mirror of
https://github.com/zvx-echo6/central.git
synced 2026-08-26 09:21:36 +00:00
malice
4bbe7d61a6
During the v0.14.0 prod deploy (2026-06-12) migration 042 was applied as `sudo -u postgres`, leaving config.monitoring_areas + its SERIAL sequence owned by postgres while the `central` app role expects ownership-based access. We patched prod inline at the time with ALTER ... OWNER TO central, but the migration FILE was never updated -- so a fresh install (dev clone, eventual prod rebuild) would hit the same footgun. Append two idempotent ALTERs (table + sequence OWNER TO central) so 042 is self-healing. No-op when already central-owned. No new fields/event-types/ behavior, no migration re-apply, nothing to deploy (live prod table is already central-owned via the earlier inline fix). Test: test_grants_table_and_sequence_ownership_to_central asserts both ALTERs are present (whitespace-insensitive, matching the existing static checks). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
58 lines
3 KiB
SQL
58 lines
3 KiB
SQL
-- Migration 042: generalize the single system bbox into a named multi-area list (v0.14.0)
|
|
--
|
|
-- Until now the system monitoring area was a single rectangle stored as four
|
|
-- columns on the config.system singleton (monitor_north/south/east/west, added
|
|
-- by migration 030, default widened to full Idaho by 034). Matt needs to watch
|
|
-- several non-contiguous regions (Treasure Valley, Magic Valley, Mountain Home,
|
|
-- ...) without inflating one box to cover everything between them. This migration
|
|
-- introduces config.monitoring_areas: a list of named bboxes with set-union
|
|
-- semantics -- an event is kept by the archive (and at publish time) if its
|
|
-- geometry intersects ANY area in the list. An empty list keeps everything,
|
|
-- matching the pre-feature "no area configured" default.
|
|
--
|
|
-- The existing single bbox is preserved verbatim as the row named 'default',
|
|
-- carrying Matt's current production bounds (N=49.0 S=41.8 E=-111.0 W=-117.5).
|
|
--
|
|
-- The old config.system.monitor_* columns are intentionally LEFT IN PLACE for
|
|
-- v0.14.0 (consumers stop reading them; the GUI tile_url/attribution still live
|
|
-- on config.system). They are dropped in a follow-up (v0.14.1) once the new
|
|
-- table is proven on prod. Idempotent per docs/migrations.md.
|
|
|
|
CREATE TABLE IF NOT EXISTS config.monitoring_areas (
|
|
id SERIAL PRIMARY KEY,
|
|
name TEXT NOT NULL UNIQUE,
|
|
north DOUBLE PRECISION NOT NULL,
|
|
south DOUBLE PRECISION NOT NULL,
|
|
east DOUBLE PRECISION NOT NULL,
|
|
west DOUBLE PRECISION NOT NULL,
|
|
created_at TIMESTAMP NOT NULL DEFAULT now(),
|
|
updated_at TIMESTAMP NOT NULL DEFAULT now(),
|
|
CONSTRAINT monitoring_areas_lat_order CHECK (north > south),
|
|
CONSTRAINT monitoring_areas_lon_order CHECK (east > west)
|
|
);
|
|
|
|
CREATE INDEX IF NOT EXISTS monitoring_areas_name_idx ON config.monitoring_areas(name);
|
|
|
|
-- Seed the 'default' area from the existing single bbox so current bounds are
|
|
-- preserved on upgrade. Skipped cleanly if the row already exists (re-run) or if
|
|
-- any monitor_* column is NULL (no usable bbox -> nothing to migrate, list stays
|
|
-- empty = keep everything).
|
|
INSERT INTO config.monitoring_areas (name, north, south, east, west)
|
|
SELECT 'default', monitor_north, monitor_south, monitor_east, monitor_west
|
|
FROM config.system
|
|
WHERE id = true
|
|
AND monitor_north IS NOT NULL
|
|
AND monitor_south IS NOT NULL
|
|
AND monitor_east IS NOT NULL
|
|
AND monitor_west IS NOT NULL
|
|
ON CONFLICT (name) DO NOTHING;
|
|
|
|
-- Ownership fix (v0.14.5). During the v0.14.0 prod deploy (2026-06-12) this
|
|
-- migration was applied as `sudo -u postgres`, so the table + its SERIAL
|
|
-- sequence ended up owned by postgres while the `central` app role expects
|
|
-- ownership-based access (it could read but not manage the new config table).
|
|
-- We patched prod inline with these same ALTERs; making them part of the file
|
|
-- keeps fresh installs self-healing. Idempotent: a no-op when already owned by
|
|
-- central. (See central-manual-migration-owner-role.)
|
|
ALTER TABLE config.monitoring_areas OWNER TO central;
|
|
ALTER SEQUENCE config.monitoring_areas_id_seq OWNER TO central;
|