@hasna/mementos 0.14.46 → 0.14.48

package/dist/server/openapi.d.ts

@@ -0,0 +1,2 @@
+export declare function buildOpenApiDocument(version: string): Record<string, unknown>;
+//# sourceMappingURL=openapi.d.ts.map

package/dist/server/openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/server/openapi.ts"],"names":[],"mappings":"AAeA,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsE7E"}

package/dist/storage.d.ts

@@ -32,20 +32,58 @@ export declare class SqliteAdapter implements DbAdapter {
     transaction<T>(fn: () => T): T;
     get raw(): Database;
 }
+export declare function translateSql(sql: string): string;
 export declare function shouldUsePgSsl(connectionString: string): boolean;
+/** Build a pg Pool with adapter-controlled SSL from a connection string. */
+export declare function makePool(connectionString: string): Pool;
+interface SyncQueryResult {
+    rows: any[];
+    rowCount: number;
+}
+/**
+ * Synchronous Postgres access backed by a worker thread (see
+ * `pg-sync-worker.ts`). The worker owns one long-lived `pg.Client` and runs
+ * queries on its own event loop; the main thread blocks on `Atomics.wait`
+ * against a SharedArrayBuffer until the worker writes the response. This is the
+ * only way to expose a truly synchronous API (which the entire mementos data
+ * layer requires) over async pg I/O without deadlocking the main event loop.
+ */
+export declare class PgSyncPool {
+    private readonly worker;
+    private readonly status;
+    private readonly data;
+    private closed;
+    private lastError;
+    private static readonly DATA_BYTES;
+    private static readonly QUERY_TIMEOUT_MS;
+    /**
+     * Resolve the worker entry file. `storage` is bundled into several entry
+     * points at different depths (dist/cli, dist/mcp, dist/server) as well as run
+     * directly from source, so probe candidate locations relative to this module.
+     */
+    private static resolveWorkerPath;
+    constructor(connectionString: string);
+    query(sql: string, params: any[]): SyncQueryResult;
+    end(): void;
+}
 export declare class PgAdapter implements DbAdapter {
     private readonly pool;
     constructor(connectionString: string);
-    constructor(pool: Pool);
-    private runSync;
+    constructor(pool: PgSyncPool);
     run(sql: string, ...params: any[]): RunResult;
     get(sql: string, ...params: any[]): any;
     all(sql: string, ...params: any[]): any[];
     exec(sql: string): void;
     prepare(sql: string): PreparedStatement;
+    /**
+     * Bun-sqlite-style `query()` shim so the CLI/MCP/server call sites that do
+     * `db.query(sql).get(...)` / `.all(...)` / `.run(...)` work unchanged against
+     * Postgres in cloud mode. Behaves like {@link prepare}.
+     */
+    query(sql: string): PreparedStatement;
     close(): void;
     transaction<T>(fn: () => T): T;
-    get raw(): Pool;
+    get raw(): PgSyncPool;
 }
 export declare class PgAdapterAsync {
     private readonly pool;
@@ -59,7 +97,23 @@ export declare class PgAdapterAsync {
     transaction<T>(fn: (client: PoolClient) => Promise<T>): Promise<T>;
     get raw(): Pool;
 }
-export type StorageMode = "local" | "remote" | "hybrid";
+/**
+ * Canonical storage-mode axis (aligned with the shared cloud-runtime contract).
+ *
+ * - `local`  — SQLite on disk. Default. Unchanged behavior.
+ * - `cloud`  — pure remote: reads AND writes go directly to cloud Postgres.
+ *
+ * The legacy values `remote` and `hybrid` are still accepted as INPUT (env or
+ * config file) for backwards compatibility, but they are DEPRECATED aliases
+ * that normalize to `cloud`. See {@link DeprecatedStorageMode}. The historical
+ * local<->remote sync engine (the "hybrid sync path") is retained only for
+ * back-compat and is explicitly NOT the fleet cutover path.
+ */
+export type StorageMode = "local" | "cloud";
+/** Deprecated storage-mode aliases accepted as input; all map to `cloud`. */
+export type DeprecatedStorageMode = "remote" | "hybrid";
+/** Any value accepted from env/config for the storage mode. */
+export type StorageModeInput = StorageMode | DeprecatedStorageMode;
 export declare const MEMENTOS_STORAGE_TABLES: readonly ["projects", "agents", "machines", "sessions", "entities", "memories", "relations", "entity_memories", "memory_tags", "memory_versions", "memory_embeddings", "tool_events", "resource_locks", "memory_ratings"];
 export declare const STORAGE_TABLES: readonly ["projects", "agents", "machines", "sessions", "entities", "memories", "relations", "entity_memories", "memory_tags", "memory_versions", "memory_embeddings", "tool_events", "resource_locks", "memory_ratings"];
 export type MementosStorageTable = (typeof MEMENTOS_STORAGE_TABLES)[number];
@@ -154,4 +208,5 @@ export declare function getSyncMetaAll(db: DbAdapter): SyncMeta[];
 export declare function getSyncMetaForTable(db: DbAdapter, table: string): SyncMeta | null;
 export declare function resetSyncMeta(db: DbAdapter, table: string): void;
 export declare function resetAllSyncMeta(db: DbAdapter): void;
+export {};
 //# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAKtC,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAE3C,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;IACjC,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAC3B,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC7B,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC;IACxC,KAAK,IAAI,IAAI,CAAC;IACd,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;CAChC;AAOD,qBAAa,aAAc,YAAW,SAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAW;gBAElB,IAAI,EAAE,MAAM;IAMxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS;IAQ7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG;IAIvC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE;IAIzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIvB,KAAK,CAAC,GAAG,EAAE,MAAM;IAIjB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB;IAkBvC,KAAK,IAAI,IAAI;IAIb,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAI9B,IAAI,GAAG,IAAI,QAAQ,CAElB;CACF;AAmCD,wBAAgB,cAAc,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAgBhE;AAMD,qBAAa,SAAU,YAAW,SAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;gBAEhB,gBAAgB,EAAE,MAAM;gBACxB,IAAI,EAAE,IAAI;IAOtB,OAAO,CAAC,OAAO;IA6Bf,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS;IAU7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG;IAOvC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE;IAOzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAMvB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB;IASvC,KAAK,IAAI,IAAI;IAMb,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAoB9B,IAAI,GAAG,IAAI,IAAI,CAEd;CACF;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;gBAEhB,gBAAgB,EAAE,MAAM;gBACxB,IAAI,EAAE,IAAI;IAOhB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAQtD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAKhD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAKlD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAexE,IAAI,GAAG,IAAI,IAAI,CAEd;CACF;AAED,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAExD,eAAO,MAAM,uBAAuB,2NAe1B,CAAC;AAEX,eAAO,MAAM,cAAc,2NAA0B,CAAC;AAEtD,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,oBAAoB;;;CAGvB,CAAC;AAEX,eAAO,MAAM,6BAA6B;;;CAGhC,CAAC;AAIX,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE;QACH,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;IACF,IAAI,EAAE,WAAW,CAAC;IAClB,0BAA0B,EAAE,MAAM,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE;QACJ,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AA8BD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,UAAU,CAAC;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE;QACR,UAAU,EAAE,OAAO,CAAC;QACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IACF,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACxC,GAAG,EAAE;QACH,WAAW,EAAE,gBAAgB,CAAC;QAC9B,IAAI,EAAE,gBAAgB,CAAC;KACxB,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;CAClB;AA2BD,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,qBAAqB,IAAI,UAAU,GAAG,IAAI,CAKzD;AAQD,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAGrD;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAUD,wBAAgB,gBAAgB,IAAI,aAAa,CA2BhD;AAED,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAeD,wBAAgB,gBAAgB,IAAI,mBAAmB,CA2BtD;AAED,eAAO,MAAM,wBAAwB,yBAAmB,CAAC;AAEzD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAG7D;AAMD,wBAAgB,0BAA0B,CAAC,MAAM,SAAa,GAAG,MAAM,CAqBtE;AAED,eAAO,MAAM,4BAA4B,UAMxC,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM,EAAE,CAKxD;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAUD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAEvD;AAqGD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,GAAE,sBAA2B,GACnC,oBAAoB,EAAE,CAExB;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,GAAE,sBAA2B,GACnC,oBAAoB,EAAE,CAExB;AA2ED,wBAAgB,cAAc,CAAC,EAAE,EAAE,SAAS,GAAG,QAAQ,EAAE,CAKxD;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAEjF;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAGhE;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAGpD"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAOtC,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAE3C,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;IACjC,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAC3B,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC7B,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC;IACxC,KAAK,IAAI,IAAI,CAAC;IACd,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;CAChC;AAOD,qBAAa,aAAc,YAAW,SAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAW;gBAElB,IAAI,EAAE,MAAM;IAMxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS;IAQ7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG;IAIvC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE;IAIzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIvB,KAAK,CAAC,GAAG,EAAE,MAAM;IAIjB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB;IAkBvC,KAAK,IAAI,IAAI;IAIb,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAI9B,IAAI,GAAG,IAAI,QAAQ,CAElB;CACF;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiDhD;AAED,wBAAgB,cAAc,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAgBhE;AAgDD,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAKvD;AAED,UAAU,eAAe;IACvB,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAsB;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAqB;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAElD;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB;gBAcpB,gBAAgB,EAAE,MAAM;IAqBpC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,eAAe;IAqBlD,GAAG,IAAI,IAAI;CAKZ;AAED,qBAAa,SAAU,YAAW,SAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;gBAEtB,gBAAgB,EAAE,MAAM;gBACxB,IAAI,EAAE,UAAU;IAK5B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,SAAS;IAQ7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG;IAKvC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE;IAIzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAMvB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB;IASvC;;;;OAIG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB;IAIrC,KAAK,IAAI,IAAI;IAIb,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAkB9B,IAAI,GAAG,IAAI,UAAU,CAEpB;CACF;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;gBAEhB,gBAAgB,EAAE,MAAM;gBACxB,IAAI,EAAE,IAAI;IAKhB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAQtD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAKhD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAKlD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAexE,IAAI,GAAG,IAAI,IAAI,CAEd;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,OAAO,CAAC;AAE5C,6EAA6E;AAC7E,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAExD,+DAA+D;AAC/D,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,qBAAqB,CAAC;AAEnE,eAAO,MAAM,uBAAuB,2NAe1B,CAAC;AAEX,eAAO,MAAM,cAAc,2NAA0B,CAAC;AAEtD,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,oBAAoB;;;CAGvB,CAAC;AAEX,eAAO,MAAM,6BAA6B;;;CAGhC,CAAC;AAIX,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE;QACH,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;IACF,IAAI,EAAE,WAAW,CAAC;IAClB,0BAA0B,EAAE,MAAM,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE;QACJ,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AA8BD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,UAAU,CAAC;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE;QACR,UAAU,EAAE,OAAO,CAAC;QACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IACF,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACxC,GAAG,EAAE;QACH,WAAW,EAAE,gBAAgB,CAAC;QAC9B,IAAI,EAAE,gBAAgB,CAAC;KACxB,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;CAClB;AAiDD,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,qBAAqB,IAAI,UAAU,GAAG,IAAI,CAKzD;AAQD,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAGrD;AAED,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAUD,wBAAgB,gBAAgB,IAAI,aAAa,CA6BhD;AAED,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAeD,wBAAgB,gBAAgB,IAAI,mBAAmB,CA2BtD;AAED,eAAO,MAAM,wBAAwB,yBAAmB,CAAC;AAEzD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAG7D;AAMD,wBAAgB,0BAA0B,CAAC,MAAM,SAAa,GAAG,MAAM,CAqBtE;AAED,eAAO,MAAM,4BAA4B,UAMxC,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM,EAAE,CAKxD;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAUD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAEvD;AAqGD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,GAAE,sBAA2B,GACnC,oBAAoB,EAAE,CAExB;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,GAAE,sBAA2B,GACnC,oBAAoB,EAAE,CAExB;AA2ED,wBAAgB,cAAc,CAAC,EAAE,EAAE,SAAS,GAAG,QAAQ,EAAE,CAKxD;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAEjF;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAGhE;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAGpD"}

package/dist/storage.js

@@ -51,6 +51,8 @@ import { Database } from "bun:sqlite";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
+import { fileURLToPath } from "url";
+import { Worker } from "worker_threads";
 import pg from "pg";
 function normalizeParams(params) {
   const flat = params.length === 1 && Array.isArray(params[0]) ? params[0] : params;
@@ -113,13 +115,15 @@ class SqliteAdapter {
 function translateSql(sql) {
   let parameterIndex = 0;
   let translated = sql.replace(/\?/g, () => `$${++parameterIndex}`);
-  translated = translated.replace(/datetime\s*\(\s*'now'\s*\)/gi, "NOW()");
+  const ISO_FMT = `'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'`;
+  translated = translated.replace(/datetime\s*\(\s*'now'\s*\)/gi, `to_char(now() AT TIME ZONE 'UTC', ${ISO_FMT})`);
   translated = translated.replace(/datetime\s*\(\s*'now'\s*,\s*'(-?\d+)\s+(minutes?|hours?|days?|seconds?)'\s*\)/gi, (_match, amount, unit) => {
     const parsed = parseInt(String(amount), 10);
     const absolute = Math.abs(parsed);
     const normalizedUnit = String(unit).toLowerCase().replace(/s$/, "");
     const pluralUnit = absolute === 1 ? normalizedUnit : `${normalizedUnit}s`;
-    return parsed < 0 ? `NOW() - INTERVAL '${absolute} ${pluralUnit}'` : `NOW() + INTERVAL '${absolute} ${pluralUnit}'`;
+    const op = parsed < 0 ? "-" : "+";
+    return `to_char((now() ${op} INTERVAL '${absolute} ${pluralUnit}') AT TIME ZONE 'UTC', ${ISO_FMT})`;
   });
   translated = translated.replace(/lower\s*\(\s*hex\s*\(\s*randomblob\s*\(\s*\d+\s*\)\s*\)\s*\)/gi, "gen_random_uuid()::text");
   translated = translated.replace(/\bIFNULL\s*\(/gi, "COALESCE(");
@@ -128,6 +132,7 @@ function translateSql(sql) {
     translated = translated.replace(/;?\s*$/, " ON CONFLICT DO NOTHING");
   }
   translated = translated.replace(/INSERT\s+OR\s+REPLACE\s+INTO/gi, "INSERT INTO");
+  translated = translated.replace(/COALESCE\s*\(\s*pinned\s*,\s*0\s*\)/gi, "COALESCE(pinned, FALSE)");
   return translated;
 }
 function shouldUsePgSsl(connectionString) {
@@ -142,62 +147,57 @@ function shouldUsePgSsl(connectionString) {
   return ["1", "true", "yes", "on", "require"].includes(ssl ?? "") || ["require", "verify-ca", "verify-full"].includes(sslMode ?? "");
 }
 function sslConfigFor(connectionString) {
-  return shouldUsePgSsl(connectionString) || undefined;
+  if (!shouldUsePgSsl(connectionString))
+    return;
+  let sslMode;
+  try {
+    sslMode = new URL(connectionString).searchParams.get("sslmode")?.trim().toLowerCase() ?? undefined;
+  } catch {
+    sslMode = new URLSearchParams(connectionString.split("?", 2)[1] ?? "").get("sslmode")?.trim().toLowerCase() ?? undefined;
+  }
+  if (sslMode === "verify-ca" || sslMode === "verify-full") {
+    return { rejectUnauthorized: true };
+  }
+  return { rejectUnauthorized: false };
+}
+function stripSslParams(connectionString) {
+  try {
+    const url = new URL(connectionString);
+    url.searchParams.delete("ssl");
+    url.searchParams.delete("sslmode");
+    return url.toString();
+  } catch {
+    return connectionString;
+  }
+}
+function makePool(connectionString) {
+  return new pg.Pool({
+    connectionString: stripSslParams(connectionString),
+    ssl: sslConfigFor(connectionString)
+  });
 }
 
 class PgAdapter {
   pool;
   constructor(input) {
-    this.pool = typeof input === "string" ? new pg.Pool({ connectionString: input, ssl: sslConfigFor(input) }) : input;
-  }
-  runSync(fn) {
-    let result;
-    let error;
-    let done = false;
-    fn().then((value) => {
-      result = value;
-      done = true;
-    }).catch((caught) => {
-      error = caught;
-      done = true;
-    });
-    const deadline = Date.now() + 30000;
-    while (!done && Date.now() < deadline) {
-      Bun.sleepSync(1);
-    }
-    if (error) {
-      throw error;
-    }
-    if (!done) {
-      throw new Error("PostgreSQL query timed out after 30s");
-    }
-    return result;
+    this.pool = typeof input === "string" ? new PgSyncPool(input) : input;
   }
   run(sql, ...params) {
-    return this.runSync(async () => {
-      const result = await this.pool.query(translateSql(sql), normalizeParams(params));
-      return {
-        changes: result.rowCount ?? 0,
-        lastInsertRowid: result.rows?.[0]?.id ?? 0
-      };
-    });
+    const result = this.pool.query(translateSql(sql), normalizeParams(params));
+    return {
+      changes: result.rowCount ?? 0,
+      lastInsertRowid: result.rows?.[0]?.id ?? 0
+    };
   }
   get(sql, ...params) {
-    return this.runSync(async () => {
-      const result = await this.pool.query(translateSql(sql), normalizeParams(params));
-      return result.rows[0] ?? null;
-    });
+    const result = this.pool.query(translateSql(sql), normalizeParams(params));
+    return result.rows[0] ?? null;
   }
   all(sql, ...params) {
-    return this.runSync(async () => {
-      const result = await this.pool.query(translateSql(sql), normalizeParams(params));
-      return result.rows;
-    });
+    return this.pool.query(translateSql(sql), normalizeParams(params)).rows;
   }
   exec(sql) {
-    this.runSync(async () => {
-      await this.pool.query(sql);
-    });
+    this.pool.query(sql, []);
   }
   prepare(sql) {
     return {
@@ -207,29 +207,24 @@ class PgAdapter {
       finalize: () => {}
     };
   }
+  query(sql) {
+    return this.prepare(sql);
+  }
   close() {
-    this.runSync(async () => {
-      await this.pool.end();
-    });
+    this.pool.end();
   }
   transaction(fn) {
-    return this.runSync(async () => {
-      const client = await this.pool.connect();
-      const originalQuery = this.pool.query.bind(this.pool);
+    this.pool.query("BEGIN", []);
+    try {
+      const value = fn();
+      this.pool.query("COMMIT", []);
+      return value;
+    } catch (error) {
       try {
-        await client.query("BEGIN");
-        this.pool.query = client.query.bind(client);
-        const value = fn();
-        await client.query("COMMIT");
-        return value;
-      } catch (error) {
-        await client.query("ROLLBACK");
-        throw error;
-      } finally {
-        this.pool.query = originalQuery;
-        client.release();
-      }
-    });
+        this.pool.query("ROLLBACK", []);
+      } catch {}
+      throw error;
+    }
   }
   get raw() {
     return this.pool;
@@ -239,7 +234,7 @@ class PgAdapter {
 class PgAdapterAsync {
   pool;
   constructor(input) {
-    this.pool = typeof input === "string" ? new pg.Pool({ connectionString: input, ssl: sslConfigFor(input) }) : input;
+    this.pool = typeof input === "string" ? makePool(input) : input;
   }
   async run(sql, ...params) {
     const result = await this.pool.query(translateSql(sql), normalizeParams(params));
@@ -284,13 +279,23 @@ function readEnv(name) {
   const value = process.env[name]?.trim();
   return value ? value : null;
 }
+function warnDeprecatedStorageMode(alias) {
+  if (warnedDeprecatedModes.has(alias))
+    return;
+  warnedDeprecatedModes.add(alias);
+  process.emitWarning(`${MEMENTOS_STORAGE_ENV.mode}="${alias}" is deprecated; use "cloud". ` + `"${alias}" now maps to pure-remote cloud storage. The local<->remote ` + `sync path is deprecated and is not the fleet cutover path.`, { type: "DeprecationWarning", code: "MEMENTOS_STORAGE_MODE_ALIAS" });
+}
 function normalizeStorageMode(value) {
   if (!value)
     return null;
   const normalized = value.trim().toLowerCase();
-  if (normalized === "local" || normalized === "remote" || normalized === "hybrid") {
+  if (normalized === "local" || normalized === "cloud") {
     return normalized;
   }
+  if (normalized === "remote" || normalized === "hybrid") {
+    warnDeprecatedStorageMode(normalized);
+    return "cloud";
+  }
   return null;
 }
 function readConfigFile() {
@@ -357,7 +362,7 @@ function getStorageConfig() {
   if (modeOverride) {
     merged.mode = modeOverride;
   } else if (envConnectionString && merged.mode === "local") {
-    merged.mode = "hybrid";
+    merged.mode = "cloud";
   }
   return merged;
 }
@@ -379,7 +384,7 @@ function getStorageStatus() {
   const mode = getStorageConfig().mode;
   const databaseUrl = getStorageDatabaseUrl();
   const issues = [];
-  if ((mode === "remote" || mode === "hybrid") && !databaseUrl) {
+  if (mode === "cloud" && !databaseUrl) {
     issues.push(`Missing ${MEMENTOS_STORAGE_ENV.databaseUrl}`);
   }
   return {
@@ -387,7 +392,7 @@ function getStorageStatus() {
     service: "mementos",
     mode,
     local_default: mode === "local",
-    remote_enabled: mode === "remote" || mode === "hybrid",
+    remote_enabled: mode === "cloud",
     database: {
       configured: Boolean(databaseUrl),
       redacted_url: redactDatabaseUrl(databaseUrl)
@@ -569,7 +574,7 @@ function resetAllSyncMeta(db) {
   ensureSyncMetaTable(db);
   db.run("DELETE FROM _sync_meta");
 }
-var MEMENTOS_STORAGE_TABLES, STORAGE_TABLES, MEMENTOS_STORAGE_ENV, MEMENTOS_STORAGE_FALLBACK_ENV, DEFAULT_STORAGE_CONFIG, STORAGE_CONFIG_DIR, STORAGE_CONFIG_PATH, DATABASE_ENV_NAMES, MODE_ENV_NAMES, getMementosStorageStatus, SYNC_EXCLUDED_TABLE_PATTERNS, SYNC_META_TABLE_SQL = `
+var PgSyncPool, MEMENTOS_STORAGE_TABLES, STORAGE_TABLES, MEMENTOS_STORAGE_ENV, MEMENTOS_STORAGE_FALLBACK_ENV, DEFAULT_STORAGE_CONFIG, STORAGE_CONFIG_DIR, STORAGE_CONFIG_PATH, DATABASE_ENV_NAMES, MODE_ENV_NAMES, warnedDeprecatedModes, getMementosStorageStatus, SYNC_EXCLUDED_TABLE_PATTERNS, SYNC_META_TABLE_SQL = `
 CREATE TABLE IF NOT EXISTS _sync_meta (
   table_name TEXT PRIMARY KEY,
   last_synced_at TEXT,
@@ -577,6 +582,74 @@ CREATE TABLE IF NOT EXISTS _sync_meta (
   direction TEXT DEFAULT 'push'
 )`;
 var init_storage = __esm(() => {
+  PgSyncPool = class PgSyncPool {
+    worker;
+    status;
+    data;
+    closed = false;
+    lastError = null;
+    static DATA_BYTES = 128 * 1024 * 1024;
+    static QUERY_TIMEOUT_MS = 60000;
+    static resolveWorkerPath() {
+      const ext = import.meta.url.endsWith(".ts") ? ".ts" : ".js";
+      const here = fileURLToPath(new URL(".", import.meta.url));
+      const candidates = [
+        join(here, `pg-sync-worker${ext}`),
+        join(here, "..", `pg-sync-worker${ext}`),
+        join(here, "..", "..", `pg-sync-worker${ext}`)
+      ];
+      for (const candidate of candidates) {
+        if (existsSync(candidate))
+          return candidate;
+      }
+      return candidates[0];
+    }
+    constructor(connectionString) {
+      const control = new SharedArrayBuffer(8);
+      const dataSab = new SharedArrayBuffer(PgSyncPool.DATA_BYTES);
+      this.status = new Int32Array(control);
+      this.data = new Uint8Array(dataSab);
+      this.worker = new Worker(PgSyncPool.resolveWorkerPath(), {
+        workerData: {
+          dsn: stripSslParams(connectionString),
+          ssl: sslConfigFor(connectionString),
+          control,
+          data: dataSab
+        }
+      });
+      this.worker.unref();
+      this.worker.on("error", (err) => {
+        this.lastError = err;
+      });
+    }
+    query(sql, params) {
+      if (this.closed)
+        throw new Error("PgSyncPool is closed");
+      if (this.lastError)
+        throw this.lastError;
+      Atomics.store(this.status, 0, 0);
+      this.worker.postMessage({ sql, params });
+      const waitResult = Atomics.wait(this.status, 0, 0, PgSyncPool.QUERY_TIMEOUT_MS);
+      const code = Atomics.load(this.status, 0);
+      if (code === 0 || waitResult === "timed-out") {
+        if (this.lastError)
+          throw this.lastError;
+        throw new Error("PostgreSQL query timed out after 60s");
+      }
+      const len = Atomics.load(this.status, 1);
+      const payload = JSON.parse(new TextDecoder().decode(this.data.subarray(0, len)));
+      if (code === 2) {
+        throw new Error(payload.message ?? "PostgreSQL error");
+      }
+      return payload;
+    }
+    end() {
+      if (this.closed)
+        return;
+      this.closed = true;
+      this.worker.terminate();
+    }
+  };
   MEMENTOS_STORAGE_TABLES = [
     "projects",
     "agents",
@@ -627,6 +700,7 @@ var init_storage = __esm(() => {
     { name: MEMENTOS_STORAGE_ENV.mode, deprecated: false },
     { name: MEMENTOS_STORAGE_FALLBACK_ENV.mode, deprecated: false }
   ];
+  warnedDeprecatedModes = new Set;
   getMementosStorageStatus = getStorageStatus;
   SYNC_EXCLUDED_TABLE_PATTERNS = [
     /^sqlite_/,
@@ -639,10 +713,12 @@ var init_storage = __esm(() => {
 init_storage();
 
 export {
+  translateSql,
   shouldUsePgSsl,
   saveStorageConfig,
   resetSyncMeta,
   resetAllSyncMeta,
+  makePool,
   listSqliteTables,
   isSyncExcludedTable,
   incrementalSyncPush,
@@ -663,6 +739,7 @@ export {
   SqliteAdapter,
   SYNC_EXCLUDED_TABLE_PATTERNS,
   STORAGE_TABLES,
+  PgSyncPool,
   PgAdapterAsync,
   PgAdapter,
   MEMENTOS_STORAGE_TABLES,

package/docker-entrypoint.sh

@@ -0,0 +1,46 @@
+#!/bin/sh
+# =============================================================================
+# mementos container entrypoint
+# -----------------------------------------------------------------------------
+# Bridges the hasna-app Terraform module's injected env (DATABASE_URL,
+# API_KEY_SIGNING_SECRET, PORT) to mementos' native env, forces pure-remote
+# cloud storage, and binds to all interfaces so the ALB target group is
+# reachable. Migrations run against the OWNER DSN (DDL); the long-running
+# service runs against the least-privilege APP DSN.
+# =============================================================================
+set -e
+
+# Bind on 0.0.0.0 inside the container (default is 127.0.0.1 for local dev).
+export MEMENTOS_HOST="${MEMENTOS_HOST:-0.0.0.0}"
+
+# Amendment A1 — serve/CLI read+write RDS directly.
+export HASNA_MEMENTOS_STORAGE_MODE="${HASNA_MEMENTOS_STORAGE_MODE:-cloud}"
+
+# Select the DSN by workload: migrations need the owner role (DDL); everything
+# else uses the app role. MIGRATION_DATABASE_URL is optional; falls back to
+# DATABASE_URL when unset.
+case " $* " in
+  *" migrate "*)
+    export HASNA_MEMENTOS_DATABASE_URL="${HASNA_MEMENTOS_DATABASE_URL:-${MIGRATION_DATABASE_URL:-${DATABASE_URL}}}"
+    ;;
+  *)
+    export HASNA_MEMENTOS_DATABASE_URL="${HASNA_MEMENTOS_DATABASE_URL:-${DATABASE_URL}}"
+    ;;
+esac
+
+# Contracts auth reads API_KEY_SIGNING_SECRET directly; also expose the
+# app-scoped alias for the issuer/CLI.
+export HASNA_MEMENTOS_API_SIGNING_KEY="${HASNA_MEMENTOS_API_SIGNING_KEY:-${API_KEY_SIGNING_SECRET}}"
+
+# Map published bin names to their dist entrypoints.
+cmd="${1:-mementos-serve}"
+[ "$#" -gt 0 ] && shift || true
+case "$cmd" in
+  mementos-serve) set -- bun /app/dist/server/index.js "$@" ;;
+  mementos-mcp)   set -- bun /app/dist/mcp/index.js "$@" ;;
+  mementos)       set -- bun /app/dist/cli/index.js "$@" ;;
+  bun|/*)         set -- "$cmd" "$@" ;;
+  *)              set -- "$cmd" "$@" ;;
+esac
+
+exec "$@"

package/hasna.contract.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "./node_modules/@hasna/contracts/dist/hasna.contract.schema.json",
+  "schema": "hasna.service_contract.v1",
+  "name": "mementos",
+  "class": "service",
+  "contractVersion": "v1",
+  "kitVersion": "0.4.1",
+  "description": "Universal memory system for AI agents — CLI + MCP server + REST serve API + typed SDK. self_hosted service backed by pure-remote Postgres (Amendment A1).",
+  "bins": ["mementos", "mementos-mcp", "mementos-serve"],
+  "storage": {
+    "mode": "cloud",
+    "envPrefix": "HASNA_MEMENTOS_",
+    "aliasEnvPrefix": "MEMENTOS_",
+    "databaseUrlSecretRef": "hasna/oss/mementos/database-url"
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/mementos",
-  "version": "0.14.46",
+  "version": "0.14.48",
   "description": "Universal memory system for AI agents - CLI + MCP server + library API",
   "type": "module",
   "main": "dist/index.js",
@@ -27,12 +27,16 @@
   "files": [
     "dist",
     "dashboard/dist",
+    "Dockerfile.package",
+    "docker-entrypoint.sh",
+    "bun.lock",
+    "hasna.contract.json",
     "LICENSE",
     "README.md"
   ],
   "scripts": {
     "clean": "rm -rf dist",
-    "build": "bun run clean && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external @hasna/contracts --external @hasna/contracts/schemas --external pg && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external @hasna/contracts --external @hasna/contracts/schemas --external pg && bun build src/server/index.ts --outdir dist/server --target bun --external @hasna/contracts --external @hasna/contracts/schemas --external pg && bun build src/index.ts src/storage.ts --outdir dist --target bun --external @hasna/contracts --external @hasna/contracts/schemas --external pg && bun build src/sdk/index.ts --outdir dist/sdk --target bun && tsc --emitDeclarationOnly --outDir dist",
+    "build": "bun run clean && bun build src/cli/index.tsx --outdir dist/cli --target bun --external ink --external react --external chalk --external @modelcontextprotocol/sdk --external @hasna/contracts --external @hasna/contracts/schemas --external @hasna/contracts/auth --external pg && bun build src/mcp/index.ts --outdir dist/mcp --target bun --external @modelcontextprotocol/sdk --external @hasna/contracts --external @hasna/contracts/schemas --external @hasna/contracts/auth --external pg && bun build src/server/index.ts --outdir dist/server --target bun --external @hasna/contracts --external @hasna/contracts/schemas --external @hasna/contracts/auth --external pg && bun build src/index.ts src/storage.ts src/pg-sync-worker.ts --outdir dist --target bun --external @hasna/contracts --external @hasna/contracts/schemas --external @hasna/contracts/auth --external pg && bun build src/sdk/index.ts --outdir dist/sdk --target bun && tsc --emitDeclarationOnly --outDir dist",
     "prepare": "bun run build",
     "prepublishOnly": "bun run typecheck && bun run test",
     "typecheck": "tsc --noEmit",
@@ -75,7 +79,7 @@
     "@ai-sdk/anthropic": "^3.0.82",
     "@ai-sdk/openai": "^3.0.69",
     "@ai-sdk/openai-compatible": "^2.0.48",
-    "@hasna/contracts": "^0.2.2",
+    "@hasna/contracts": "0.4.1",
     "@hasna/events": "^0.1.6",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "ai": "^6.0.199",