-- A module's own secret asked for at a desk (novox/hq ADR 0277).
--
-- Every ask for a module's own secret at a desk: who asked, for which secret of which module on which
-- machine, at which desk, and how it ended. Read before a prompt opens, so that one open ask per secret and
-- few per hour hold: an agent that keeps a prompt in front of the operator until they type is refused.
create table secret_ask (
    id        bigserial   primary key,
    node      uuid        not null references node(id) on delete cascade,
    module    text        not null,
    name      text        not null,
    asked_by  text        not null,
    desk      text        not null,
    opened_at timestamptz not null default now(),
    ended_at  timestamptz,
    -- given · dismissed · timed-out · empty · refused · failed
    outcome   text
);
create index secret_ask_by_secret on secret_ask (node, module, name, opened_at desc);