@data-club/ai-hub-server 0.0.1

package/dist/bootstrap.js

@@ -0,0 +1,160 @@
+/**
+ * Boot orchestration: env → open DB → migrate → seed → ready.
+ *
+ * The pieces that compose this (env loader, `openDb`, `runMigrations`,
+ * `runFirstBootSeed`, `createLogger`) are independently importable so tests
+ * and embedders can wire bespoke combinations. `bootServer` is the
+ * convenience entry point the `dev/server.ts` runner and the per-customer
+ * wrapper's Next.js mount call.
+ *
+ * @see SPECIFICATIONS.md §12.1 — env vars
+ * @see SPECIFICATIONS.md §6.7 — signing key bootstrap
+ * @see SPECIFICATIONS.md §6.10 — metrics token bootstrap
+ */
+import { join } from "node:path";
+import { parseEncryptionKey } from "./auth/encryption.js";
+import { openDb } from "./db/connection.js";
+import { runMigrations } from "./db/migrate.js";
+import { runFirstBootSeed } from "./db/seed.js";
+import { createFetchHandler } from "./handlers/fetch.js";
+import { createLogger } from "./observability/logger.js";
+/**
+ * Parses `process.env` (or a test-supplied stand-in) into an `EnvConfig`.
+ * Throws on any required-but-missing variable so the operator gets a clear
+ * error on first boot instead of a confusing runtime failure.
+ *
+ * @param env - the env-var record to read from.
+ * @returns the parsed config.
+ */
+export function parseEnvConfig(env) {
+    const encRaw = env.AI_HUB_ENCRYPTION_KEY;
+    if (!encRaw) {
+        throw new Error("AI_HUB_ENCRYPTION_KEY is required (see docs/operations/env-vars.md).");
+    }
+    const encryptionKey = parseEncryptionKey(encRaw);
+    const dataDir = env.AI_HUB_DATA_DIR ?? "./data";
+    const databaseUrl = env.DATABASE_URL ?? `file:${join(dataDir, "ai_hub.db")}`;
+    return {
+        dataDir,
+        databaseUrl,
+        encryptionKey,
+        signingKeyFromEnv: parseSigningKey(env.SERVICE_TOKEN_SIGNING_KEY),
+        metricsScrapeTokenFromEnv: env.METRICS_SCRAPE_TOKEN || undefined,
+        lettaApiKey: env.LETTA_API_KEY || undefined,
+        // Letta Code's CLI reads `LETTA_BASE_URL` from process.env and
+        // appends `/v1/...` to it. Operators who set the env value
+        // matching the Letta Client SDK's expectation (`http://host/v1`)
+        // would otherwise get double-v1 URLs in the spawned CLI subprocess.
+        // Strip the trailing /v1 once at boot so both ai-hub-server's own
+        // direct API calls (already strip defensively in `letta/client.ts`)
+        // and Letta Code subprocess spawns see the bare host:port form.
+        // Mutating process.env here propagates to every later subprocess
+        // spawn — Letta Code SDK forwards `{...process.env}` verbatim.
+        lettaBaseUrl: normalizeLettaBaseUrl(env.LETTA_BASE_URL),
+        lettaAdeUrl: env.LETTA_ADE_URL || undefined,
+        logLevel: env.LOG_LEVEL ?? "info",
+        corsAllowedOrigins: env.CORS_ALLOWED_ORIGINS ?? "",
+    };
+}
+/**
+ * Decodes the bootstrap `SERVICE_TOKEN_SIGNING_KEY` env value.
+ *
+ * Accepts hex (any length, even number of chars) or base64 / base64url. If
+ * the input is neither, treats it as raw utf-8 bytes (operators who paste
+ * a passphrase get a deterministic key from it). Returns `undefined` when
+ * the env is unset.
+ *
+ * @param raw - the raw env value, if present.
+ * @returns the decoded key, or undefined.
+ */
+/**
+ * Strips a trailing `/v1` from `LETTA_BASE_URL` and writes the cleaned
+ * value back to `process.env` so subprocess spawns inherit the normalized
+ * form. Idempotent — bare-host inputs pass through unchanged. Returns
+ * the normalized value (or `undefined` when the env var is unset).
+ *
+ * @param raw - the raw `process.env.LETTA_BASE_URL`, possibly undefined.
+ * @returns the normalized base URL, or undefined when unset.
+ */
+function normalizeLettaBaseUrl(raw) {
+    if (!raw)
+        return undefined;
+    const stripped = raw.replace(/\/v1\/?$/i, "");
+    if (stripped !== raw) {
+        process.env.LETTA_BASE_URL = stripped;
+    }
+    return stripped;
+}
+function parseSigningKey(raw) {
+    if (!raw)
+        return undefined;
+    const trimmed = raw.trim();
+    if (/^[0-9a-fA-F]+$/.test(trimmed) && trimmed.length % 2 === 0) {
+        return Buffer.from(trimmed, "hex");
+    }
+    // Try base64 / base64url.
+    const normalized = trimmed.replace(/-/g, "+").replace(/_/g, "/");
+    const padded = normalized + "===".slice((normalized.length + 3) % 4);
+    try {
+        const buf = Buffer.from(padded, "base64");
+        // Reject obviously broken decodes (base64 length != original).
+        if (buf.length > 0 && buf.toString("base64").replace(/=+$/, "") === normalized.replace(/=+$/, "")) {
+            return buf;
+        }
+    }
+    catch {
+        /* fall through */
+    }
+    // Fallback: treat as raw utf-8 bytes.
+    return Buffer.from(trimmed, "utf8");
+}
+/**
+ * One-shot boot: parses env, opens the DB, runs migrations, runs the
+ * first-boot seed (idempotent), and returns the Fetch handler.
+ *
+ * Called by `dev/server.ts` and by per-customer wrappers' Next.js mount
+ * (typically wrapped in a module-level singleton so it runs once per
+ * Next.js process).
+ *
+ * @param opts - optional overrides for testing.
+ * @returns the booted server bundle.
+ */
+export async function bootServer(opts = {}) {
+    const env = opts.env ?? process.env;
+    const config = parseEnvConfig(env);
+    const logger = opts.logger ?? createLogger({ level: config.logLevel });
+    const databaseUrl = opts.databaseUrl ?? config.databaseUrl;
+    const handle = openDb(databaseUrl);
+    runMigrations(handle);
+    const seedReport = await runFirstBootSeed(handle, {
+        encryptionKey: config.encryptionKey,
+        signingKeyFromEnv: config.signingKeyFromEnv,
+        metricsScrapeTokenFromEnv: config.metricsScrapeTokenFromEnv,
+        lettaApiKey: config.lettaApiKey,
+        lettaBaseUrl: config.lettaBaseUrl,
+        lettaAdeUrl: config.lettaAdeUrl,
+    }, logger);
+    const fetchHandler = createFetchHandler({
+        db: handle.db,
+        sqlite: handle.raw,
+        logger,
+        encryptionKey: config.encryptionKey,
+        // Pass the booted env through as the runtime fallback source. Tests
+        // synthesize an env record; production uses process.env (the default
+        // inside createFetchHandler). Threading it explicitly here means
+        // bootTestServer's `env:` parameter actually reaches resolveApiKey
+        // in letta/client.ts.
+        envSource: env,
+        ...(opts.lettaClient !== undefined ? { lettaClient: opts.lettaClient } : {}),
+    });
+    return {
+        fetchHandler,
+        db: handle.db,
+        sqlite: handle.raw,
+        logger,
+        config,
+        seedReport,
+        close: () => handle.raw.close(),
+    };
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAiC,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAmB,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAqB,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EAAE,YAAY,EAAe,MAAM,2BAA2B,CAAC;AAoCtE;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,MAAM,GAAG,GAAG,CAAC,qBAAqB,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAEjD,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,IAAI,QAAQ,CAAC;IAChD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,IAAI,QAAQ,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;IAE7E,OAAO;QACL,OAAO;QACP,WAAW;QACX,aAAa;QACb,iBAAiB,EAAE,eAAe,CAAC,GAAG,CAAC,yBAAyB,CAAC;QACjE,yBAAyB,EAAE,GAAG,CAAC,oBAAoB,IAAI,SAAS;QAChE,WAAW,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;QAC3C,+DAA+D;QAC/D,2DAA2D;QAC3D,iEAAiE;QACjE,oEAAoE;QACpE,kEAAkE;QAClE,oEAAoE;QACpE,gEAAgE;QAChE,iEAAiE;QACjE,+DAA+D;QAC/D,YAAY,EAAE,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC;QACvD,WAAW,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;QAC3C,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM;QACjC,kBAAkB,EAAE,GAAG,CAAC,oBAAoB,IAAI,EAAE;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,GAAuB;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,QAAQ,CAAC;IACxC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,0BAA0B;IAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,+DAA+D;QAC/D,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;YAClG,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,sCAAsC;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC;AA2CD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAK,OAAO,CAAC,GAAe,CAAC;IACjD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;IAC3D,MAAM,MAAM,GAAa,MAAM,CAAC,WAAW,CAAC,CAAC;IAE7C,aAAa,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,MAAM,EACN;QACE,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,EACD,MAAM,CACP,CAAC;IAEF,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,MAAM,CAAC,GAAG;QAClB,MAAM;QACN,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,mEAAmE;QACnE,sBAAsB;QACtB,SAAS,EAAE,GAAG;QACd,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC,CAAC;IAEH,OAAO;QACL,YAAY;QACZ,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,MAAM,CAAC,GAAG;QAClB,MAAM;QACN,MAAM;QACN,UAAU;QACV,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;KAChC,CAAC;AACJ,CAAC"}

package/dist/db/connection.d.ts

@@ -0,0 +1,39 @@
+/**
+ * better-sqlite3 connection + Drizzle wiring.
+ *
+ * On open we set the two PRAGMAs the spec requires (§6.8): `journal_mode=WAL`
+ * for concurrency under multiple readers + one writer, and `foreign_keys=ON`
+ * because SQLite ships them off by default.
+ *
+ * The connection is intentionally a per-server-instance singleton — Drizzle's
+ * client wraps better-sqlite3, and better-sqlite3 itself is fully synchronous
+ * (no connection pool needed; one handle is enough). Tests open their own
+ * handle against a `:memory:` or tmp-file path.
+ *
+ * @see SPECIFICATIONS.md §6.8 — persistence
+ * @see SPECIFICATIONS.md §11 — data model
+ */
+import Database from "better-sqlite3";
+import { drizzle } from "drizzle-orm/better-sqlite3";
+import * as schema from "./schema.js";
+/** The Drizzle client type our handlers consume. */
+export type DrizzleDB = ReturnType<typeof drizzle<typeof schema>>;
+/** Bundles the raw better-sqlite3 handle alongside the Drizzle wrapper. */
+export interface DbHandle {
+    /** Drizzle client — typed against the schema. */
+    db: DrizzleDB;
+    /** Raw better-sqlite3 handle (used for PRAGMAs and `.close()`). */
+    raw: Database.Database;
+}
+/**
+ * Opens the SQLite database at `path` and applies the spec's PRAGMAs.
+ *
+ * `:memory:` is recognized verbatim and skipped from path-resolution +
+ * directory-creation logic (used by tests).
+ *
+ * @param path - filesystem path, a `file:`-prefixed URI, or `:memory:`.
+ * @returns Drizzle wrapper + raw better-sqlite3 handle.
+ */
+export declare function openDb(path: string): DbHandle;
+export { schema };
+//# sourceMappingURL=connection.d.ts.map

package/dist/db/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/db/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAErD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,oDAAoD;AACpD,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC;AAElE,2EAA2E;AAC3E,MAAM,WAAW,QAAQ;IACvB,iDAAiD;IACjD,EAAE,EAAE,SAAS,CAAC;IACd,mEAAmE;IACnE,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAU7C;AAoBD,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/db/connection.js

@@ -0,0 +1,62 @@
+/**
+ * better-sqlite3 connection + Drizzle wiring.
+ *
+ * On open we set the two PRAGMAs the spec requires (§6.8): `journal_mode=WAL`
+ * for concurrency under multiple readers + one writer, and `foreign_keys=ON`
+ * because SQLite ships them off by default.
+ *
+ * The connection is intentionally a per-server-instance singleton — Drizzle's
+ * client wraps better-sqlite3, and better-sqlite3 itself is fully synchronous
+ * (no connection pool needed; one handle is enough). Tests open their own
+ * handle against a `:memory:` or tmp-file path.
+ *
+ * @see SPECIFICATIONS.md §6.8 — persistence
+ * @see SPECIFICATIONS.md §11 — data model
+ */
+import { mkdirSync } from "node:fs";
+import { dirname, isAbsolute, resolve as pathResolve } from "node:path";
+import Database from "better-sqlite3";
+import { drizzle } from "drizzle-orm/better-sqlite3";
+import * as schema from "./schema.js";
+/**
+ * Opens the SQLite database at `path` and applies the spec's PRAGMAs.
+ *
+ * `:memory:` is recognized verbatim and skipped from path-resolution +
+ * directory-creation logic (used by tests).
+ *
+ * @param path - filesystem path, a `file:`-prefixed URI, or `:memory:`.
+ * @returns Drizzle wrapper + raw better-sqlite3 handle.
+ */
+export function openDb(path) {
+    const resolvedPath = resolveDbPath(path);
+    if (resolvedPath !== ":memory:") {
+        mkdirSync(dirname(resolvedPath), { recursive: true });
+    }
+    const raw = new Database(resolvedPath);
+    raw.pragma("journal_mode = WAL");
+    raw.pragma("foreign_keys = ON");
+    const db = drizzle(raw, { schema });
+    return { db, raw };
+}
+/**
+ * Resolves a path that may be `:memory:`, a `file:` URI from `DATABASE_URL`,
+ * or an ordinary filesystem path (relative or absolute).
+ *
+ * @param path - raw path string from env or caller.
+ * @returns absolute filesystem path or `:memory:`.
+ */
+function resolveDbPath(path) {
+    if (path === ":memory:")
+        return path;
+    let stripped = path;
+    if (stripped.startsWith("file:")) {
+        stripped = stripped.slice("file:".length);
+        if (stripped.startsWith("//"))
+            stripped = stripped.slice(2);
+    }
+    if (stripped === ":memory:")
+        return stripped;
+    return isAbsolute(stripped) ? stripped : pathResolve(stripped);
+}
+export { schema };
+//# sourceMappingURL=connection.js.map

package/dist/db/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/db/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAErD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAatC;;;;;;;;GAQG;AACH,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;QAChC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;IACvC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACjC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACpC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/db/migrate.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Boot-time migrations runner.
+ *
+ * Currently a single `0001_init` migration that builds the entire §11 schema
+ * idempotently via `CREATE TABLE IF NOT EXISTS`. Tracked in
+ * `_ai_hub_migrations` so future migrations can append additional steps and
+ * skip already-applied ones.
+ *
+ * **Why hand-rolled SQL instead of `drizzle-kit migrate`**: shipping
+ * `drizzle-kit` and a generated `drizzle/` SQL folder as runtime artifacts
+ * adds a build step that the per-customer wrapper doesn't want to think about.
+ * The schema is small and stable; CREATE-TABLE-IF-NOT-EXISTS is sufficient,
+ * and Drizzle's typed query builder already protects us from drift between
+ * the runtime SQL and `schema.ts`. (If migrations ever get complex enough
+ * that this breaks down, we move to drizzle-kit then — not pre-emptively.)
+ *
+ * @see SPECIFICATIONS.md §11 — data model the schema mirrors 1:1
+ */
+import type { DbHandle } from "./connection.js";
+/**
+ * Runs every not-yet-applied migration on `handle.raw`.
+ *
+ * Idempotent: running this on a fresh SQLite produces the v1 schema; running
+ * it on an already-migrated DB is a no-op. The migrations are wrapped in a
+ * single transaction so a partial failure can't leave the schema in a
+ * half-applied state.
+ *
+ * @param handle - the db handle returned from `openDb`.
+ */
+export declare function runMigrations(handle: DbHandle): void;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/db/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,CAwBpD"}

package/dist/db/migrate.js

@@ -0,0 +1,197 @@
+/**
+ * Boot-time migrations runner.
+ *
+ * Currently a single `0001_init` migration that builds the entire §11 schema
+ * idempotently via `CREATE TABLE IF NOT EXISTS`. Tracked in
+ * `_ai_hub_migrations` so future migrations can append additional steps and
+ * skip already-applied ones.
+ *
+ * **Why hand-rolled SQL instead of `drizzle-kit migrate`**: shipping
+ * `drizzle-kit` and a generated `drizzle/` SQL folder as runtime artifacts
+ * adds a build step that the per-customer wrapper doesn't want to think about.
+ * The schema is small and stable; CREATE-TABLE-IF-NOT-EXISTS is sufficient,
+ * and Drizzle's typed query builder already protects us from drift between
+ * the runtime SQL and `schema.ts`. (If migrations ever get complex enough
+ * that this breaks down, we move to drizzle-kit then — not pre-emptively.)
+ *
+ * @see SPECIFICATIONS.md §11 — data model the schema mirrors 1:1
+ */
+/**
+ * Runs every not-yet-applied migration on `handle.raw`.
+ *
+ * Idempotent: running this on a fresh SQLite produces the v1 schema; running
+ * it on an already-migrated DB is a no-op. The migrations are wrapped in a
+ * single transaction so a partial failure can't leave the schema in a
+ * half-applied state.
+ *
+ * @param handle - the db handle returned from `openDb`.
+ */
+export function runMigrations(handle) {
+    const { raw } = handle;
+    raw.exec(`
+    CREATE TABLE IF NOT EXISTS _ai_hub_migrations (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      name TEXT NOT NULL UNIQUE,
+      applied_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+    )
+  `);
+    for (const m of MIGRATIONS) {
+        const already = raw
+            .prepare("SELECT 1 FROM _ai_hub_migrations WHERE name = ?")
+            .get(m.name);
+        if (already)
+            continue;
+        const apply = raw.transaction(() => {
+            raw.exec(m.sql);
+            raw
+                .prepare("INSERT INTO _ai_hub_migrations (name) VALUES (?)")
+                .run(m.name);
+        });
+        apply();
+    }
+}
+/**
+ * The canonical migration list. Append-only — never edit a past entry, only
+ * add a new one with a higher number. (Same convention as Drizzle / Prisma /
+ * Rails.)
+ */
+const MIGRATIONS = [
+    {
+        name: "0001_init",
+        sql: `
+      CREATE TABLE user (
+        id TEXT NOT NULL PRIMARY KEY,
+        username TEXT NOT NULL UNIQUE,
+        display_name TEXT,
+        password_hash TEXT,
+        identity_source TEXT NOT NULL DEFAULT 'local',
+        is_initial_password INTEGER NOT NULL DEFAULT 0,
+        role TEXT NOT NULL DEFAULT 'user',
+        theme_preference TEXT,
+        password_changed_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+        created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+        updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+      );
+      CREATE INDEX user_role_idx ON user (role);
+
+      CREATE TABLE agent (
+        id TEXT NOT NULL PRIMARY KEY,
+        display_name TEXT NOT NULL,
+        letta_agent_id TEXT NOT NULL,
+        tpm_recovery_enabled INTEGER NOT NULL DEFAULT 0,
+        max_recovery_attempts INTEGER NOT NULL DEFAULT 2,
+        default_retry_after_seconds INTEGER NOT NULL DEFAULT 65,
+        stream_idle_timeout_seconds INTEGER NOT NULL DEFAULT 60,
+        sandbox_seed_name TEXT,
+        fork_source_conversation_id TEXT,
+        is_archived INTEGER NOT NULL DEFAULT 0,
+        created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+        updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+      );
+
+      CREATE TABLE session (
+        id TEXT NOT NULL PRIMARY KEY,
+        user_id TEXT NOT NULL REFERENCES user(id) ON DELETE CASCADE,
+        agent_id TEXT NOT NULL REFERENCES agent(id) ON DELETE RESTRICT,
+        letta_conversation_id TEXT NOT NULL,
+        letta_agent_id TEXT NOT NULL,
+        title TEXT NOT NULL,
+        is_archived INTEGER NOT NULL DEFAULT 0,
+        reasoning_effort TEXT,
+        verbosity TEXT,
+        thinking_budget INTEGER,
+        sandbox_dir TEXT,
+        created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+        updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+      );
+      CREATE INDEX session_user_agent_idx ON session (user_id, agent_id);
+
+      CREATE TABLE turn (
+        id TEXT NOT NULL PRIMARY KEY,
+        session_id TEXT NOT NULL REFERENCES session(id) ON DELETE CASCADE,
+        status TEXT NOT NULL,
+        phase TEXT,
+        last_seq INTEGER NOT NULL DEFAULT 0,
+        idempotency_key TEXT,
+        started_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+        finished_at TEXT
+      );
+
+      CREATE TABLE turn_event (
+        turn_id TEXT NOT NULL REFERENCES turn(id) ON DELETE CASCADE,
+        seq INTEGER NOT NULL,
+        event_name TEXT NOT NULL,
+        data TEXT NOT NULL,
+        state TEXT NOT NULL,
+        created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+        PRIMARY KEY (turn_id, seq)
+      );
+
+      CREATE TABLE admin_setting (
+        id INTEGER NOT NULL PRIMARY KEY,
+        letta_api_key_encrypted BLOB,
+        letta_base_url TEXT,
+        letta_ade_url TEXT,
+        feature_toggles TEXT NOT NULL DEFAULT '{}',
+        theme_switcher_enabled INTEGER NOT NULL DEFAULT 1,
+        theme_default TEXT NOT NULL DEFAULT 'light',
+        service_token_signing_key BLOB,
+        metrics_scrape_token TEXT,
+        metrics_scrape_token_rotated_at TEXT,
+        signing_key_rotated_at TEXT,
+        updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+      );
+
+      CREATE TABLE message_override (
+        conversation_id TEXT NOT NULL,
+        ordinal_position INTEGER NOT NULL,
+        system_override TEXT,
+        user_override TEXT,
+        created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+        updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+        PRIMARY KEY (conversation_id, ordinal_position),
+        CHECK (system_override IS NOT NULL OR user_override IS NOT NULL)
+      );
+
+      CREATE TABLE message_usage (
+        letta_message_id TEXT NOT NULL PRIMARY KEY,
+        session_id TEXT NOT NULL REFERENCES session(id) ON DELETE CASCADE,
+        prompt_tokens INTEGER,
+        completion_tokens INTEGER,
+        total_tokens INTEGER,
+        cached_input_tokens INTEGER,
+        cache_write_tokens INTEGER,
+        reasoning_tokens INTEGER,
+        context_tokens INTEGER,
+        run_id TEXT,
+        created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+      );
+      CREATE INDEX message_usage_session_idx ON message_usage(session_id);
+    `,
+    },
+    {
+        name: "0002_rotating_message",
+        sql: `
+      CREATE TABLE rotating_message (
+        id TEXT NOT NULL PRIMARY KEY,
+        display_name TEXT NOT NULL,
+        prompt TEXT NOT NULL,
+        letta_agent_id TEXT NOT NULL,
+        schedule_kind TEXT NOT NULL,
+        interval_seconds INTEGER,
+        daily_time TEXT,
+        cron_expression TEXT,
+        current_conversation_id TEXT,
+        last_status TEXT NOT NULL DEFAULT 'pending',
+        last_error TEXT,
+        last_rotated_at TEXT,
+        next_rotation_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+        is_archived INTEGER NOT NULL DEFAULT 0,
+        created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+        updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+      );
+      CREATE INDEX rotating_message_due_idx ON rotating_message (is_archived, next_rotation_at);
+    `,
+    },
+];
+//# sourceMappingURL=migrate.js.map

package/dist/db/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,MAAgB;IAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAEvB,GAAG,CAAC,IAAI,CAAC;;;;;;GAMR,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG;aAChB,OAAO,CAAC,iDAAiD,CAAC;aAC1D,GAAG,CAAC,CAAC,CAAC,IAAI,CAA8B,CAAC;QAC5C,IAAI,OAAO;YAAE,SAAS;QACtB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE;YACjC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG;iBACA,OAAO,CAAC,kDAAkD,CAAC;iBAC3D,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,KAAK,EAAE,CAAC;IACV,CAAC;AACH,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,GAA6B;IAC3C;QACE,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA6GJ;KACF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;KAoBJ;KACF;CACF,CAAC"}