@jingyi0605/codingns 0.8.1 → 0.9.0

package/dist/server/storage/sqlite/client.js

@@ -1,6 +1,6 @@
 import fs from "node:fs";
 import path from "node:path";
-import Database from "better-sqlite3";
+import Database from "../../shared/runtime/better-sqlite3.js";
 export function createDatabaseClient(databasePath) {
     if (databasePath !== ":memory:") {
         fs.mkdirSync(path.dirname(databasePath), { recursive: true });
@@ -16,6 +16,7 @@ export function createDatabaseClient(databasePath) {
     ensureWorkspaceRemovalColumn(db);
     ensureWorkspaceSortOrderColumn(db);
     ensureWorkspaceNavigationBackgroundColorColumn(db);
+    ensureWorkspaceNavigationAffairsLibraryColumns(db);
     ensureOpenCliProviderSchema(db);
     ensureOpenCliCatalogSchema(db);
     ensureOpenCliRuntimeProfileSchema(db);
@@ -45,12 +46,17 @@ export function createDatabaseClient(databasePath) {
     ensureTerminalCommandTemplateDebugSchema(db);
     ensureTerminalInstanceDebugSchema(db);
     ensureUserPreferenceProfileSchema(db);
+    ensureUserAffairsLibrarySettingsSchema(db);
     ensureButlerProfileSchema(db);
     ensureButlerControlSessionSchema(db);
     ensureButlerControlTimerSchema(db);
     ensureAssistantAutomationSchema(db);
-    ensureAssistantSandboxSchema(db);
+    ensureOnlyOfficeSettingsSchema(db);
     ensureDocumentTemplateSchema(db);
+    ensurePluginRegistrySchema(db);
+    ensurePluginRuntimeSessionSchema(db);
+    ensurePluginPermissionGrantSchema(db);
+    ensurePluginRunSchema(db);
     ensureOpsTargetWorkspaceSchema(db);
     ensureButlerInboxSchema(db);
     ensureButlerFollowUpTaskSchema(db);
@@ -244,6 +250,269 @@ function ensureAuthDeviceSchema(db) {
         db.exec("ALTER TABLE auth_devices ADD COLUMN user_agent TEXT");
     }
 }
+function ensureWorkspaceNavigationAffairsLibraryColumns(db) {
+    if (!tableExists(db, "workspace_navigation_states")) {
+        return;
+    }
+    const columns = db
+        .prepare("PRAGMA table_info(workspace_navigation_states)")
+        .all();
+    const columnNames = new Set(columns.map((column) => column.name));
+    if (!columnNames.has("affairs_library_root_path")) {
+        db.exec("ALTER TABLE workspace_navigation_states ADD COLUMN affairs_library_root_path TEXT");
+    }
+    if (!columnNames.has("affairs_library_enabled")) {
+        db.exec("ALTER TABLE workspace_navigation_states ADD COLUMN affairs_library_enabled INTEGER NOT NULL DEFAULT 0 CHECK (affairs_library_enabled IN (0, 1))");
+    }
+    if (!columnNames.has("affairs_library_favorites_json")) {
+        db.exec("ALTER TABLE workspace_navigation_states ADD COLUMN affairs_library_favorites_json TEXT");
+    }
+}
+function ensurePluginRegistrySchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS plugin_definitions (
+      id TEXT PRIMARY KEY,
+      version TEXT NOT NULL,
+      name TEXT NOT NULL,
+      install_root TEXT NOT NULL,
+      manifest_json TEXT NOT NULL,
+      has_frontend INTEGER NOT NULL DEFAULT 0 CHECK (has_frontend IN (0, 1)),
+      has_backend INTEGER NOT NULL DEFAULT 0 CHECK (has_backend IN (0, 1)),
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_definitions_name
+      ON plugin_definitions(name);
+    CREATE INDEX IF NOT EXISTS idx_plugin_definitions_updated_at
+      ON plugin_definitions(updated_at DESC);
+
+    CREATE TABLE IF NOT EXISTS plugin_enablements (
+      plugin_id TEXT PRIMARY KEY,
+      enabled INTEGER NOT NULL DEFAULT 0 CHECK (enabled IN (0, 1)),
+      enabled_by_user_id TEXT,
+      enabled_at TEXT,
+      disabled_by_user_id TEXT,
+      disabled_at TEXT,
+      reason TEXT,
+      updated_at TEXT NOT NULL,
+      FOREIGN KEY (plugin_id) REFERENCES plugin_definitions(id) ON DELETE CASCADE,
+      FOREIGN KEY (enabled_by_user_id) REFERENCES auth_users(id),
+      FOREIGN KEY (disabled_by_user_id) REFERENCES auth_users(id)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_enablements_enabled
+      ON plugin_enablements(enabled);
+
+    CREATE TABLE IF NOT EXISTS plugin_audit_events (
+      id TEXT PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      workspace_id TEXT,
+      event_type TEXT NOT NULL CHECK (
+        event_type IN (
+          'plugin.registered',
+          'plugin.registration_failed',
+          'plugin.enabled',
+          'plugin.disabled',
+          'plugin.permission_granted',
+          'plugin.permission_revoked',
+          'plugin.permission_denied',
+          'plugin.action_invoked',
+          'plugin.action_rejected',
+          'plugin.schedule_triggered',
+          'plugin.schedule_retry_scheduled',
+          'plugin.schedule_skipped',
+          'plugin.frontend_loaded',
+          'plugin.scope_rejected',
+          'plugin.desktop_call'
+        )
+      ),
+      actor_user_id TEXT,
+      payload_json TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      FOREIGN KEY (workspace_id) REFERENCES workspaces(id),
+      FOREIGN KEY (actor_user_id) REFERENCES auth_users(id)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_audit_events_plugin_id
+      ON plugin_audit_events(plugin_id, created_at DESC);
+  `);
+    ensurePluginAuditEventForeignKeyCompatibility(db);
+}
+function ensurePluginAuditEventForeignKeyCompatibility(db) {
+    if (!tableExists(db, "plugin_audit_events")) {
+        return;
+    }
+    const table = db
+        .prepare(`SELECT sql
+       FROM sqlite_master
+       WHERE type = 'table'
+         AND name = 'plugin_audit_events'
+       LIMIT 1`)
+        .get();
+    const definition = table?.sql ?? "";
+    if (!definition.includes("REFERENCES plugin_definitions")) {
+        const supportsNewEvents = definition.includes("'plugin.permission_granted'") &&
+            definition.includes("'plugin.permission_revoked'") &&
+            definition.includes("'plugin.permission_denied'") &&
+            definition.includes("'plugin.schedule_triggered'") &&
+            definition.includes("'plugin.schedule_retry_scheduled'") &&
+            definition.includes("'plugin.schedule_skipped'");
+        if (supportsNewEvents) {
+            return;
+        }
+    }
+    db.exec(`
+    ALTER TABLE plugin_audit_events RENAME TO plugin_audit_events_legacy;
+
+    CREATE TABLE plugin_audit_events (
+      id TEXT PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      workspace_id TEXT,
+      event_type TEXT NOT NULL CHECK (
+        event_type IN (
+          'plugin.registered',
+          'plugin.registration_failed',
+          'plugin.enabled',
+          'plugin.disabled',
+          'plugin.permission_granted',
+          'plugin.permission_revoked',
+          'plugin.permission_denied',
+          'plugin.action_invoked',
+          'plugin.action_rejected',
+          'plugin.schedule_triggered',
+          'plugin.schedule_retry_scheduled',
+          'plugin.schedule_skipped',
+          'plugin.frontend_loaded',
+          'plugin.scope_rejected',
+          'plugin.desktop_call'
+        )
+      ),
+      actor_user_id TEXT,
+      payload_json TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      FOREIGN KEY (workspace_id) REFERENCES workspaces(id),
+      FOREIGN KEY (actor_user_id) REFERENCES auth_users(id)
+    );
+
+    INSERT INTO plugin_audit_events (
+      id,
+      plugin_id,
+      workspace_id,
+      event_type,
+      actor_user_id,
+      payload_json,
+      created_at
+    )
+    SELECT
+      id,
+      plugin_id,
+      workspace_id,
+      event_type,
+      actor_user_id,
+      payload_json,
+      created_at
+    FROM plugin_audit_events_legacy;
+
+    DROP TABLE plugin_audit_events_legacy;
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_audit_events_plugin_id
+      ON plugin_audit_events(plugin_id, created_at DESC);
+  `);
+}
+function ensurePluginRuntimeSessionSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS plugin_runtime_sessions (
+      id TEXT PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      workspace_id TEXT NOT NULL,
+      opened_by_user_id TEXT NOT NULL,
+      source TEXT NOT NULL CHECK (source IN ('frontend', 'assistant', 'cli')),
+      status TEXT NOT NULL CHECK (status IN ('active', 'closed')),
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      closed_at TEXT,
+      FOREIGN KEY (plugin_id) REFERENCES plugin_definitions(id) ON DELETE CASCADE,
+      FOREIGN KEY (workspace_id) REFERENCES workspaces(id),
+      FOREIGN KEY (opened_by_user_id) REFERENCES auth_users(id)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_runtime_sessions_plugin_id
+      ON plugin_runtime_sessions(plugin_id, created_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_plugin_runtime_sessions_workspace_id
+      ON plugin_runtime_sessions(workspace_id, created_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_plugin_runtime_sessions_status
+      ON plugin_runtime_sessions(status, updated_at DESC);
+  `);
+}
+function ensurePluginPermissionGrantSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS plugin_permission_grants (
+      id TEXT PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      workspace_id TEXT NOT NULL,
+      permission_key TEXT NOT NULL CHECK (
+        permission_key IN (
+          'workspace.read_file',
+          'workspace.list_dir',
+          'workspace.write_file',
+          'desktop.open_file',
+          'desktop.reveal_in_file_manager'
+        )
+      ),
+      scope_type TEXT NOT NULL CHECK (scope_type IN ('workspace', 'directory', 'file')),
+      scope_path TEXT,
+      grant_mode TEXT NOT NULL CHECK (grant_mode IN ('once', 'session', 'persistent')),
+      granted_by_user_id TEXT NOT NULL,
+      runtime_session_id TEXT,
+      created_at TEXT NOT NULL,
+      expires_at TEXT,
+      revoked_at TEXT,
+      FOREIGN KEY (plugin_id) REFERENCES plugin_definitions(id) ON DELETE CASCADE,
+      FOREIGN KEY (workspace_id) REFERENCES workspaces(id),
+      FOREIGN KEY (granted_by_user_id) REFERENCES auth_users(id),
+      FOREIGN KEY (runtime_session_id) REFERENCES plugin_runtime_sessions(id)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_permission_grants_plugin_workspace
+      ON plugin_permission_grants(plugin_id, workspace_id, permission_key, created_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_plugin_permission_grants_runtime_session
+      ON plugin_permission_grants(runtime_session_id, created_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_plugin_permission_grants_active
+      ON plugin_permission_grants(plugin_id, workspace_id, revoked_at, expires_at);
+  `);
+}
+function ensurePluginRunSchema(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS plugin_runs (
+      id TEXT PRIMARY KEY,
+      plugin_id TEXT NOT NULL,
+      workspace_id TEXT NOT NULL,
+      runtime_session_id TEXT,
+      trigger_kind TEXT NOT NULL CHECK (trigger_kind IN ('frontend', 'cli', 'schedule', 'assistant')),
+      action_id TEXT,
+      status TEXT NOT NULL CHECK (status IN ('queued', 'running', 'succeeded', 'failed', 'rejected', 'cancelled')),
+      input_summary_json TEXT,
+      output_summary_json TEXT,
+      error_code TEXT,
+      error_message TEXT,
+      started_at TEXT,
+      finished_at TEXT,
+      created_at TEXT NOT NULL,
+      FOREIGN KEY (workspace_id) REFERENCES workspaces(id),
+      FOREIGN KEY (runtime_session_id) REFERENCES plugin_runtime_sessions(id)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_plugin_runs_plugin_id
+      ON plugin_runs(plugin_id, created_at DESC);
+  `);
+    const columns = db
+        .prepare("PRAGMA table_info(plugin_runs)")
+        .all();
+    if (!columns.some((column) => column.name === "runtime_session_id")) {
+        db.exec("ALTER TABLE plugin_runs ADD COLUMN runtime_session_id TEXT");
+    }
+}
 function ensureAuthLoginAttemptSchema(db) {
     const columns = db
         .prepare("PRAGMA table_info(auth_login_attempts)")
@@ -386,10 +655,13 @@ function ensureButlerProfileSchema(db) {
     const columns = db
         .prepare("PRAGMA table_info(butler_profiles)")
         .all();
-    if (columns.some((column) => column.name === "display_name")) {
-        return;
+    const columnNames = new Set(columns.map((column) => column.name));
+    if (!columnNames.has("display_name")) {
+        db.exec("ALTER TABLE butler_profiles ADD COLUMN display_name TEXT NOT NULL DEFAULT '代码助手'");
+    }
+    if (!columnNames.has("setup_completed")) {
+        db.exec("ALTER TABLE butler_profiles ADD COLUMN setup_completed INTEGER NOT NULL DEFAULT 0 CHECK (setup_completed IN (0, 1))");
     }
-    db.exec("ALTER TABLE butler_profiles ADD COLUMN display_name TEXT NOT NULL DEFAULT '代码助手'");
 }
 function ensureUserPreferenceProfileSchema(db) {
     const columns = db
@@ -406,6 +678,191 @@ function ensureUserPreferenceProfileSchema(db) {
         db.exec(`ALTER TABLE user_preference_profiles
       ADD COLUMN debug_port_pools_json TEXT NOT NULL DEFAULT '{"start":43000,"end":47999}'`);
     }
+    if (!columnNames.has("affairs_dashboard_states_json")) {
+        db.exec(`ALTER TABLE user_preference_profiles
+      ADD COLUMN affairs_dashboard_states_json TEXT NOT NULL DEFAULT '{}'`);
+    }
+    migrateLegacyAffairsShortcutAppsColumn(db, columnNames);
+}
+function migrateLegacyAffairsShortcutAppsColumn(db, columnNames) {
+    if (!tableExists(db, "user_preference_profiles")) {
+        return;
+    }
+    const resolvedColumnNames = columnNames
+        ?? new Set(db.prepare("PRAGMA table_info(user_preference_profiles)").all()
+            .map((column) => column.name));
+    if (!resolvedColumnNames.has("affairs_shortcut_apps_json")) {
+        return;
+    }
+    const rows = db
+        .prepare(`SELECT
+        user_id,
+        language,
+        theme,
+        auto_theme,
+        default_permission_mode,
+        providers_json,
+        debug_port_pools_json,
+        affairs_dashboard_states_json,
+        affairs_shortcut_apps_json,
+        created_at,
+        updated_at
+      FROM user_preference_profiles`)
+        .all();
+    const migratedRows = rows.map((row) => ({
+        ...row,
+        affairs_dashboard_states_json: JSON.stringify(mergeLegacyShortcutAppsIntoDashboardStates(parseJsonObjectRecord(row.affairs_dashboard_states_json), parseJsonObjectRecord(row.affairs_shortcut_apps_json)))
+    }));
+    db.exec("BEGIN IMMEDIATE");
+    try {
+        db.exec(`
+      ALTER TABLE user_preference_profiles RENAME TO user_preference_profiles_legacy;
+
+      CREATE TABLE user_preference_profiles (
+        user_id TEXT PRIMARY KEY,
+        language TEXT NOT NULL CHECK (language IN ('zh-CN', 'en-US')),
+        theme TEXT NOT NULL CHECK (theme IN ('light', 'dark', 'sky-blue', 'eye-green')),
+        auto_theme INTEGER NOT NULL DEFAULT 0 CHECK (auto_theme IN (0, 1)),
+        default_permission_mode TEXT NOT NULL CHECK (
+          default_permission_mode IN ('default', 'acceptEdits', 'bypassPermissions')
+        ),
+        providers_json TEXT NOT NULL,
+        debug_port_pools_json TEXT NOT NULL,
+        affairs_dashboard_states_json TEXT NOT NULL DEFAULT '{}',
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL,
+        FOREIGN KEY (user_id) REFERENCES auth_users(id)
+      )
+    `);
+        const insertStatement = db.prepare(`
+      INSERT INTO user_preference_profiles (
+        user_id,
+        language,
+        theme,
+        auto_theme,
+        default_permission_mode,
+        providers_json,
+        debug_port_pools_json,
+        affairs_dashboard_states_json,
+        created_at,
+        updated_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        for (const row of migratedRows) {
+            insertStatement.run(row.user_id, row.language, row.theme, row.auto_theme, row.default_permission_mode, row.providers_json, row.debug_port_pools_json, row.affairs_dashboard_states_json, row.created_at, row.updated_at);
+        }
+        db.exec("DROP TABLE user_preference_profiles_legacy");
+        db.exec("COMMIT");
+    }
+    catch (error) {
+        db.exec("ROLLBACK");
+        throw error;
+    }
+}
+function parseJsonObjectRecord(value) {
+    try {
+        const parsed = JSON.parse(value);
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            return {};
+        }
+        return { ...parsed };
+    }
+    catch {
+        return {};
+    }
+}
+function mergeLegacyShortcutAppsIntoDashboardStates(dashboardStatesByWorkspace, legacyShortcutAppsByWorkspace) {
+    const result = {
+        ...dashboardStatesByWorkspace
+    };
+    for (const [workspaceId, shortcutApps] of Object.entries(legacyShortcutAppsByWorkspace)) {
+        const normalizedWorkspaceId = workspaceId.trim();
+        if (!normalizedWorkspaceId || Object.prototype.hasOwnProperty.call(result, normalizedWorkspaceId)) {
+            continue;
+        }
+        if (!Array.isArray(shortcutApps)) {
+            continue;
+        }
+        result[normalizedWorkspaceId] = {
+            workspaceId: normalizedWorkspaceId,
+            shortcutApps
+        };
+    }
+    return result;
+}
+function ensureUserAffairsLibrarySettingsSchema(db) {
+    if (!tableExists(db, "user_affairs_library_settings")) {
+        db.exec(`
+      CREATE TABLE user_affairs_library_settings (
+        user_id TEXT PRIMARY KEY,
+        root_dir TEXT,
+        enabled INTEGER NOT NULL DEFAULT 0 CHECK (enabled IN (0, 1)),
+        favorites_json TEXT,
+        last_workspace_id TEXT,
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL,
+        FOREIGN KEY (user_id) REFERENCES auth_users(id)
+      )
+    `);
+        return;
+    }
+    const columns = db
+        .prepare("PRAGMA table_info(user_affairs_library_settings)")
+        .all();
+    const columnNames = new Set(columns.map((column) => column.name));
+    if (!columnNames.has("favorites_json")) {
+        db.exec("ALTER TABLE user_affairs_library_settings ADD COLUMN favorites_json TEXT");
+    }
+    if (!columnNames.has("last_workspace_id")) {
+        db.exec("ALTER TABLE user_affairs_library_settings ADD COLUMN last_workspace_id TEXT");
+    }
+    migrateLegacyAffairsLibrarySettings(db);
+}
+function migrateLegacyAffairsLibrarySettings(db) {
+    if (!tableExists(db, "workspace_navigation_states") || !tableExists(db, "user_affairs_library_settings")) {
+        return;
+    }
+    db.exec(`
+    INSERT INTO user_affairs_library_settings (
+      user_id,
+      root_dir,
+      enabled,
+      favorites_json,
+      last_workspace_id,
+      created_at,
+      updated_at
+    )
+    SELECT
+      legacy.user_id,
+      legacy.affairs_library_root_path,
+      legacy.affairs_library_enabled,
+      legacy.affairs_library_favorites_json,
+      legacy.workspace_id,
+      legacy.updated_at,
+      legacy.updated_at
+    FROM (
+      SELECT
+        workspace_id,
+        user_id,
+        affairs_library_root_path,
+        affairs_library_enabled,
+        affairs_library_favorites_json,
+        updated_at,
+        ROW_NUMBER() OVER (
+          PARTITION BY user_id
+          ORDER BY datetime(updated_at) DESC
+        ) AS row_number
+      FROM workspace_navigation_states
+      WHERE affairs_library_root_path IS NOT NULL
+        AND TRIM(affairs_library_root_path) <> ''
+    ) AS legacy
+    WHERE legacy.row_number = 1
+      AND NOT EXISTS (
+        SELECT 1
+        FROM user_affairs_library_settings AS current
+        WHERE current.user_id = legacy.user_id
+      )
+  `);
 }
 function ensureManagedSkillScopeSchema(db) {
     if (!tableExists(db, "managed_skills")) {
@@ -663,125 +1120,6 @@ function ensureAssistantAutomationSchema(db) {
       ON assistant_automation_runs(automation_id, created_at DESC);
   `);
 }
-function ensureAssistantSandboxSchema(db) {
-    const columns = db
-        .prepare("PRAGMA table_info(assistant_sandboxes)")
-        .all();
-    if (columns.length > 0) {
-        const columnNames = new Set(columns.map((column) => column.name));
-        const tableSql = db
-            .prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'assistant_sandboxes'")
-            .get()?.sql ?? "";
-        const needsStatusConstraintRebuild = !tableSql.includes("'orphaned'");
-        if (needsStatusConstraintRebuild) {
-            const hasControlSessionId = columnNames.has("control_session_id");
-            const rebuild = db.transaction(() => {
-                db.exec("ALTER TABLE assistant_sandboxes RENAME TO assistant_sandboxes_legacy");
-                db.exec(`
-          CREATE TABLE assistant_sandboxes (
-            id TEXT PRIMARY KEY,
-            user_id TEXT NOT NULL,
-            workspace_id TEXT NOT NULL UNIQUE,
-            control_session_id TEXT,
-            title TEXT NOT NULL,
-            description TEXT,
-            source_kind TEXT NOT NULL CHECK (source_kind IN ('blank', 'clone')),
-            source_ref TEXT,
-            visibility TEXT NOT NULL CHECK (visibility IN ('assistant_only', 'pinned')),
-            status TEXT NOT NULL CHECK (status IN ('active', 'archived', 'expired', 'orphaned', 'deleted')),
-            purpose TEXT,
-            expires_at TEXT,
-            promoted_at TEXT,
-            created_at TEXT NOT NULL,
-            updated_at TEXT NOT NULL,
-            FOREIGN KEY (user_id) REFERENCES auth_users(id) ON DELETE CASCADE,
-            FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE,
-            FOREIGN KEY (control_session_id) REFERENCES butler_control_sessions(id) ON DELETE SET NULL
-          );
-        `);
-                db.exec(`
-          INSERT INTO assistant_sandboxes (
-            id,
-            user_id,
-            workspace_id,
-            control_session_id,
-            title,
-            description,
-            source_kind,
-            source_ref,
-            visibility,
-            status,
-            purpose,
-            expires_at,
-            promoted_at,
-            created_at,
-            updated_at
-          )
-          SELECT
-            id,
-            user_id,
-            workspace_id,
-            ${hasControlSessionId ? "control_session_id" : "NULL"},
-            title,
-            description,
-            source_kind,
-            source_ref,
-            visibility,
-            status,
-            purpose,
-            expires_at,
-            promoted_at,
-            created_at,
-            updated_at
-          FROM assistant_sandboxes_legacy;
-        `);
-                db.exec("DROP TABLE assistant_sandboxes_legacy");
-            });
-            rebuild();
-        }
-        else if (!columnNames.has("control_session_id")) {
-            db.exec("ALTER TABLE assistant_sandboxes ADD COLUMN control_session_id TEXT");
-        }
-        db.exec(`
-      CREATE INDEX IF NOT EXISTS idx_assistant_sandboxes_user_status
-        ON assistant_sandboxes(user_id, status, updated_at DESC);
-      CREATE INDEX IF NOT EXISTS idx_assistant_sandboxes_workspace
-        ON assistant_sandboxes(workspace_id, status, updated_at DESC);
-      CREATE INDEX IF NOT EXISTS idx_assistant_sandboxes_control_session
-        ON assistant_sandboxes(control_session_id, status, updated_at DESC);
-    `);
-        return;
-    }
-    db.exec(`
-    CREATE TABLE IF NOT EXISTS assistant_sandboxes (
-      id TEXT PRIMARY KEY,
-      user_id TEXT NOT NULL,
-      workspace_id TEXT NOT NULL UNIQUE,
-      control_session_id TEXT,
-      title TEXT NOT NULL,
-      description TEXT,
-      source_kind TEXT NOT NULL CHECK (source_kind IN ('blank', 'clone')),
-      source_ref TEXT,
-      visibility TEXT NOT NULL CHECK (visibility IN ('assistant_only', 'pinned')),
-      status TEXT NOT NULL CHECK (status IN ('active', 'archived', 'expired', 'orphaned', 'deleted')),
-      purpose TEXT,
-      expires_at TEXT,
-      promoted_at TEXT,
-      created_at TEXT NOT NULL,
-      updated_at TEXT NOT NULL,
-      FOREIGN KEY (user_id) REFERENCES auth_users(id) ON DELETE CASCADE,
-      FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE,
-      FOREIGN KEY (control_session_id) REFERENCES butler_control_sessions(id) ON DELETE SET NULL
-    );
-
-    CREATE INDEX IF NOT EXISTS idx_assistant_sandboxes_user_status
-      ON assistant_sandboxes(user_id, status, updated_at DESC);
-    CREATE INDEX IF NOT EXISTS idx_assistant_sandboxes_workspace
-      ON assistant_sandboxes(workspace_id, status, updated_at DESC);
-    CREATE INDEX IF NOT EXISTS idx_assistant_sandboxes_control_session
-      ON assistant_sandboxes(control_session_id, status, updated_at DESC);
-  `);
-}
 function ensureVerificationRunSchema(db) {
     const verificationRunSql = readTableSql(db, "verification_runs");
     if (!verificationRunSql.includes("status IN ('queued', 'running', 'passed', 'failed', 'skipped')")) {
@@ -872,6 +1210,21 @@ function ensureDocumentTemplateSchema(db) {
         db.exec("ALTER TABLE document_templates ADD COLUMN template_source_path TEXT");
     }
 }
+function ensureOnlyOfficeSettingsSchema(db) {
+    if (!tableExists(db, "office_onlyoffice_settings")) {
+        return;
+    }
+    const columns = db
+        .prepare("PRAGMA table_info(office_onlyoffice_settings)")
+        .all();
+    const columnNames = new Set(columns.map((column) => column.name));
+    if (!columnNames.has("user_display_name")) {
+        db.exec("ALTER TABLE office_onlyoffice_settings ADD COLUMN user_display_name TEXT");
+    }
+    if (!columnNames.has("user_avatar_url")) {
+        db.exec("ALTER TABLE office_onlyoffice_settings ADD COLUMN user_avatar_url TEXT");
+    }
+}
 function ensureOpsTargetWorkspaceSchema(db) {
     if (!tableExists(db, "ops_targets")) {
         return;
@@ -1277,6 +1630,9 @@ function ensureSessionRelationColumns(db) {
         .prepare("PRAGMA table_info(session_indices)")
         .all();
     const columnNames = new Set(columns.map((column) => column.name));
+    if (!columnNames.has("session_visibility")) {
+        db.exec("ALTER TABLE session_indices ADD COLUMN session_visibility TEXT NOT NULL DEFAULT 'workspace' CHECK (session_visibility IN ('workspace', 'affairs_lightweight'))");
+    }
     if (!columnNames.has("parent_session_id")) {
         db.exec("ALTER TABLE session_indices ADD COLUMN parent_session_id TEXT");
     }