
-                    with open(speech_path, "wb") as f:
+                    # Created, not just named: mktemp leaves a window for
+                    # another process to take the path first.
+                    with tempfile.NamedTemporaryFile(
+                        suffix=".mp3", delete=False
+                    ) as f:
                         f.write(speech_result.audio)
+                    speech_path = Path(f.name)
 
                     # Try to play audio
                     played = False

{aegis_stack-0.13.1 → aegis_stack-0.13.2}/aegis/templates/copier-aegis-project/{{ project_slug }}/app/cli/migrate_gen.py.jinja

@@ -34,6 +34,7 @@ from alembic import command
 from alembic.config import Config
 from alembic.operations import ops
 from alembic.script import ScriptDirectory
+from app.cli.migrate_owners import claimed_by, includes_object
 from app.core.model_registry import import_all_models
 
 import_all_models()
@@ -42,60 +43,6 @@ ALEMBIC_INI = Path("alembic/alembic.ini")
 VERSIONS = Path("alembic/versions")
 
 
-# ---------------------------------------------------------------------------
-# Ownership: which service a table belongs to, from where its model lives
-# ---------------------------------------------------------------------------
-
-
-def _owners() -> dict[str, list[str]]:
-    """Map each table key to the service names that may claim it.
-
-    ``app.services.ai.models.agents.tool`` offers ``ai_agents`` then ``ai``;
-    ``app.models.org`` offers ``auth_org`` then ``auth``. The first name in
-    the requested service list wins, so a stack adding ``ai[agents]`` later
-    gets its own ``NNN_ai_agents.py`` while a fresh init folds it into ``ai``.
-    """
-    owners: dict[str, list[str]] = {}
-    for mapper in SQLModel._sa_registry.mappers:
-        parts = mapper.class_.__module__.split(".")
-        if parts[:2] == ["app", "models"]:
-            base, sub = "auth", parts[2:3]
-        elif parts[:2] == ["app", "services"] and "models" in parts:
-            base = parts[2]
-            sub = parts[parts.index("models") + 1 : parts.index("models") + 2]
-        else:
-            continue
-        names = [f"{base}_{sub[0]}", base] if sub else [base]
-        owners[mapper.persist_selectable.key] = names
-    return owners
-
-
-def _sweep_target(all_services: list[str]) -> str:
-    """Which revision of the run takes the tables nobody claims.
-
-    Core tables under ``app/models/`` (``conversation.py``, shipped with
-    ai) belong to no service package. Unclaimed must never mean uncreated,
-    or a foreign key to them fails, so one revision sweeps them up: the
-    first service that has no revision yet, which on ``aegis add`` is the
-    service being added rather than one that shipped long ago.
-    """
-    return next(
-        (s for s in all_services if not any(VERSIONS.glob(f"*_{s}.py"))),
-        all_services[0],
-    )
-
-
-def _claimed_by(service: str, all_services: list[str]) -> set[str]:
-    """Tables ``service`` writes when the run covers ``all_services``."""
-    sweep = _sweep_target(all_services)
-    claimed = set()
-    for table, names in _owners().items():
-        winner = next((n for n in names if n in all_services), sweep)
-        if winner == service:
-            claimed.add(table)
-    return claimed
-
-
 # ---------------------------------------------------------------------------
 # Scratch database: SQLite, one attached database per Postgres schema
 # ---------------------------------------------------------------------------
@@ -205,17 +152,28 @@ def _next_rev_id() -> str:
     return f"{max(existing, default=0) + 1:03d}"
 
 
-def _reflected_column_sets(conn: Connection, table: str, schema: str | None) -> set[frozenset[str]]:
+def _reflected_column_sets(
+    conn: Connection, table: str, schema: str | None, *, foreign_keys: bool = False
+) -> set[frozenset[str]]:
+    """Column sets the database already covers, for ONE kind of object.
+
+    Foreign keys are compared with foreign keys, and indexes with indexes
+    and unique constraints. Pooled, an index on ``owner_user_id`` read as
+    the foreign key auth adds on that column, and the key was dropped.
+    """
     insp = inspect(conn)
     if not insp.has_table(table, schema=schema):
         return set()
+    if foreign_keys:
+        return {
+            frozenset(fk["constrained_columns"])
+            for fk in insp.get_foreign_keys(table, schema=schema)
+        }
     sets: set[frozenset[str]] = set()
     for ix in insp.get_indexes(table, schema=schema):
         sets.add(frozenset(c for c in ix["column_names"] if c))
     for uq in insp.get_unique_constraints(table, schema=schema):
         sets.add(frozenset(uq["column_names"]))
-    for fk in insp.get_foreign_keys(table, schema=schema):
-        sets.add(frozenset(fk["constrained_columns"]))
     return sets
 
 
@@ -314,7 +272,10 @@ def _additive(op: ops.MigrateOperation, conn: Connection) -> bool:
         # would, rather than losing the constraint on every SQLite project.
         if getattr(op, "constraint_name", None) is None:
             op.constraint_name = _conventional_name(op, table.name, cols)
-        return cols not in _reflected_column_sets(conn, table.name, table.schema)
+        is_fk = isinstance(op, ops.CreateForeignKeyOp)
+        return cols not in _reflected_column_sets(
+            conn, table.name, table.schema, foreign_keys=is_fk
+        )
     return False
 
 
@@ -418,13 +379,12 @@ def generate(services: list[str], scratch_dir: Path | None = None) -> list[Path]
     written: list[Path] = []
     with _connection(None, scratch_dir) as conn:
         for service in services:
-            claimed = _claimed_by(service, services)
+            claimed = claimed_by(service, services, VERSIONS)
             signature: dict[str, tuple[str, ...] | None] = {}
             cfg = _config(
                 conn,
-                include_object=lambda obj, name, type_, reflected, _cmp, claimed=claimed: (
-                    not reflected
-                    and (obj if type_ == "table" else obj.table).key in claimed
+                include_object=lambda obj, name, type_, reflected, _cmp, service=service, claimed=claimed: (
+                    includes_object(obj, type_, reflected, service, services, claimed)
                 ),
                 process_revision_directives=_prune(conn, signature),
                 compare_type=False,