@blotout/qinto-cli 0.1.6 → 0.1.8

package/dist/worker-artifact/main/index.js

@@ -15769,7 +15769,7 @@ var envelopeRequestSchema = external_exports.object({
     globalId: external_exports.string().min(1).max(64).nullable(),
     properties: external_exports.record(external_exports.string(), external_exports.unknown()),
     geo: external_exports.record(external_exports.string(), external_exports.string()).optional()
-  }).strict(),
+  }).strict().optional(),
   consent: external_exports.object({ enabled: external_exports.boolean(), categories: external_exports.record(external_exports.string(), external_exports.boolean()), apps: external_exports.record(external_exports.string(), external_exports.boolean()) }).strict().optional(),
   geo: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
   // Only what this app captured or wrote for this visitor; `updatedAt` is when the current value
@@ -15793,7 +15793,11 @@ var envelopeRequestSchema = external_exports.object({
     browser: external_exports.record(external_exports.string().min(1).max(64), external_exports.unknown()).optional(),
     origin: external_exports.object({ app: external_exports.string().min(1).max(30), install: external_exports.number().int().min(1), depth: external_exports.number().int().min(0) }).strict().optional()
   }).strict().optional()
-}).strict();
+}).strict().superRefine((envelope, ctx) => {
+  if (envelope.kind !== "rpc" && envelope.user === void 0) {
+    ctx.addIssue({ code: "custom", path: ["user"], message: `A ${envelope.kind} envelope needs a user` });
+  }
+});
 var envelopeResponseSchema = external_exports.object({
   v: external_exports.literal(ENVELOPE_VERSION),
   // Transform invocations only: pass the action through, drop it, or replace its payload (§5.4).
@@ -15913,7 +15917,14 @@ var scheduleSchema = external_exports.object({
   id: external_exports.string().min(1).max(32),
   cron: external_exports.string().min(1).max(MAX_CRON_LENGTH),
   scheduledTime: external_exports.number().int().nonnegative().safe(),
-  installs: external_exports.array(external_exports.object({ id: external_exports.string().min(1).max(64), ord: external_exports.number().int().min(1), label: external_exports.string().max(100) }).strict()).min(1).max(MAX_INSTALLS_PER_APP)
+  installs: external_exports.array(
+    external_exports.object({
+      id: external_exports.string().min(1).max(64),
+      ord: external_exports.number().int().min(1),
+      label: external_exports.string().max(100),
+      catalogQueryTicket: external_exports.string().min(1).max(2048)
+    }).strict()
+  ).min(1).max(MAX_INSTALLS_PER_APP)
 }).strict();
 var controlEnvelopeSchema = external_exports.object({
   v: external_exports.literal(CONTROL_ENVELOPE_VERSION),
@@ -18227,7 +18238,7 @@ var APP_FACT_KINDS = [
 ];
 var MAX_APP_FACTS_PER_PAGE = 100;
 var MAX_APP_FACT_PAGE_BYTES = 1024 * 1024;
-var COLUMNS = "kind, scope, key, value, source, amount, currency, event_id, data_json, first_at, observed_at, synced_at";
+var COLUMNS = "kind, scope, key, value, source, amount, currency, event_id, data_json, first_at, observed_at, synced_at, expires_at";
 var rowOf = /* @__PURE__ */ __name((row) => {
   return {
     kind: row.kind,
@@ -18241,20 +18252,21 @@ var rowOf = /* @__PURE__ */ __name((row) => {
     dataJson: row.data_json,
     firstAt: row.first_at,
     observedAt: row.observed_at,
-    syncedAt: row.synced_at
+    syncedAt: row.synced_at,
+    expiresAt: row.expires_at
   };
 }, "rowOf");
 var appFactOf = /* @__PURE__ */ __name((row) => {
-  const { syncedAt: _syncedAt, ...fact } = rowOf(row);
+  const { syncedAt: _syncedAt, expiresAt: _expiresAt, ...fact } = rowOf(row);
   return { ...fact, kind: fact.kind };
 }, "appFactOf");
-var listAppFacts = /* @__PURE__ */ __name((sql, query) => {
+var listAppFacts = /* @__PURE__ */ __name((sql, query, now) => {
   const maxRowId = query.maxRowId ?? sql.exec("SELECT MAX(rowid) AS maxRowId FROM facts").one().maxRowId;
   if (maxRowId === null) {
     return { items: [], next: null };
   }
-  const where = ["rowid > ?", "rowid <= ?"];
-  const params = [query.afterRowId, maxRowId];
+  const where = ["rowid > ?", "rowid <= ?", "(expires_at IS NULL OR expires_at > ?)"];
+  const params = [query.afterRowId, maxRowId, now];
   if (query.kinds.length > 0) {
     where.push(`kind IN (${query.kinds.map(() => "?").join(", ")})`);
     params.push(...query.kinds);
@@ -18287,7 +18299,7 @@ var listAppFacts = /* @__PURE__ */ __name((sql, query) => {
 }, "listAppFacts");
 var insertFact = /* @__PURE__ */ __name((sql, fact) => {
   sql.exec(
-    `INSERT INTO facts (${COLUMNS}) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)`,
+    `INSERT INTO facts (${COLUMNS}) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL, ?)`,
     fact.kind,
     fact.scope,
     fact.key,
@@ -18298,7 +18310,8 @@ var insertFact = /* @__PURE__ */ __name((sql, fact) => {
     fact.eventId ?? null,
     fact.dataJson ?? null,
     fact.firstAt ?? null,
-    fact.observedAt
+    fact.observedAt,
+    fact.expiresAt ?? null
   );
 }, "insertFact");
 var latestFact = /* @__PURE__ */ __name((sql, coords) => {
@@ -19051,7 +19064,7 @@ var stillDeclared = /* @__PURE__ */ __name((target, key, source) => {
     return true;
   }
   const { queryParams, cookies } = target.app.capture;
-  return source === "query" ? queryParams.includes(key) : cookies.includes(key);
+  return source === "query" ? queryParams.some((entry) => entry.name === key) : cookies.some((entry) => entry.name === key);
 }, "stillDeclared");
 var deliverableAttribution = /* @__PURE__ */ __name((target, rows) => {
   if (rows === void 0) {
@@ -19339,9 +19352,12 @@ var appSchema = external_exports.object({
   // Method, auth, and mode stay plain strings for the same tolerance: an unknown value from a newer
   // registry refuses that one endpoint instead of turning the app — and every other app — off.
   endpoints: external_exports.array(external_exports.object({ path: external_exports.string(), methods: external_exports.array(external_exports.string()), auth: external_exports.string(), mode: external_exports.string() }).loose()).default([]),
-  // Absent from a registry that predates capture; the empty default declares nothing, so an app
-  // deployed before this field simply captures nothing until its site redeploys.
-  capture: external_exports.object({ queryParams: external_exports.array(external_exports.string()).default([]), cookies: external_exports.array(external_exports.string()).default([]) }).default({ queryParams: [], cookies: [] })
+  // The emitter omits the block entirely for an app that declares no capture, so the default is
+  // what a manifest without a `browser.capture` serializes to.
+  capture: external_exports.object({
+    queryParams: external_exports.array(external_exports.object({ name: external_exports.string(), expiresInSeconds: external_exports.number().optional() }).loose()).default([]),
+    cookies: external_exports.array(external_exports.object({ name: external_exports.string(), expiresInSeconds: external_exports.number().optional() }).loose()).default([])
+  }).default({ queryParams: [], cookies: [] })
 });
 var registrySchema = external_exports.object({
   v: external_exports.literal(1),
@@ -19397,7 +19413,8 @@ var pushBody = external_exports.object({
 var rpcBody = external_exports.object({
   ...identityFields,
   kind: external_exports.literal("rpc"),
-  userId: external_exports.string().min(1).max(64),
+  // Absent when the caller is an endpoint, a schedule or a ui handler; the callee then sees no user.
+  userId: external_exports.string().min(1).max(64).optional(),
   callee: external_exports.string().min(1).max(30),
   fn: external_exports.string().min(1).max(64),
   args: external_exports.unknown().optional(),
@@ -19553,7 +19570,7 @@ var calleeFailed = /* @__PURE__ */ __name((callee, reason) => {
   addSpanEvent("rpc callee failed", { level: "warn", attrs: { app: callee, reason } });
   return Response.json({ error: "callee_failed" }, { status: 502 });
 }, "calleeFailed");
-var deliverRpcEffects = /* @__PURE__ */ __name(async (env, body, effects, install) => {
+var deliverRpcEffects = /* @__PURE__ */ __name(async (env, { body, userId, effects, install }) => {
   for (const ord of effects.rejectedOrds) {
     addSpanEvent("app effects rejected over the per-install caps", { level: "warn", attrs: { app: body.callee, ord } });
   }
@@ -19562,21 +19579,21 @@ var deliverRpcEffects = /* @__PURE__ */ __name(async (env, body, effects, instal
     slug: body.callee,
     groups: effects.accepted,
     depth: body.depth,
-    anonId: body.userId,
+    anonId: userId,
     installs: [install],
     deliverPush: /* @__PURE__ */ __name((push) => {
       pushes.push(push);
     }, "deliverPush"),
     // The broker runs outside the user's AnonDO, so this reaches it the same way a push does.
     writeAttribution: /* @__PURE__ */ __name(async (slug, writes) => {
-      await anonStub(env, body.userId).appAttribution({ slug, writes }, currentTraceContext());
+      await anonStub(env, userId).appAttribution({ slug, writes }, currentTraceContext());
     }, "writeAttribution"),
     writeContext: /* @__PURE__ */ __name(async (slug, writes) => {
-      await anonStub(env, body.userId).appContext({ slug, writes }, currentTraceContext());
+      await anonStub(env, userId).appContext({ slug, writes }, currentTraceContext());
     }, "writeContext")
   });
   for (const push of pushes) {
-    await anonStub(env, body.userId).appPush(push, currentTraceContext());
+    await anonStub(env, userId).appPush(push, currentTraceContext());
   }
 }, "deliverRpcEffects");
 var runRelayRpc = /* @__PURE__ */ __name(async (env, { context, body, callee, install }) => {
@@ -19593,7 +19610,8 @@ var runRelayRpc = /* @__PURE__ */ __name(async (env, { context, body, callee, in
         app: { slug: body.callee, version: callee.version },
         installs: [install],
         // No bucket projection for rpc: the callee sees only the subject's id, never its profile.
-        user: { anonId: body.userId, globalId: null, properties: {} },
+        // Omitted entirely when the caller had no visitor, so the callee's ctx.user is null.
+        ...body.userId === void 0 ? {} : { user: { anonId: body.userId, globalId: null, properties: {} } },
         depth: body.depth,
         // JSON.stringify drops an undefined key, and the envelope requires `args` to be present.
         rpc: { caller: body.slug, fn: body.fn, args: body.args ?? null }
@@ -19625,7 +19643,13 @@ var runRelayRpc = /* @__PURE__ */ __name(async (env, { context, body, callee, in
   if (verdict.rpc === null) {
     return calleeFailed(body.callee, "The response carries no rpc result.");
   }
-  await deliverRpcEffects(env, body, verdict.effects, install);
+  if (body.userId === void 0) {
+    if (verdict.effects.accepted.length > 0) {
+      addSpanEvent("rpc effects dropped: the call carries no subject", { level: "warn", attrs: { app: body.callee } });
+    }
+  } else {
+    await deliverRpcEffects(env, { body, userId: body.userId, effects: verdict.effects, install });
+  }
   return Response.json({ result: verdict.rpc.result });
 }, "runRelayRpc");
 var relayRpc = /* @__PURE__ */ __name(async (env, input) => {
@@ -20523,10 +20547,24 @@ var verifyAppUiToken = /* @__PURE__ */ __name(async (input) => {
   return { ok: true, claims: claims.data, kid: signature.kid, key: signature.key };
 }, "verifyAppUiToken");
 
+// ../../libs/app-ui-token/src/schedule-catalog-ticket.ts
+var APP_SCHEDULE_CATALOG_TICKET_ISSUER = "qinto-portal";
+var claimsSchema2 = external_exports.object({
+  iss: external_exports.literal(APP_SCHEDULE_CATALOG_TICKET_ISSUER),
+  aud: external_exports.string().min(1),
+  sub: external_exports.string().min(1),
+  iat: external_exports.number().int(),
+  exp: external_exports.number().int(),
+  domainId: external_exports.string().min(1),
+  appId: external_exports.string().min(1),
+  appInstallId: external_exports.string().min(1),
+  appVersionId: external_exports.string().min(1)
+}).strict();
+
 // ../../libs/app-ui-token/src/write-ticket.ts
 var APP_UI_WRITE_TICKET_TTL_SECONDS = 60;
 var APP_UI_WRITE_TICKET_ISSUER = "qinto-site";
-var claimsSchema2 = external_exports.object({
+var claimsSchema3 = external_exports.object({
   iss: external_exports.literal(APP_UI_WRITE_TICKET_ISSUER),
   aud: external_exports.string().min(1),
   sub: external_exports.string().min(1),
@@ -23822,7 +23860,7 @@ var declaredCapture = /* @__PURE__ */ __name((app2) => {
   if (queryParams.length === 0 && cookies.length === 0 || !app2.installs.some((install) => install.active)) {
     return void 0;
   }
-  return { queryParams, cookies };
+  return { queryParams: queryParams.map((entry) => entry.name), cookies: cookies.map((entry) => entry.name) };
 }, "declaredCapture");
 var appsMetadata = /* @__PURE__ */ __name(() => {
   const { registry: registry3 } = siteRegistry();
@@ -24299,9 +24337,22 @@ var rowOf2 = /* @__PURE__ */ __name((row) => {
     value: row.value,
     createdAt: row.firstAt,
     updatedAt: row.observedAt,
-    source: row.source
+    source: row.source,
+    expiresAt: row.expiresAt
   };
 }, "rowOf");
+var deadline = /* @__PURE__ */ __name((sql, write, now) => {
+  if (write.ttlMs === null) {
+    return null;
+  }
+  const { firstSeen } = sql.exec(
+    "SELECT MIN(observed_at) AS firstSeen FROM facts WHERE kind = 'attribution' AND scope = ? AND key = ? AND value = ?",
+    write.appId,
+    write.key,
+    write.value
+  ).one();
+  return (firstSeen ?? now) + write.ttlMs;
+}, "deadline");
 var hydrate2 = /* @__PURE__ */ __name((sql, cache) => {
   let map2 = cache?.map();
   if (map2 === void 0) {
@@ -24321,16 +24372,18 @@ var withinCaps = /* @__PURE__ */ __name((write, stored) => {
   }
   return stored.has(write.key) || stored.size < MAX_ATTRIBUTION_KEYS_PER_APP;
 }, "withinCaps");
-var persist2 = /* @__PURE__ */ __name((sql, write, now, previous) => {
+var persist2 = /* @__PURE__ */ __name((sql, write, state) => {
+  const { now, previous, expiresAt: expiresAt2 } = state;
   const createdAt = previous?.createdAt ?? now;
   if (previous !== void 0 && previous.value === write.value) {
     sql.exec(
-      "UPDATE facts SET source = ? WHERE rowid = (SELECT rowid FROM facts WHERE kind = 'attribution' AND scope = ? AND key = ? ORDER BY observed_at DESC, rowid DESC LIMIT 1)",
+      "UPDATE facts SET source = ?, expires_at = ? WHERE rowid = (SELECT rowid FROM facts WHERE kind = 'attribution' AND scope = ? AND key = ? ORDER BY observed_at DESC, rowid DESC LIMIT 1)",
       write.source,
+      expiresAt2,
       write.appId,
       write.key
     );
-    return { value: write.value, createdAt, updatedAt: previous.updatedAt, source: write.source };
+    return { value: write.value, createdAt, updatedAt: previous.updatedAt, source: write.source, expiresAt: expiresAt2 };
   }
   insertFact(sql, {
     kind: "attribution",
@@ -24339,9 +24392,10 @@ var persist2 = /* @__PURE__ */ __name((sql, write, now, previous) => {
     value: write.value,
     source: write.source,
     firstAt: createdAt,
-    observedAt: now
+    observedAt: now,
+    expiresAt: expiresAt2
   });
-  return { value: write.value, createdAt, updatedAt: now, source: write.source };
+  return { value: write.value, createdAt, updatedAt: now, source: write.source, expiresAt: expiresAt2 };
 }, "persist");
 var writeAttribution = /* @__PURE__ */ __name((sql, writes, now, cache) => {
   const map2 = hydrate2(sql, cache);
@@ -24352,18 +24406,19 @@ var writeAttribution = /* @__PURE__ */ __name((sql, writes, now, cache) => {
     if (!withinCaps(write, forApp)) {
       continue;
     }
-    if (previous?.value !== write.value || previous.source !== write.source) {
-      forApp.set(write.key, persist2(sql, write, now, previous));
+    const expiresAt2 = deadline(sql, write, now);
+    if (previous?.value !== write.value || previous.source !== write.source || previous.expiresAt !== expiresAt2) {
+      forApp.set(write.key, persist2(sql, write, { now, previous, expiresAt: expiresAt2 }));
       map2.set(write.appId, forApp);
     }
     accepted.push(write);
   }
   return accepted;
 }, "writeAttribution");
-var allAttribution = /* @__PURE__ */ __name((sql, cache) => {
+var allAttribution = /* @__PURE__ */ __name((sql, now, cache) => {
   const all = {};
   for (const [appId, rows] of hydrate2(sql, cache)) {
-    all[appId] = Object.fromEntries(rows);
+    all[appId] = Object.fromEntries([...rows].filter(([, row]) => row.expiresAt === null || row.expiresAt > now));
   }
   return all;
 }, "allAttribution");
@@ -24385,12 +24440,17 @@ var appWriteAllowed = /* @__PURE__ */ __name((registry3, consent2, slug, enforce
   }
   return true;
 }, "appWriteAllowed");
-var declaredSource = /* @__PURE__ */ __name((app2, key) => {
-  if (app2.capture.queryParams.includes(key)) {
-    return "query";
+var declaration = /* @__PURE__ */ __name((app2, key) => {
+  const param = app2.capture.queryParams.find((entry) => entry.name === key);
+  const declared = param ?? app2.capture.cookies.find((entry) => entry.name === key);
+  if (declared === void 0) {
+    return void 0;
   }
-  return app2.capture.cookies.includes(key) ? "cookie" : void 0;
-}, "declaredSource");
+  return {
+    source: param === void 0 ? "cookie" : "query",
+    ttlMs: declared.expiresInSeconds === void 0 ? null : declared.expiresInSeconds * 1e3
+  };
+}, "declaration");
 var acceptedCaptures = /* @__PURE__ */ __name((registry3, consent2, apps, enforced) => {
   const accepted = [];
   for (const [slug, values] of Object.entries(apps)) {
@@ -24399,8 +24459,8 @@ var acceptedCaptures = /* @__PURE__ */ __name((registry3, consent2, apps, enforc
       continue;
     }
     for (const [key, value] of Object.entries(values)) {
-      const source = declaredSource(app2, key);
-      if (source === void 0) {
+      const declared = declaration(app2, key);
+      if (declared === void 0) {
         addSpanEvent("capture dropped: the app declares no such name", { level: "warn", attrs: { app: slug, key } });
         continue;
       }
@@ -24408,7 +24468,7 @@ var acceptedCaptures = /* @__PURE__ */ __name((registry3, consent2, apps, enforc
         addSpanEvent("capture dropped: over the size cap", { level: "warn", attrs: { app: slug, key } });
         continue;
       }
-      accepted.push({ appId: slug, key, value, source });
+      accepted.push({ appId: slug, key, value, source: declared.source, ttlMs: declared.ttlMs });
     }
   }
   return accepted;
@@ -24712,6 +24772,19 @@ var cachedKv = /* @__PURE__ */ __name((kv) => {
   };
 }, "cachedKv");
 
+// src/id-graph/migrate.ts
+var VERSION_KEY = "schemaVersion";
+var applyMigrations = /* @__PURE__ */ __name((storage, migrations) => {
+  const applied = storage.kv.get(VERSION_KEY) ?? 0;
+  for (const [index, migration] of migrations.entries()) {
+    if (index < applied) {
+      continue;
+    }
+    storage.sql.exec(migration);
+    storage.kv.put(VERSION_KEY, index + 1);
+  }
+}, "applyMigrations");
+
 // src/id-graph/retention.ts
 var RETENTION_MS = 90 * 24 * 60 * 60 * 1e3;
 var CLEANUP_INTERVAL_MS = 7 * 24 * 60 * 60 * 1e3;
@@ -25223,8 +25296,8 @@ var expiryHorizon = /* @__PURE__ */ __name((storage, lastActivity) => {
 }, "expiryHorizon");
 var cleanupTarget = /* @__PURE__ */ __name((storage, now, lastActivity) => {
   const horizon = expiryHorizon(storage, lastActivity);
-  const deadline = nextRetentionDeadline(storage.sql);
-  const target = deadline === null ? horizon : Math.min(deadline, horizon);
+  const deadline2 = nextRetentionDeadline(storage.sql);
+  const target = deadline2 === null ? horizon : Math.min(deadline2, horizon);
   return Math.max(target, now + IMMEDIATE_CLEANUP_DELAY_MS);
 }, "cleanupTarget");
 var standsDown = /* @__PURE__ */ __name(async (storage, staleActivity) => {
@@ -25389,7 +25462,8 @@ var assignAll = /* @__PURE__ */ __name(async (env, sorted, claim) => {
 }, "assignAll");
 
 // src/id-graph/anon/schema.ts
-var ANON_SCHEMA = `
+var ANON_MIGRATIONS = [
+  `
 CREATE TABLE IF NOT EXISTS facts (
   kind TEXT NOT NULL,
   scope TEXT NOT NULL,
@@ -25406,7 +25480,9 @@ CREATE TABLE IF NOT EXISTS facts (
 );
 CREATE INDEX IF NOT EXISTS idx_facts_key ON facts (kind, scope, key, observed_at);
 CREATE UNIQUE INDEX IF NOT EXISTS idx_facts_conversion ON facts (key) WHERE kind = 'conversion';
-`;
+`,
+  "ALTER TABLE facts ADD COLUMN expires_at INTEGER;"
+];
 
 // src/id-graph/anon/websocket.ts
 var MAX_BROWSER_RESULT_BYTES = 1024;
@@ -25600,7 +25676,7 @@ var AnonDO = class extends DurableObject2 {
   cleanupAlarm;
   constructor(ctx, env) {
     super(ctx, env);
-    ctx.storage.sql.exec(ANON_SCHEMA);
+    applyMigrations(ctx.storage, ANON_MIGRATIONS);
     this.kvCache = cachedKv(ctx.storage.kv);
     this.cachedStorage = { kv: this.kvCache, sql: ctx.storage.sql };
   }
@@ -25755,7 +25831,7 @@ var AnonDO = class extends DurableObject2 {
         if (!appWriteAllowed(siteRegistry().registry, consentState2(this.kv), input.slug, consentEnforced(this.env))) {
           return;
         }
-        this.storeAttribution(input.writes.map((write) => ({ ...write, appId: input.slug, source: "app" })));
+        this.storeAttribution(input.writes.map((write) => ({ ...write, appId: input.slug, source: "app", ttlMs: null })));
       });
     });
   }
@@ -25877,7 +25953,7 @@ var AnonDO = class extends DurableObject2 {
         if (!consentAllows(consentState2(this.kv), slug, app2.consent.category, consentEnforced(this.env))) {
           return null;
         }
-        return listAppFacts(this.sql, query);
+        return listAppFacts(this.sql, query, Date.now());
       });
     });
   }
@@ -26057,7 +26133,7 @@ var AnonDO = class extends DurableObject2 {
       // A wipe dropped the sql tables, so reading them would throw — and reviving for a transform
       // snapshot would strand recreated storage when the chain fails or drops.
       custom: this.wiped ? {} : customProperties(this.sql, this.customPropsMirror),
-      attribution: this.wiped ? {} : allAttribution(this.sql, this.attributionMirror),
+      attribution: this.wiped ? {} : allAttribution(this.sql, Date.now(), this.attributionMirror),
       context: this.wiped ? { private: {}, shared: {} } : {
         private: allContext(this.sql, "private", this.contextMirror),
         shared: readableSharedContext(
@@ -26393,7 +26469,7 @@ var AnonDO = class extends DurableObject2 {
   }
   revive() {
     if (this.wiped) {
-      this.ctx.storage.sql.exec(ANON_SCHEMA);
+      applyMigrations(this.ctx.storage, ANON_MIGRATIONS);
       this.wiped = false;
     }
   }
@@ -26595,7 +26671,8 @@ var storedGlobalId = /* @__PURE__ */ __name((kv) => {
 }, "storedGlobalId");
 
 // src/id-graph/global/schema.ts
-var GLOBAL_SCHEMA = `
+var GLOBAL_MIGRATIONS = [
+  `
 CREATE TABLE IF NOT EXISTS facts (
   kind TEXT NOT NULL,
   scope TEXT NOT NULL,
@@ -26610,7 +26687,8 @@ CREATE TABLE IF NOT EXISTS facts (
   observed_at INTEGER NOT NULL
 );
 CREATE UNIQUE INDEX IF NOT EXISTS idx_facts_key ON facts (kind, scope, key);
-`;
+`
+];
 
 // src/id-graph/global/do.ts
 var GlobalDO = class extends DurableObject3 {
@@ -26623,7 +26701,7 @@ var GlobalDO = class extends DurableObject3 {
   wiped = false;
   constructor(ctx, env) {
     super(ctx, env);
-    ctx.storage.sql.exec(GLOBAL_SCHEMA);
+    applyMigrations(ctx.storage, GLOBAL_MIGRATIONS);
     this.kvCache = cachedKv(ctx.storage.kv);
     this.identifiersMirror = identifiersCache2();
   }
@@ -26690,7 +26768,7 @@ var GlobalDO = class extends DurableObject3 {
   }
   revive() {
     if (this.wiped) {
-      this.ctx.storage.sql.exec(GLOBAL_SCHEMA);
+      applyMigrations(this.ctx.storage, GLOBAL_MIGRATIONS);
       this.wiped = false;
     }
   }

package/dist/worker-artifact/version.json

@@ -1,8 +1,8 @@
 {
   "main": {
     "version": "0.1.0",
-    "gitSha": "45acc2f65889b33f7cf2828b967a26fd879455f0",
-    "builtAt": "2026-08-25T22:20:08.908Z",
+    "gitSha": "38683fc9a0a7f29125a35ad77e2c0c701992c82b",
+    "builtAt": "2026-08-27T07:08:20.610Z",
     "compatibilityDate": "2026-06-23",
     "compatibilityFlags": [
       "nodejs_compat"
@@ -40,8 +40,8 @@
   },
   "app-runtime": {
     "version": "0.1.0",
-    "gitSha": "45acc2f65889b33f7cf2828b967a26fd879455f0",
-    "builtAt": "2026-08-25T22:08:45.522Z",
+    "gitSha": "db5a262cc87eefb7191739982830998dd648ff8b",
+    "builtAt": "2026-08-27T05:45:00.519Z",
     "compatibilityDate": "2026-06-23",
     "compatibilityFlags": [
       "nodejs_compat"
@@ -57,8 +57,8 @@
   },
   "apps-ui": {
     "version": "0.1.0",
-    "gitSha": "23b843bfa99a83ee577ee32b8e6ca9334b6f213c",
-    "builtAt": "2026-08-18T05:43:57.464Z",
+    "gitSha": "d2dbd3fccee9436ca4a4e3a6429925e6f9f4d0ce",
+    "builtAt": "2026-08-26T15:50:13.405Z",
     "compatibilityDate": "2026-06-23",
     "compatibilityFlags": [
       "nodejs_compat"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blotout/qinto-cli",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "type": "module",
   "description": "Qinto CLI: authenticate against the Qinto platform and operate it from the terminal or from an agent.",
   "repository": {

package/templates/app/full/qinto.app.jsonc

@@ -36,7 +36,10 @@
   // "capture" names the query params and cookies the platform records against each visitor for
   // this app, which only this app reads back. Each name belongs to one list. Uncomment to use it —
   // a site manager sees the list and must accept any name a later version adds.
-  // "capture": { "queryParams": ["fbclid"], "cookies": ["_fbp"] },
+  //
+  // "expiresInSeconds" is optional and runs from the first sighting of that value; seeing the same
+  // value again never extends it. Omit it to keep the value for the life of the visitor profile.
+  // "capture": { "queryParams": [{ "name": "fbclid", "expiresInSeconds": 604800 }], "cookies": [{ "name": "_fbp" }] },
   // eventResults lets the matching server install receive this browser handler's return value on
   // the same action as action.browser. It is untrusted page input and delivery stays fail-open.
   "browser": { "entry": "src/browser.ts", "eventResults": ["track"] },