@ikenga/mcp-meetings 0.1.0

package/dist/integration.test.js

@@ -0,0 +1,181 @@
+import { describe, it, before, after } from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import crypto from 'node:crypto';
+import { MeetingsDbClient } from '@ikenga/meetings-contract';
+import { BetterSqliteExecutor } from './sqlite.js';
+import { handleSearchTool } from './tools/search.js';
+import { handleRecorderTool } from './tools/recorder.js';
+describe('MCP Meetings Real SQLite Integration Test', () => {
+    let tmpDbPath;
+    let executor;
+    let client;
+    const meetingId = '7b053bb1-29a3-4e07-bfc5-3c4e40d08033';
+    const speaker1Id = '8c053bb1-29a3-4e07-bfc5-3c4e40d08034';
+    const speaker2Id = '9d053bb1-29a3-4e07-bfc5-3c4e40d08035';
+    const transcript1Id = 'ae053bb1-29a3-4e07-bfc5-3c4e40d08036';
+    const transcript2Id = 'bf053bb1-29a3-4e07-bfc5-3c4e40d08037';
+    const summaryId = 'd1053bb1-29a3-4e07-bfc5-3c4e40d08039';
+    before(async () => {
+        tmpDbPath = path.join(os.tmpdir(), `test-meetings-${Date.now()}-${crypto.randomBytes(4).toString('hex')}.db`);
+        executor = new BetterSqliteExecutor(tmpDbPath);
+        client = new MeetingsDbClient(executor);
+        // Insert meeting row with nullable columns explicitly NULL in SQLite
+        await executor.exec(`
+      INSERT INTO meetings (
+        id, title, platform, url, status, start_time, end_time, duration_seconds, video_path, audio_path, created_at, updated_at
+      ) VALUES (
+        '${meetingId}',
+        'test meeting 1',
+        'google_meet',
+        'https://meet.google.com/test-abc-xyz',
+        'completed',
+        '2026-09-02T10:00:00.000Z',
+        '2026-09-02T10:45:00.000Z',
+        2700,
+        NULL,
+        NULL,
+        '2026-09-02T09:55:00.000Z',
+        '2026-09-02T10:46:00.000Z'
+      );
+
+      INSERT INTO meeting_speakers (
+        id, meeting_id, name, avatar_url, contact_id, speaker_source
+      ) VALUES (
+        '${speaker1Id}',
+        '${meetingId}',
+        'Speaker 1',
+        NULL,
+        NULL,
+        'dom_cue'
+      ), (
+        '${speaker2Id}',
+        '${meetingId}',
+        'Speaker 2',
+        NULL,
+        NULL,
+        'audio_embedding'
+      );
+
+      INSERT INTO meeting_transcripts (
+        id, meeting_id, speaker_id, speaker_name, speaker_source, start_ms, end_ms, text, confidence, words_json
+      ) VALUES (
+        '${transcript1Id}',
+        '${meetingId}',
+        '${speaker1Id}',
+        'Speaker 1',
+        'dom_cue',
+        0,
+        4500,
+        'test transcript segment alpha with sample search target phrase',
+        0.98,
+        NULL
+      ), (
+        '${transcript2Id}',
+        '${meetingId}',
+        '${speaker2Id}',
+        'Speaker 2',
+        'audio_embedding',
+        5000,
+        10200,
+        'test transcript segment beta with target phrase and additional details',
+        0.99,
+        NULL
+      );
+
+      INSERT INTO meeting_summaries (
+        id, meeting_id, executive_summary, key_decisions_json, topics_json, created_at
+      ) VALUES (
+        '${summaryId}',
+        '${meetingId}',
+        'test executive summary lorem ipsum for test meeting 1',
+        '["test decision 1", "test decision 2"]',
+        '["topic 1", "topic 2"]',
+        NULL
+      );
+    `);
+    });
+    after(() => {
+        executor.close();
+        if (fs.existsSync(tmpDbPath)) {
+            try {
+                fs.unlinkSync(tmpDbPath);
+            }
+            catch { }
+        }
+    });
+    it('searches transcripts across meeting 7b053bb1-29a3-4e07-bfc5-3c4e40d08033 with real SQLite', async () => {
+        const res = await handleSearchTool(client, 'search_transcripts', {
+            query: 'target phrase',
+            meeting_id: meetingId,
+        });
+        assert.equal(res.count, 2);
+        assert.equal(res.segments.length, 2);
+        assert.equal(res.segments[0]?.speaker, 'Speaker 1');
+        assert.equal(res.segments[0]?.start_ms, 0);
+        assert.equal(res.segments[1]?.speaker, 'Speaker 2');
+        assert.equal(res.segments[1]?.start_ms, 5000);
+        assert.ok(res.segments[1]?.text.includes('target phrase'));
+    });
+    it('retrieves full meeting transcript and speakers for meeting 7b053bb1-29a3-4e07-bfc5-3c4e40d08033', async () => {
+        const res = await handleSearchTool(client, 'get_meeting_transcript', {
+            meeting_id: meetingId,
+        });
+        assert.equal(res.meeting_id, meetingId);
+        assert.equal(res.segment_count, 2);
+        assert.equal(res.speakers.length, 2);
+        assert.equal(res.speakers[0]?.name, 'Speaker 1');
+        assert.equal(res.speakers[1]?.name, 'Speaker 2');
+    });
+    it('retrieves meeting summary without failing on SQLite NULL created_at', async () => {
+        const res = await handleSearchTool(client, 'get_meeting_summary', {
+            meeting_id: meetingId,
+        });
+        assert.equal(res.found, true);
+        assert.equal(res.meeting_id, meetingId);
+        assert.ok(res.executive_summary.includes('test executive summary'));
+        assert.equal(res.key_decisions.length, 2);
+        assert.deepEqual(res.key_decisions, [
+            'test decision 1',
+            'test decision 2',
+        ]);
+    });
+    it('records and updates meetings via recorder tools in SQLite', async () => {
+        // 1. Start recording
+        const startRes = await handleRecorderTool(client, 'start_recording', {
+            title: 'test recording 2',
+        });
+        assert.equal(startRes.ok, true);
+        assert.equal(startRes.status, 'recording');
+        const newId = startRes.meeting_id;
+        assert.ok(newId);
+        // 2. Stop recording
+        const stopRes = await handleRecorderTool(client, 'stop_recording', {
+            meeting_id: newId,
+        });
+        assert.equal(stopRes.ok, true);
+        assert.equal(stopRes.status, 'completed');
+        // 3. Schedule recording
+        const schedRes = await handleRecorderTool(client, 'schedule_recording', {
+            title: 'test scheduled meeting 3',
+            start_time: '2026-09-10T14:00:00.000Z',
+            platform: 'google_meet',
+            url: 'https://meet.google.com/test-link',
+        });
+        assert.equal(schedRes.ok, true);
+        assert.equal(schedRes.status, 'scheduled');
+        assert.equal(schedRes.title, 'test scheduled meeting 3');
+        // 4. List meetings
+        const listRes = await handleRecorderTool(client, 'list_meetings', {
+            limit: 10,
+        });
+        assert.ok(listRes.count >= 3);
+        const titles = listRes.meetings.map((m) => m.title);
+        assert.ok(titles.includes('test meeting 1'));
+        assert.ok(titles.includes('test recording 2'));
+        assert.ok(titles.includes('test scheduled meeting 3'));
+    });
+});
+//# sourceMappingURL=integration.test.js.map

package/dist/integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.test.js","sourceRoot":"","sources":["../src/integration.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,IAAI,SAAiB,CAAC;IACtB,IAAI,QAA8B,CAAC;IACnC,IAAI,MAAwB,CAAC;IAE7B,MAAM,SAAS,GAAG,sCAAsC,CAAC;IACzD,MAAM,UAAU,GAAG,sCAAsC,CAAC;IAC1D,MAAM,UAAU,GAAG,sCAAsC,CAAC;IAC1D,MAAM,aAAa,GAAG,sCAAsC,CAAC;IAC7D,MAAM,aAAa,GAAG,sCAAsC,CAAC;IAC7D,MAAM,SAAS,GAAG,sCAAsC,CAAC;IAEzD,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9G,QAAQ,GAAG,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAExC,qEAAqE;QACrE,MAAM,QAAQ,CAAC,IAAI,CAAC;;;;WAIb,SAAS;;;;;;;;;;;;;;;;;WAiBT,UAAU;WACV,SAAS;;;;;;WAMT,UAAU;WACV,SAAS;;;;;;;;;;WAUT,aAAa;WACb,SAAS;WACT,UAAU;;;;;;;;;WASV,aAAa;WACb,SAAS;WACT,UAAU;;;;;;;;;;;;;WAaV,SAAS;WACT,SAAS;;;;;;KAMf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE;YAC/D,KAAK,EAAE,eAAe;YACtB,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,wBAAwB,EAAE;YACnE,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,EAAE;YAChE,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE;YAClC,iBAAiB;YACjB,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,qBAAqB;QACrB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,EAAE;YACnE,KAAK,EAAE,kBAAkB;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC;QAClC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAEjB,oBAAoB;QACpB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE;YACjE,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAE1C,wBAAwB;QACxB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,oBAAoB,EAAE;YACtE,KAAK,EAAE,0BAA0B;YACjC,UAAU,EAAE,0BAA0B;YACtC,QAAQ,EAAE,aAAa;YACvB,GAAG,EAAE,mCAAmC;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;QAEzD,mBAAmB;QACnB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,eAAe,EAAE;YAChE,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sqlite.d.ts

@@ -0,0 +1,49 @@
+import Database from 'better-sqlite3';
+import { SqlExecutor } from '@ikenga/meetings-contract';
+export declare function resolveDatabasePath(customPath?: string): string;
+/**
+ * Normalizes SQLite rows: converts `null` values to `undefined` so that
+ * Zod schemas with `.optional()` parse without throwing invalid_type errors.
+ */
+export declare function normalizeRow<T>(row: any): T;
+/**
+ * The tables this pkg is allowed to touch.
+ *
+ * Mirrors `permissions["sqlite.tables"]` in the com.ikenga.meetings manifest.
+ * That manifest scope is enforced by the shell for the IFRAME path
+ * (`host.dbQuery` / `host.dbExec` check it in pkg-iframe-host.tsx) — but a pkg's
+ * BACKEND process has no scoped accessor available to it, so opening the
+ * database with better-sqlite3 means holding a connection with full read/write
+ * over every table in `ikenga.db`: tasks, email, finance, everything.
+ *
+ * That is a real widening of trust and it should not be incidental. This guard
+ * re-imposes the manifest scope in code, so a bug — or a prompt injection
+ * reaching a tool argument — cannot reach beyond the meetings domain. It is not
+ * a substitute for host-side enforcement; it is the best a pkg can do for itself
+ * until a scoped backend accessor exists.
+ */
+export declare const ALLOWED_TABLES: readonly ["meetings", "meeting_speakers", "meeting_transcripts", "meeting_action_items", "meeting_summaries"];
+/** Every table name a statement references, lowercased. */
+export declare function tablesReferenced(sql: string): string[];
+/** Throw unless every table a statement touches is in the pkg's scope. */
+export declare function assertInScope(sql: string): void;
+export declare class BetterSqliteExecutor implements SqlExecutor {
+    readonly db: Database.Database;
+    /** True only for a database this pkg created for itself (tests). */
+    private readonly ownsSchema;
+    constructor(dbPathOrInstance?: string | Database.Database);
+    private initSchema;
+    query<T = unknown>(sql: string, params?: unknown[]): Promise<T[]>;
+    exec(sql: string, params?: unknown[]): Promise<void | unknown>;
+    close(): void;
+}
+export declare class InMemorySqlExecutor implements SqlExecutor {
+    private meetingsMap;
+    private transcriptsMap;
+    private speakersMap;
+    private summariesMap;
+    private actionsMap;
+    query<T = unknown>(sql: string, params?: unknown[]): Promise<T[]>;
+    exec(sql: string, params?: unknown[]): Promise<void>;
+}
+//# sourceMappingURL=sqlite.d.ts.map

package/dist/sqlite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAItC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,wBAAgB,mBAAmB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAiB/D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAa3C;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,cAAc,+GAMjB,CAAC;AAEX,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAQtD;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAS/C;AAED,qBAAa,oBAAqB,YAAW,WAAW;IACtD,SAAgB,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtC,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;gBAEzB,gBAAgB,GAAE,MAAM,GAAG,QAAQ,CAAC,QAAgC;IAyChF,OAAO,CAAC,UAAU;IAoEZ,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAOrE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;IASxE,KAAK,IAAI,IAAI;CAGd;AAED,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,UAAU,CAA4B;IAExC,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAgCrE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAsC/D"}

package/dist/sqlite.js

@@ -0,0 +1,303 @@
+import Database from 'better-sqlite3';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+export function resolveDatabasePath(customPath) {
+    if (customPath)
+        return customPath;
+    if (process.env.IKENGA_DB)
+        return process.env.IKENGA_DB;
+    if (process.env.SQLITE_PATH)
+        return process.env.SQLITE_PATH;
+    if (process.env.MEETINGS_DB_PATH)
+        return process.env.MEETINGS_DB_PATH;
+    const localSharePath = path.join(os.homedir(), '.local/share/app.ikenga/ikenga.db');
+    if (fs.existsSync(localSharePath)) {
+        return localSharePath;
+    }
+    const dotIkengaPath = path.join(os.homedir(), '.ikenga/ikenga.db');
+    if (fs.existsSync(dotIkengaPath)) {
+        return dotIkengaPath;
+    }
+    return localSharePath;
+}
+/**
+ * Normalizes SQLite rows: converts `null` values to `undefined` so that
+ * Zod schemas with `.optional()` parse without throwing invalid_type errors.
+ */
+export function normalizeRow(row) {
+    if (!row || typeof row !== 'object')
+        return row;
+    const out = Array.isArray(row) ? [] : {};
+    for (const [k, v] of Object.entries(row)) {
+        if (v === null) {
+            out[k] = undefined;
+        }
+        else if (typeof v === 'object') {
+            out[k] = normalizeRow(v);
+        }
+        else {
+            out[k] = v;
+        }
+    }
+    return out;
+}
+/**
+ * The tables this pkg is allowed to touch.
+ *
+ * Mirrors `permissions["sqlite.tables"]` in the com.ikenga.meetings manifest.
+ * That manifest scope is enforced by the shell for the IFRAME path
+ * (`host.dbQuery` / `host.dbExec` check it in pkg-iframe-host.tsx) — but a pkg's
+ * BACKEND process has no scoped accessor available to it, so opening the
+ * database with better-sqlite3 means holding a connection with full read/write
+ * over every table in `ikenga.db`: tasks, email, finance, everything.
+ *
+ * That is a real widening of trust and it should not be incidental. This guard
+ * re-imposes the manifest scope in code, so a bug — or a prompt injection
+ * reaching a tool argument — cannot reach beyond the meetings domain. It is not
+ * a substitute for host-side enforcement; it is the best a pkg can do for itself
+ * until a scoped backend accessor exists.
+ */
+export const ALLOWED_TABLES = [
+    'meetings',
+    'meeting_speakers',
+    'meeting_transcripts',
+    'meeting_action_items',
+    'meeting_summaries',
+];
+/** Every table name a statement references, lowercased. */
+export function tablesReferenced(sql) {
+    const found = new Set();
+    const re = /\b(?:from|join|into|update|table)\s+["'`\[]?([A-Za-z_][A-Za-z0-9_]*)["'`\]]?/gi;
+    let m;
+    while ((m = re.exec(sql)) !== null) {
+        if (m[1])
+            found.add(m[1].toLowerCase());
+    }
+    return [...found];
+}
+/** Throw unless every table a statement touches is in the pkg's scope. */
+export function assertInScope(sql) {
+    const allowed = new Set(ALLOWED_TABLES);
+    const out = tablesReferenced(sql).filter((t) => !allowed.has(t));
+    if (out.length > 0) {
+        throw new Error(`meetings pkg may not touch table(s): ${out.join(', ')}. ` +
+            `Allowed: ${ALLOWED_TABLES.join(', ')}.`);
+    }
+}
+export class BetterSqliteExecutor {
+    db;
+    /** True only for a database this pkg created for itself (tests). */
+    ownsSchema;
+    constructor(dbPathOrInstance = resolveDatabasePath()) {
+        const livePath = resolveDatabasePath();
+        this.ownsSchema =
+            typeof dbPathOrInstance === 'string'
+                ? dbPathOrInstance === ':memory:' || path.resolve(dbPathOrInstance) !== path.resolve(livePath)
+                : false;
+        if (typeof dbPathOrInstance === 'string') {
+            if (dbPathOrInstance !== ':memory:') {
+                const dir = path.dirname(dbPathOrInstance);
+                if (!fs.existsSync(dir)) {
+                    fs.mkdirSync(dir, { recursive: true });
+                }
+            }
+            this.db = new Database(dbPathOrInstance);
+        }
+        else {
+            this.db = dbPathOrInstance;
+        }
+        try {
+            this.db.pragma('journal_mode = WAL');
+            this.db.pragma('busy_timeout = 5000');
+            this.db.pragma('synchronous = NORMAL');
+        }
+        catch {
+            // Pragmas may not apply to all database configurations
+        }
+        // Schema is owned by the shell's migration runner (0063_meetings_domain,
+        // recorded in `_pa_migrations`), NOT by this pkg.
+        //
+        // Creating tables here would put DDL into the user's canonical database
+        // from a pkg process, outside the migration ledger. If this inline schema
+        // ever drifted from the migration, the divergence would be silent and
+        // unattributable. So the tables are only created for a database this pkg
+        // owns outright — an in-memory or explicitly-pathed test database — and
+        // never for the live one.
+        if (this.ownsSchema) {
+            this.initSchema();
+        }
+    }
+    initSchema() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS meetings (
+        id               TEXT PRIMARY KEY,
+        title            TEXT NOT NULL,
+        platform         TEXT NOT NULL,
+        url              TEXT,
+        status           TEXT NOT NULL,
+        start_time       TEXT NOT NULL,
+        end_time         TEXT,
+        duration_seconds INTEGER NOT NULL DEFAULT 0,
+        video_path       TEXT,
+        audio_path       TEXT,
+        created_at       TEXT NOT NULL,
+        updated_at       TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS meeting_speakers (
+        id             TEXT PRIMARY KEY,
+        meeting_id     TEXT NOT NULL,
+        name           TEXT NOT NULL,
+        avatar_url     TEXT,
+        contact_id     TEXT,
+        speaker_source TEXT NOT NULL DEFAULT 'dom_cue'
+      );
+
+      CREATE TABLE IF NOT EXISTS meeting_transcripts (
+        id             TEXT PRIMARY KEY,
+        meeting_id     TEXT NOT NULL,
+        speaker_id     TEXT,
+        speaker_name   TEXT,
+        speaker_source TEXT,
+        start_ms       INTEGER NOT NULL,
+        end_ms         INTEGER NOT NULL,
+        text           TEXT NOT NULL,
+        confidence     REAL NOT NULL DEFAULT 1.0,
+        words_json     TEXT
+      );
+
+      CREATE TABLE IF NOT EXISTS meeting_action_items (
+        id         TEXT PRIMARY KEY,
+        meeting_id TEXT NOT NULL,
+        title      TEXT NOT NULL,
+        assignee   TEXT,
+        due_date   TEXT,
+        status     TEXT NOT NULL DEFAULT 'pending',
+        task_id    TEXT
+      );
+
+      CREATE TABLE IF NOT EXISTS meeting_summaries (
+        id                 TEXT PRIMARY KEY,
+        meeting_id         TEXT NOT NULL,
+        executive_summary  TEXT NOT NULL,
+        key_decisions_json TEXT NOT NULL DEFAULT '[]',
+        topics_json        TEXT NOT NULL DEFAULT '[]',
+        created_at         TEXT
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_meetings_status ON meetings(status);
+      CREATE INDEX IF NOT EXISTS idx_meetings_created_at ON meetings(created_at);
+      CREATE INDEX IF NOT EXISTS idx_meeting_speakers_meeting_id ON meeting_speakers(meeting_id);
+      CREATE INDEX IF NOT EXISTS idx_meeting_transcripts_meeting_id ON meeting_transcripts(meeting_id);
+      CREATE INDEX IF NOT EXISTS idx_meeting_transcripts_start_ms ON meeting_transcripts(meeting_id, start_ms);
+      CREATE INDEX IF NOT EXISTS idx_meeting_action_items_meeting_id ON meeting_action_items(meeting_id);
+      CREATE INDEX IF NOT EXISTS idx_meeting_summaries_meeting_id ON meeting_summaries(meeting_id);
+    `);
+    }
+    async query(sql, params = []) {
+        assertInScope(sql);
+        const stmt = this.db.prepare(sql);
+        const rows = stmt.all(...params);
+        return rows.map((r) => normalizeRow(r));
+    }
+    async exec(sql, params = []) {
+        assertInScope(sql);
+        if (params && params.length > 0) {
+            const stmt = this.db.prepare(sql);
+            return stmt.run(...params);
+        }
+        return this.db.exec(sql);
+    }
+    close() {
+        this.db.close();
+    }
+}
+export class InMemorySqlExecutor {
+    meetingsMap = new Map();
+    transcriptsMap = new Map();
+    speakersMap = new Map();
+    summariesMap = new Map();
+    actionsMap = new Map();
+    async query(sql, params = []) {
+        let results = [];
+        if (sql.includes('SELECT * FROM meetings WHERE id = ?')) {
+            const id = String(params[0]);
+            const found = this.meetingsMap.get(id);
+            results = found ? [found] : [];
+        }
+        else if (sql.includes('SELECT * FROM meetings')) {
+            results = Array.from(this.meetingsMap.values());
+        }
+        else if (sql.includes('SELECT * FROM meeting_transcripts WHERE text LIKE ?')) {
+            const all = [];
+            for (const list of this.transcriptsMap.values()) {
+                all.push(...list);
+            }
+            const rawPattern = String(params[0] ?? '').replace(/%/g, '').toLowerCase();
+            results = all.filter((r) => r.text?.toLowerCase().includes(rawPattern));
+        }
+        else if (sql.includes('SELECT * FROM meeting_transcripts WHERE meeting_id = ?')) {
+            const id = String(params[0]);
+            results = this.transcriptsMap.get(id) ?? [];
+        }
+        else if (sql.includes('SELECT * FROM meeting_speakers WHERE meeting_id = ?')) {
+            const id = String(params[0]);
+            results = this.speakersMap.get(id) ?? [];
+        }
+        else if (sql.includes('SELECT * FROM meeting_summaries WHERE meeting_id = ?')) {
+            const id = String(params[0]);
+            const found = this.summariesMap.get(id);
+            results = found ? [found] : [];
+        }
+        else if (sql.includes('SELECT * FROM meeting_action_items WHERE meeting_id = ?')) {
+            const id = String(params[0]);
+            results = this.actionsMap.get(id) ?? [];
+        }
+        return results.map((r) => normalizeRow(r));
+    }
+    async exec(sql, params = []) {
+        if (sql.includes('INSERT INTO meetings')) {
+            const [id, title, platform, url, status, start_time, end_time, duration_seconds, video_path, audio_path, created_at, updated_at] = params;
+            this.meetingsMap.set(String(id), {
+                id, title, platform, url, status, start_time, end_time, duration_seconds, video_path, audio_path, created_at, updated_at
+            });
+        }
+        else if (sql.includes('UPDATE meetings SET')) {
+            const id = String(params[params.length - 1]);
+            const existing = this.meetingsMap.get(id);
+            if (existing) {
+                existing.status = params[0];
+                existing.updated_at = params[1];
+                if (params.length > 3) {
+                    existing.end_time = params[2];
+                }
+            }
+        }
+        else if (sql.includes('INSERT INTO meeting_speakers')) {
+            const [id, meeting_id, name, avatar_url, contact_id, speaker_source] = params;
+            const list = this.speakersMap.get(String(meeting_id)) ?? [];
+            list.push({ id, meeting_id, name, avatar_url, contact_id, speaker_source });
+            this.speakersMap.set(String(meeting_id), list);
+        }
+        else if (sql.includes('INSERT INTO meeting_transcripts')) {
+            const [id, meeting_id, speaker_id, speaker_name, speaker_source, start_ms, end_ms, text, confidence, words_json] = params;
+            const list = this.transcriptsMap.get(String(meeting_id)) ?? [];
+            list.push({ id, meeting_id, speaker_id, speaker_name, speaker_source, start_ms, end_ms, text, confidence, words_json });
+            this.transcriptsMap.set(String(meeting_id), list);
+        }
+        else if (sql.includes('INSERT INTO meeting_summaries')) {
+            const [id, meeting_id, executive_summary, key_decisions_json, topics_json, created_at] = params;
+            this.summariesMap.set(String(meeting_id), {
+                id, meeting_id, executive_summary, key_decisions_json, topics_json, created_at
+            });
+        }
+        else if (sql.includes('INSERT INTO meeting_action_items')) {
+            const [id, meeting_id, title, assignee, due_date, status, task_id] = params;
+            const list = this.actionsMap.get(String(meeting_id)) ?? [];
+            list.push({ id, meeting_id, title, assignee, due_date, status, task_id });
+            this.actionsMap.set(String(meeting_id), list);
+        }
+    }
+}
+//# sourceMappingURL=sqlite.js.map

package/dist/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,MAAM,UAAU,mBAAmB,CAAC,UAAmB;IACrD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACxD,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAEtE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,mCAAmC,CAAC,CAAC;IACpF,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACnE,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAI,GAAQ;IACtC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAChD,MAAM,GAAG,GAAQ,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;QACrB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,UAAU;IACV,kBAAkB;IAClB,qBAAqB;IACrB,sBAAsB;IACtB,mBAAmB;CACX,CAAC;AAEX,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,EAAE,GAAG,gFAAgF,CAAC;IAC5F,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,cAAc,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,wCAAwC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACxD,YAAY,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,OAAO,oBAAoB;IACf,EAAE,CAAoB;IACtC,oEAAoE;IACnD,UAAU,CAAU;IAErC,YAAY,mBAA+C,mBAAmB,EAAE;QAC9E,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU;YACb,OAAO,gBAAgB,KAAK,QAAQ;gBAClC,CAAC,CAAC,gBAAgB,KAAK,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC9F,CAAC,CAAC,KAAK,CAAC;QAEZ,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,gBAAgB,KAAK,UAAU,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,EAAE,GAAG,gBAAgB,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACtC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;QAED,yEAAyE;QACzE,kDAAkD;QAClD,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,0BAA0B;QAC1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAgEZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAc,GAAW,EAAE,SAAoB,EAAE;QAC1D,aAAa,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,SAAoB,EAAE;QAC5C,aAAa,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF;AAED,MAAM,OAAO,mBAAmB;IACtB,WAAW,GAAG,IAAI,GAAG,EAAe,CAAC;IACrC,cAAc,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC1C,WAAW,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,YAAY,GAAG,IAAI,GAAG,EAAe,CAAC;IACtC,UAAU,GAAG,IAAI,GAAG,EAAiB,CAAC;IAE9C,KAAK,CAAC,KAAK,CAAc,GAAW,EAAE,SAAoB,EAAE;QAC1D,IAAI,OAAO,GAAU,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;YACxD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;YAClD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,qDAAqD,CAAC,EAAE,CAAC;YAC/E,MAAM,GAAG,GAAU,EAAE,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;gBAChD,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACpB,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3E,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,wDAAwD,CAAC,EAAE,CAAC;YAClF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,qDAAqD,CAAC,EAAE,CAAC;YAC/E,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3C,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,sDAAsD,CAAC,EAAE,CAAC;YAChF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,yDAAyD,CAAC,EAAE,CAAC;YACnF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAI,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,SAAoB,EAAE;QAC5C,IAAI,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC;YAC1I,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;gBAC/B,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;aACzH,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC5B,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC,GAAG,MAAM,CAAC;YAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;YAC3D,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC;YAC1H,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YACxH,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC;YAChG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;gBACxC,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU;aAC/E,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAAE,CAAC;YAC5D,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;YAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF"}

package/dist/sqlite.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sqlite.test.d.ts.map

package/dist/sqlite.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.test.d.ts","sourceRoot":"","sources":["../src/sqlite.test.ts"],"names":[],"mappings":""}

package/dist/sqlite.test.js

@@ -0,0 +1,36 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { assertInScope, tablesReferenced, ALLOWED_TABLES } from './sqlite.js';
+/**
+ * A pkg's backend process opens ikenga.db with full read/write over every
+ * table — there is no scoped accessor for it the way `host.dbQuery` scopes the
+ * iframe. These tests pin the in-code guard that re-imposes the manifest scope.
+ * Fabricated rows were written into the user's real database earlier in this
+ * plan's history through exactly this unguarded path.
+ */
+describe('meetings pkg sqlite scope guard', () => {
+    it('allows the pkg its own tables', () => {
+        for (const t of ALLOWED_TABLES) {
+            assertInScope(`SELECT * FROM ${t} WHERE id = ?`);
+        }
+    });
+    it('refuses tables belonging to other domains', () => {
+        for (const sql of [
+            'SELECT * FROM tasks',
+            'INSERT INTO email_index (id) VALUES (?)',
+            'UPDATE deals SET amount = ?',
+            'DELETE FROM _pa_migrations',
+        ]) {
+            assert.throws(() => assertInScope(sql), /may not touch table/, sql);
+        }
+    });
+    it('catches a joined table, not just the leading one', () => {
+        assert.throws(() => assertInScope('SELECT * FROM meetings JOIN tasks ON tasks.id = meetings.id'), /tasks/);
+    });
+    it('extracts every referenced table', () => {
+        const t = tablesReferenced('SELECT * FROM meetings JOIN meeting_speakers ON 1=1');
+        assert.ok(t.includes('meetings'));
+        assert.ok(t.includes('meeting_speakers'));
+    });
+});
+//# sourceMappingURL=sqlite.test.js.map

package/dist/sqlite.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.test.js","sourceRoot":"","sources":["../src/sqlite.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE9E;;;;;;GAMG;AACH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,aAAa,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,KAAK,MAAM,GAAG,IAAI;YAChB,qBAAqB;YACrB,yCAAyC;YACzC,6BAA6B;YAC7B,4BAA4B;SAC7B,EAAE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,aAAa,CAAC,6DAA6D,CAAC,EAClF,OAAO,CACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,gBAAgB,CAAC,qDAAqD,CAAC,CAAC;QAClF,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}