@agent-native/core 0.4.5 → 0.6.1

package/dist/scripts/db/check-scoping.js

@@ -0,0 +1,174 @@
+/**
+ * Core script: db-check-scoping
+ *
+ * Validates that all template tables have the required ownership columns
+ * (owner_email, org_id) for per-user and per-org data scoping.
+ *
+ * Tables without these columns are invisible to the scoping system and
+ * will be accessible to all users in production mode.
+ *
+ * Usage:
+ *   pnpm action db-check-scoping [--db path] [--require-org] [--format json]
+ */
+import path from "path";
+import { createClient } from "@libsql/client";
+import { getDatabaseUrl, getDatabaseAuthToken } from "../../db/client.js";
+import { parseArgs } from "../utils.js";
+function isPostgresUrl(url) {
+    return url.startsWith("postgres://") || url.startsWith("postgresql://");
+}
+// Core tables that have their own scoping — skip these in validation
+const CORE_TABLES = new Set([
+    "settings",
+    "application_state",
+    "oauth_tokens",
+    "sessions",
+    // framework internal tables
+    "resources",
+    "chat_threads",
+    "chat_messages",
+    "chat_tasks",
+    "recurring_jobs",
+    // drizzle/migration tables
+    "__drizzle_migrations",
+    "_litestream_lock",
+    "_litestream_seq",
+]);
+function validate(allColumns, requireOrg) {
+    const columnsByTable = new Map();
+    for (const { table, column } of allColumns) {
+        const cols = columnsByTable.get(table) || [];
+        cols.push(column);
+        columnsByTable.set(table, cols);
+    }
+    const results = [];
+    for (const [table, columns] of columnsByTable) {
+        // Skip core/framework tables
+        if (CORE_TABLES.has(table))
+            continue;
+        // Skip migration-related tables
+        if (table.startsWith("_"))
+            continue;
+        const hasOwnerEmail = columns.includes("owner_email");
+        const hasOrgId = columns.includes("org_id");
+        const issues = [];
+        if (!hasOwnerEmail) {
+            issues.push("missing owner_email column — not scoped per-user");
+        }
+        if (requireOrg && !hasOrgId) {
+            issues.push("missing org_id column — not scoped per-org");
+        }
+        results.push({ table, hasOwnerEmail, hasOrgId, issues });
+    }
+    return results;
+}
+async function discoverColumnsPostgres(pgSql) {
+    const rows = await pgSql `
+    SELECT table_name, column_name
+    FROM information_schema.columns
+    WHERE table_schema = 'public'
+    ORDER BY table_name, ordinal_position
+  `;
+    return rows.map((r) => ({ table: r.table_name, column: r.column_name }));
+}
+async function discoverColumnsSqlite(client) {
+    const tablesResult = await client.execute(`SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'`);
+    const tables = tablesResult.rows.map((r) => (r.name ?? r[0]));
+    const result = [];
+    for (const table of tables) {
+        const escaped = table.replace(/"/g, '""');
+        const colsResult = await client.execute(`PRAGMA table_info("${escaped}")`);
+        for (const row of colsResult.rows) {
+            result.push({
+                table,
+                column: (row.name ?? row[1]),
+            });
+        }
+    }
+    return result;
+}
+export default async function dbCheckScoping(args) {
+    const parsed = parseArgs(args);
+    if (parsed.help === "true") {
+        console.log(`Usage: pnpm action db-check-scoping [options]
+
+Options:
+  --db <path>       Path to SQLite database (default: data/app.db)
+  --require-org     Also check for org_id column (for multi-org apps)
+  --format json     Output as JSON
+  --help            Show this help message`);
+        return;
+    }
+    const requireOrg = parsed["require-org"] === "true";
+    const format = parsed.format;
+    // Resolve database URL
+    let url;
+    if (parsed.db) {
+        url = "file:" + path.resolve(parsed.db);
+    }
+    else if (getDatabaseUrl()) {
+        url = getDatabaseUrl();
+    }
+    else {
+        url = "file:" + path.resolve(process.cwd(), "data", "app.db");
+    }
+    let allColumns;
+    if (isPostgresUrl(url)) {
+        const { default: pg } = await import("postgres");
+        const pgSql = pg(url);
+        try {
+            allColumns = await discoverColumnsPostgres(pgSql);
+        }
+        finally {
+            await pgSql.end();
+        }
+    }
+    else {
+        const client = createClient({
+            url,
+            authToken: getDatabaseAuthToken(),
+        });
+        try {
+            allColumns = await discoverColumnsSqlite(client);
+        }
+        finally {
+            client.close();
+        }
+    }
+    const results = validate(allColumns, requireOrg);
+    if (format === "json") {
+        console.log(JSON.stringify({ tables: results }, null, 2));
+        return;
+    }
+    const withIssues = results.filter((r) => r.issues.length > 0);
+    const ok = results.filter((r) => r.issues.length === 0);
+    if (ok.length > 0) {
+        console.log("Scoped tables:");
+        for (const r of ok) {
+            const scopes = [
+                r.hasOwnerEmail ? "owner_email" : null,
+                r.hasOrgId ? "org_id" : null,
+            ]
+                .filter(Boolean)
+                .join(", ");
+            console.log(`  ✓ ${r.table} (${scopes})`);
+        }
+        console.log();
+    }
+    if (withIssues.length > 0) {
+        console.log("Unscoped tables (WARNING):");
+        for (const r of withIssues) {
+            for (const issue of r.issues) {
+                console.log(`  ✗ ${r.table} — ${issue}`);
+            }
+        }
+        console.log();
+        console.log(`${withIssues.length} table(s) lack scoping columns. ` +
+            `In production, agents can see ALL rows in these tables regardless of user/org.`);
+        process.exitCode = 1;
+    }
+    else {
+        console.log("All template tables have proper scoping columns.");
+    }
+}
+//# sourceMappingURL=check-scoping.js.map

package/dist/scripts/db/check-scoping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-scoping.js","sourceRoot":"","sources":["../../../src/scripts/db/check-scoping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAC1E,CAAC;AAOD,qEAAqE;AACrE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,UAAU;IACV,mBAAmB;IACnB,cAAc;IACd,UAAU;IACV,4BAA4B;IAC5B,WAAW;IACX,cAAc;IACd,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,2BAA2B;IAC3B,sBAAsB;IACtB,kBAAkB;IAClB,iBAAiB;CAClB,CAAC,CAAC;AASH,SAAS,QAAQ,CACf,UAAyB,EACzB,UAAmB;IAEnB,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAC9C,6BAA6B;QAC7B,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACrC,gCAAgC;QAChC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAEpC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAAU;IAC/C,MAAM,IAAI,GAAU,MAAM,KAAK,CAAA;;;;;GAK9B,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,MAAW;IAC9C,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,OAAO,CACvC,gFAAgF,CACjF,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,OAAO,IAAI,CAAC,CAAC;QAC3E,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK;gBACL,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAW;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,cAAc,CAAC,IAAc;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE/B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC;;;;;;2CAM2B,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,KAAK,MAAM,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,uBAAuB;IACvB,IAAI,GAAW,CAAC;IAChB,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,cAAc,EAAE,EAAE,CAAC;QAC5B,GAAG,GAAG,cAAc,EAAE,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,UAAyB,CAAC;IAE9B,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,GAAG;YACH,SAAS,EAAE,oBAAoB,EAAE;SAClC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAEjD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IAExD,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG;gBACb,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;gBACtC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;aAC7B;iBACE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM,KAAK,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,CAAC,MAAM,kCAAkC;YACpD,gFAAgF,CACnF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;AACH,CAAC"}

package/dist/scripts/db/exec.d.ts

@@ -2,10 +2,15 @@
  * Core script: db-exec
  *
  * Execute a write SQL statement (INSERT, UPDATE, DELETE, etc.)
- * against a SQLite database.
+ * against a SQLite or Postgres database.
+ *
+ * In production mode, temporary views scope UPDATE/DELETE to the current
+ * user's data (AGENT_USER_EMAIL / AGENT_ORG_ID). For INSERT, the
+ * `owner_email` and `org_id` columns are auto-injected if the target
+ * table uses the ownership convention.
  *
  * Usage:
- *   pnpm script db-exec --sql "UPDATE forms SET status='published' WHERE id='abc'" [--db path]
+ *   pnpm action db-exec --sql "UPDATE forms SET status='published' WHERE id='abc'" [--db path]
  */
 export default function dbExec(args: string[]): Promise<void>;
 //# sourceMappingURL=exec.d.ts.map

package/dist/scripts/db/exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../../src/scripts/db/exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,wBAA8B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAyGlE"}
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../../src/scripts/db/exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAmIH,wBAA8B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwIlE"}

package/dist/scripts/db/exec.js

@@ -2,18 +2,109 @@
  * Core script: db-exec
  *
  * Execute a write SQL statement (INSERT, UPDATE, DELETE, etc.)
- * against a SQLite database.
+ * against a SQLite or Postgres database.
+ *
+ * In production mode, temporary views scope UPDATE/DELETE to the current
+ * user's data (AGENT_USER_EMAIL / AGENT_ORG_ID). For INSERT, the
+ * `owner_email` and `org_id` columns are auto-injected if the target
+ * table uses the ownership convention.
  *
  * Usage:
- *   pnpm script db-exec --sql "UPDATE forms SET status='published' WHERE id='abc'" [--db path]
+ *   pnpm action db-exec --sql "UPDATE forms SET status='published' WHERE id='abc'" [--db path]
  */
 import path from "path";
 import { createClient } from "@libsql/client";
+import { getDatabaseUrl, getDatabaseAuthToken } from "../../db/client.js";
 import { parseArgs, fail } from "../utils.js";
+import { buildScopingPostgres, buildScopingSqlite, } from "./scoping.js";
+function isPostgresUrl(url) {
+    return url.startsWith("postgres://") || url.startsWith("postgresql://");
+}
+/**
+ * For INSERT statements targeting a table with owner_email / org_id columns,
+ * auto-inject the current user's email and org ID if not already present.
+ *
+ * Handles the explicit column list form:
+ *   INSERT INTO table (col1, col2) VALUES (val1, val2)
+ */
+function injectOwnership(sql, scoping) {
+    if (!scoping.active)
+        return sql;
+    const upper = sql
+        .replace(/^\s*--[^\n]*\n/gm, "")
+        .replace(/\/\*[\s\S]*?\*\//g, "")
+        .trim()
+        .toUpperCase();
+    if (!upper.startsWith("INSERT"))
+        return sql;
+    // Extract table name: INSERT INTO <table> ...
+    const match = sql.match(/INSERT\s+INTO\s+["']?(\w+)["']?/i);
+    if (!match)
+        return sql;
+    const tableName = match[1];
+    // Determine which columns to inject
+    const injections = [];
+    if (scoping.userEmail &&
+        scoping.ownerEmailTables.has(tableName) &&
+        !/owner_email/i.test(sql)) {
+        injections.push({
+            col: "owner_email",
+            value: `'${scoping.userEmail.replace(/'/g, "''")}'`,
+        });
+    }
+    if (scoping.orgId &&
+        scoping.orgIdTables.has(tableName) &&
+        !/org_id/i.test(sql)) {
+        injections.push({
+            col: "org_id",
+            value: `'${scoping.orgId.replace(/'/g, "''")}'`,
+        });
+    }
+    if (injections.length === 0)
+        return sql;
+    // Try to inject into explicit column list: INSERT INTO t (cols) VALUES (vals)
+    const colListMatch = sql.match(/(INSERT\s+INTO\s+["']?\w+["']?\s*)\(([^)]+)\)(\s*VALUES\s*)\(([^)]+)\)/i);
+    if (colListMatch) {
+        const [, prefix, cols, valueKeyword, vals] = colListMatch;
+        const extraCols = injections.map((i) => i.col).join(", ");
+        const extraVals = injections.map((i) => i.value).join(", ");
+        return `${prefix}(${cols}, ${extraCols})${valueKeyword}(${vals}, ${extraVals})`;
+    }
+    return sql;
+}
+function printResult(sql, result, hasReturning, format) {
+    if (hasReturning && result.rows && result.rows.length > 0) {
+        if (format === "json") {
+            console.log(JSON.stringify({ sql, rows: result.rows, count: result.rows.length }, null, 2));
+            return;
+        }
+        console.log(`Executed: ${sql}`);
+        console.log(`Returned ${result.rows.length} row(s):`);
+        console.log(JSON.stringify(result.rows, null, 2));
+    }
+    else {
+        const changes = result.count ?? result.rowsAffected ?? 0;
+        if (format === "json") {
+            console.log(JSON.stringify({
+                sql,
+                changes,
+                ...(result.lastInsertRowid && changes > 0
+                    ? { lastInsertRowid: Number(result.lastInsertRowid) }
+                    : {}),
+            }, null, 2));
+            return;
+        }
+        console.log(`Executed: ${sql}`);
+        console.log(`Changes: ${changes}`);
+        if (result.lastInsertRowid && changes > 0) {
+            console.log(`Last Insert Row ID: ${result.lastInsertRowid}`);
+        }
+    }
+}
 export default async function dbExec(args) {
     const parsed = parseArgs(args);
     if (parsed.help === "true") {
-        console.log(`Usage: pnpm script db-exec --sql "<statement>" [options]
+        console.log(`Usage: pnpm action db-exec --sql "<statement>" [options]
 
 Options:
   --sql <stmt>    SQL statement to execute (required)
@@ -46,52 +137,68 @@ Options:
     if (parsed.db) {
         url = "file:" + path.resolve(parsed.db);
     }
-    else if (process.env.DATABASE_URL) {
-        url = process.env.DATABASE_URL;
+    else if (getDatabaseUrl()) {
+        url = getDatabaseUrl();
     }
     else {
         url = "file:" + path.resolve(process.cwd(), "data", "app.db");
     }
+    const hasReturning = /\bRETURNING\b/i.test(stripped);
+    // Postgres path
+    if (isPostgresUrl(url)) {
+        const { default: pg } = await import("postgres");
+        const pgSql = pg(url);
+        try {
+            // Set up user-scoped temp views in production
+            const scoping = await buildScopingPostgres(pgSql);
+            // For UPDATE/DELETE: temp views scope to current user's rows
+            for (const stmt of scoping.setup) {
+                await pgSql.unsafe(stmt);
+            }
+            // For INSERT: auto-inject owner_email / org_id
+            const finalSql = injectOwnership(sql, scoping);
+            const result = await pgSql.unsafe(finalSql);
+            const rows = hasReturning && result.length > 0 ? Array.from(result) : [];
+            printResult(finalSql, { count: result.count ?? 0, rows }, hasReturning, parsed.format);
+            for (const stmt of scoping.teardown) {
+                await pgSql.unsafe(stmt).catch(() => { });
+            }
+        }
+        finally {
+            await pgSql.end();
+        }
+        return;
+    }
+    // libsql / SQLite path
     const client = createClient({
         url,
-        authToken: process.env.DATABASE_AUTH_TOKEN,
+        authToken: getDatabaseAuthToken(),
     });
     try {
-        // Detect if the SQL has a RETURNING clause — those produce rows
-        const hasReturning = /\bRETURNING\b/i.test(stripped);
-        const result = await client.execute(sql);
-        if (hasReturning && result.rows.length > 0) {
-            const rows = result.rows.map((row) => {
+        // Set up user-scoped temp views in production
+        const scoping = await buildScopingSqlite(client);
+        for (const stmt of scoping.setup) {
+            await client.execute(stmt);
+        }
+        // For INSERT: auto-inject owner_email / org_id
+        const finalSql = injectOwnership(sql, scoping);
+        const result = await client.execute(finalSql);
+        const rows = hasReturning && result.rows.length > 0
+            ? result.rows.map((row) => {
                 const obj = {};
                 for (let i = 0; i < result.columns.length; i++) {
                     obj[result.columns[i]] = row[i];
                 }
                 return obj;
-            });
-            if (parsed.format === "json") {
-                console.log(JSON.stringify({ sql, rows, count: rows.length }, null, 2));
-                return;
-            }
-            console.log(`Executed: ${sql}`);
-            console.log(`Returned ${rows.length} row(s):`);
-            if (rows.length > 0) {
-                console.log(JSON.stringify(rows, null, 2));
-            }
-        }
-        else {
-            if (parsed.format === "json") {
-                console.log(JSON.stringify({
-                    sql,
-                    changes: result.rowsAffected,
-                    lastInsertRowid: Number(result.lastInsertRowid ?? 0),
-                }, null, 2));
-                return;
-            }
-            console.log(`Executed: ${sql}`);
-            console.log(`Changes: ${result.rowsAffected}`);
-            if (result.lastInsertRowid && result.rowsAffected > 0) {
-                console.log(`Last Insert Row ID: ${result.lastInsertRowid}`);
-            }
+            })
+            : [];
+        printResult(finalSql, {
+            rowsAffected: result.rowsAffected,
+            lastInsertRowid: result.lastInsertRowid,
+            rows,
+        }, hasReturning, parsed.format);
+        for (const stmt of scoping.teardown) {
+            await client.execute(stmt).catch(() => { });
         }
     }
     finally {

package/dist/scripts/db/exec.js.map

@@ -1 +1 @@
-{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../../src/scripts/db/exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE/B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC;;;;;;yCAMyB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CACF,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,GAAG;SACjB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,IAAI,EAAE,CAAC;IACV,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAExD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC/C,IAAI,CACF,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAChD,IAAI,CACF,QAAQ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B;YACnD,yEAAyE,CAC5E,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,IAAI,GAAW,CAAC;IAChB,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QACpC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,GAAG;QACH,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;KAC3C,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,gEAAgE;QAChE,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,GAA8B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC9D,MAAM,GAAG,GAA4B,EAAE,CAAC;gBACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC/C,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;oBACE,GAAG;oBACH,OAAO,EAAE,MAAM,CAAC,YAAY;oBAC5B,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;iBACrD,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC"}
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../../src/scripts/db/exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GAEnB,MAAM,cAAc,CAAC;AAEtB,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,GAAW,EAAE,OAAuB;IAC3D,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC;IAEhC,MAAM,KAAK,GAAG,GAAG;SACd,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC;IAE5C,8CAA8C;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IAEvB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,oCAAoC;IACpC,MAAM,UAAU,GAAqC,EAAE,CAAC;IAExD,IACE,OAAO,CAAC,SAAS;QACjB,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QACvC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EACzB,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,GAAG,EAAE,aAAa;YAClB,KAAK,EAAE,IAAI,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG;SACpD,CAAC,CAAC;IACL,CAAC;IAED,IACE,OAAO,CAAC,KAAK;QACb,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EACpB,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,GAAG,EAAE,QAAQ;YACb,KAAK,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG;SAChD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAExC,8EAA8E;IAC9E,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAC5B,yEAAyE,CAC1E,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC;QAC1D,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,GAAG,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,IAAI,IAAI,KAAK,SAAS,GAAG,CAAC;IAClF,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAClB,GAAW,EACX,MAKC,EACD,YAAqB,EACrB,MAAe;IAEf,IAAI,YAAY,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EACrD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;gBACE,GAAG;gBACH,OAAO;gBACP,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,OAAO,GAAG,CAAC;oBACvC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;oBACrD,CAAC,CAAC,EAAE,CAAC;aACR,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,eAAe,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE/B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC;;;;;;yCAMyB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CACF,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,GAAG;SACjB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,IAAI,EAAE,CAAC;IACV,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAExD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC/C,IAAI,CACF,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAChD,IAAI,CACF,QAAQ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B;YACnD,yEAAyE,CAC5E,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,IAAI,GAAW,CAAC;IAChB,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,cAAc,EAAE,EAAE,CAAC;QAC5B,GAAG,GAAG,cAAc,EAAE,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAErD,gBAAgB;IAChB,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,8CAA8C;YAC9C,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAElD,6DAA6D;YAC7D,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAED,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAE/C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,IAAI,GACR,YAAY,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAE9D,WAAW,CACT,QAAQ,EACR,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE,EAClC,YAAY,EACZ,MAAM,CAAC,MAAM,CACd,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QACD,OAAO;IACT,CAAC;IAED,uBAAuB;IACvB,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,GAAG;QACH,SAAS,EAAE,oBAAoB,EAAE;KAClC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,8CAA8C;QAC9C,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE9C,MAAM,IAAI,GACR,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YACpC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACtB,MAAM,GAAG,GAA4B,EAAE,CAAC;gBACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC/C,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QAET,WAAW,CACT,QAAQ,EACR;YACE,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,IAAI;SACL,EACD,YAAY,EACZ,MAAM,CAAC,MAAM,CACd,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/scripts/db/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/scripts/db/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAKzE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/scripts/db/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAQzE,CAAC"}

package/dist/scripts/db/index.js

@@ -2,5 +2,7 @@ export const coreDbScripts = {
     "db-schema": (args) => import("./schema.js").then((m) => m.default(args)),
     "db-query": (args) => import("./query.js").then((m) => m.default(args)),
     "db-exec": (args) => import("./exec.js").then((m) => m.default(args)),
+    "db-patch": (args) => import("./patch.js").then((m) => m.default(args)),
+    "db-check-scoping": (args) => import("./check-scoping.js").then((m) => m.default(args)),
 };
 //# sourceMappingURL=index.js.map

package/dist/scripts/db/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scripts/db/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GACxB;IACE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scripts/db/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GACxB;IACE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAC3B,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D,CAAC"}

package/dist/scripts/db/patch.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Core script: db-patch
+ *
+ * Surgical search-and-replace on a text column in any SQL table. Instead of
+ * re-sending the full column value (as `db-exec UPDATE` would require), the
+ * agent sends one or more `{find, replace}` pairs. The script reads the row,
+ * applies the edits in memory, and writes the result back in a single UPDATE.
+ *
+ * ## When to use which tool
+ *
+ *   Large text field, small slice to change       → db-patch (this)
+ *     e.g. fix one paragraph in a 50KB document, tweak one key in a dashboard
+ *     JSON blob, rename a label in a slide HTML string.
+ *
+ *   Short field, set outright                     → db-exec UPDATE
+ *     e.g. `UPDATE forms SET status = 'published' WHERE id = '...'`.
+ *
+ *   Multiple columns / computed values            → db-exec UPDATE
+ *     e.g. `UPDATE meals SET calories = calories + 50, ...`.
+ *
+ *   Domain-specific action exists                 → use that action
+ *     e.g. `edit-document` or `update-slide` — they also push live Yjs
+ *     updates to any open collaborative editor. db-patch is the generic
+ *     fallback for tables without a bespoke action.
+ *
+ * ## Why it's faster
+ *
+ *   The agent only has to transmit the diff (the `find` + `replace`
+ *   strings), not the full new value. For large text fields — multi-kilobyte
+ *   markdown documents, slide HTML, dashboard/form JSON — this dramatically
+ *   reduces tokens per edit and keeps concurrent edits composable.
+ *
+ * ## Security
+ *
+ *   In production mode, the same per-user / per-org temp view scoping that
+ *   `db-exec` uses applies here: the SELECT and UPDATE both go through the
+ *   scoped view, so you can never read or write rows outside the current
+ *   user's data. The WHERE clause is validated against a keyword denylist
+ *   (no ;, no chained statements, no DDL).
+ *
+ * ## Usage
+ *
+ *   pnpm action db-patch --table <t> --column <c> --where "<clause>" \
+ *     --find "old" --replace "new"
+ *
+ *   pnpm action db-patch --table decks --column data --where "id='d1'" \
+ *     --edits '[{"find":"Q3","replace":"Q4"},{"find":"$1M","replace":"$1.2M"}]'
+ */
+export default function dbPatch(args: string[]): Promise<void>;
+//# sourceMappingURL=patch.d.ts.map

package/dist/scripts/db/patch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.d.ts","sourceRoot":"","sources":["../../../src/scripts/db/patch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AA4VH,wBAA8B,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6FnE"}