@chatroomcp/chatroom 0.2.1 → 0.2.2

package/README.md

@@ -8,7 +8,7 @@
   English | <a href="./docs/README.zh-CN.md">简体中文</a> | <a href="https://doc.chatroomcp.com/">Documentation</a>
 </p>
 
-ChatRoom is a local MCP runtime that lets ChatGPT work with files, Git worktrees, and processes on your device. Its WebUI provides workspace browsing, process monitoring, ChatRoom Cloud controls, and plugin-attributed operation logs.
+ChatRoom is a local MCP runtime that lets ChatGPT work with projects and processes on your device. Its WebUI provides workspace browsing, Git repository management, process monitoring, ChatRoom Cloud controls, and plugin-attributed operation logs.
 
 ## Install
 

package/dist/app/application.d.ts

@@ -1,4 +1,3 @@
-/** Composition root for the single-package ChatRoom runtime. */
 import type { ChatRoomConfig } from "../config/types.js";
 import { AppDatabase } from "../infrastructure/database/app-database.js";
 import { RuntimeEventBus } from "./event-bus.js";

package/dist/app/application.js

@@ -11,6 +11,7 @@ import { ExternalAccessRegistry } from "./external-access-registry.js";
 import { ServiceRegistry } from "../plugins/types.js";
 import { PluginManager } from "../plugins/plugin-manager.js";
 import { createWorkspacePlugin } from "../plugins/workspace/plugin.js";
+import { createGitPlugin } from "../plugins/git/plugin.js";
 import { createProcessPlugin, ProcessService, } from "../plugins/process/plugin.js";
 import { createCloudPlugin, CloudService } from "../plugins/cloud/plugin.js";
 import { createComputerPlugin, ComputerServiceToken, } from "../plugins/computer/plugin.js";
@@ -36,6 +37,7 @@ export async function createApplication(config) {
             services,
         }, [
             createWorkspacePlugin(),
+            createGitPlugin(),
             createProcessPlugin(),
             createComputerPlugin(),
             createCloudPlugin(),

package/dist/app/event-bus.d.ts

@@ -17,8 +17,6 @@ export type RuntimeEvent = {
 } | {
     type: "process-output";
     processId: string;
-    stream: "stdout" | "stderr";
-    chunk: string;
 };
 export declare class RuntimeEventBus {
     private readonly emitter;

package/dist/app/event-bus.js

@@ -1,4 +1,3 @@
-/** Lightweight in-process event bus used to fan runtime changes out to SSE/WebUI observers. */
 import { EventEmitter } from "node:events";
 export class RuntimeEventBus {
     emitter = new EventEmitter();

package/dist/app/external-access-registry.d.ts

@@ -4,7 +4,6 @@ export interface ExternalAccessState {
     mcpBaseUrl: string | null;
     webBaseUrl: string | null;
 }
-/** Combines configured self-hosted URLs with the current ChatRoom Cloud URLs. */
 export declare class ExternalAccessRegistry {
     private readonly config;
     private cloud;

package/dist/app/external-access-registry.js

@@ -1,4 +1,3 @@
-/** Combines configured self-hosted URLs with the current ChatRoom Cloud URLs. */
 export class ExternalAccessRegistry {
     config;
     cloud = { mcpBaseUrl: null, webBaseUrl: null };

package/dist/app/lifecycle.d.ts

@@ -1,4 +1,3 @@
-/** Coordinates startup and shutdown ordering for runtime resources and internal plugins. */
 import type { ChatRoomConfig } from "../config/types.js";
 import { type ApplicationComponents } from "./application.js";
 export declare class ApplicationLifecycle {

package/dist/auth/auth-service.js

@@ -1,7 +1,3 @@
-/**
- * Implements owner authentication and the OAuth Authorization Code + PKCE flow used for remote MCP access.
- * Raw authorization codes and access tokens are never persisted; repositories receive only their hashes.
- */
 import { createHash, randomBytes, randomUUID, timingSafeEqual, } from "node:crypto";
 import { ChatRoomError } from "../core/errors/chatroom-error.js";
 export class AuthService {

package/dist/auth/ingress-policy.d.ts

@@ -5,7 +5,6 @@ export interface WebAuthnOrigin {
     origin: string;
     rpId: string;
 }
-/** Classifies ingress exclusively from configured/registered public hosts. */
 export declare class IngressPolicy {
     private readonly config;
     private readonly externalAccess;

package/dist/auth/ingress-policy.js

@@ -1,4 +1,3 @@
-/** Classifies ingress exclusively from configured/registered public hosts. */
 export class IngressPolicy {
     config;
     externalAccess;

package/dist/cli/run-cli.js

@@ -1,4 +1,3 @@
-/** ChatRoom CLI host. */
 import { initializeConfig, loadConfig } from "../config/load-config.js";
 import { ApplicationLifecycle } from "../app/lifecycle.js";
 export async function runChatRoomCli(argv = process.argv.slice(2)) {

package/dist/config/types.d.ts

@@ -1,4 +1,3 @@
-/** Runtime configuration after defaults and path normalization have been resolved. */
 export interface ChatRoomConfig {
     allowedRoots: string[];
     dataDir: string;

package/dist/core/auth/repository.d.ts

@@ -1,59 +1,36 @@
-/**
- * Persistence contracts for OAuth clients, authorization codes, and access tokens.
- *
- * Raw authorization codes and bearer tokens must never cross this boundary. AuthService hashes
- * those credentials first and repositories store only the resulting digest values.
- */
-/** Dynamically registered OAuth public client. */
 export interface OAuthClientRecord {
     clientId: string;
     name: string;
-    /** Exact redirect URI allowlist registered for the client. */
     redirectUris: string[];
     createdAt: string;
 }
-/** Hashed Authorization Code + PKCE state. */
 export interface OAuthCodeRecord {
-    /** SHA-256 digest of the raw one-time authorization code. */
     codeHash: string;
     clientId: string;
     redirectUri: string;
-    /** S256 challenge supplied during authorization. */
     codeChallenge: string;
-    /** Granted scopes bound to this authorization code. */
     scope: string;
     expiresAt: string;
-    /** Consumption timestamp, or null before the code is atomically used. */
     usedAt: string | null;
 }
-/** Minimal active-token metadata returned after a hashed token lookup. */
 export interface OAuthTokenRecord {
     clientId: string;
     scope: string;
     expiresAt: string;
 }
-/** Storage port used by AuthService for the complete OAuth state machine. */
 export interface OAuthStateRepository {
     createClient(client: OAuthClientRecord): void;
     getClient(clientId: string): OAuthClientRecord | null;
     createCode(code: OAuthCodeRecord): void;
-    /** Read an unconsumed candidate without mutating it so PKCE can be validated first. */
     getCode(codeHash: string): OAuthCodeRecord | null;
-    /** Atomically consume a valid code; null means it was missing, expired by policy, or already used. */
     consumeCode(codeHash: string, now: string): OAuthCodeRecord | null;
-    /** Persist only a token hash together with scope and expiry metadata. */
     createToken(tokenHash: string, clientId: string, scope: string, expiresAt: string): void;
-    /** Persist a hashed refresh token separately from access tokens. */
     createRefreshToken(tokenHash: string, clientId: string, scope: string, expiresAt: string): void;
-    /** Atomically rotate an active refresh token. */
     consumeRefreshToken(tokenHash: string, clientId?: string): {
         clientId: string;
         scope: string;
     } | null;
-    /** Resolve active, non-revoked token metadata from a token hash. */
     tokenInfo(tokenHash: string): OAuthTokenRecord | null;
-    /** Mark a token hash revoked without requiring the raw bearer token to be stored. */
     revokeToken(tokenHash: string): void;
-    /** Remove expired and terminal OAuth state that no longer participates in the protocol. */
     prune(now: string): number;
 }

package/dist/core/auth/repository.js

@@ -1,7 +1 @@
-/**
- * Persistence contracts for OAuth clients, authorization codes, and access tokens.
- *
- * Raw authorization codes and bearer tokens must never cross this boundary. AuthService hashes
- * those credentials first and repositories store only the resulting digest values.
- */
 export {};

package/dist/core/errors/chatroom-error.d.ts

@@ -1,23 +1,8 @@
-/**
- * Typed error vocabulary exposed across ChatRoom application boundaries.
- *
- * Presentation adapters translate these stable codes into protocol responses. Domain/application
- * code should prefer ChatRoomError over parsing message text or leaking implementation-specific
- * filesystem, SQLite, process, or SDK errors to external callers.
- */
 export declare const ERROR_CODES: readonly ["INVALID_INPUT", "NOT_FOUND", "FORBIDDEN", "CONFLICT", "UNSUPPORTED", "PROCESS_FAILED", "INTERNAL"];
 export type ErrorCode = (typeof ERROR_CODES)[number];
-/** Error carrying a stable machine-readable code plus optional structured diagnostic details. */
 export declare class ChatRoomError extends Error {
     readonly code: ErrorCode;
     readonly details?: unknown;
     constructor(code: ErrorCode, message: string, details?: unknown, options?: ErrorOptions);
 }
-/**
- * Normalize an arbitrary thrown value at an application or protocol boundary.
- *
- * Existing ChatRoomError instances retain their public code. Native Error values become INTERNAL
- * while preserving the original error as `cause`; non-Error throws are converted as well so every
- * external path observes the same error vocabulary.
- */
 export declare function asChatRoomError(error: unknown): ChatRoomError;

package/dist/core/errors/chatroom-error.js

@@ -1,10 +1,3 @@
-/**
- * Typed error vocabulary exposed across ChatRoom application boundaries.
- *
- * Presentation adapters translate these stable codes into protocol responses. Domain/application
- * code should prefer ChatRoomError over parsing message text or leaking implementation-specific
- * filesystem, SQLite, process, or SDK errors to external callers.
- */
 export const ERROR_CODES = [
     "INVALID_INPUT",
     "NOT_FOUND",
@@ -14,7 +7,6 @@ export const ERROR_CODES = [
     "PROCESS_FAILED",
     "INTERNAL",
 ];
-/** Error carrying a stable machine-readable code plus optional structured diagnostic details. */
 export class ChatRoomError extends Error {
     code;
     details;
@@ -25,13 +17,6 @@ export class ChatRoomError extends Error {
         this.details = details;
     }
 }
-/**
- * Normalize an arbitrary thrown value at an application or protocol boundary.
- *
- * Existing ChatRoomError instances retain their public code. Native Error values become INTERNAL
- * while preserving the original error as `cause`; non-Error throws are converted as well so every
- * external path observes the same error vocabulary.
- */
 export function asChatRoomError(error) {
     if (error instanceof ChatRoomError)
         return error;

package/dist/core/operations/bounded-value.d.ts

@@ -1,4 +1,3 @@
-/** Utilities for bounding JSON-like operation payloads before persistence. */
 export interface BoundedValue<T = unknown> {
     value: T;
     truncated: boolean;

package/dist/core/operations/bounded-value.js

@@ -1,22 +1,38 @@
 export function boundJson(value, maxBytes) {
-    // Preserve both the beginning and end of oversized strings because failures commonly appear at the tail.
     if (value === undefined)
         return { value: null, truncated: false };
     const json = safeStringify(value);
     const size = Buffer.byteLength(json);
     if (size <= maxBytes)
         return { value: JSON.parse(json), truncated: false };
-    const marker = "\n…[truncated]…\n";
-    const budget = Math.max(0, maxBytes - Buffer.byteLength(marker));
-    const headBudget = Math.floor(budget / 2);
-    const tailBudget = budget - headBudget;
     const encoded = Buffer.from(json);
-    const head = encoded.subarray(0, headBudget).toString("utf8");
-    const tail = encoded.subarray(encoded.length - tailBudget).toString("utf8");
-    const text = `${head}${marker}${tail}`;
+    const marker = "\n…[truncated]…\n";
+    let low = 0;
+    let high = encoded.length;
+    let best = truncatedValue(encoded, marker, size, 0);
+    while (low <= high) {
+        const retainedBytes = Math.floor((low + high) / 2);
+        const candidate = truncatedValue(encoded, marker, size, retainedBytes);
+        if (Buffer.byteLength(JSON.stringify(candidate)) <= maxBytes) {
+            best = candidate;
+            low = retainedBytes + 1;
+        }
+        else {
+            high = retainedBytes - 1;
+        }
+    }
+    return { value: best, truncated: true };
+}
+function truncatedValue(encoded, marker, originalBytes, retainedBytes) {
+    const headBytes = Math.floor(retainedBytes / 2);
+    const tailBytes = retainedBytes - headBytes;
+    const head = encoded.subarray(0, headBytes).toString("utf8");
+    const tail = encoded
+        .subarray(Math.max(0, encoded.length - tailBytes))
+        .toString("utf8");
     return {
-        value: { truncatedJson: text, originalBytes: size },
-        truncated: true,
+        truncatedJson: `${head}${marker}${tail}`,
+        originalBytes,
     };
 }
 function safeStringify(value) {

package/dist/core/operations/redactor.js

@@ -1,4 +1,3 @@
-/** Redacts common credential shapes before values cross the durable operation-log boundary. */
 const SECRET_KEY = new RegExp("(^|[_-])" +
     "(authorization|cookie|password|passwd|token|access[_-]?token|" +
     "refresh[_-]?token|api[_-]?key|apikey|secret|private[_-]?key|" +

package/dist/core/operations/repository.d.ts

@@ -4,7 +4,6 @@ export interface OperationQuery {
     offset?: number;
     pluginId?: string;
     status?: OperationStatus | string;
-    workspaceId?: string;
 }
 export interface OperationRepository {
     insert(operation: Operation): void;

package/dist/core/operations/types.d.ts

@@ -1,7 +1,5 @@
-/** Persistent plugin operation lifecycle recorded by ChatRoom. */
 export declare const OPERATION_STATUSES: readonly ["running", "success", "error", "cancelled"];
 export type OperationStatus = (typeof OPERATION_STATUSES)[number];
-/** Where an operation was initiated; pluginId identifies which plugin owns the operation. */
 export declare const OPERATION_SOURCES: readonly ["mcp", "gui", "system", "cli"];
 export type OperationSource = (typeof OPERATION_SOURCES)[number];
 export interface Operation {
@@ -10,7 +8,6 @@ export interface Operation {
     source: OperationSource;
     action: string;
     status: OperationStatus;
-    workspaceId: string | null;
     processId: string | null;
     input: unknown;
     output: unknown;
@@ -26,6 +23,5 @@ export interface OperationStart {
     source: OperationSource;
     action: string;
     input?: unknown;
-    workspaceId?: string | null;
     processId?: string | null;
 }

package/dist/core/operations/types.js

@@ -1,9 +1,7 @@
-/** Persistent plugin operation lifecycle recorded by ChatRoom. */
 export const OPERATION_STATUSES = [
     "running",
     "success",
     "error",
     "cancelled",
 ];
-/** Where an operation was initiated; pluginId identifies which plugin owns the operation. */
 export const OPERATION_SOURCES = ["mcp", "gui", "system", "cli"];

package/dist/infrastructure/database/app-database.js

@@ -1,109 +1,16 @@
 import { mkdirSync } from "node:fs";
 import path from "node:path";
 import { DatabaseSync } from "node:sqlite";
-const SCHEMA = `
-  CREATE TABLE IF NOT EXISTS workspaces (
-    id TEXT PRIMARY KEY,
-    root TEXT NOT NULL UNIQUE,
-    source_root TEXT NOT NULL,
-    mode TEXT NOT NULL CHECK(mode IN ('checkout','worktree')),
-    created_at TEXT NOT NULL,
-    last_used_at TEXT NOT NULL
-  );
-  CREATE INDEX IF NOT EXISTS workspaces_last_used_idx ON workspaces(last_used_at DESC);
-
-  CREATE TABLE IF NOT EXISTS operations (
-    operation_id TEXT PRIMARY KEY,
-    plugin_id TEXT NOT NULL,
-    source TEXT NOT NULL,
-    action TEXT NOT NULL,
-    status TEXT NOT NULL,
-    workspace_id TEXT,
-    process_id TEXT,
-    input_json TEXT NOT NULL,
-    output_json TEXT NOT NULL,
-    error_json TEXT NOT NULL,
-    input_truncated INTEGER NOT NULL DEFAULT 0,
-    output_truncated INTEGER NOT NULL DEFAULT 0,
-    started_at TEXT NOT NULL,
-    finished_at TEXT,
-    duration_ms INTEGER
-  );
-  CREATE INDEX IF NOT EXISTS operations_started_idx ON operations(started_at DESC);
-  CREATE INDEX IF NOT EXISTS operations_plugin_idx ON operations(plugin_id, started_at DESC);
-  CREATE INDEX IF NOT EXISTS operations_workspace_idx ON operations(workspace_id, started_at DESC);
-  CREATE INDEX IF NOT EXISTS operations_status_idx ON operations(status, started_at DESC);
-
-  CREATE TABLE IF NOT EXISTS oauth_clients (
-    client_id TEXT PRIMARY KEY,
-    name TEXT NOT NULL,
-    redirect_uris_json TEXT NOT NULL,
-    created_at TEXT NOT NULL
-  );
-  CREATE TABLE IF NOT EXISTS oauth_codes (
-    code_hash TEXT PRIMARY KEY,
-    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,
-    redirect_uri TEXT NOT NULL,
-    code_challenge TEXT NOT NULL,
-    scope TEXT NOT NULL,
-    expires_at TEXT NOT NULL,
-    used_at TEXT
-  );
-  CREATE INDEX IF NOT EXISTS oauth_code_expiry_idx ON oauth_codes(expires_at);
-  CREATE TABLE IF NOT EXISTS oauth_tokens (
-    token_hash TEXT PRIMARY KEY,
-    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,
-    scope TEXT NOT NULL,
-    expires_at TEXT NOT NULL,
-    revoked_at TEXT,
-    created_at TEXT NOT NULL
-  );
-  CREATE INDEX IF NOT EXISTS oauth_token_expiry_idx ON oauth_tokens(expires_at);
-  CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (
-    token_hash TEXT PRIMARY KEY,
-    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,
-    scope TEXT NOT NULL,
-    expires_at TEXT NOT NULL,
-    revoked_at TEXT,
-    created_at TEXT NOT NULL
-  );
-  CREATE INDEX IF NOT EXISTS oauth_refresh_expiry_idx ON oauth_refresh_tokens(expires_at);
-
-  CREATE TABLE IF NOT EXISTS web_sessions (
-    token_hash TEXT PRIMARY KEY,
-    expires_at TEXT NOT NULL,
-    created_at TEXT NOT NULL
-  );
-  CREATE INDEX IF NOT EXISTS web_session_expiry_idx ON web_sessions(expires_at);
-
-  CREATE TABLE IF NOT EXISTS passkeys (
-    credential_id TEXT PRIMARY KEY,
-    public_key BLOB NOT NULL,
-    counter INTEGER NOT NULL,
-    transports_json TEXT NOT NULL,
-    device_type TEXT NOT NULL CHECK(device_type IN ('singleDevice','multiDevice')),
-    backed_up INTEGER NOT NULL,
-    name TEXT NOT NULL,
-    created_at TEXT NOT NULL,
-    last_used_at TEXT NOT NULL
-  );
-  CREATE INDEX IF NOT EXISTS passkeys_last_used_idx ON passkeys(last_used_at DESC);
-
-  CREATE TABLE IF NOT EXISTS computer_settings (
-    id INTEGER PRIMARY KEY CHECK(id = 1),
-    enabled INTEGER NOT NULL DEFAULT 0,
-    remote_access INTEGER NOT NULL DEFAULT 1,
-    updated_at TEXT NOT NULL
-  );
-
-`;
+import { migrateDatabase } from "./migrations.js";
+import { DATABASE_SCHEMA } from "./schema.js";
 export class AppDatabase {
     raw;
     constructor(databasePath) {
         mkdirSync(path.dirname(databasePath), { recursive: true, mode: 0o700 });
         this.raw = new DatabaseSync(databasePath);
         this.raw.exec("PRAGMA journal_mode = WAL; PRAGMA busy_timeout = 5000; PRAGMA foreign_keys = ON;");
-        this.raw.exec(SCHEMA);
+        migrateDatabase(this.raw);
+        this.raw.exec(DATABASE_SCHEMA);
     }
     close() {
         this.raw.close();

package/dist/infrastructure/database/migrations.d.ts

@@ -0,0 +1,2 @@
+import type { DatabaseSync } from "node:sqlite";
+export declare function migrateDatabase(db: DatabaseSync): void;

package/dist/infrastructure/database/migrations.js

@@ -0,0 +1,44 @@
+import { DATABASE_SCHEMA_VERSION } from "./schema.js";
+export function migrateDatabase(db) {
+    let version = userVersion(db);
+    if (version > DATABASE_SCHEMA_VERSION)
+        throw new Error(`Database schema ${version} is newer than this ChatRoom build (${DATABASE_SCHEMA_VERSION})`);
+    while (version < DATABASE_SCHEMA_VERSION) {
+        switch (version) {
+            case 0:
+                migrate0To1(db);
+                version = 1;
+                break;
+            default:
+                throw new Error(`Unsupported ChatRoom database schema: ${version}`);
+        }
+    }
+}
+function migrate0To1(db) {
+    db.exec("BEGIN IMMEDIATE;");
+    try {
+        db.exec(`
+      DROP TABLE IF EXISTS workspaces;
+      DROP TABLE IF EXISTS audit_events;
+      DROP TABLE IF EXISTS agent_runs;
+      DROP INDEX IF EXISTS operations_workspace_idx;
+    `);
+        const operationColumns = db
+            .prepare("PRAGMA table_info(operations)")
+            .all();
+        if (operationColumns.some((column) => column.name === "workspace_id"))
+            db.exec("ALTER TABLE operations DROP COLUMN workspace_id;");
+        db.exec("PRAGMA user_version = 1; COMMIT;");
+    }
+    catch (error) {
+        db.exec("ROLLBACK;");
+        throw error;
+    }
+}
+function userVersion(db) {
+    const row = db.prepare("PRAGMA user_version").get();
+    const version = Number(row?.user_version ?? 0);
+    if (!Number.isInteger(version) || version < 0)
+        throw new Error(`Invalid ChatRoom database schema version: ${version}`);
+    return version;
+}

package/dist/infrastructure/database/operation-repository.js

@@ -7,10 +7,10 @@ export class OperationRepository {
         this.database.raw
             .prepare(`
         INSERT INTO operations(
-          operation_id, plugin_id, source, action, status, workspace_id, process_id,
+          operation_id, plugin_id, source, action, status, process_id,
           input_json, output_json, error_json, input_truncated, output_truncated,
           started_at, finished_at, duration_ms
-        ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)
+        ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)
       `)
             .run(...toRowValues(operation));
     }
@@ -18,7 +18,7 @@ export class OperationRepository {
         this.database.raw
             .prepare(`
         UPDATE operations SET
-          plugin_id=?, source=?, action=?, status=?, workspace_id=?, process_id=?,
+          plugin_id=?, source=?, action=?, status=?, process_id=?,
           input_json=?, output_json=?, error_json=?, input_truncated=?, output_truncated=?,
           started_at=?, finished_at=?, duration_ms=?
         WHERE operation_id=?
@@ -42,10 +42,6 @@ export class OperationRepository {
             where.push("status=?");
             args.push(query.status);
         }
-        if (query.workspaceId) {
-            where.push("workspace_id=?");
-            args.push(query.workspaceId);
-        }
         const limit = Math.min(Math.max(query.limit ?? 100, 1), 500);
         const offset = Math.max(query.offset ?? 0, 0);
         const filter = where.length ? `WHERE ${where.join(" AND ")}` : "";
@@ -88,7 +84,6 @@ function toRowValues(operation) {
         operation.source,
         operation.action,
         operation.status,
-        operation.workspaceId,
         operation.processId,
         JSON.stringify(operation.input),
         JSON.stringify(operation.output),
@@ -107,7 +102,6 @@ function fromRow(row) {
         source: row.source,
         action: row.action,
         status: row.status,
-        workspaceId: row.workspace_id,
         processId: row.process_id,
         input: parse(row.input_json),
         output: parse(row.output_json),

package/dist/infrastructure/database/schema.d.ts

@@ -0,0 +1,2 @@
+export declare const DATABASE_SCHEMA_VERSION = 1;
+export declare const DATABASE_SCHEMA = "\n  CREATE TABLE IF NOT EXISTS operations (\n    operation_id TEXT PRIMARY KEY,\n    plugin_id TEXT NOT NULL,\n    source TEXT NOT NULL,\n    action TEXT NOT NULL,\n    status TEXT NOT NULL,\n    process_id TEXT,\n    input_json TEXT NOT NULL,\n    output_json TEXT NOT NULL,\n    error_json TEXT NOT NULL,\n    input_truncated INTEGER NOT NULL DEFAULT 0,\n    output_truncated INTEGER NOT NULL DEFAULT 0,\n    started_at TEXT NOT NULL,\n    finished_at TEXT,\n    duration_ms INTEGER\n  );\n  CREATE INDEX IF NOT EXISTS operations_started_idx ON operations(started_at DESC);\n  CREATE INDEX IF NOT EXISTS operations_plugin_idx ON operations(plugin_id, started_at DESC);\n  CREATE INDEX IF NOT EXISTS operations_status_idx ON operations(status, started_at DESC);\n\n  CREATE TABLE IF NOT EXISTS oauth_clients (\n    client_id TEXT PRIMARY KEY,\n    name TEXT NOT NULL,\n    redirect_uris_json TEXT NOT NULL,\n    created_at TEXT NOT NULL\n  );\n  CREATE TABLE IF NOT EXISTS oauth_codes (\n    code_hash TEXT PRIMARY KEY,\n    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,\n    redirect_uri TEXT NOT NULL,\n    code_challenge TEXT NOT NULL,\n    scope TEXT NOT NULL,\n    expires_at TEXT NOT NULL,\n    used_at TEXT\n  );\n  CREATE INDEX IF NOT EXISTS oauth_code_expiry_idx ON oauth_codes(expires_at);\n  CREATE TABLE IF NOT EXISTS oauth_tokens (\n    token_hash TEXT PRIMARY KEY,\n    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,\n    scope TEXT NOT NULL,\n    expires_at TEXT NOT NULL,\n    revoked_at TEXT,\n    created_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS oauth_token_expiry_idx ON oauth_tokens(expires_at);\n  CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (\n    token_hash TEXT PRIMARY KEY,\n    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,\n    scope TEXT NOT NULL,\n    expires_at TEXT NOT NULL,\n    revoked_at TEXT,\n    created_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS oauth_refresh_expiry_idx ON oauth_refresh_tokens(expires_at);\n\n  CREATE TABLE IF NOT EXISTS web_sessions (\n    token_hash TEXT PRIMARY KEY,\n    expires_at TEXT NOT NULL,\n    created_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS web_session_expiry_idx ON web_sessions(expires_at);\n\n  CREATE TABLE IF NOT EXISTS passkeys (\n    credential_id TEXT PRIMARY KEY,\n    public_key BLOB NOT NULL,\n    counter INTEGER NOT NULL,\n    transports_json TEXT NOT NULL,\n    device_type TEXT NOT NULL CHECK(device_type IN ('singleDevice','multiDevice')),\n    backed_up INTEGER NOT NULL,\n    name TEXT NOT NULL,\n    created_at TEXT NOT NULL,\n    last_used_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS passkeys_last_used_idx ON passkeys(last_used_at DESC);\n\n  CREATE TABLE IF NOT EXISTS computer_settings (\n    id INTEGER PRIMARY KEY CHECK(id = 1),\n    enabled INTEGER NOT NULL DEFAULT 0,\n    remote_access INTEGER NOT NULL DEFAULT 1,\n    updated_at TEXT NOT NULL\n  );\n\n";

package/dist/infrastructure/database/schema.js

@@ -0,0 +1,85 @@
+export const DATABASE_SCHEMA_VERSION = 1;
+export const DATABASE_SCHEMA = `
+  CREATE TABLE IF NOT EXISTS operations (
+    operation_id TEXT PRIMARY KEY,
+    plugin_id TEXT NOT NULL,
+    source TEXT NOT NULL,
+    action TEXT NOT NULL,
+    status TEXT NOT NULL,
+    process_id TEXT,
+    input_json TEXT NOT NULL,
+    output_json TEXT NOT NULL,
+    error_json TEXT NOT NULL,
+    input_truncated INTEGER NOT NULL DEFAULT 0,
+    output_truncated INTEGER NOT NULL DEFAULT 0,
+    started_at TEXT NOT NULL,
+    finished_at TEXT,
+    duration_ms INTEGER
+  );
+  CREATE INDEX IF NOT EXISTS operations_started_idx ON operations(started_at DESC);
+  CREATE INDEX IF NOT EXISTS operations_plugin_idx ON operations(plugin_id, started_at DESC);
+  CREATE INDEX IF NOT EXISTS operations_status_idx ON operations(status, started_at DESC);
+
+  CREATE TABLE IF NOT EXISTS oauth_clients (
+    client_id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    redirect_uris_json TEXT NOT NULL,
+    created_at TEXT NOT NULL
+  );
+  CREATE TABLE IF NOT EXISTS oauth_codes (
+    code_hash TEXT PRIMARY KEY,
+    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,
+    redirect_uri TEXT NOT NULL,
+    code_challenge TEXT NOT NULL,
+    scope TEXT NOT NULL,
+    expires_at TEXT NOT NULL,
+    used_at TEXT
+  );
+  CREATE INDEX IF NOT EXISTS oauth_code_expiry_idx ON oauth_codes(expires_at);
+  CREATE TABLE IF NOT EXISTS oauth_tokens (
+    token_hash TEXT PRIMARY KEY,
+    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,
+    scope TEXT NOT NULL,
+    expires_at TEXT NOT NULL,
+    revoked_at TEXT,
+    created_at TEXT NOT NULL
+  );
+  CREATE INDEX IF NOT EXISTS oauth_token_expiry_idx ON oauth_tokens(expires_at);
+  CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (
+    token_hash TEXT PRIMARY KEY,
+    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,
+    scope TEXT NOT NULL,
+    expires_at TEXT NOT NULL,
+    revoked_at TEXT,
+    created_at TEXT NOT NULL
+  );
+  CREATE INDEX IF NOT EXISTS oauth_refresh_expiry_idx ON oauth_refresh_tokens(expires_at);
+
+  CREATE TABLE IF NOT EXISTS web_sessions (
+    token_hash TEXT PRIMARY KEY,
+    expires_at TEXT NOT NULL,
+    created_at TEXT NOT NULL
+  );
+  CREATE INDEX IF NOT EXISTS web_session_expiry_idx ON web_sessions(expires_at);
+
+  CREATE TABLE IF NOT EXISTS passkeys (
+    credential_id TEXT PRIMARY KEY,
+    public_key BLOB NOT NULL,
+    counter INTEGER NOT NULL,
+    transports_json TEXT NOT NULL,
+    device_type TEXT NOT NULL CHECK(device_type IN ('singleDevice','multiDevice')),
+    backed_up INTEGER NOT NULL,
+    name TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    last_used_at TEXT NOT NULL
+  );
+  CREATE INDEX IF NOT EXISTS passkeys_last_used_idx ON passkeys(last_used_at DESC);
+
+  CREATE TABLE IF NOT EXISTS computer_settings (
+    id INTEGER PRIMARY KEY CHECK(id = 1),
+    enabled INTEGER NOT NULL DEFAULT 0,
+    remote_access INTEGER NOT NULL DEFAULT 1,
+    updated_at TEXT NOT NULL
+  );
+
+`;

package/dist/infrastructure/http/http-server.js

@@ -1,4 +1,3 @@
-/** Express/HTTP transport host for REST, OAuth, MCP, plugins, and the built WebUI. */
 import { createServer } from "node:http";
 import path from "node:path";
 import { existsSync, readFileSync } from "node:fs";