@agent-native/core 0.8.2 → 0.10.0

package/dist/scripts/db/reset-dev-owner.js

@@ -0,0 +1,225 @@
+/**
+ * Core script: db-reset-dev-owner
+ *
+ * One-shot fix for local DBs that accumulated rows owned by the dev
+ * sentinel `local@localhost`. Pre-changes-53, db-exec / db-query /
+ * db-patch silently fell back to that owner when no real identity was
+ * present, so any data created via CLI runs (or by older versions of
+ * the runner) landed under the sentinel and is now invisible to the
+ * actual signed-in user.
+ *
+ * This script discovers every ownable table (those with an
+ * `owner_email` column), then re-points each `local@localhost` row to
+ * the email passed via `--to`. Optionally restricted to a single table
+ * with `--table`.
+ *
+ * Local-dev-only safety: refuses to run when `NODE_ENV=production` or
+ * when targeting a non-`file:` SQLite URL (no Postgres / Turso /
+ * shared-DB writes).
+ *
+ * Usage:
+ *   pnpm action db-reset-dev-owner --to matthew@builder.io
+ *   pnpm action db-reset-dev-owner --to matthew@builder.io --dry-run
+ *   pnpm action db-reset-dev-owner --to matthew@builder.io --table decks
+ *   pnpm action db-reset-dev-owner --to matthew@builder.io --db ./data/app.db
+ */
+import path from "path";
+import { createClient } from "@libsql/client";
+import { getDatabaseUrl, getDatabaseAuthToken } from "../../db/client.js";
+import { parseArgs } from "../utils.js";
+const DEV_FALLBACK_EMAIL = "local@localhost"; // guard:allow-localhost-fallback — script intentionally targets these rows
+function isPostgresUrl(url) {
+    return url.startsWith("postgres://") || url.startsWith("postgresql://");
+}
+function parseScriptArgs(args) {
+    const parsed = parseArgs(args);
+    if (parsed.help === "true")
+        return null;
+    const to = parsed.to?.trim();
+    if (!to || !to.includes("@")) {
+        console.error("Error: --to <email> is required and must look like an email address.");
+        return null;
+    }
+    if (to === DEV_FALLBACK_EMAIL) {
+        console.error(`Error: --to cannot be ${DEV_FALLBACK_EMAIL} (that's the sentinel we're fixing).`);
+        return null;
+    }
+    return {
+        to,
+        table: parsed.table?.trim() || undefined,
+        dryRun: parsed["dry-run"] === "true",
+        dbPath: parsed.db?.trim() || undefined,
+    };
+}
+function printHelp() {
+    console.log(`Usage: pnpm action db-reset-dev-owner --to <email> [options]
+
+Reassigns rows owned by '${DEV_FALLBACK_EMAIL}' to the given email across
+every table that has an 'owner_email' column. Use this once when an old
+local DB still has rows that the new (post-changes-53) scoping won't show
+to the actual signed-in user.
+
+Required:
+  --to <email>    Target email — usually the address you sign in with locally
+
+Options:
+  --table <name>  Only reset one table (default: every ownable table)
+  --dry-run       Print what would change without writing
+  --db <path>     SQLite database path (default: DATABASE_URL or ./data/app.db)
+  --help          Show this help message
+
+Refuses to run when NODE_ENV=production or against a non-local DB URL.`);
+}
+export default async function dbResetDevOwner(args) {
+    if (args.includes("--help") || args.length === 0) {
+        printHelp();
+        return;
+    }
+    const parsed = parseScriptArgs(args);
+    if (!parsed) {
+        // parseScriptArgs already printed the error; exit non-zero.
+        throw new Error("invalid arguments");
+    }
+    if (process.env.NODE_ENV === "production") {
+        console.error("Error: refusing to run db-reset-dev-owner with NODE_ENV=production.");
+        process.exit(1);
+    }
+    // Resolve target DB URL — same precedence as wipe-leaked-builder-keys.
+    let url;
+    if (parsed.dbPath) {
+        url = "file:" + path.resolve(parsed.dbPath);
+    }
+    else if (getDatabaseUrl()) {
+        url = getDatabaseUrl();
+    }
+    else {
+        url = "file:" + path.resolve(process.cwd(), "data", "app.db");
+    }
+    const isPostgres = isPostgresUrl(url);
+    const isLocalSqlite = url.startsWith("file:");
+    if (!isPostgres && !isLocalSqlite) {
+        console.error(`Error: refusing to run against shared DB URL ${url}. ` +
+            "This script is only for local SQLite files.");
+        process.exit(1);
+    }
+    if (isPostgres && process.env.AN_ALLOW_PG_DEV_OWNER_RESET !== "1") {
+        console.error("Error: refusing to run against a Postgres DB. Set " +
+            "AN_ALLOW_PG_DEV_OWNER_RESET=1 to override (only do this on a " +
+            "local Postgres you fully own — never on Neon/prod).");
+        process.exit(1);
+    }
+    const dbLabel = isLocalSqlite
+        ? url.slice("file:".length)
+        : (() => {
+            try {
+                return new URL(url).host || url;
+            }
+            catch {
+                return url;
+            }
+        })();
+    console.log(`[reset-dev-owner] target: ${dbLabel}` +
+        `${parsed.dryRun ? "  (dry-run)" : ""}`);
+    console.log(`[reset-dev-owner] reassigning '${DEV_FALLBACK_EMAIL}' → '${parsed.to}'`);
+    if (isPostgres) {
+        await runPostgres(url, parsed);
+    }
+    else {
+        await runSqlite(url, parsed);
+    }
+}
+async function runSqlite(url, args) {
+    const client = createClient({ url, authToken: getDatabaseAuthToken() });
+    try {
+        const tables = args.table
+            ? [args.table]
+            : await discoverSqliteOwnerTables(client);
+        if (tables.length === 0) {
+            console.log("[reset-dev-owner] no tables with owner_email column — nothing to do.");
+            return;
+        }
+        let totalUpdated = 0;
+        for (const table of tables) {
+            const escaped = table.replace(/"/g, '""');
+            const countRes = await client.execute({
+                sql: `SELECT COUNT(*) AS c FROM "${escaped}" WHERE owner_email = ?`,
+                args: [DEV_FALLBACK_EMAIL],
+            });
+            const count = Number(countRes.rows[0]?.c ?? 0);
+            if (count === 0) {
+                console.log(`  ${table}: 0 rows`);
+                continue;
+            }
+            console.log(`  ${table}: ${count} row(s)${args.dryRun ? "  (dry-run)" : ""}`);
+            if (args.dryRun)
+                continue;
+            const updateRes = await client.execute({
+                sql: `UPDATE "${escaped}" SET owner_email = ? WHERE owner_email = ?`,
+                args: [args.to, DEV_FALLBACK_EMAIL],
+            });
+            totalUpdated += updateRes.rowsAffected;
+        }
+        console.log(args.dryRun
+            ? `[reset-dev-owner] dry-run complete.`
+            : `[reset-dev-owner] reassigned ${totalUpdated} row(s) across ${tables.length} table(s).`);
+    }
+    finally {
+        client.close();
+    }
+}
+async function runPostgres(url, args) {
+    const { default: pg } = await import("postgres");
+    const sql = pg(url);
+    try {
+        const tables = args.table
+            ? [args.table]
+            : await discoverPostgresOwnerTables(sql);
+        if (tables.length === 0) {
+            console.log("[reset-dev-owner] no tables with owner_email column — nothing to do.");
+            return;
+        }
+        let totalUpdated = 0;
+        for (const table of tables) {
+            const countRes = (await sql.unsafe(`SELECT COUNT(*)::int AS c FROM "${table.replace(/"/g, '""')}" WHERE owner_email = $1`, [DEV_FALLBACK_EMAIL]));
+            const count = countRes[0]?.c ?? 0;
+            if (count === 0) {
+                console.log(`  ${table}: 0 rows`);
+                continue;
+            }
+            console.log(`  ${table}: ${count} row(s)${args.dryRun ? "  (dry-run)" : ""}`);
+            if (args.dryRun)
+                continue;
+            const updateRes = (await sql.unsafe(`UPDATE "${table.replace(/"/g, '""')}" SET owner_email = $1 WHERE owner_email = $2`, [args.to, DEV_FALLBACK_EMAIL]));
+            totalUpdated += updateRes.count ?? 0;
+        }
+        console.log(args.dryRun
+            ? `[reset-dev-owner] dry-run complete.`
+            : `[reset-dev-owner] reassigned ${totalUpdated} row(s) across ${tables.length} table(s).`);
+    }
+    finally {
+        await sql.end();
+    }
+}
+async function discoverSqliteOwnerTables(client) {
+    const tablesRes = await client.execute(`SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'`);
+    const out = [];
+    for (const row of tablesRes.rows) {
+        const table = (row.name ?? row[0]);
+        const escaped = table.replace(/"/g, '""');
+        const colsRes = await client.execute(`PRAGMA table_info("${escaped}")`);
+        const hasOwner = colsRes.rows.some((r) => (r.name ?? r[1]) === "owner_email");
+        if (hasOwner)
+            out.push(table);
+    }
+    return out;
+}
+async function discoverPostgresOwnerTables(sql) {
+    const rows = (await sql `
+    SELECT table_name
+    FROM information_schema.columns
+    WHERE table_schema = 'public' AND column_name = 'owner_email'
+    ORDER BY table_name
+  `);
+    return Array.from(rows).map((r) => r.table_name);
+}
+//# sourceMappingURL=reset-dev-owner.js.map

package/dist/scripts/db/reset-dev-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-dev-owner.js","sourceRoot":"","sources":["../../../src/scripts/db/reset-dev-owner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,CAAC,2EAA2E;AAEzH,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAC1E,CAAC;AASD,SAAS,eAAe,CAAC,IAAc;IACrC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAExC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CACX,sEAAsE,CACvE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,EAAE,KAAK,kBAAkB,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CACX,yBAAyB,kBAAkB,sCAAsC,CAClF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,EAAE;QACF,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS;QACxC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,MAAM;QACpC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;2BAEa,kBAAkB;;;;;;;;;;;;;;uEAc0B,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc;IAC1D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,4DAA4D;QAC5D,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CACX,qEAAqE,CACtE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,uEAAuE;IACvE,IAAI,GAAW,CAAC;IAChB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;SAAM,IAAI,cAAc,EAAE,EAAE,CAAC;QAC5B,GAAG,GAAG,cAAc,EAAE,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CACX,gDAAgD,GAAG,IAAI;YACrD,6CAA6C,CAChD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,EAAE,CAAC;QAClE,OAAO,CAAC,KAAK,CACX,oDAAoD;YAClD,+DAA+D;YAC/D,qDAAqD,CACxD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,aAAa;QAC3B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC3B,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IAET,OAAO,CAAC,GAAG,CACT,6BAA6B,OAAO,EAAE;QACpC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1C,CAAC;IACF,OAAO,CAAC,GAAG,CACT,kCAAkC,kBAAkB,QAAQ,MAAM,CAAC,EAAE,GAAG,CACzE,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,IAAU;IAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK;YACvB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YACd,CAAC,CAAC,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CACT,sEAAsE,CACvE,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;gBACpC,GAAG,EAAE,8BAA8B,OAAO,yBAAyB;gBACnE,IAAI,EAAE,CAAC,kBAAkB,CAAC;aAC3B,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;gBAClC,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,KAAK,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CACjE,CAAC;YACF,IAAI,IAAI,CAAC,MAAM;gBAAE,SAAS;YAC1B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;gBACrC,GAAG,EAAE,WAAW,OAAO,6CAA6C;gBACpE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC;aACpC,CAAC,CAAC;YACH,YAAY,IAAI,SAAS,CAAC,YAAY,CAAC;QACzC,CAAC;QAED,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,MAAM;YACT,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,gCAAgC,YAAY,kBAAkB,MAAM,CAAC,MAAM,YAAY,CAC5F,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAU;IAChD,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK;YACvB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YACd,CAAC,CAAC,MAAM,2BAA2B,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CACT,sEAAsE,CACvE,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAChC,mCAAmC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,0BAA0B,EACtF,CAAC,kBAAkB,CAAC,CACrB,CAAoC,CAAC;YACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;gBAClC,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,KAAK,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CACjE,CAAC;YACF,IAAI,IAAI,CAAC,MAAM;gBAAE,SAAS;YAC1B,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CACjC,WAAW,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,+CAA+C,EACnF,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAC9B,CAAkC,CAAC;YACpC,YAAY,IAAI,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,MAAM;YACT,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,gCAAgC,YAAY,kBAAkB,MAAM,CAAC,MAAM,YAAY,CAC5F,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,MAAW;IAClD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CACpC,gFAAgF,CACjF,CAAC;IACF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,OAAO,IAAI,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAChC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAC/C,CAAC;QACF,IAAI,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,GAAQ;IACjD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAA;;;;;GAKtB,CAA6C,CAAC;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACnD,CAAC","sourcesContent":["/**\n * Core script: db-reset-dev-owner\n *\n * One-shot fix for local DBs that accumulated rows owned by the dev\n * sentinel `local@localhost`. Pre-changes-53, db-exec / db-query /\n * db-patch silently fell back to that owner when no real identity was\n * present, so any data created via CLI runs (or by older versions of\n * the runner) landed under the sentinel and is now invisible to the\n * actual signed-in user.\n *\n * This script discovers every ownable table (those with an\n * `owner_email` column), then re-points each `local@localhost` row to\n * the email passed via `--to`. Optionally restricted to a single table\n * with `--table`.\n *\n * Local-dev-only safety: refuses to run when `NODE_ENV=production` or\n * when targeting a non-`file:` SQLite URL (no Postgres / Turso /\n * shared-DB writes).\n *\n * Usage:\n *   pnpm action db-reset-dev-owner --to matthew@builder.io\n *   pnpm action db-reset-dev-owner --to matthew@builder.io --dry-run\n *   pnpm action db-reset-dev-owner --to matthew@builder.io --table decks\n *   pnpm action db-reset-dev-owner --to matthew@builder.io --db ./data/app.db\n */\n\nimport path from \"path\";\nimport { createClient } from \"@libsql/client\";\nimport { getDatabaseUrl, getDatabaseAuthToken } from \"../../db/client.js\";\nimport { parseArgs } from \"../utils.js\";\n\nconst DEV_FALLBACK_EMAIL = \"local@localhost\"; // guard:allow-localhost-fallback — script intentionally targets these rows\n\nfunction isPostgresUrl(url: string): boolean {\n  return url.startsWith(\"postgres://\") || url.startsWith(\"postgresql://\");\n}\n\ninterface Args {\n  to: string;\n  table?: string;\n  dryRun: boolean;\n  dbPath?: string;\n}\n\nfunction parseScriptArgs(args: string[]): Args | null {\n  const parsed = parseArgs(args);\n  if (parsed.help === \"true\") return null;\n\n  const to = parsed.to?.trim();\n  if (!to || !to.includes(\"@\")) {\n    console.error(\n      \"Error: --to <email> is required and must look like an email address.\",\n    );\n    return null;\n  }\n  if (to === DEV_FALLBACK_EMAIL) {\n    console.error(\n      `Error: --to cannot be ${DEV_FALLBACK_EMAIL} (that's the sentinel we're fixing).`,\n    );\n    return null;\n  }\n\n  return {\n    to,\n    table: parsed.table?.trim() || undefined,\n    dryRun: parsed[\"dry-run\"] === \"true\",\n    dbPath: parsed.db?.trim() || undefined,\n  };\n}\n\nfunction printHelp(): void {\n  console.log(`Usage: pnpm action db-reset-dev-owner --to <email> [options]\n\nReassigns rows owned by '${DEV_FALLBACK_EMAIL}' to the given email across\nevery table that has an 'owner_email' column. Use this once when an old\nlocal DB still has rows that the new (post-changes-53) scoping won't show\nto the actual signed-in user.\n\nRequired:\n  --to <email>    Target email — usually the address you sign in with locally\n\nOptions:\n  --table <name>  Only reset one table (default: every ownable table)\n  --dry-run       Print what would change without writing\n  --db <path>     SQLite database path (default: DATABASE_URL or ./data/app.db)\n  --help          Show this help message\n\nRefuses to run when NODE_ENV=production or against a non-local DB URL.`);\n}\n\nexport default async function dbResetDevOwner(args: string[]): Promise<void> {\n  if (args.includes(\"--help\") || args.length === 0) {\n    printHelp();\n    return;\n  }\n\n  const parsed = parseScriptArgs(args);\n  if (!parsed) {\n    // parseScriptArgs already printed the error; exit non-zero.\n    throw new Error(\"invalid arguments\");\n  }\n\n  if (process.env.NODE_ENV === \"production\") {\n    console.error(\n      \"Error: refusing to run db-reset-dev-owner with NODE_ENV=production.\",\n    );\n    process.exit(1);\n  }\n\n  // Resolve target DB URL — same precedence as wipe-leaked-builder-keys.\n  let url: string;\n  if (parsed.dbPath) {\n    url = \"file:\" + path.resolve(parsed.dbPath);\n  } else if (getDatabaseUrl()) {\n    url = getDatabaseUrl();\n  } else {\n    url = \"file:\" + path.resolve(process.cwd(), \"data\", \"app.db\");\n  }\n\n  const isPostgres = isPostgresUrl(url);\n  const isLocalSqlite = url.startsWith(\"file:\");\n\n  if (!isPostgres && !isLocalSqlite) {\n    console.error(\n      `Error: refusing to run against shared DB URL ${url}. ` +\n        \"This script is only for local SQLite files.\",\n    );\n    process.exit(1);\n  }\n  if (isPostgres && process.env.AN_ALLOW_PG_DEV_OWNER_RESET !== \"1\") {\n    console.error(\n      \"Error: refusing to run against a Postgres DB. Set \" +\n        \"AN_ALLOW_PG_DEV_OWNER_RESET=1 to override (only do this on a \" +\n        \"local Postgres you fully own — never on Neon/prod).\",\n    );\n    process.exit(1);\n  }\n\n  const dbLabel = isLocalSqlite\n    ? url.slice(\"file:\".length)\n    : (() => {\n        try {\n          return new URL(url).host || url;\n        } catch {\n          return url;\n        }\n      })();\n\n  console.log(\n    `[reset-dev-owner] target: ${dbLabel}` +\n      `${parsed.dryRun ? \"  (dry-run)\" : \"\"}`,\n  );\n  console.log(\n    `[reset-dev-owner] reassigning '${DEV_FALLBACK_EMAIL}' → '${parsed.to}'`,\n  );\n\n  if (isPostgres) {\n    await runPostgres(url, parsed);\n  } else {\n    await runSqlite(url, parsed);\n  }\n}\n\nasync function runSqlite(url: string, args: Args): Promise<void> {\n  const client = createClient({ url, authToken: getDatabaseAuthToken() });\n  try {\n    const tables = args.table\n      ? [args.table]\n      : await discoverSqliteOwnerTables(client);\n\n    if (tables.length === 0) {\n      console.log(\n        \"[reset-dev-owner] no tables with owner_email column — nothing to do.\",\n      );\n      return;\n    }\n\n    let totalUpdated = 0;\n    for (const table of tables) {\n      const escaped = table.replace(/\"/g, '\"\"');\n      const countRes = await client.execute({\n        sql: `SELECT COUNT(*) AS c FROM \"${escaped}\" WHERE owner_email = ?`,\n        args: [DEV_FALLBACK_EMAIL],\n      });\n      const count = Number((countRes.rows[0] as any)?.c ?? 0);\n      if (count === 0) {\n        console.log(`  ${table}: 0 rows`);\n        continue;\n      }\n      console.log(\n        `  ${table}: ${count} row(s)${args.dryRun ? \"  (dry-run)\" : \"\"}`,\n      );\n      if (args.dryRun) continue;\n      const updateRes = await client.execute({\n        sql: `UPDATE \"${escaped}\" SET owner_email = ? WHERE owner_email = ?`,\n        args: [args.to, DEV_FALLBACK_EMAIL],\n      });\n      totalUpdated += updateRes.rowsAffected;\n    }\n\n    console.log(\n      args.dryRun\n        ? `[reset-dev-owner] dry-run complete.`\n        : `[reset-dev-owner] reassigned ${totalUpdated} row(s) across ${tables.length} table(s).`,\n    );\n  } finally {\n    client.close();\n  }\n}\n\nasync function runPostgres(url: string, args: Args): Promise<void> {\n  const { default: pg } = await import(\"postgres\");\n  const sql = pg(url);\n  try {\n    const tables = args.table\n      ? [args.table]\n      : await discoverPostgresOwnerTables(sql);\n\n    if (tables.length === 0) {\n      console.log(\n        \"[reset-dev-owner] no tables with owner_email column — nothing to do.\",\n      );\n      return;\n    }\n\n    let totalUpdated = 0;\n    for (const table of tables) {\n      const countRes = (await sql.unsafe(\n        `SELECT COUNT(*)::int AS c FROM \"${table.replace(/\"/g, '\"\"')}\" WHERE owner_email = $1`,\n        [DEV_FALLBACK_EMAIL],\n      )) as unknown as Array<{ c: number }>;\n      const count = countRes[0]?.c ?? 0;\n      if (count === 0) {\n        console.log(`  ${table}: 0 rows`);\n        continue;\n      }\n      console.log(\n        `  ${table}: ${count} row(s)${args.dryRun ? \"  (dry-run)\" : \"\"}`,\n      );\n      if (args.dryRun) continue;\n      const updateRes = (await sql.unsafe(\n        `UPDATE \"${table.replace(/\"/g, '\"\"')}\" SET owner_email = $1 WHERE owner_email = $2`,\n        [args.to, DEV_FALLBACK_EMAIL],\n      )) as unknown as { count?: number };\n      totalUpdated += updateRes.count ?? 0;\n    }\n\n    console.log(\n      args.dryRun\n        ? `[reset-dev-owner] dry-run complete.`\n        : `[reset-dev-owner] reassigned ${totalUpdated} row(s) across ${tables.length} table(s).`,\n    );\n  } finally {\n    await sql.end();\n  }\n}\n\nasync function discoverSqliteOwnerTables(client: any): Promise<string[]> {\n  const tablesRes = await client.execute(\n    `SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'`,\n  );\n  const out: string[] = [];\n  for (const row of tablesRes.rows) {\n    const table = (row.name ?? row[0]) as string;\n    const escaped = table.replace(/\"/g, '\"\"');\n    const colsRes = await client.execute(`PRAGMA table_info(\"${escaped}\")`);\n    const hasOwner = colsRes.rows.some(\n      (r: any) => (r.name ?? r[1]) === \"owner_email\",\n    );\n    if (hasOwner) out.push(table);\n  }\n  return out;\n}\n\nasync function discoverPostgresOwnerTables(sql: any): Promise<string[]> {\n  const rows = (await sql`\n    SELECT table_name\n    FROM information_schema.columns\n    WHERE table_schema = 'public' AND column_name = 'owner_email'\n    ORDER BY table_name\n  `) as unknown as Array<{ table_name: string }>;\n  return Array.from(rows).map((r) => r.table_name);\n}\n"]}

package/dist/scripts/db/scoping.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scoping.d.ts","sourceRoot":"","sources":["../../../src/scripts/db/scoping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAsLH,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iCAAiC;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,gEAAgE;IAChE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4DAA4D;IAC5D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,mEAAmE;IACnE,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,8DAA8D;IAC9D,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,GAAG,GACT,OAAO,CAAC,cAAc,CAAC,CA4CzB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC,CA2C7E"}
+{"version":3,"file":"scoping.d.ts","sourceRoot":"","sources":["../../../src/scripts/db/scoping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA6LH,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iCAAiC;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,gEAAgE;IAChE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4DAA4D;IAC5D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,mEAAmE;IACnE,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,8DAA8D;IAC9D,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,GAAG,GACT,OAAO,CAAC,cAAc,CAAC,CAmCzB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC,CA8B7E"}

package/dist/scripts/db/scoping.js

@@ -28,8 +28,15 @@ const ORG_COLUMN = "org_id";
 const DEV_FALLBACK_EMAIL = "local@localhost"; // guard:allow-localhost-fallback — sentinel is rejected below so DB scripts cannot silently scope to the dev fallback tenant
 function getUserEmail() {
     const userEmail = getRequestUserEmail() || null;
-    if (userEmail === DEV_FALLBACK_EMAIL) {
-        throw new Error("DB script scoping requires a real user identity; refusing to run with local@localhost.");
+    if (!userEmail || userEmail === DEV_FALLBACK_EMAIL) {
+        throw new Error("db-exec / db-query / db-patch require an authenticated user identity. " +
+            "Easiest fix: open the app at http://localhost:3000 and sign in — " +
+            "the CLI then auto-loads your session. Otherwise set " +
+            "AGENT_USER_EMAIL=<email> in the env, or invoke through an HTTP " +
+            "action that runs under runWithRequestContext. Refusing to run unscoped — " +
+            "an unscoped UPDATE/DELETE would touch every user's rows, and an " +
+            "unscoped INSERT would land with the dev sentinel owner and be invisible " +
+            "to the UI.");
     }
     return userEmail;
 }
@@ -149,21 +156,12 @@ function buildScopedTables(allColumns, userEmail, orgId, isPostgres) {
  * Returns setup/teardown SQL to run before/after the user's query.
  */
 export async function buildScopingPostgres(pgSql) {
-    const inactive = {
-        setup: [],
-        teardown: [],
-        active: false,
-        userEmail: null,
-        orgId: null,
-        ownerEmailTables: new Set(),
-        orgIdTables: new Set(),
-    };
-    // Scoping is always active when there is a request user (dev, preview, and
-    // prod). Previously this short-circuited outside production, which created
-    // a cross-user read in dev mode. See audit 05-tools-sandbox.md (C3.d).
+    // getUserEmail() throws when there is no authenticated user (no request
+    // context AND no AGENT_USER_EMAIL env) or when it resolves to the dev
+    // sentinel `local@localhost`. We let that throw propagate: the script
+    // refuses to run unscoped rather than silently writing rows that the UI
+    // then can't see, or running an UPDATE/DELETE across every user's data.
     const userEmail = getUserEmail();
-    if (!userEmail)
-        return inactive;
     const orgId = getOrgId();
     const allColumns = await discoverColumnsPostgres(pgSql);
     const scoped = buildScopedTables(allColumns, userEmail, orgId, true);
@@ -197,21 +195,8 @@ export async function buildScopingPostgres(pgSql) {
  * Returns setup/teardown SQL to run before/after the user's query.
  */
 export async function buildScopingSqlite(client) {
-    const inactive = {
-        setup: [],
-        teardown: [],
-        active: false,
-        userEmail: null,
-        orgId: null,
-        ownerEmailTables: new Set(),
-        orgIdTables: new Set(),
-    };
-    // Scoping is always active when there is a request user (dev, preview, and
-    // prod). Previously this short-circuited outside production, which created
-    // a cross-user read in dev mode. See audit 05-tools-sandbox.md (C3.d).
+    // See buildScopingPostgres: getUserEmail() throws on no user / dev sentinel.
     const userEmail = getUserEmail();
-    if (!userEmail)
-        return inactive;
     const orgId = getOrgId();
     const allColumns = await discoverColumnsSqlite(client);
     const scoped = buildScopedTables(allColumns, userEmail, orgId, false);

package/dist/scripts/db/scoping.js.map

@@ -1 +1 @@
-{"version":3,"file":"scoping.js","sourceRoot":"","sources":["../../../src/scripts/db/scoping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,2DAA2D;AAC3D,wCAAwC;AACxC,MAAM,kBAAkB,GAGpB;IACF,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,4BAA4B;IACzE,iBAAiB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1D,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;IAChD,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;CAC7C,CAAC;AAEF,2EAA2E;AAC3E,OAAO,EACL,mBAAmB,EACnB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,UAAU,GAAG,QAAQ,CAAC;AAC5B,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,CAAC,6HAA6H;AAO3K,SAAS,YAAY;IACnB,MAAM,SAAS,GAAG,mBAAmB,EAAE,IAAI,IAAI,CAAC;IAChD,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,eAAe,EAAE,IAAI,IAAI,CAAC;AACnC,CAAC;AASD,KAAK,UAAU,uBAAuB,CAAC,KAAU;IAC/C,MAAM,IAAI,GAAU,MAAM,KAAK,CAAA;;;;;GAK9B,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,MAAW;IAC9C,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,OAAO,CACvC,gFAAgF,CACjF,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,OAAO,IAAI,CAAC,CAAC;QAC3E,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK;gBACL,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAW;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAE/E,yEAAyE;AACzE,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,iBAAiB,CACxB,UAAyB,EACzB,SAAiB,EACjB,KAAoB,EACpB,UAAmB;IAEnB,yBAAyB;IACzB,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,eAAe,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACzD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExD,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;IAEjE,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAC9C,2BAA2B;QAC3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,GAAG,eAAe,IAAI,KAAK,GAAG,CAAC;YACjD,IAAI,QAAgB,CAAC;YACrB,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAClC,uCAAuC;gBACvC,gEAAgE;gBAChE,MAAM,SAAS,GAAG,SAAS;qBACxB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;qBACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;qBACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACxB,MAAM,MAAM,GAAG,KAAK,SAAS,GAAG,CAAC;gBACjC,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM,WAAW,MAAM,gBAAgB,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM,QAAQ,SAAS,GAAG,CAAC;YACxD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,kBAAkB,UAAU,KAAK,sBAAsB,SAAS,UAAU,QAAQ,GAAG,WAAW,EAAE;aAC5J,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IACE,KAAK,KAAK,WAAW;YACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC5B,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,eAAe,IAAI,KAAK,GAAG,CAAC;YACjD,MAAM,SAAS,GAAG,SAAS;gBACzB,CAAC,CAAC,6BAA6B,UAAU,QAAQ,SAAS,IAAI;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,kBAAkB,UAAU,KAAK,sBAAsB,SAAS,kCAAkC,YAAY,QAAQ,SAAS,KAAK,SAAS,IAAI,WAAW,EAAE;aACxN,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,iDAAiD;QACjD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE5C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,IAAI,YAAY,QAAQ,SAAS,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,QAAQ,SAAS,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,GAAG,eAAe,IAAI,KAAK,GAAG,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,kBAAkB,UAAU,KAAK,sBAAsB,SAAS,UAAU,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,WAAW,EAAE;aACzK,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAqBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAU;IAEV,MAAM,QAAQ,GAAmB;QAC/B,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,gBAAgB,EAAE,IAAI,GAAG,EAAE;QAC3B,WAAW,EAAE,IAAI,GAAG,EAAE;KACvB,CAAC;IAEF,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAEhC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAErE,oEAAoE;IACpE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACnC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,CAAC,CAAC,IAAI,GAAG,CAAC;QACtE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;QACzB,SAAS;QACT,KAAK;QACL,gBAAgB;QAChB,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAW;IAClD,MAAM,QAAQ,GAAmB;QAC/B,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,gBAAgB,EAAE,IAAI,GAAG,EAAE;QAC3B,WAAW,EAAE,IAAI,GAAG,EAAE;KACvB,CAAC;IAEF,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAEhC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAEtE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACnC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,IAAI,GAAG,CAAC;QAC9D,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;QACzB,SAAS;QACT,KAAK;QACL,gBAAgB;QAChB,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Per-user and per-org data scoping for db-query / db-exec.\n *\n * In production mode, creates temporary views that shadow real tables so\n * that raw SQL only sees the current user's (and org's) data.\n *\n * Convention:\n *   - Template tables use an `owner_email` column for user scoping.\n *   - Template tables use an `org_id` column for org scoping.\n *   - Core tables have their own scoping patterns (key prefix, session_id, etc.).\n *   - When both columns are present, both WHERE clauses are applied (AND).\n *\n * Temp views take precedence over real tables in both SQLite and Postgres,\n * so the user's SQL runs unmodified against the filtered views.\n */\n\n// Core tables with non-standard scoping (not owner_email).\n// Map of table name → { column, mode }.\nconst CORE_TABLE_SCOPING: Record<\n  string,\n  { column: string; mode: \"prefix\" | \"exact\" }\n> = {\n  settings: { column: \"key\", mode: \"prefix\" }, // keys like u:<email>:<key>\n  application_state: { column: \"session_id\", mode: \"exact\" },\n  oauth_tokens: { column: \"owner\", mode: \"exact\" },\n  sessions: { column: \"email\", mode: \"exact\" },\n};\n\n// The conventional column names for user/org ownership in template tables.\nimport {\n  getRequestUserEmail,\n  getRequestOrgId,\n} from \"../../server/request-context.js\";\n\nconst OWNER_COLUMN = \"owner_email\";\nconst ORG_COLUMN = \"org_id\";\nconst DEV_FALLBACK_EMAIL = \"local@localhost\"; // guard:allow-localhost-fallback — sentinel is rejected below so DB scripts cannot silently scope to the dev fallback tenant\n\ninterface ScopedTable {\n  name: string;\n  viewSql: string;\n}\n\nfunction getUserEmail(): string | null {\n  const userEmail = getRequestUserEmail() || null;\n  if (userEmail === DEV_FALLBACK_EMAIL) {\n    throw new Error(\n      \"DB script scoping requires a real user identity; refusing to run with local@localhost.\",\n    );\n  }\n  return userEmail;\n}\n\nfunction getOrgId(): string | null {\n  return getRequestOrgId() || null;\n}\n\n// ─── Schema introspection ───────────────────────────────────────────────────\n\ninterface TableColumn {\n  table: string;\n  column: string;\n}\n\nasync function discoverColumnsPostgres(pgSql: any): Promise<TableColumn[]> {\n  const rows: any[] = await pgSql`\n    SELECT table_name, column_name\n    FROM information_schema.columns\n    WHERE table_schema = 'public'\n    ORDER BY table_name, ordinal_position\n  `;\n  return rows.map((r) => ({ table: r.table_name, column: r.column_name }));\n}\n\nasync function discoverColumnsSqlite(client: any): Promise<TableColumn[]> {\n  const tablesResult = await client.execute(\n    `SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'`,\n  );\n  const tables = tablesResult.rows.map((r: any) => (r.name ?? r[0]) as string);\n\n  const result: TableColumn[] = [];\n  for (const table of tables) {\n    const escaped = table.replace(/\"/g, '\"\"');\n    const colsResult = await client.execute(`PRAGMA table_info(\"${escaped}\")`);\n    for (const row of colsResult.rows) {\n      result.push({\n        table,\n        column: (row.name ?? row[1]) as string,\n      });\n    }\n  }\n  return result;\n}\n\n// ─── View generation ────────────────────────────────────────────────────────\n\n/** Escape a string for safe inclusion in a SQL single-quoted literal. */\nfunction escapeSqlString(value: string): string {\n  return value.replace(/'/g, \"''\");\n}\n\nfunction buildScopedTables(\n  allColumns: TableColumn[],\n  userEmail: string,\n  orgId: string | null,\n  isPostgres: boolean,\n): ScopedTable[] {\n  // Group columns by table\n  const columnsByTable = new Map<string, string[]>();\n  for (const { table, column } of allColumns) {\n    const cols = columnsByTable.get(table) || [];\n    cols.push(column);\n    columnsByTable.set(table, cols);\n  }\n\n  const scoped: ScopedTable[] = [];\n  const qualifiedPrefix = isPostgres ? \"public.\" : \"main.\";\n  const safeEmail = escapeSqlString(userEmail);\n  const safeOrgId = orgId ? escapeSqlString(orgId) : null;\n\n  // WITH CHECK OPTION ensures INSERTs/UPDATEs through the auto-updatable view\n  // can't write rows that violate the WHERE filter. Without it, an attacker\n  // could `INSERT INTO recordings (..., owner_email) VALUES (..., 'victim@x')`\n  // through the view and the row would land in the base table under the\n  // victim's identity. SQLite views are not auto-updatable in the same way\n  // (they require triggers), so this clause is a no-op there but harmless.\n  const checkOption = isPostgres ? \" WITH LOCAL CHECK OPTION\" : \"\";\n\n  for (const [table, columns] of columnsByTable) {\n    // Check core table scoping\n    const coreScoping = CORE_TABLE_SCOPING[table];\n    if (coreScoping) {\n      const realTable = `${qualifiedPrefix}\"${table}\"`;\n      let whereSql: string;\n      if (coreScoping.mode === \"prefix\") {\n        // settings: key starts with u:<email>:\n        // Escape \\, % and _ in the email so LIKE treats them literally.\n        const likeEmail = safeEmail\n          .replace(/\\\\/g, \"\\\\\\\\\")\n          .replace(/%/g, \"\\\\%\")\n          .replace(/_/g, \"\\\\_\");\n        const prefix = `u:${likeEmail}:`;\n        whereSql = `\"${coreScoping.column}\" LIKE '${prefix}%' ESCAPE '\\\\'`;\n      } else {\n        whereSql = `\"${coreScoping.column}\" = '${safeEmail}'`;\n      }\n      scoped.push({\n        name: table,\n        viewSql: `${isPostgres ? \"CREATE OR REPLACE TEMPORARY\" : \"CREATE TEMPORARY\"} VIEW \"${table}\" AS SELECT * FROM ${realTable} WHERE ${whereSql}${checkOption}`,\n      });\n      continue;\n    }\n\n    if (\n      table === \"tool_data\" &&\n      columns.includes(\"scope\") &&\n      columns.includes(OWNER_COLUMN) &&\n      columns.includes(ORG_COLUMN)\n    ) {\n      const realTable = `${qualifiedPrefix}\"${table}\"`;\n      const orgClause = safeOrgId\n        ? ` OR (\"scope\" = 'org' AND \"${ORG_COLUMN}\" = '${safeOrgId}')`\n        : \"\";\n      scoped.push({\n        name: table,\n        viewSql: `${isPostgres ? \"CREATE OR REPLACE TEMPORARY\" : \"CREATE TEMPORARY\"} VIEW \"${table}\" AS SELECT * FROM ${realTable} WHERE ((\"scope\" = 'user' AND \"${OWNER_COLUMN}\" = '${safeEmail}')${orgClause})${checkOption}`,\n      });\n      continue;\n    }\n\n    // Build WHERE clauses for owner_email and org_id\n    const clauses: string[] = [];\n    const hasOwner = columns.includes(OWNER_COLUMN);\n    const hasOrg = columns.includes(ORG_COLUMN);\n\n    if (hasOwner) {\n      clauses.push(`\"${OWNER_COLUMN}\" = '${safeEmail}'`);\n    }\n    if (hasOrg && safeOrgId) {\n      clauses.push(`\"${ORG_COLUMN}\" = '${safeOrgId}'`);\n    }\n\n    if (clauses.length > 0) {\n      const realTable = `${qualifiedPrefix}\"${table}\"`;\n      scoped.push({\n        name: table,\n        viewSql: `${isPostgres ? \"CREATE OR REPLACE TEMPORARY\" : \"CREATE TEMPORARY\"} VIEW \"${table}\" AS SELECT * FROM ${realTable} WHERE ${clauses.join(\" AND \")}${checkOption}`,\n      });\n    }\n  }\n\n  return scoped;\n}\n\n// ─── Public API ─────────────────────────────────────────────────────────────\n\nexport interface ScopingContext {\n  /** SQL statements to run before the user's query (create temp views). */\n  setup: string[];\n  /** SQL statements to run after the user's query (drop temp views). */\n  teardown: string[];\n  /** Whether scoping is active. */\n  active: boolean;\n  /** The current user email (for INSERT injection in db-exec). */\n  userEmail: string | null;\n  /** The current org ID (for INSERT injection in db-exec). */\n  orgId: string | null;\n  /** Tables that have owner_email columns (for INSERT injection). */\n  ownerEmailTables: Set<string>;\n  /** Tables that have org_id columns (for INSERT injection). */\n  orgIdTables: Set<string>;\n}\n\n/**\n * Build scoping context for a Postgres connection.\n * Returns setup/teardown SQL to run before/after the user's query.\n */\nexport async function buildScopingPostgres(\n  pgSql: any,\n): Promise<ScopingContext> {\n  const inactive: ScopingContext = {\n    setup: [],\n    teardown: [],\n    active: false,\n    userEmail: null,\n    orgId: null,\n    ownerEmailTables: new Set(),\n    orgIdTables: new Set(),\n  };\n\n  // Scoping is always active when there is a request user (dev, preview, and\n  // prod). Previously this short-circuited outside production, which created\n  // a cross-user read in dev mode. See audit 05-tools-sandbox.md (C3.d).\n  const userEmail = getUserEmail();\n  if (!userEmail) return inactive;\n\n  const orgId = getOrgId();\n  const allColumns = await discoverColumnsPostgres(pgSql);\n  const scoped = buildScopedTables(allColumns, userEmail, orgId, true);\n\n  // Track which tables have owner_email / org_id for INSERT injection\n  const columnsByTable = new Map<string, string[]>();\n  for (const { table, column } of allColumns) {\n    const cols = columnsByTable.get(table) || [];\n    cols.push(column);\n    columnsByTable.set(table, cols);\n  }\n  const ownerEmailTables = new Set<string>();\n  const orgIdTables = new Set<string>();\n  for (const [table, columns] of columnsByTable) {\n    if (columns.includes(OWNER_COLUMN)) ownerEmailTables.add(table);\n    if (columns.includes(ORG_COLUMN)) orgIdTables.add(table);\n  }\n\n  return {\n    setup: scoped.map((s) => s.viewSql),\n    teardown: scoped.map((s) => `DROP VIEW IF EXISTS pg_temp.\"${s.name}\"`),\n    active: scoped.length > 0,\n    userEmail,\n    orgId,\n    ownerEmailTables,\n    orgIdTables,\n  };\n}\n\n/**\n * Build scoping context for a SQLite/libsql connection.\n * Returns setup/teardown SQL to run before/after the user's query.\n */\nexport async function buildScopingSqlite(client: any): Promise<ScopingContext> {\n  const inactive: ScopingContext = {\n    setup: [],\n    teardown: [],\n    active: false,\n    userEmail: null,\n    orgId: null,\n    ownerEmailTables: new Set(),\n    orgIdTables: new Set(),\n  };\n\n  // Scoping is always active when there is a request user (dev, preview, and\n  // prod). Previously this short-circuited outside production, which created\n  // a cross-user read in dev mode. See audit 05-tools-sandbox.md (C3.d).\n  const userEmail = getUserEmail();\n  if (!userEmail) return inactive;\n\n  const orgId = getOrgId();\n  const allColumns = await discoverColumnsSqlite(client);\n  const scoped = buildScopedTables(allColumns, userEmail, orgId, false);\n\n  const columnsByTable = new Map<string, string[]>();\n  for (const { table, column } of allColumns) {\n    const cols = columnsByTable.get(table) || [];\n    cols.push(column);\n    columnsByTable.set(table, cols);\n  }\n  const ownerEmailTables = new Set<string>();\n  const orgIdTables = new Set<string>();\n  for (const [table, columns] of columnsByTable) {\n    if (columns.includes(OWNER_COLUMN)) ownerEmailTables.add(table);\n    if (columns.includes(ORG_COLUMN)) orgIdTables.add(table);\n  }\n\n  return {\n    setup: scoped.map((s) => s.viewSql),\n    teardown: scoped.map((s) => `DROP VIEW IF EXISTS \"${s.name}\"`),\n    active: scoped.length > 0,\n    userEmail,\n    orgId,\n    ownerEmailTables,\n    orgIdTables,\n  };\n}\n"]}
+{"version":3,"file":"scoping.js","sourceRoot":"","sources":["../../../src/scripts/db/scoping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,2DAA2D;AAC3D,wCAAwC;AACxC,MAAM,kBAAkB,GAGpB;IACF,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,4BAA4B;IACzE,iBAAiB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1D,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;IAChD,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;CAC7C,CAAC;AAEF,2EAA2E;AAC3E,OAAO,EACL,mBAAmB,EACnB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,UAAU,GAAG,QAAQ,CAAC;AAC5B,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,CAAC,6HAA6H;AAO3K,SAAS,YAAY;IACnB,MAAM,SAAS,GAAG,mBAAmB,EAAE,IAAI,IAAI,CAAC;IAChD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,wEAAwE;YACtE,mEAAmE;YACnE,sDAAsD;YACtD,iEAAiE;YACjE,2EAA2E;YAC3E,kEAAkE;YAClE,0EAA0E;YAC1E,YAAY,CACf,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,eAAe,EAAE,IAAI,IAAI,CAAC;AACnC,CAAC;AASD,KAAK,UAAU,uBAAuB,CAAC,KAAU;IAC/C,MAAM,IAAI,GAAU,MAAM,KAAK,CAAA;;;;;GAK9B,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,MAAW;IAC9C,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,OAAO,CACvC,gFAAgF,CACjF,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,OAAO,IAAI,CAAC,CAAC;QAC3E,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK;gBACL,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAW;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAE/E,yEAAyE;AACzE,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,iBAAiB,CACxB,UAAyB,EACzB,SAAiB,EACjB,KAAoB,EACpB,UAAmB;IAEnB,yBAAyB;IACzB,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,eAAe,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACzD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExD,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;IAEjE,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAC9C,2BAA2B;QAC3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,GAAG,eAAe,IAAI,KAAK,GAAG,CAAC;YACjD,IAAI,QAAgB,CAAC;YACrB,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAClC,uCAAuC;gBACvC,gEAAgE;gBAChE,MAAM,SAAS,GAAG,SAAS;qBACxB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;qBACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;qBACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACxB,MAAM,MAAM,GAAG,KAAK,SAAS,GAAG,CAAC;gBACjC,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM,WAAW,MAAM,gBAAgB,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,IAAI,WAAW,CAAC,MAAM,QAAQ,SAAS,GAAG,CAAC;YACxD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,kBAAkB,UAAU,KAAK,sBAAsB,SAAS,UAAU,QAAQ,GAAG,WAAW,EAAE;aAC5J,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IACE,KAAK,KAAK,WAAW;YACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC5B,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,eAAe,IAAI,KAAK,GAAG,CAAC;YACjD,MAAM,SAAS,GAAG,SAAS;gBACzB,CAAC,CAAC,6BAA6B,UAAU,QAAQ,SAAS,IAAI;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,kBAAkB,UAAU,KAAK,sBAAsB,SAAS,kCAAkC,YAAY,QAAQ,SAAS,KAAK,SAAS,IAAI,WAAW,EAAE;aACxN,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,iDAAiD;QACjD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE5C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,IAAI,YAAY,QAAQ,SAAS,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,QAAQ,SAAS,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,GAAG,eAAe,IAAI,KAAK,GAAG,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,kBAAkB,UAAU,KAAK,sBAAsB,SAAS,UAAU,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,WAAW,EAAE;aACzK,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAqBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAU;IAEV,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAErE,oEAAoE;IACpE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACnC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,CAAC,CAAC,IAAI,GAAG,CAAC;QACtE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;QACzB,SAAS;QACT,KAAK;QACL,gBAAgB;QAChB,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAW;IAClD,6EAA6E;IAC7E,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAEtE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACnC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,IAAI,GAAG,CAAC;QAC9D,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;QACzB,SAAS;QACT,KAAK;QACL,gBAAgB;QAChB,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Per-user and per-org data scoping for db-query / db-exec.\n *\n * In production mode, creates temporary views that shadow real tables so\n * that raw SQL only sees the current user's (and org's) data.\n *\n * Convention:\n *   - Template tables use an `owner_email` column for user scoping.\n *   - Template tables use an `org_id` column for org scoping.\n *   - Core tables have their own scoping patterns (key prefix, session_id, etc.).\n *   - When both columns are present, both WHERE clauses are applied (AND).\n *\n * Temp views take precedence over real tables in both SQLite and Postgres,\n * so the user's SQL runs unmodified against the filtered views.\n */\n\n// Core tables with non-standard scoping (not owner_email).\n// Map of table name → { column, mode }.\nconst CORE_TABLE_SCOPING: Record<\n  string,\n  { column: string; mode: \"prefix\" | \"exact\" }\n> = {\n  settings: { column: \"key\", mode: \"prefix\" }, // keys like u:<email>:<key>\n  application_state: { column: \"session_id\", mode: \"exact\" },\n  oauth_tokens: { column: \"owner\", mode: \"exact\" },\n  sessions: { column: \"email\", mode: \"exact\" },\n};\n\n// The conventional column names for user/org ownership in template tables.\nimport {\n  getRequestUserEmail,\n  getRequestOrgId,\n} from \"../../server/request-context.js\";\n\nconst OWNER_COLUMN = \"owner_email\";\nconst ORG_COLUMN = \"org_id\";\nconst DEV_FALLBACK_EMAIL = \"local@localhost\"; // guard:allow-localhost-fallback — sentinel is rejected below so DB scripts cannot silently scope to the dev fallback tenant\n\ninterface ScopedTable {\n  name: string;\n  viewSql: string;\n}\n\nfunction getUserEmail(): string {\n  const userEmail = getRequestUserEmail() || null;\n  if (!userEmail || userEmail === DEV_FALLBACK_EMAIL) {\n    throw new Error(\n      \"db-exec / db-query / db-patch require an authenticated user identity. \" +\n        \"Easiest fix: open the app at http://localhost:3000 and sign in — \" +\n        \"the CLI then auto-loads your session. Otherwise set \" +\n        \"AGENT_USER_EMAIL=<email> in the env, or invoke through an HTTP \" +\n        \"action that runs under runWithRequestContext. Refusing to run unscoped — \" +\n        \"an unscoped UPDATE/DELETE would touch every user's rows, and an \" +\n        \"unscoped INSERT would land with the dev sentinel owner and be invisible \" +\n        \"to the UI.\",\n    );\n  }\n  return userEmail;\n}\n\nfunction getOrgId(): string | null {\n  return getRequestOrgId() || null;\n}\n\n// ─── Schema introspection ───────────────────────────────────────────────────\n\ninterface TableColumn {\n  table: string;\n  column: string;\n}\n\nasync function discoverColumnsPostgres(pgSql: any): Promise<TableColumn[]> {\n  const rows: any[] = await pgSql`\n    SELECT table_name, column_name\n    FROM information_schema.columns\n    WHERE table_schema = 'public'\n    ORDER BY table_name, ordinal_position\n  `;\n  return rows.map((r) => ({ table: r.table_name, column: r.column_name }));\n}\n\nasync function discoverColumnsSqlite(client: any): Promise<TableColumn[]> {\n  const tablesResult = await client.execute(\n    `SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'`,\n  );\n  const tables = tablesResult.rows.map((r: any) => (r.name ?? r[0]) as string);\n\n  const result: TableColumn[] = [];\n  for (const table of tables) {\n    const escaped = table.replace(/\"/g, '\"\"');\n    const colsResult = await client.execute(`PRAGMA table_info(\"${escaped}\")`);\n    for (const row of colsResult.rows) {\n      result.push({\n        table,\n        column: (row.name ?? row[1]) as string,\n      });\n    }\n  }\n  return result;\n}\n\n// ─── View generation ────────────────────────────────────────────────────────\n\n/** Escape a string for safe inclusion in a SQL single-quoted literal. */\nfunction escapeSqlString(value: string): string {\n  return value.replace(/'/g, \"''\");\n}\n\nfunction buildScopedTables(\n  allColumns: TableColumn[],\n  userEmail: string,\n  orgId: string | null,\n  isPostgres: boolean,\n): ScopedTable[] {\n  // Group columns by table\n  const columnsByTable = new Map<string, string[]>();\n  for (const { table, column } of allColumns) {\n    const cols = columnsByTable.get(table) || [];\n    cols.push(column);\n    columnsByTable.set(table, cols);\n  }\n\n  const scoped: ScopedTable[] = [];\n  const qualifiedPrefix = isPostgres ? \"public.\" : \"main.\";\n  const safeEmail = escapeSqlString(userEmail);\n  const safeOrgId = orgId ? escapeSqlString(orgId) : null;\n\n  // WITH CHECK OPTION ensures INSERTs/UPDATEs through the auto-updatable view\n  // can't write rows that violate the WHERE filter. Without it, an attacker\n  // could `INSERT INTO recordings (..., owner_email) VALUES (..., 'victim@x')`\n  // through the view and the row would land in the base table under the\n  // victim's identity. SQLite views are not auto-updatable in the same way\n  // (they require triggers), so this clause is a no-op there but harmless.\n  const checkOption = isPostgres ? \" WITH LOCAL CHECK OPTION\" : \"\";\n\n  for (const [table, columns] of columnsByTable) {\n    // Check core table scoping\n    const coreScoping = CORE_TABLE_SCOPING[table];\n    if (coreScoping) {\n      const realTable = `${qualifiedPrefix}\"${table}\"`;\n      let whereSql: string;\n      if (coreScoping.mode === \"prefix\") {\n        // settings: key starts with u:<email>:\n        // Escape \\, % and _ in the email so LIKE treats them literally.\n        const likeEmail = safeEmail\n          .replace(/\\\\/g, \"\\\\\\\\\")\n          .replace(/%/g, \"\\\\%\")\n          .replace(/_/g, \"\\\\_\");\n        const prefix = `u:${likeEmail}:`;\n        whereSql = `\"${coreScoping.column}\" LIKE '${prefix}%' ESCAPE '\\\\'`;\n      } else {\n        whereSql = `\"${coreScoping.column}\" = '${safeEmail}'`;\n      }\n      scoped.push({\n        name: table,\n        viewSql: `${isPostgres ? \"CREATE OR REPLACE TEMPORARY\" : \"CREATE TEMPORARY\"} VIEW \"${table}\" AS SELECT * FROM ${realTable} WHERE ${whereSql}${checkOption}`,\n      });\n      continue;\n    }\n\n    if (\n      table === \"tool_data\" &&\n      columns.includes(\"scope\") &&\n      columns.includes(OWNER_COLUMN) &&\n      columns.includes(ORG_COLUMN)\n    ) {\n      const realTable = `${qualifiedPrefix}\"${table}\"`;\n      const orgClause = safeOrgId\n        ? ` OR (\"scope\" = 'org' AND \"${ORG_COLUMN}\" = '${safeOrgId}')`\n        : \"\";\n      scoped.push({\n        name: table,\n        viewSql: `${isPostgres ? \"CREATE OR REPLACE TEMPORARY\" : \"CREATE TEMPORARY\"} VIEW \"${table}\" AS SELECT * FROM ${realTable} WHERE ((\"scope\" = 'user' AND \"${OWNER_COLUMN}\" = '${safeEmail}')${orgClause})${checkOption}`,\n      });\n      continue;\n    }\n\n    // Build WHERE clauses for owner_email and org_id\n    const clauses: string[] = [];\n    const hasOwner = columns.includes(OWNER_COLUMN);\n    const hasOrg = columns.includes(ORG_COLUMN);\n\n    if (hasOwner) {\n      clauses.push(`\"${OWNER_COLUMN}\" = '${safeEmail}'`);\n    }\n    if (hasOrg && safeOrgId) {\n      clauses.push(`\"${ORG_COLUMN}\" = '${safeOrgId}'`);\n    }\n\n    if (clauses.length > 0) {\n      const realTable = `${qualifiedPrefix}\"${table}\"`;\n      scoped.push({\n        name: table,\n        viewSql: `${isPostgres ? \"CREATE OR REPLACE TEMPORARY\" : \"CREATE TEMPORARY\"} VIEW \"${table}\" AS SELECT * FROM ${realTable} WHERE ${clauses.join(\" AND \")}${checkOption}`,\n      });\n    }\n  }\n\n  return scoped;\n}\n\n// ─── Public API ─────────────────────────────────────────────────────────────\n\nexport interface ScopingContext {\n  /** SQL statements to run before the user's query (create temp views). */\n  setup: string[];\n  /** SQL statements to run after the user's query (drop temp views). */\n  teardown: string[];\n  /** Whether scoping is active. */\n  active: boolean;\n  /** The current user email (for INSERT injection in db-exec). */\n  userEmail: string | null;\n  /** The current org ID (for INSERT injection in db-exec). */\n  orgId: string | null;\n  /** Tables that have owner_email columns (for INSERT injection). */\n  ownerEmailTables: Set<string>;\n  /** Tables that have org_id columns (for INSERT injection). */\n  orgIdTables: Set<string>;\n}\n\n/**\n * Build scoping context for a Postgres connection.\n * Returns setup/teardown SQL to run before/after the user's query.\n */\nexport async function buildScopingPostgres(\n  pgSql: any,\n): Promise<ScopingContext> {\n  // getUserEmail() throws when there is no authenticated user (no request\n  // context AND no AGENT_USER_EMAIL env) or when it resolves to the dev\n  // sentinel `local@localhost`. We let that throw propagate: the script\n  // refuses to run unscoped rather than silently writing rows that the UI\n  // then can't see, or running an UPDATE/DELETE across every user's data.\n  const userEmail = getUserEmail();\n\n  const orgId = getOrgId();\n  const allColumns = await discoverColumnsPostgres(pgSql);\n  const scoped = buildScopedTables(allColumns, userEmail, orgId, true);\n\n  // Track which tables have owner_email / org_id for INSERT injection\n  const columnsByTable = new Map<string, string[]>();\n  for (const { table, column } of allColumns) {\n    const cols = columnsByTable.get(table) || [];\n    cols.push(column);\n    columnsByTable.set(table, cols);\n  }\n  const ownerEmailTables = new Set<string>();\n  const orgIdTables = new Set<string>();\n  for (const [table, columns] of columnsByTable) {\n    if (columns.includes(OWNER_COLUMN)) ownerEmailTables.add(table);\n    if (columns.includes(ORG_COLUMN)) orgIdTables.add(table);\n  }\n\n  return {\n    setup: scoped.map((s) => s.viewSql),\n    teardown: scoped.map((s) => `DROP VIEW IF EXISTS pg_temp.\"${s.name}\"`),\n    active: scoped.length > 0,\n    userEmail,\n    orgId,\n    ownerEmailTables,\n    orgIdTables,\n  };\n}\n\n/**\n * Build scoping context for a SQLite/libsql connection.\n * Returns setup/teardown SQL to run before/after the user's query.\n */\nexport async function buildScopingSqlite(client: any): Promise<ScopingContext> {\n  // See buildScopingPostgres: getUserEmail() throws on no user / dev sentinel.\n  const userEmail = getUserEmail();\n\n  const orgId = getOrgId();\n  const allColumns = await discoverColumnsSqlite(client);\n  const scoped = buildScopedTables(allColumns, userEmail, orgId, false);\n\n  const columnsByTable = new Map<string, string[]>();\n  for (const { table, column } of allColumns) {\n    const cols = columnsByTable.get(table) || [];\n    cols.push(column);\n    columnsByTable.set(table, cols);\n  }\n  const ownerEmailTables = new Set<string>();\n  const orgIdTables = new Set<string>();\n  for (const [table, columns] of columnsByTable) {\n    if (columns.includes(OWNER_COLUMN)) ownerEmailTables.add(table);\n    if (columns.includes(ORG_COLUMN)) orgIdTables.add(table);\n  }\n\n  return {\n    setup: scoped.map((s) => s.viewSql),\n    teardown: scoped.map((s) => `DROP VIEW IF EXISTS \"${s.name}\"`),\n    active: scoped.length > 0,\n    userEmail,\n    orgId,\n    ownerEmailTables,\n    orgIdTables,\n  };\n}\n"]}

package/dist/scripts/dev-session.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Dev-only session bootstrap for `pnpm action <name>` (and any other CLI
+ * caller of `runScript`).
+ *
+ * After changes-53, db-exec / db-query / db-patch refuse to run unless
+ * `getRequestUserEmail()` returns a real identity. In an HTTP request the
+ * Nitro plugin wraps the handler in `runWithRequestContext({ userEmail })`
+ * so scoping just works. CLI invocations have no such wrapper, so without
+ * this helper every db-* CLI run hands the user a stack trace.
+ *
+ * What this does: when the runner is about to dispatch, resolve a real
+ * email by reading the most-recent row from the legacy `sessions` table
+ * (the same table that `addSession()` writes from google-oauth.ts and the
+ * A2A receiver fallback already consults). The runner then wraps dispatch
+ * in `runWithRequestContext({ userEmail })` so the action sees a real
+ * identity.
+ *
+ * SHARED-DEV-BOX CAVEAT: the `SELECT email FROM sessions ORDER BY
+ * created_at DESC LIMIT 1` query is unscoped — on a machine where
+ * multiple developers have signed in (or after a `pnpm action …` run
+ * from another team's app), this will bind to whoever signed in most
+ * recently across *all* sessions in the DB. If that is wrong, set
+ * `AGENT_USER_EMAIL=<your-email>` in your shell or `.env`; explicit env
+ * always wins. A `[dev-session]` log line is emitted so wrong-binding
+ * is easy to spot.
+ *
+ * Strict gating mirrors the A2A precedent in
+ * `server/agent-chat-plugin.ts` (search for "latest session"):
+ *   - NODE_ENV !== "production".
+ *   - AUTH_MODE unset or === "local" — don't auto-impersonate when an
+ *     admin or hosted auth mode is in use.
+ *
+ * If `process.env.AGENT_USER_EMAIL` is already set we return it unchanged
+ * — explicit env wins over any DB-derived guess (matches how
+ * `getRequestUserEmail()` itself behaves).
+ */
+/**
+ * Resolve the local dev user's email for the current CLI invocation.
+ *
+ * Returns the resolved email, or `undefined` when no real identity is
+ * available. Callers should let the downstream "no authenticated user"
+ * error propagate — its message points the user at the two fixes
+ * (sign in via the running app, or set `AGENT_USER_EMAIL`).
+ */
+export declare function resolveDevUserEmail(): Promise<string | undefined>;
+//# sourceMappingURL=dev-session.d.ts.map

package/dist/scripts/dev-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-session.d.ts","sourceRoot":"","sources":["../../src/scripts/dev-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAIH;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkCvE"}

package/dist/scripts/dev-session.js

@@ -0,0 +1,81 @@
+/**
+ * Dev-only session bootstrap for `pnpm action <name>` (and any other CLI
+ * caller of `runScript`).
+ *
+ * After changes-53, db-exec / db-query / db-patch refuse to run unless
+ * `getRequestUserEmail()` returns a real identity. In an HTTP request the
+ * Nitro plugin wraps the handler in `runWithRequestContext({ userEmail })`
+ * so scoping just works. CLI invocations have no such wrapper, so without
+ * this helper every db-* CLI run hands the user a stack trace.
+ *
+ * What this does: when the runner is about to dispatch, resolve a real
+ * email by reading the most-recent row from the legacy `sessions` table
+ * (the same table that `addSession()` writes from google-oauth.ts and the
+ * A2A receiver fallback already consults). The runner then wraps dispatch
+ * in `runWithRequestContext({ userEmail })` so the action sees a real
+ * identity.
+ *
+ * SHARED-DEV-BOX CAVEAT: the `SELECT email FROM sessions ORDER BY
+ * created_at DESC LIMIT 1` query is unscoped — on a machine where
+ * multiple developers have signed in (or after a `pnpm action …` run
+ * from another team's app), this will bind to whoever signed in most
+ * recently across *all* sessions in the DB. If that is wrong, set
+ * `AGENT_USER_EMAIL=<your-email>` in your shell or `.env`; explicit env
+ * always wins. A `[dev-session]` log line is emitted so wrong-binding
+ * is easy to spot.
+ *
+ * Strict gating mirrors the A2A precedent in
+ * `server/agent-chat-plugin.ts` (search for "latest session"):
+ *   - NODE_ENV !== "production".
+ *   - AUTH_MODE unset or === "local" — don't auto-impersonate when an
+ *     admin or hosted auth mode is in use.
+ *
+ * If `process.env.AGENT_USER_EMAIL` is already set we return it unchanged
+ * — explicit env wins over any DB-derived guess (matches how
+ * `getRequestUserEmail()` itself behaves).
+ */
+const DEV_FALLBACK_EMAIL = "local@localhost"; // guard:allow-localhost-fallback — sentinel intentionally rejected so the resolver doesn't return it
+/**
+ * Resolve the local dev user's email for the current CLI invocation.
+ *
+ * Returns the resolved email, or `undefined` when no real identity is
+ * available. Callers should let the downstream "no authenticated user"
+ * error propagate — its message points the user at the two fixes
+ * (sign in via the running app, or set `AGENT_USER_EMAIL`).
+ */
+export async function resolveDevUserEmail() {
+    const explicit = process.env.AGENT_USER_EMAIL;
+    if (explicit)
+        return explicit;
+    // Hard refusal: this helper must never source identity in prod.
+    if (process.env.NODE_ENV === "production")
+        return undefined;
+    // AUTH_MODE may be unset (default dev shim) or "local". Anything else
+    // means a non-dev auth mode is in play; don't try to fish a session
+    // out of the DB on its behalf.
+    const authMode = process.env.AUTH_MODE;
+    if (authMode && authMode !== "local")
+        return undefined;
+    try {
+        const { getDbExec } = await import("../db/client.js");
+        const { rows } = await getDbExec().execute({
+            sql: `SELECT email FROM sessions
+            WHERE email IS NOT NULL AND email <> ?
+            ORDER BY created_at DESC LIMIT 1`,
+            args: [DEV_FALLBACK_EMAIL],
+        });
+        const email = rows[0]?.email;
+        if (!email || email.trim().length === 0)
+            return undefined;
+        console.log(`[dev-session] auto-bound to ${email} (set AGENT_USER_EMAIL to override)`);
+        return email;
+    }
+    catch {
+        // The sessions table doesn't exist yet (fresh install where the web
+        // server has never booted) or the DB isn't reachable. Either way,
+        // we can't produce an identity — let the caller throw with the
+        // friendlier "sign in first" hint.
+        return undefined;
+    }
+}
+//# sourceMappingURL=dev-session.js.map

package/dist/scripts/dev-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-session.js","sourceRoot":"","sources":["../../src/scripts/dev-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,CAAC,qGAAqG;AAEnJ;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,gEAAgE;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC;IAE5D,sEAAsE;IACtE,oEAAoE;IACpE,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACvC,IAAI,QAAQ,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAEvD,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;YACzC,GAAG,EAAE;;6CAEkC;YACvC,IAAI,EAAE,CAAC,kBAAkB,CAAC;SAC3B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,KAA2B,CAAC;QACnD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,CAAC,GAAG,CACT,+BAA+B,KAAK,qCAAqC,CAC1E,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,kEAAkE;QAClE,+DAA+D;QAC/D,mCAAmC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC","sourcesContent":["/**\n * Dev-only session bootstrap for `pnpm action <name>` (and any other CLI\n * caller of `runScript`).\n *\n * After changes-53, db-exec / db-query / db-patch refuse to run unless\n * `getRequestUserEmail()` returns a real identity. In an HTTP request the\n * Nitro plugin wraps the handler in `runWithRequestContext({ userEmail })`\n * so scoping just works. CLI invocations have no such wrapper, so without\n * this helper every db-* CLI run hands the user a stack trace.\n *\n * What this does: when the runner is about to dispatch, resolve a real\n * email by reading the most-recent row from the legacy `sessions` table\n * (the same table that `addSession()` writes from google-oauth.ts and the\n * A2A receiver fallback already consults). The runner then wraps dispatch\n * in `runWithRequestContext({ userEmail })` so the action sees a real\n * identity.\n *\n * SHARED-DEV-BOX CAVEAT: the `SELECT email FROM sessions ORDER BY\n * created_at DESC LIMIT 1` query is unscoped — on a machine where\n * multiple developers have signed in (or after a `pnpm action …` run\n * from another team's app), this will bind to whoever signed in most\n * recently across *all* sessions in the DB. If that is wrong, set\n * `AGENT_USER_EMAIL=<your-email>` in your shell or `.env`; explicit env\n * always wins. A `[dev-session]` log line is emitted so wrong-binding\n * is easy to spot.\n *\n * Strict gating mirrors the A2A precedent in\n * `server/agent-chat-plugin.ts` (search for \"latest session\"):\n *   - NODE_ENV !== \"production\".\n *   - AUTH_MODE unset or === \"local\" — don't auto-impersonate when an\n *     admin or hosted auth mode is in use.\n *\n * If `process.env.AGENT_USER_EMAIL` is already set we return it unchanged\n * — explicit env wins over any DB-derived guess (matches how\n * `getRequestUserEmail()` itself behaves).\n */\n\nconst DEV_FALLBACK_EMAIL = \"local@localhost\"; // guard:allow-localhost-fallback — sentinel intentionally rejected so the resolver doesn't return it\n\n/**\n * Resolve the local dev user's email for the current CLI invocation.\n *\n * Returns the resolved email, or `undefined` when no real identity is\n * available. Callers should let the downstream \"no authenticated user\"\n * error propagate — its message points the user at the two fixes\n * (sign in via the running app, or set `AGENT_USER_EMAIL`).\n */\nexport async function resolveDevUserEmail(): Promise<string | undefined> {\n  const explicit = process.env.AGENT_USER_EMAIL;\n  if (explicit) return explicit;\n\n  // Hard refusal: this helper must never source identity in prod.\n  if (process.env.NODE_ENV === \"production\") return undefined;\n\n  // AUTH_MODE may be unset (default dev shim) or \"local\". Anything else\n  // means a non-dev auth mode is in play; don't try to fish a session\n  // out of the DB on its behalf.\n  const authMode = process.env.AUTH_MODE;\n  if (authMode && authMode !== \"local\") return undefined;\n\n  try {\n    const { getDbExec } = await import(\"../db/client.js\");\n    const { rows } = await getDbExec().execute({\n      sql: `SELECT email FROM sessions\n            WHERE email IS NOT NULL AND email <> ?\n            ORDER BY created_at DESC LIMIT 1`,\n      args: [DEV_FALLBACK_EMAIL],\n    });\n    const email = rows[0]?.email as string | undefined;\n    if (!email || email.trim().length === 0) return undefined;\n    console.log(\n      `[dev-session] auto-bound to ${email} (set AGENT_USER_EMAIL to override)`,\n    );\n    return email;\n  } catch {\n    // The sessions table doesn't exist yet (fresh install where the web\n    // server has never booted) or the DB isn't reachable. Either way,\n    // we can't produce an identity — let the caller throw with the\n    // friendlier \"sign in first\" hint.\n    return undefined;\n  }\n}\n"]}

package/dist/scripts/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/scripts/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAuBH;;;;;GAKG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CA+H/C"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/scripts/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAyBH;;;;;GAKG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAgE/C"}

package/dist/scripts/runner.js

@@ -15,6 +15,8 @@ import { pathToFileURL } from "url";
 import { coreScripts, getCoreScriptNames } from "./core-scripts.js";
 import { closeDbExec } from "../db/client.js";
 import { loadEnv } from "./utils.js";
+import { runWithRequestContext } from "../server/request-context.js";
+import { resolveDevUserEmail } from "./dev-session.js";
 // Load .env from cwd so DATABASE_URL and other vars are available to all actions.
 loadEnv();
 async function runAppDbPluginIfPresent() {
@@ -70,6 +72,25 @@ export async function runScript() {
         process.exit(1);
     }
     const args = process.argv.slice(3);
+    // Establish a request context for the duration of this CLI run. Without
+    // it, db-exec / db-query / db-patch and any action that calls
+    // `getRequestUserEmail()` see no identity and refuse to run. The
+    // resolver picks up `AGENT_USER_EMAIL` if explicitly set, otherwise
+    // reads the most-recent signed-in session from the DB (dev-only,
+    // narrowly gated — see dev-session.ts).
+    //
+    // This wrap is intentionally a single point of injection: it covers
+    // both the local-action branch and the fall-through to core scripts
+    // (db-query, db-exec, …) so every CLI entrypoint runs scoped to a real
+    // user. It uses `runWithRequestContext` rather than mutating
+    // `process.env.AGENT_USER_EMAIL` because env mutation leaks across
+    // boundaries — see the cautionary comment in
+    // `server/request-context.ts` about exactly that pattern.
+    const userEmail = await resolveDevUserEmail();
+    const orgId = process.env.AGENT_ORG_ID || undefined;
+    return runWithRequestContext({ userEmail, orgId }, () => dispatchAction(actionName, args));
+}
+async function dispatchAction(actionName, args) {
     // 1. Try local app action first (actions/ then scripts/ for backwards compat)
     const actionsPath = path.resolve(process.cwd(), "actions", `${actionName}.ts`);
     const scriptsPath = path.resolve(process.cwd(), "scripts", `${actionName}.ts`);