@agentlensai/server 0.9.0 → 0.11.0

package/dist/cloud/migrate.js

@@ -0,0 +1,147 @@
+/**
+ * Cloud Migration Runner
+ *
+ * Executes numbered SQL migration files against PostgreSQL.
+ * Tracks applied migrations in a `_cloud_migrations` table.
+ * Idempotent: skips already-applied migrations.
+ */
+import { readFileSync, readdirSync } from 'fs';
+import { join } from 'path';
+const MIGRATIONS_DIR = join(import.meta.dirname ?? __dirname, 'migrations');
+/**
+ * Get ordered migration files from the migrations directory.
+ */
+export function getMigrationFiles(dir = MIGRATIONS_DIR) {
+    return readdirSync(dir)
+        .filter((f) => f.endsWith('.sql'))
+        .sort();
+}
+/**
+ * Read the SQL content of a migration file.
+ */
+export function readMigration(filename, dir = MIGRATIONS_DIR) {
+    return readFileSync(join(dir, filename), 'utf-8');
+}
+/**
+ * Ensure the migrations tracking table exists.
+ */
+async function ensureTrackingTable(client) {
+    await client.query(`
+    CREATE TABLE IF NOT EXISTS _cloud_migrations (
+      name TEXT PRIMARY KEY,
+      applied_at TIMESTAMPTZ NOT NULL DEFAULT now()
+    )
+  `);
+}
+/**
+ * Get list of already-applied migrations.
+ */
+async function getAppliedMigrations(client) {
+    const result = await client.query('SELECT name FROM _cloud_migrations ORDER BY name');
+    return new Set(result.rows.map((r) => r.name));
+}
+/**
+ * Run all pending migrations in order.
+ */
+export async function runMigrations(client, dir = MIGRATIONS_DIR) {
+    await ensureTrackingTable(client);
+    const applied = await getAppliedMigrations(client);
+    const files = getMigrationFiles(dir);
+    const result = { applied: [], skipped: [] };
+    for (const file of files) {
+        if (applied.has(file)) {
+            result.skipped.push(file);
+            continue;
+        }
+        const sql = readMigration(file, dir);
+        await client.query(sql);
+        await client.query('INSERT INTO _cloud_migrations (name) VALUES ($1)', [file]);
+        result.applied.push(file);
+    }
+    return result;
+}
+/**
+ * Validate migration SQL files without executing them.
+ * Returns parsing issues (basic checks).
+ */
+export function validateMigrations(dir = MIGRATIONS_DIR) {
+    const files = getMigrationFiles(dir);
+    const errors = [];
+    for (const file of files) {
+        try {
+            const sql = readMigration(file, dir);
+            if (!sql.trim()) {
+                errors.push({ file, error: 'Empty migration file' });
+            }
+            // Check numbering
+            const num = file.match(/^(\d+)/);
+            if (!num) {
+                errors.push({ file, error: 'Migration file must start with a number' });
+            }
+        }
+        catch (err) {
+            errors.push({ file, error: String(err) });
+        }
+    }
+    return { valid: errors.length === 0, files, errors };
+}
+// Partitioned tables (S-1.4)
+export const PARTITIONED_TABLES = ['events', 'audit_log', 'usage_records'];
+// All tenant-scoped tables that should have RLS
+export const TENANT_SCOPED_TABLES = [
+    'events',
+    'sessions',
+    'agents',
+    'alert_rules',
+    'alert_history',
+    'lessons',
+    'embeddings',
+    'session_summaries',
+    'sharing_config',
+    'agent_sharing_config',
+    'deny_list_rules',
+    'sharing_audit_log',
+    'sharing_review_queue',
+    'anonymous_id_map',
+    'capability_registry',
+    'discovery_config',
+    'delegation_log',
+    'api_keys',
+    'usage_records',
+    'invoices',
+    'audit_log',
+    'org_members',
+    'org_invitations',
+];
+// Cloud-specific tables (S-1.1)
+export const CLOUD_TABLES = [
+    'orgs',
+    'users',
+    'org_members',
+    'org_invitations',
+    'api_keys',
+    'usage_records',
+    'invoices',
+    'audit_log',
+];
+// Existing tables ported to Postgres (S-1.2)
+export const EXISTING_TABLES = [
+    'events',
+    'sessions',
+    'agents',
+    'alert_rules',
+    'alert_history',
+    'lessons',
+    'embeddings',
+    'session_summaries',
+    'sharing_config',
+    'agent_sharing_config',
+    'deny_list_rules',
+    'sharing_audit_log',
+    'sharing_review_queue',
+    'anonymous_id_map',
+    'capability_registry',
+    'discovery_config',
+    'delegation_log',
+];
+//# sourceMappingURL=migrate.js.map

package/dist/cloud/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/cloud/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,YAAY,CAAC,CAAC;AAE5E;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,cAAc;IAC5D,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACjC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAc,cAAc;IAC1E,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAAC,MAAuB;IACxD,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;GAKlB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,oBAAoB,CAAC,MAAuB;IACzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtF,OAAO,IAAI,GAAG,CAAE,MAAM,CAAC,IAA2B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAuB,EACvB,MAAc,cAAc;IAE5B,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAErC,MAAM,MAAM,GAAoB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAE7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,cAAc;IAK7D,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,MAAM,GAAsC,EAAE,CAAC;IAErD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,kBAAkB;YAClB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,6BAA6B;AAC7B,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAU,CAAC;AAEpF,gDAAgD;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,aAAa;IACb,eAAe;IACf,SAAS;IACT,YAAY;IACZ,mBAAmB;IACnB,gBAAgB;IAChB,sBAAsB;IACtB,iBAAiB;IACjB,mBAAmB;IACnB,sBAAsB;IACtB,kBAAkB;IAClB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,UAAU;IACV,eAAe;IACf,UAAU;IACV,WAAW;IACX,aAAa;IACb,iBAAiB;CACT,CAAC;AAEX,gCAAgC;AAChC,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,MAAM;IACN,OAAO;IACP,aAAa;IACb,iBAAiB;IACjB,UAAU;IACV,eAAe;IACf,UAAU;IACV,WAAW;CACH,CAAC;AAEX,6CAA6C;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,aAAa;IACb,eAAe;IACf,SAAS;IACT,YAAY;IACZ,mBAAmB;IACnB,gBAAgB;IAChB,sBAAsB;IACtB,iBAAiB;IACjB,mBAAmB;IACnB,sBAAsB;IACtB,kBAAkB;IAClB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;CACR,CAAC"}

package/dist/cloud/migration/export-import.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Export/Import Format & Logic (S-8.3)
+ *
+ * Portable NDJSON format for org data export/import.
+ * Each line is a self-contained JSON object with a `_type` discriminator.
+ * Sessions come before their events (dependency order).
+ * Checksum line at the end for integrity verification.
+ */
+import type { Pool } from '../tenant-pool.js';
+export type RecordType = 'agent' | 'session' | 'event' | 'health_score' | 'config';
+export interface ExportRecord {
+    _type: RecordType;
+    _version: 1;
+    [key: string]: unknown;
+}
+export interface ExportChecksum {
+    _type: 'checksum';
+    sha256: string;
+    counts: Record<RecordType, number>;
+    exported_at: string;
+}
+export interface ExportOptions {
+    orgId: string;
+    from?: string;
+    to?: string;
+    agentId?: string;
+}
+export interface ImportResult {
+    imported: Record<string, number>;
+    skipped: number;
+    errors: Array<{
+        line: number;
+        error: string;
+    }>;
+    checksumValid: boolean | null;
+}
+/**
+ * Export org data as an array of NDJSON lines (strings).
+ * Streams agents → sessions → events → health_scores → config.
+ * Appends a checksum record at the end.
+ */
+export declare function exportOrgData(pool: Pool, options: ExportOptions): Promise<string[]>;
+/**
+ * Import NDJSON lines into an org. Idempotent: existing IDs are skipped.
+ * Validates checksum if present.
+ */
+export declare function importOrgData(pool: Pool, orgId: string, lines: string[]): Promise<ImportResult>;
+/**
+ * Compute SHA-256 checksum for an array of NDJSON lines.
+ */
+export declare function computeChecksum(lines: string[]): string;
+/**
+ * Validate that an NDJSON checksum line matches the data.
+ */
+export declare function validateChecksum(dataLines: string[], expectedSha256: string): boolean;
+//# sourceMappingURL=export-import.d.ts.map

package/dist/cloud/migration/export-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-import.d.ts","sourceRoot":"","sources":["../../../src/cloud/migration/export-import.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAK9C,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,cAAc,GAAG,QAAQ,CAAC;AAEnF,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,CAAC,CAAC;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,aAAa,EAAE,OAAO,GAAG,IAAI,CAAC;CAC/B;AAcD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,EAAE,CAAC,CAiHnB;AAID;;;GAGG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EAAE,GACd,OAAO,CAAC,YAAY,CAAC,CA0DvB;AAiID;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAMvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAErF"}

package/dist/cloud/migration/export-import.js

@@ -0,0 +1,289 @@
+/**
+ * Export/Import Format & Logic (S-8.3)
+ *
+ * Portable NDJSON format for org data export/import.
+ * Each line is a self-contained JSON object with a `_type` discriminator.
+ * Sessions come before their events (dependency order).
+ * Checksum line at the end for integrity verification.
+ */
+import { createHash } from 'node:crypto';
+import { withTenantTransaction, tenantQuery } from '../tenant-pool.js';
+// ─── Record Tables ───────────────────────────────────────────
+const TABLE_MAP = {
+    agent: 'agents',
+    session: 'sessions',
+    event: 'events',
+    health_score: 'health_scores',
+    config: 'org_settings',
+};
+// ─── Export ──────────────────────────────────────────────────
+/**
+ * Export org data as an array of NDJSON lines (strings).
+ * Streams agents → sessions → events → health_scores → config.
+ * Appends a checksum record at the end.
+ */
+export async function exportOrgData(pool, options) {
+    const { orgId, from, to, agentId } = options;
+    const lines = [];
+    const counts = {};
+    const hash = createHash('sha256');
+    function addLine(record) {
+        const json = JSON.stringify(record);
+        lines.push(json);
+        hash.update(json + '\n');
+        counts[record._type] = (counts[record._type] ?? 0) + 1;
+    }
+    await withTenantTransaction(pool, orgId, async (client) => {
+        // 1. Agents
+        const agentWhere = agentId ? ' AND id = $1' : '';
+        const agentParams = agentId ? [agentId] : [];
+        const agents = await client.query(`SELECT * FROM agents WHERE 1=1${agentWhere} ORDER BY id`, agentParams);
+        for (const row of agents.rows) {
+            addLine({ _type: 'agent', _version: 1, ...stripOrgId(row) });
+        }
+        // 2. Sessions
+        const sessionFilters = [];
+        const sessionParams = [];
+        let paramIdx = 1;
+        if (agentId) {
+            sessionFilters.push(`agent_id = $${paramIdx++}`);
+            sessionParams.push(agentId);
+        }
+        if (from) {
+            sessionFilters.push(`created_at >= $${paramIdx++}`);
+            sessionParams.push(from);
+        }
+        if (to) {
+            sessionFilters.push(`created_at <= $${paramIdx++}`);
+            sessionParams.push(to);
+        }
+        const sessionWhere = sessionFilters.length
+            ? ' AND ' + sessionFilters.join(' AND ')
+            : '';
+        const sessions = await client.query(`SELECT * FROM sessions WHERE 1=1${sessionWhere} ORDER BY created_at`, sessionParams);
+        for (const row of sessions.rows) {
+            addLine({ _type: 'session', _version: 1, ...stripOrgId(row) });
+        }
+        // Collect session IDs for event filtering
+        const sessionIds = sessions.rows.map((r) => r.id);
+        // 3. Events (only for exported sessions)
+        if (sessionIds.length > 0) {
+            const eventFilters = [`session_id = ANY($1)`];
+            const eventParams = [sessionIds];
+            let eidx = 2;
+            if (from) {
+                eventFilters.push(`timestamp >= $${eidx++}`);
+                eventParams.push(from);
+            }
+            if (to) {
+                eventFilters.push(`timestamp <= $${eidx++}`);
+                eventParams.push(to);
+            }
+            const events = await client.query(`SELECT * FROM events WHERE ${eventFilters.join(' AND ')} ORDER BY timestamp`, eventParams);
+            for (const row of events.rows) {
+                addLine({ _type: 'event', _version: 1, ...stripOrgId(row) });
+            }
+        }
+        // 4. Health scores
+        const hsFilters = [];
+        const hsParams = [];
+        let hsIdx = 1;
+        if (agentId) {
+            hsFilters.push(`agent_id = $${hsIdx++}`);
+            hsParams.push(agentId);
+        }
+        if (from) {
+            hsFilters.push(`timestamp >= $${hsIdx++}`);
+            hsParams.push(from);
+        }
+        if (to) {
+            hsFilters.push(`timestamp <= $${hsIdx++}`);
+            hsParams.push(to);
+        }
+        const hsWhere = hsFilters.length ? ' AND ' + hsFilters.join(' AND ') : '';
+        const healthScores = await client.query(`SELECT * FROM health_scores WHERE 1=1${hsWhere} ORDER BY timestamp`, hsParams);
+        for (const row of healthScores.rows) {
+            addLine({ _type: 'health_score', _version: 1, ...stripOrgId(row) });
+        }
+    });
+    // Checksum line
+    const checksum = {
+        _type: 'checksum',
+        sha256: hash.digest('hex'),
+        counts: counts,
+        exported_at: new Date().toISOString(),
+    };
+    lines.push(JSON.stringify(checksum));
+    return lines;
+}
+// ─── Import ──────────────────────────────────────────────────
+/**
+ * Import NDJSON lines into an org. Idempotent: existing IDs are skipped.
+ * Validates checksum if present.
+ */
+export async function importOrgData(pool, orgId, lines) {
+    const result = {
+        imported: {},
+        skipped: 0,
+        errors: [],
+        checksumValid: null,
+    };
+    // Separate data lines from checksum
+    const dataLines = [];
+    let checksumLine = null;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i].trim();
+        if (!line)
+            continue;
+        try {
+            const parsed = JSON.parse(line);
+            if (parsed._type === 'checksum') {
+                checksumLine = parsed;
+            }
+            else {
+                dataLines.push(line);
+            }
+        }
+        catch {
+            result.errors.push({ line: i + 1, error: 'Invalid JSON' });
+        }
+    }
+    // Validate checksum
+    if (checksumLine) {
+        const hash = createHash('sha256');
+        for (const dl of dataLines) {
+            hash.update(dl + '\n');
+        }
+        result.checksumValid = hash.digest('hex') === checksumLine.sha256;
+    }
+    // Import records in dependency order: agents → sessions → events → health_scores
+    const ordered = orderByDependency(dataLines, result);
+    await withTenantTransaction(pool, orgId, async (client) => {
+        for (const { lineNum, record } of ordered) {
+            try {
+                const imported = await importRecord(client, orgId, record);
+                if (imported) {
+                    result.imported[record._type] = (result.imported[record._type] ?? 0) + 1;
+                }
+                else {
+                    result.skipped++;
+                }
+            }
+            catch (err) {
+                result.errors.push({
+                    line: lineNum,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+            }
+        }
+    });
+    return result;
+}
+// ─── Helpers ─────────────────────────────────────────────────
+function stripOrgId(row) {
+    const { org_id, ...rest } = row;
+    return rest;
+}
+const TYPE_ORDER = {
+    config: 0,
+    agent: 1,
+    session: 2,
+    event: 3,
+    health_score: 4,
+};
+function orderByDependency(dataLines, result) {
+    const records = [];
+    for (let i = 0; i < dataLines.length; i++) {
+        try {
+            const parsed = JSON.parse(dataLines[i]);
+            if (!parsed._type || !(parsed._type in TYPE_ORDER)) {
+                result.errors.push({ line: i + 1, error: `Unknown record type: ${parsed._type}` });
+                continue;
+            }
+            records.push({ lineNum: i + 1, record: parsed });
+        }
+        catch {
+            result.errors.push({ line: i + 1, error: 'Invalid JSON' });
+        }
+    }
+    records.sort((a, b) => (TYPE_ORDER[a.record._type] ?? 99) - (TYPE_ORDER[b.record._type] ?? 99));
+    return records;
+}
+/**
+ * Import a single record. Returns true if inserted, false if skipped (duplicate).
+ */
+async function importRecord(client, orgId, record) {
+    const { _type, _version, ...data } = record;
+    switch (_type) {
+        case 'agent': {
+            const { id, name, description, created_at, updated_at } = data;
+            const res = await client.query(`INSERT INTO agents (id, org_id, name, description, created_at, updated_at)
+         VALUES ($1, $2, $3, $4, $5, $6)
+         ON CONFLICT (id) DO NOTHING`, [id, orgId, name ?? null, description ?? null, created_at, updated_at ?? created_at]);
+            return (res.rowCount ?? 0) > 0;
+        }
+        case 'session': {
+            const { id, agent_id, status, metadata, created_at, updated_at, ended_at } = data;
+            const res = await client.query(`INSERT INTO sessions (id, org_id, agent_id, status, metadata, created_at, updated_at, ended_at)
+         VALUES ($1, $2, $3, $4, $5, $6, $7, $8)
+         ON CONFLICT (id) DO NOTHING`, [
+                id, orgId, agent_id, status ?? 'completed',
+                typeof metadata === 'object' ? JSON.stringify(metadata) : metadata ?? '{}',
+                created_at, updated_at ?? created_at, ended_at ?? null,
+            ]);
+            return (res.rowCount ?? 0) > 0;
+        }
+        case 'event': {
+            const { id, session_id, event_type, type, timestamp, payload, data: eventData, ...extra } = data;
+            const resolvedType = event_type ?? type;
+            const resolvedPayload = payload ?? eventData;
+            const res = await client.query(`INSERT INTO events (id, org_id, session_id, event_type, timestamp, payload)
+         VALUES ($1, $2, $3, $4, $5, $6)
+         ON CONFLICT (id) DO NOTHING`, [
+                id, orgId, session_id, resolvedType, timestamp,
+                typeof resolvedPayload === 'object' ? JSON.stringify(resolvedPayload) : resolvedPayload ?? '{}',
+            ]);
+            return (res.rowCount ?? 0) > 0;
+        }
+        case 'health_score': {
+            const { id, agent_id, timestamp, score, dimensions, metadata: hsMeta } = data;
+            const res = await client.query(`INSERT INTO health_scores (id, org_id, agent_id, timestamp, score, dimensions, metadata)
+         VALUES ($1, $2, $3, $4, $5, $6, $7)
+         ON CONFLICT (id) DO NOTHING`, [
+                id, orgId, agent_id, timestamp, score,
+                typeof dimensions === 'object' ? JSON.stringify(dimensions) : dimensions ?? '{}',
+                typeof hsMeta === 'object' ? JSON.stringify(hsMeta) : hsMeta ?? '{}',
+            ]);
+            return (res.rowCount ?? 0) > 0;
+        }
+        case 'config': {
+            // Config records are org-level settings — upsert
+            const { key, value } = data;
+            if (!key)
+                return false;
+            await client.query(`INSERT INTO org_settings (org_id, key, value)
+         VALUES ($1, $2, $3)
+         ON CONFLICT (org_id, key) DO UPDATE SET value = EXCLUDED.value`, [orgId, key, typeof value === 'object' ? JSON.stringify(value) : value]);
+            return true;
+        }
+        default:
+            return false;
+    }
+}
+/**
+ * Compute SHA-256 checksum for an array of NDJSON lines.
+ */
+export function computeChecksum(lines) {
+    const hash = createHash('sha256');
+    for (const line of lines) {
+        hash.update(line + '\n');
+    }
+    return hash.digest('hex');
+}
+/**
+ * Validate that an NDJSON checksum line matches the data.
+ */
+export function validateChecksum(dataLines, expectedSha256) {
+    return computeChecksum(dataLines) === expectedSha256;
+}
+//# sourceMappingURL=export-import.js.map

package/dist/cloud/migration/export-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-import.js","sourceRoot":"","sources":["../../../src/cloud/migration/export-import.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAiCvE,gEAAgE;AAEhE,MAAM,SAAS,GAA+B;IAC5C,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,UAAU;IACnB,KAAK,EAAE,QAAQ;IACf,YAAY,EAAE,eAAe;IAC7B,MAAM,EAAE,cAAc;CACvB,CAAC;AAEF,gEAAgE;AAEhE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAU,EACV,OAAsB;IAEtB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAElC,SAAS,OAAO,CAAC,MAAoB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACxD,YAAY;QACZ,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,iCAAiC,UAAU,cAAc,EACzD,WAAW,CACZ,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAiC,EAAE,CAAC;YAC3D,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,cAAc;QACd,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,MAAM,aAAa,GAAc,EAAE,CAAC;QACpC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,OAAO,EAAE,CAAC;YACZ,cAAc,CAAC,IAAI,CAAC,eAAe,QAAQ,EAAE,EAAE,CAAC,CAAC;YACjD,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACT,cAAc,CAAC,IAAI,CAAC,kBAAkB,QAAQ,EAAE,EAAE,CAAC,CAAC;YACpD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,EAAE,EAAE,CAAC;YACP,cAAc,CAAC,IAAI,CAAC,kBAAkB,QAAQ,EAAE,EAAE,CAAC,CAAC;YACpD,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM;YACxC,CAAC,CAAC,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,mCAAmC,YAAY,sBAAsB,EACrE,aAAa,CACd,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAiC,EAAE,CAAC;YAC7D,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,0CAA0C;QAC1C,MAAM,UAAU,GAAI,QAAQ,CAAC,IAAkC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC;QAE3F,yCAAyC;QACzC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,YAAY,GAAa,CAAC,sBAAsB,CAAC,CAAC;YACxD,MAAM,WAAW,GAAc,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,IAAI,EAAE,CAAC;gBACT,YAAY,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,EAAE,EAAE,CAAC;gBACP,YAAY,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7C,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,8BAA8B,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAC7E,WAAW,CACZ,CAAC;YACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAiC,EAAE,CAAC;gBAC3D,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,IAAI,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,iBAAiB,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,EAAE,EAAE,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,iBAAiB,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CACrC,wCAAwC,OAAO,qBAAqB,EACpE,QAAQ,CACT,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAiC,EAAE,CAAC;YACjE,OAAO,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gBAAgB;IAChB,MAAM,QAAQ,GAAmB;QAC/B,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,MAAoC;QAC5C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAErC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gEAAgE;AAEhE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAU,EACV,KAAa,EACb,KAAe;IAEf,MAAM,MAAM,GAAiB;QAC3B,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,EAAE;QACV,aAAa,EAAE,IAAI;KACpB,CAAC;IAEF,oCAAoC;IACpC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,YAAY,GAA0B,IAAI,CAAC;IAE/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAChC,YAAY,GAAG,MAAwB,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC;IACpE,CAAC;IAED,iFAAiF;IACjF,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACxD,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC3D,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gEAAgE;AAEhE,SAAS,UAAU,CAAC,GAA4B;IAC9C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,GAA2B;IACzC,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,YAAY,EAAE,CAAC;CAChB,CAAC;AAOF,SAAS,iBAAiB,CACxB,SAAmB,EACnB,MAAoB;IAEpB,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAiB,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,EAAE,CAAC;gBACnD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,wBAAwB,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACnF,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CACV,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAClF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CACzB,MAAkG,EAClG,KAAa,EACb,MAAoB;IAEpB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAE5C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAA+B,CAAC;YAC1F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;qCAE6B,EAC7B,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI,EAAE,WAAW,IAAI,IAAI,EAAE,UAAU,EAAE,UAAU,IAAI,UAAU,CAAC,CACrF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,GACxE,IAA+B,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;qCAE6B,EAC7B;gBACE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,IAAI,WAAW;gBAC1C,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI;gBAC1E,UAAU,EAAE,UAAU,IAAI,UAAU,EAAE,QAAQ,IAAI,IAAI;aACvD,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,GACvF,IAA+B,CAAC;YAClC,MAAM,YAAY,GAAG,UAAU,IAAI,IAAI,CAAC;YACxC,MAAM,eAAe,GAAG,OAAO,IAAI,SAAS,CAAC;YAC7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;qCAE6B,EAC7B;gBACE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS;gBAC9C,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,IAAI;aAChG,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,GACpE,IAA+B,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;qCAE6B,EAC7B;gBACE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK;gBACrC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI;gBAChF,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI;aACrE,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,iDAAiD;YACjD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAA+B,CAAC;YACvD,IAAI,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YACvB,MAAM,MAAM,CAAC,KAAK,CAChB;;wEAEgE,EAChE,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CACxE,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAe;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAmB,EAAE,cAAsB;IAC1E,OAAO,eAAe,CAAC,SAAS,CAAC,KAAK,cAAc,CAAC;AACvD,CAAC"}

package/dist/cloud/migration/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Export/Import & Migration (S-8.3, S-8.4)
+ */
+export { exportOrgData, importOrgData, type ExportOptions, type ImportResult, type ExportRecord } from './export-import.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cloud/migration/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cloud/migration/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/cloud/migration/index.js

@@ -0,0 +1,5 @@
+/**
+ * Export/Import & Migration (S-8.3, S-8.4)
+ */
+export { exportOrgData, importOrgData } from './export-import.js';
+//# sourceMappingURL=index.js.map

package/dist/cloud/migration/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cloud/migration/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,aAAa,EAAE,aAAa,EAA4D,MAAM,oBAAoB,CAAC"}

package/dist/cloud/org-service.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Org Service (S-7.1, S-7.2)
+ *
+ * Manages organizations, memberships, and invitations.
+ * Used by dashboard routes for org switching and team management.
+ */
+import type { MigrationClient } from './migrate.js';
+export interface Org {
+    id: string;
+    name: string;
+    slug: string;
+    plan: string;
+    created_at: string;
+}
+export interface OrgMember {
+    user_id: string;
+    email: string;
+    display_name: string | null;
+    avatar_url: string | null;
+    role: string;
+    joined_at: string;
+}
+export interface OrgInvitation {
+    id: string;
+    org_id: string;
+    email: string;
+    role: string;
+    invited_by: string;
+    invited_by_name: string | null;
+    expires_at: string;
+    created_at: string;
+}
+export declare class OrgServiceError extends Error {
+    code: string;
+    statusCode: number;
+    constructor(code: string, message: string, statusCode?: number);
+}
+export declare class OrgService {
+    private db;
+    constructor(db: MigrationClient);
+    /** List orgs the user belongs to */
+    listUserOrgs(userId: string): Promise<Org[]>;
+    /** Create a new org and make the user the owner */
+    createOrg(userId: string, name: string): Promise<Org>;
+    /** List members of an org */
+    listMembers(orgId: string): Promise<OrgMember[]>;
+    /** Invite a user by email */
+    inviteMember(orgId: string, invitedByUserId: string, email: string, role: 'admin' | 'member' | 'viewer'): Promise<{
+        invitation: OrgInvitation;
+        token: string;
+    }>;
+    /** Accept an invitation by token */
+    acceptInvitation(token: string, userId: string): Promise<{
+        orgId: string;
+        role: string;
+    }>;
+    /** List pending invitations for an org */
+    listInvitations(orgId: string): Promise<OrgInvitation[]>;
+    /** Cancel a pending invitation */
+    cancelInvitation(orgId: string, invitationId: string): Promise<boolean>;
+    /** Change a member's role */
+    changeMemberRole(orgId: string, targetUserId: string, newRole: string, actorRole: string): Promise<void>;
+    /** Remove a member from org */
+    removeMember(orgId: string, targetUserId: string): Promise<void>;
+    /** Transfer ownership to another member */
+    transferOwnership(orgId: string, fromUserId: string, toUserId: string): Promise<void>;
+}
+//# sourceMappingURL=org-service.d.ts.map

package/dist/cloud/org-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-service.d.ts","sourceRoot":"","sources":["../../src/cloud/org-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,eAAgB,SAAQ,KAAK;IAE/B,IAAI,EAAE,MAAM;IAEZ,UAAU;gBAFV,IAAI,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACR,UAAU,SAAM;CAK1B;AAED,qBAAa,UAAU;IACT,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,eAAe;IAMvC,oCAAoC;IAC9B,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAYlD,mDAAmD;IAC7C,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IA6B3D,6BAA6B;IACvB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAYtD,6BAA6B;IACvB,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAClC,OAAO,CAAC;QAAE,UAAU,EAAE,aAAa,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA0CxD,oCAAoC;IAC9B,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IA8B/F,0CAA0C;IACpC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAa9D,kCAAkC;IAC5B,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU7E,6BAA6B;IACvB,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IA8BhB,+BAA+B;IACzB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBtE,2CAA2C;IACrC,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA6B5F"}