@christopherlittle51/postclaw 1.0.0

package/dist/scripts/setup-db.js

@@ -0,0 +1,539 @@
+"use strict";
+/**
+ * PostClaw Database Setup Script
+ *
+ * Fully automated PostgreSQL database bootstrapping for the PostClaw plugin.
+ * Creates the database, user, schema, indices, RLS policies, and grants.
+ *
+ * Usage (via OpenClaw CLI):
+ *   openclaw postclaw setup [options]
+ *
+ * Usage (standalone):
+ *   node dist/scripts/setup-db.js [options]
+ *
+ * Options:
+ *   --admin-url <url>     Superuser connection string (default: postgres://localhost/postgres)
+ *   --db-name <name>      Database name (default: memorydb)
+ *   --db-user <user>      App user name (default: openclaw)
+ *   --db-password <pass>  App user password (auto-generated if omitted)
+ *   --skip-config         Don't auto-update openclaw.json with the new dbUrl
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSetup = runSetup;
+const postgres_1 = __importDefault(require("postgres"));
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+function generatePassword(length = 16) {
+    const chars = "ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789!@#$%";
+    const bytes = (0, node_crypto_1.randomBytes)(length);
+    return Array.from(bytes, (b) => chars[b % chars.length]).join("");
+}
+function log(icon, msg) {
+    console.log(`  ${icon}  ${msg}`);
+}
+// ─── Schema SQL (idempotent) ─────────────────────────────────────────────────
+function buildSchemaSql(appUser, appPassword) {
+    // We generate the full idempotent schema inline so passwords can be injected.
+    // Each statement is separated by a clear comment block.
+    return `
+-- ==========================================================================
+-- PostClaw Schema — Auto-generated by setup-db.ts
+-- ==========================================================================
+
+-- 1. Extensions
+CREATE EXTENSION IF NOT EXISTS vector;
+CREATE EXTENSION IF NOT EXISTS pgcrypto;
+
+-- 2. Enumerated Types (idempotent via DO block)
+DO $$ BEGIN
+  CREATE TYPE access_scope_enum AS ENUM ('private', 'shared', 'global');
+EXCEPTION WHEN duplicate_object THEN NULL;
+END $$;
+
+DO $$ BEGIN
+  CREATE TYPE memory_tier_enum AS ENUM ('volatile', 'session', 'daily', 'stable', 'permanent');
+EXCEPTION WHEN duplicate_object THEN NULL;
+END $$;
+
+DO $$ BEGIN
+  CREATE TYPE volatility_enum AS ENUM ('low', 'medium', 'high');
+EXCEPTION WHEN duplicate_object THEN NULL;
+END $$;
+
+-- 3. Functions
+CREATE OR REPLACE FUNCTION update_modified_column()
+RETURNS TRIGGER AS $$
+BEGIN
+    NEW.updated_at = CURRENT_TIMESTAMP;
+    RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE OR REPLACE FUNCTION enforce_immutable_ownership()
+RETURNS TRIGGER AS $$
+BEGIN
+    IF NEW.agent_id <> OLD.agent_id THEN
+        RAISE EXCEPTION 'Epistemic violation: Cannot change the original author (agent_id) of a memory.';
+    END IF;
+    RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+-- 4. Tables
+CREATE TABLE IF NOT EXISTS agents (
+    id VARCHAR(100) PRIMARY KEY,
+    name VARCHAR(255) NOT NULL,
+    default_embedding_model VARCHAR(100) DEFAULT 'nomic-embed-text-v2-moe',
+    embedding_dimensions INT DEFAULT 768,
+    created_at TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
+    is_active BOOLEAN DEFAULT true
+);
+
+CREATE TABLE IF NOT EXISTS agent_persona (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    agent_id VARCHAR(100) NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+    access_scope access_scope_enum DEFAULT 'private',
+    category VARCHAR(50) NOT NULL,
+    content TEXT NOT NULL,
+    is_always_active BOOLEAN DEFAULT false,
+    embedding vector,
+    created_at TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE(agent_id, category)
+);
+
+CREATE TABLE IF NOT EXISTS context_environment (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    agent_id VARCHAR(100) NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+    access_scope access_scope_enum DEFAULT 'private',
+    tool_name VARCHAR(100) NOT NULL,
+    context_data TEXT NOT NULL,
+    embedding vector,
+    created_at TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE(agent_id, tool_name)
+);
+
+CREATE TABLE IF NOT EXISTS memory_semantic (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    agent_id VARCHAR(100) NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+    access_scope access_scope_enum DEFAULT 'private',
+    content TEXT NOT NULL,
+    content_hash VARCHAR(64) NOT NULL,
+    category VARCHAR(50),
+    source_uri VARCHAR(512),
+    volatility volatility_enum DEFAULT 'low',
+    is_pointer BOOLEAN DEFAULT false,
+    embedding vector,
+    embedding_model VARCHAR(100) NOT NULL,
+    token_count INT NOT NULL DEFAULT 0,
+    fts_vector tsvector GENERATED ALWAYS AS (to_tsvector('simple'::regconfig, content)) STORED,
+    confidence REAL DEFAULT 0.5,
+    tier memory_tier_enum DEFAULT 'daily',
+    usefulness_score REAL DEFAULT 0.0,
+    injection_count INT DEFAULT 0,
+    access_count INT DEFAULT 0,
+    last_injected_at TIMESTAMPTZ,
+    last_accessed_at TIMESTAMPTZ,
+    created_at TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
+    updated_at TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
+    expires_at TIMESTAMPTZ,
+    is_archived BOOLEAN DEFAULT false,
+    metadata JSONB DEFAULT '{}'::jsonb,
+    superseded_by UUID REFERENCES memory_semantic(id) ON DELETE SET NULL,
+    UNIQUE(agent_id, content_hash)
+);
+
+CREATE TABLE IF NOT EXISTS memory_episodic (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    agent_id VARCHAR(100) NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+    session_id VARCHAR(100) NOT NULL,
+    event_summary TEXT NOT NULL,
+    event_type VARCHAR(50),
+    source_uri VARCHAR(512),
+    embedding vector,
+    embedding_model VARCHAR(100) NOT NULL,
+    token_count INT NOT NULL DEFAULT 0,
+    fts_vector tsvector GENERATED ALWAYS AS (to_tsvector('simple'::regconfig, event_summary)) STORED,
+    usefulness_score REAL DEFAULT 0.0,
+    metadata JSONB DEFAULT '{}'::jsonb,
+    created_at TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
+    is_archived BOOLEAN DEFAULT false
+);
+
+CREATE TABLE IF NOT EXISTS conversation_checkpoints (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    agent_id VARCHAR(100) NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+    session_id VARCHAR(100) NOT NULL,
+    summary TEXT NOT NULL,
+    active_tasks JSONB,
+    token_count INT,
+    created_at TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE TABLE IF NOT EXISTS entity_edges (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    agent_id VARCHAR(100) NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+    source_memory_id UUID REFERENCES memory_semantic(id),
+    target_memory_id UUID REFERENCES memory_semantic(id),
+    relationship_type VARCHAR(100) NOT NULL,
+    weight REAL DEFAULT 1.0,
+    created_at TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP,
+    CHECK (source_memory_id != target_memory_id),
+    UNIQUE(source_memory_id, target_memory_id, relationship_type)
+);
+
+-- 5. Triggers (idempotent: drop + create)
+DROP TRIGGER IF EXISTS update_memory_semantic_modtime ON memory_semantic;
+CREATE TRIGGER update_memory_semantic_modtime
+BEFORE UPDATE ON memory_semantic
+FOR EACH ROW EXECUTE FUNCTION update_modified_column();
+
+DROP TRIGGER IF EXISTS trg_immutable_memory_owner ON memory_semantic;
+CREATE TRIGGER trg_immutable_memory_owner
+BEFORE UPDATE ON memory_semantic
+FOR EACH ROW EXECUTE FUNCTION enforce_immutable_ownership();
+
+DROP TRIGGER IF EXISTS trg_immutable_persona_owner ON agent_persona;
+CREATE TRIGGER trg_immutable_persona_owner
+BEFORE UPDATE ON agent_persona
+FOR EACH ROW EXECUTE FUNCTION enforce_immutable_ownership();
+
+DROP TRIGGER IF EXISTS trg_immutable_context_owner ON context_environment;
+CREATE TRIGGER trg_immutable_context_owner
+BEFORE UPDATE ON context_environment
+FOR EACH ROW EXECUTE FUNCTION enforce_immutable_ownership();
+
+-- 6. Indices
+CREATE INDEX IF NOT EXISTS idx_mem_sem_agent_tier ON memory_semantic(agent_id, tier, is_archived);
+CREATE INDEX IF NOT EXISTS idx_mem_sem_hash ON memory_semantic(content_hash);
+CREATE INDEX IF NOT EXISTS idx_mem_epi_session ON memory_episodic(agent_id, session_id, is_archived);
+CREATE INDEX IF NOT EXISTS idx_mem_sem_source_uri ON memory_semantic(source_uri) WHERE source_uri IS NOT NULL;
+CREATE INDEX IF NOT EXISTS idx_mem_sem_metadata ON memory_semantic USING gin (metadata);
+CREATE INDEX IF NOT EXISTS idx_mem_epi_metadata ON memory_episodic USING gin (metadata);
+CREATE INDEX IF NOT EXISTS idx_mem_sem_expires ON memory_semantic(expires_at) WHERE expires_at IS NOT NULL;
+CREATE INDEX IF NOT EXISTS idx_mem_sem_fts ON memory_semantic USING gin (fts_vector);
+CREATE INDEX IF NOT EXISTS idx_mem_epi_fts ON memory_episodic USING gin (fts_vector);
+CREATE INDEX IF NOT EXISTS idx_mem_sem_vector_nomic ON memory_semantic USING hnsw ((embedding::vector(768)) vector_cosine_ops) WHERE embedding_model = 'nomic-embed-text-v2-moe';
+CREATE INDEX IF NOT EXISTS idx_mem_sem_vector_openai ON memory_semantic USING hnsw ((embedding::vector(1536)) vector_cosine_ops) WHERE embedding_model = 'text-embedding-3-small';
+CREATE INDEX IF NOT EXISTS idx_edges_source ON entity_edges(source_memory_id);
+CREATE INDEX IF NOT EXISTS idx_edges_target ON entity_edges(target_memory_id);
+CREATE INDEX IF NOT EXISTS idx_mem_sem_superseded ON memory_semantic(superseded_by) WHERE superseded_by IS NOT NULL;
+
+-- 7. Row-Level Security
+ALTER TABLE memory_semantic ENABLE ROW LEVEL SECURITY;
+ALTER TABLE memory_episodic ENABLE ROW LEVEL SECURITY;
+ALTER TABLE agent_persona ENABLE ROW LEVEL SECURITY;
+ALTER TABLE context_environment ENABLE ROW LEVEL SECURITY;
+ALTER TABLE entity_edges ENABLE ROW LEVEL SECURITY;
+ALTER TABLE conversation_checkpoints ENABLE ROW LEVEL SECURITY;
+
+-- RLS Policies (idempotent: DROP IF EXISTS + CREATE)
+-- memory_semantic
+DROP POLICY IF EXISTS semantic_read ON memory_semantic;
+CREATE POLICY semantic_read ON memory_semantic FOR SELECT
+    USING (agent_id = current_setting('app.current_agent_id', true) OR access_scope IN ('shared', 'global'));
+
+DROP POLICY IF EXISTS semantic_insert ON memory_semantic;
+CREATE POLICY semantic_insert ON memory_semantic FOR INSERT
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS semantic_update ON memory_semantic;
+CREATE POLICY semantic_update ON memory_semantic FOR UPDATE
+    USING (agent_id = current_setting('app.current_agent_id', true) OR access_scope = 'global')
+    WITH CHECK ((agent_id = current_setting('app.current_agent_id', true)) OR (access_scope = 'global'));
+
+DROP POLICY IF EXISTS semantic_delete ON memory_semantic;
+CREATE POLICY semantic_delete ON memory_semantic FOR DELETE
+    USING (agent_id = current_setting('app.current_agent_id', true));
+
+-- agent_persona
+DROP POLICY IF EXISTS persona_read ON agent_persona;
+CREATE POLICY persona_read ON agent_persona FOR SELECT
+    USING (agent_id = current_setting('app.current_agent_id', true) OR access_scope IN ('shared', 'global'));
+
+DROP POLICY IF EXISTS persona_insert ON agent_persona;
+CREATE POLICY persona_insert ON agent_persona FOR INSERT
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS persona_update ON agent_persona;
+CREATE POLICY persona_update ON agent_persona FOR UPDATE
+    USING (agent_id = current_setting('app.current_agent_id', true) OR access_scope = 'global')
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true) OR access_scope = 'global');
+
+DROP POLICY IF EXISTS persona_delete ON agent_persona;
+CREATE POLICY persona_delete ON agent_persona FOR DELETE
+    USING (agent_id = current_setting('app.current_agent_id', true));
+
+-- context_environment
+DROP POLICY IF EXISTS context_read ON context_environment;
+CREATE POLICY context_read ON context_environment FOR SELECT
+    USING (agent_id = current_setting('app.current_agent_id', true) OR access_scope IN ('shared', 'global'));
+
+DROP POLICY IF EXISTS context_insert ON context_environment;
+CREATE POLICY context_insert ON context_environment FOR INSERT
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS context_update ON context_environment;
+CREATE POLICY context_update ON context_environment FOR UPDATE
+    USING (agent_id = current_setting('app.current_agent_id', true) OR access_scope = 'global')
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true) OR access_scope = 'global');
+
+DROP POLICY IF EXISTS context_delete ON context_environment;
+CREATE POLICY context_delete ON context_environment FOR DELETE
+    USING (agent_id = current_setting('app.current_agent_id', true));
+
+-- memory_episodic
+DROP POLICY IF EXISTS episodic_read ON memory_episodic;
+CREATE POLICY episodic_read ON memory_episodic FOR SELECT
+    USING (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS episodic_insert ON memory_episodic;
+CREATE POLICY episodic_insert ON memory_episodic FOR INSERT
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS episodic_update ON memory_episodic;
+CREATE POLICY episodic_update ON memory_episodic FOR UPDATE
+    USING (agent_id = current_setting('app.current_agent_id', true))
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS episodic_delete ON memory_episodic;
+CREATE POLICY episodic_delete ON memory_episodic FOR DELETE
+    USING (agent_id = current_setting('app.current_agent_id', true));
+
+-- conversation_checkpoints
+DROP POLICY IF EXISTS checkpoint_read ON conversation_checkpoints;
+CREATE POLICY checkpoint_read ON conversation_checkpoints FOR SELECT
+    USING (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS checkpoint_insert ON conversation_checkpoints;
+CREATE POLICY checkpoint_insert ON conversation_checkpoints FOR INSERT
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS checkpoint_update ON conversation_checkpoints;
+CREATE POLICY checkpoint_update ON conversation_checkpoints FOR UPDATE
+    USING (agent_id = current_setting('app.current_agent_id', true))
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS checkpoint_delete ON conversation_checkpoints;
+CREATE POLICY checkpoint_delete ON conversation_checkpoints FOR DELETE
+    USING (agent_id = current_setting('app.current_agent_id', true));
+
+-- entity_edges
+DROP POLICY IF EXISTS edge_read ON entity_edges;
+CREATE POLICY edge_read ON entity_edges FOR SELECT
+    USING (
+        agent_id = current_setting('app.current_agent_id', true)
+        OR EXISTS (
+            SELECT 1 FROM memory_semantic ms
+            WHERE ms.id IN (source_memory_id, target_memory_id)
+            AND ms.access_scope IN ('shared', 'global')
+        )
+    );
+
+DROP POLICY IF EXISTS edge_insert ON entity_edges;
+CREATE POLICY edge_insert ON entity_edges FOR INSERT
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS edge_update ON entity_edges;
+CREATE POLICY edge_update ON entity_edges FOR UPDATE
+    USING (agent_id = current_setting('app.current_agent_id', true))
+    WITH CHECK (agent_id = current_setting('app.current_agent_id', true));
+
+DROP POLICY IF EXISTS edge_delete ON entity_edges;
+CREATE POLICY edge_delete ON entity_edges FOR DELETE
+    USING (agent_id = current_setting('app.current_agent_id', true));
+
+-- 8. App user grants
+GRANT USAGE ON SCHEMA public TO ${appUser};
+GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO ${appUser};
+GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO ${appUser};
+`;
+}
+async function runSetup(opts = {}) {
+    const adminUrl = opts.adminUrl || "postgres://localhost/postgres";
+    const dbName = opts.dbName || "memorydb";
+    const appUser = opts.dbUser || "openclaw";
+    const appPassword = opts.dbPassword || generatePassword();
+    const skipConfig = opts.skipConfig || false;
+    const adminPassword = generatePassword();
+    console.log("\n🦐 PostClaw Database Setup\n");
+    // ── Step 1: Connect as superuser ──────────────────────────────────────────
+    let adminSql;
+    try {
+        adminSql = (0, postgres_1.default)(adminUrl, { max: 1 });
+        await adminSql `SELECT 1`;
+        log("✅", `Connected to Postgres as superuser`);
+    }
+    catch (err) {
+        log("❌", `Cannot connect to ${adminUrl}`);
+        log("", `Error: ${err.message}`);
+        log("", `Try: openclaw postclaw setup --admin-url postgres://postgres:PASSWORD@localhost/postgres`);
+        throw new Error("Superuser connection failed");
+    }
+    // ── Step 2: Create database ───────────────────────────────────────────────
+    try {
+        const exists = await adminSql `
+      SELECT 1 FROM pg_database WHERE datname = ${dbName}
+    `;
+        if (exists.length > 0) {
+            log("✅", `Database '${dbName}' already exists`);
+        }
+        else {
+            // Can't use parameterized queries for CREATE DATABASE
+            await adminSql.unsafe(`CREATE DATABASE ${dbName}`);
+            log("✅", `Created database '${dbName}'`);
+        }
+    }
+    catch (err) {
+        log("❌", `Failed to create database: ${err.message}`);
+        await adminSql.end();
+        throw err;
+    }
+    // ── Step 3: Create app user ───────────────────────────────────────────────
+    try {
+        const userExists = await adminSql `
+      SELECT 1 FROM pg_roles WHERE rolname = ${appUser}
+    `;
+        if (userExists.length > 0) {
+            log("✅", `User '${appUser}' already exists`);
+            // Update password to the new one
+            await adminSql.unsafe(`ALTER USER ${appUser} WITH PASSWORD '${appPassword.replace(/'/g, "''")}'`);
+        }
+        else {
+            await adminSql.unsafe(`CREATE USER ${appUser} WITH LOGIN PASSWORD '${appPassword.replace(/'/g, "''")}'`);
+            log("✅", `Created user '${appUser}'`);
+        }
+        await adminSql.unsafe(`GRANT CONNECT ON DATABASE ${dbName} TO ${appUser}`);
+    }
+    catch (err) {
+        log("❌", `Failed to create user: ${err.message}`);
+        await adminSql.end();
+        throw err;
+    }
+    // ── Step 4: Create system_admin role ──────────────────────────────────────
+    try {
+        const adminExists = await adminSql `
+      SELECT 1 FROM pg_roles WHERE rolname = 'system_admin'
+    `;
+        if (adminExists.length > 0) {
+            log("✅", `Role 'system_admin' already exists`);
+            await adminSql.unsafe(`ALTER ROLE system_admin WITH PASSWORD '${adminPassword.replace(/'/g, "''")}'`);
+        }
+        else {
+            await adminSql.unsafe(`CREATE ROLE system_admin WITH LOGIN PASSWORD '${adminPassword.replace(/'/g, "''")}'`);
+            log("✅", `Created role 'system_admin'`);
+        }
+        await adminSql.unsafe(`ALTER ROLE system_admin BYPASSRLS`);
+    }
+    catch (err) {
+        log("⚠️", `system_admin role setup warning: ${err.message}`);
+        // Non-fatal — continue without it
+    }
+    await adminSql.end();
+    // ── Step 5: Connect to the target database and run schema ─────────────────
+    // Build a connection URL for the target database using the superuser
+    const parsedAdmin = new URL(adminUrl);
+    const targetUrl = `${parsedAdmin.protocol}//${parsedAdmin.username}${parsedAdmin.password ? ":" + parsedAdmin.password : ""}@${parsedAdmin.host}/${dbName}`;
+    let dbSql;
+    try {
+        dbSql = (0, postgres_1.default)(targetUrl, { max: 1 });
+        await dbSql `SELECT 1`;
+        log("✅", `Connected to '${dbName}'`);
+    }
+    catch (err) {
+        log("❌", `Cannot connect to database '${dbName}': ${err.message}`);
+        throw err;
+    }
+    try {
+        const schemaSql = buildSchemaSql(appUser, appPassword);
+        await dbSql.unsafe(schemaSql);
+        log("✅", `Schema created (6 tables, 14 indices, 18 RLS policies)`);
+    }
+    catch (err) {
+        log("❌", `Schema creation failed: ${err.message}`);
+        await dbSql.end();
+        throw err;
+    }
+    // Grant system_admin full access
+    try {
+        await dbSql.unsafe(`GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO system_admin`);
+        log("✅", `Granted permissions`);
+    }
+    catch (err) {
+        log("⚠️", `system_admin grants warning: ${err.message}`);
+    }
+    await dbSql.end();
+    // ── Step 6: Build connection string ───────────────────────────────────────
+    const host = parsedAdmin.hostname || "localhost";
+    const port = parsedAdmin.port || "5432";
+    const appDbUrl = `postgres://${appUser}:${encodeURIComponent(appPassword)}@${host}:${port}/${dbName}`;
+    // ── Step 7: Update openclaw.json ──────────────────────────────────────────
+    if (!skipConfig) {
+        const configPaths = [
+            (0, node_path_1.resolve)(process.env.HOME || "~", ".openclaw", "openclaw.json"),
+        ];
+        for (const cfgPath of configPaths) {
+            if ((0, node_fs_1.existsSync)(cfgPath)) {
+                try {
+                    const raw = (0, node_fs_1.readFileSync)(cfgPath, "utf-8");
+                    const config = JSON.parse(raw);
+                    if (!config.plugins)
+                        config.plugins = {};
+                    if (!config.plugins.entries)
+                        config.plugins.entries = {};
+                    if (!config.plugins.entries.postclaw)
+                        config.plugins.entries.postclaw = { enabled: true };
+                    if (!config.plugins.entries.postclaw.config)
+                        config.plugins.entries.postclaw.config = {};
+                    config.plugins.entries.postclaw.config.dbUrl = appDbUrl;
+                    (0, node_fs_1.writeFileSync)(cfgPath, JSON.stringify(config, null, 2) + "\n");
+                    log("✅", `Updated ${cfgPath} with dbUrl`);
+                }
+                catch (err) {
+                    log("⚠️", `Could not update ${cfgPath}: ${err.message}`);
+                }
+                break;
+            }
+        }
+    }
+    // ── Step 8: Print summary ─────────────────────────────────────────────────
+    console.log("\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━");
+    console.log(`  Database:     ${dbName}`);
+    console.log(`  App User:     ${appUser}`);
+    console.log(`  App Password: ${appPassword}`);
+    console.log(`  Admin User:   system_admin`);
+    console.log(`  Admin Pass:   ${adminPassword}`);
+    console.log();
+    console.log(`  Connection:   ${appDbUrl}`);
+    if (!skipConfig) {
+        console.log();
+        console.log(`  ✅ openclaw.json updated with dbUrl`);
+    }
+    console.log("━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n");
+    console.log("  Save these credentials! They won't be shown again.\n");
+}
+// ─── Standalone CLI entry point ──────────────────────────────────────────────
+if (require.main === module) {
+    const args = process.argv.slice(2);
+    function getArg(name) {
+        const idx = args.indexOf(name);
+        if (idx === -1)
+            return undefined;
+        return args[idx + 1];
+    }
+    const opts = {
+        adminUrl: getArg("--admin-url"),
+        dbName: getArg("--db-name"),
+        dbUser: getArg("--db-user"),
+        dbPassword: getArg("--db-password"),
+        skipConfig: args.includes("--skip-config"),
+    };
+    runSetup(opts)
+        .then(() => process.exit(0))
+        .catch(() => process.exit(1));
+}
+//# sourceMappingURL=setup-db.js.map

package/dist/scripts/setup-db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-db.js","sourceRoot":"","sources":["../../scripts/setup-db.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;;AA6VH,4BAiKC;AA5fD,wDAAgC;AAChC,6CAA0C;AAC1C,qCAAkE;AAClE,yCAA0C;AAE1C,gFAAgF;AAEhF,SAAS,gBAAgB,CAAC,MAAM,GAAG,EAAE;IACjC,MAAM,KAAK,GAAG,8DAA8D,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,MAAM,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,GAAW;IAClC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,gFAAgF;AAEhF,SAAS,cAAc,CAAC,OAAe,EAAE,WAAmB;IACxD,8EAA8E;IAC9E,wDAAwD;IAExD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAoTuB,OAAO;yEACgC,OAAO;2DACrB,OAAO;CACjE,CAAC;AACF,CAAC;AAYM,KAAK,UAAU,QAAQ,CAAC,OAAqB,EAAE;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,+BAA+B,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,EAAE,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;IAC5C,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAE9C,6EAA6E;IAC7E,IAAI,QAAqC,CAAC;IAC1C,IAAI,CAAC;QACD,QAAQ,GAAG,IAAA,kBAAQ,EAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,QAAQ,CAAA,UAAU,CAAC;QACzB,GAAG,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAC1C,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACjC,GAAG,CAAC,EAAE,EAAE,0FAA0F,CAAC,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACnD,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAA;kDACa,MAAM;KACnD,CAAC;QACE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,GAAG,CAAC,GAAG,EAAE,aAAa,MAAM,kBAAkB,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACJ,sDAAsD;YACtD,MAAM,QAAQ,CAAC,MAAM,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,GAAG,EAAE,qBAAqB,MAAM,GAAG,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtD,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC;QACrB,MAAM,GAAG,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAA;+CACM,OAAO;KACjD,CAAC;QACE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,GAAG,EAAE,SAAS,OAAO,kBAAkB,CAAC,CAAC;YAC7C,iCAAiC;YACjC,MAAM,QAAQ,CAAC,MAAM,CAAC,cAAc,OAAO,mBAAmB,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACtG,CAAC;aAAM,CAAC;YACJ,MAAM,QAAQ,CAAC,MAAM,CAAC,eAAe,OAAO,yBAAyB,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YACzG,GAAG,CAAC,GAAG,EAAE,iBAAiB,OAAO,GAAG,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,QAAQ,CAAC,MAAM,CAAC,6BAA6B,MAAM,OAAO,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAClD,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC;QACrB,MAAM,GAAG,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,IAAI,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAA;;KAErC,CAAC;QACE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;YAC/C,MAAM,QAAQ,CAAC,MAAM,CAAC,0CAA0C,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1G,CAAC;aAAM,CAAC;YACJ,MAAM,QAAQ,CAAC,MAAM,CAAC,iDAAiD,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7G,GAAG,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,QAAQ,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,EAAE,oCAAoC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,kCAAkC;IACtC,CAAC;IAED,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC;IAErB,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,WAAW,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,WAAW,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC;IAE5J,IAAI,KAAkC,CAAC;IACvC,IAAI,CAAC;QACD,KAAK,GAAG,IAAA,kBAAQ,EAAC,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,CAAA,UAAU,CAAC;QACtB,GAAG,CAAC,GAAG,EAAE,iBAAiB,MAAM,GAAG,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,+BAA+B,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,GAAG,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9B,GAAG,CAAC,GAAG,EAAE,wDAAwD,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,2BAA2B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,GAAG,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,IAAI,CAAC;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,qEAAqE,CAAC,CAAC;QAC1F,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,EAAE,gCAAgC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC;IAElB,6EAA6E;IAC7E,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,IAAI,MAAM,CAAC;IACxC,MAAM,QAAQ,GAAG,cAAc,OAAO,IAAI,kBAAkB,CAAC,WAAW,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;IAEtG,6EAA6E;IAC7E,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,WAAW,GAAG;YAChB,IAAA,mBAAO,EAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,WAAW,EAAE,eAAe,CAAC;SACjE,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAChC,IAAI,IAAA,oBAAU,EAAC,OAAO,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACD,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC/B,IAAI,CAAC,MAAM,CAAC,OAAO;wBAAE,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;oBACzC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;wBAAE,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,EAAE,CAAC;oBACzD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ;wBAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;oBAC1F,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM;wBAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC;oBACzF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;oBACxD,IAAA,uBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC/D,GAAG,CAAC,GAAG,EAAE,WAAW,OAAO,aAAa,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAChB,GAAG,CAAC,IAAI,EAAE,oBAAoB,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,MAAM;YACV,CAAC;QACL,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;AAC1E,CAAC;AAED,gFAAgF;AAEhF,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,SAAS,MAAM,CAAC,IAAY;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACjC,OAAO,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,IAAI,GAAiB;QACvB,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC;QAC3B,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC;QACnC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;KAC7C,CAAC;IAEF,QAAQ,CAAC,IAAI,CAAC;SACT,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAC3B,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/scripts/sleep_cycle.d.ts

@@ -0,0 +1,32 @@
+/**
+ * PostClaw Sleep Cycle — Knowledge Graph Maintenance Agent
+ *
+ * Runs 4 maintenance phases on the memory database:
+ *   1. Episodic Consolidation — extract durable facts from short-term memory
+ *   2. Duplicate Detection — find and merge near-duplicate semantic memories
+ *   3. Low-Value Cleanup — archive stale, unaccessed memories
+ *   4. Link Discovery — auto-discover and create knowledge graph edges
+ *
+ * Usage (via OpenClaw CLI):
+ *   openclaw postclaw sleep [--agent-id <id>]
+ *
+ * Also runs as a background service on a configurable interval when the
+ * gateway is running (default: every 6 hours).
+ */
+export interface SleepCycleOptions {
+    agentId?: string;
+    llmUrl?: string;
+    llmModel?: string;
+}
+export interface SleepCycleStats {
+    factsExtracted: number;
+    duplicatesMerged: number;
+    staleArchived: number;
+    linksCreated: number;
+}
+export declare function runSleepCycle(opts?: SleepCycleOptions): Promise<SleepCycleStats>;
+export declare function startService(opts?: SleepCycleOptions & {
+    intervalHours?: number;
+}): void;
+export declare function stopService(): void;
+//# sourceMappingURL=sleep_cycle.d.ts.map

package/dist/scripts/sleep_cycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sleep_cycle.d.ts","sourceRoot":"","sources":["../../scripts/sleep_cycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA6CH,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAkZD,wBAAsB,aAAa,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,eAAe,CAAC,CAqC1F;AAQD,wBAAgB,YAAY,CAAC,IAAI,GAAE,iBAAiB,GAAG;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,IAAI,CAa5F;AAED,wBAAgB,WAAW,IAAI,IAAI,CAMlC"}