@rei-standard/amsg-server 2.6.0-next.2 → 2.6.0-next.21

package/dist/adapters/schema.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Shared SQL schema constants
+ *
+ * 定时触发用的三列各管一件事，别把它们混着读（见 lib/run-tick.js）：
+ *   - `lease_until`：**这条正在跑**。某个 tick 占位时写「归我管到什么时候」，
+ *     投递收尾时放掉。捞取待发任务时跳过租约未到期的行。
+ *   - `retry_after`：**这条没在跑，等着重试**。投递失败的退避时刻，到点之前
+ *     捞不到这行。跟租约分开写，是因为「正在跑」会挡住同分组的其他任务，而
+ *     一条正在等重试的任务其实闲着，不该连累别人。
+ *   - `serialize_group`：这条属于哪个串行分组（`runScheduledTick` 的
+ *     `serializeBy` 算出来的，占位时一起写）。同一分组同时只放行一条。存的是
+ *     派生值而不是宿主给的原始 key —— 原始 key 往往是角色 id 之类的宿主数据，
+ *     任务内容都是密文落库的，这一列不该成为它的明文出口。
+ */
+export const TABLE_SQL: "\n  CREATE TABLE IF NOT EXISTS scheduled_messages (\n    id SERIAL PRIMARY KEY,\n    user_id VARCHAR(255) NOT NULL,\n    uuid VARCHAR(36),\n    encrypted_payload TEXT NOT NULL,\n    message_type VARCHAR(50) NOT NULL CHECK (message_type IN ('fixed', 'prompted', 'auto', 'instant')),\n    next_send_at TIMESTAMP WITH TIME ZONE NOT NULL,\n    lease_until TIMESTAMP WITH TIME ZONE,\n    retry_after TIMESTAMP WITH TIME ZONE,\n    serialize_group VARCHAR(64),\n    status VARCHAR(50) NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'sent', 'failed')),\n    retry_count INTEGER DEFAULT 0,\n    last_error TEXT,\n    created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),\n    updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()\n  )\n";
+/**
+ * 建表语句用的是 CREATE TABLE IF NOT EXISTS，已经存在的表不会被改动，所以
+ * 后加的列要单独补。initSchema 每次都会跑一遍，Postgres 的 IF NOT EXISTS
+ * 让重复执行也没事。
+ */
+export const MIGRATIONS: {
+    name: string;
+    sql: string;
+    description: string;
+}[];
+export const INDEXES: ({
+    name: string;
+    sql: string;
+    description: string;
+    critical?: undefined;
+} | {
+    name: string;
+    sql: string;
+    description: string;
+    critical: boolean;
+})[];
+export const PUSH_SUBSCRIPTION_TABLE_SQL: "\n  CREATE TABLE IF NOT EXISTS push_subscriptions (\n    user_id VARCHAR(255) PRIMARY KEY,\n    subscription TEXT NOT NULL,\n    updated_at BIGINT NOT NULL\n  )\n";
+export const LLM_CREDENTIALS_TABLE_SQL: "\n  CREATE TABLE IF NOT EXISTS llm_credentials (\n    user_id VARCHAR(255) NOT NULL,\n    cred_id VARCHAR(128) NOT NULL,\n    encrypted_value TEXT NOT NULL,\n    created_at TEXT NOT NULL,\n    updated_at TEXT NOT NULL,\n    PRIMARY KEY (user_id, cred_id)\n  )\n";
+export const VERIFY_TABLE_SQL: "\n  SELECT table_name\n  FROM information_schema.tables\n  WHERE table_schema = 'public'\n    AND table_name = 'scheduled_messages'\n";
+export const COLUMNS_SQL: "\n  SELECT column_name, data_type, is_nullable\n  FROM information_schema.columns\n  WHERE table_schema = 'public'\n    AND table_name = 'scheduled_messages'\n  ORDER BY ordinal_position\n";
+export const UPDATABLE_COLUMNS: Set<string>;
+/**
+ * 任务行的 SELECT 列集，同样是三个适配器共用一份（列名不分方言，加列只改这
+ * 里）。分成两份，是因为两条链路要的东西本来就不一样：
+ *
+ *   - `TASK_DELIVERY_COLUMNS`：投递链路读的行（`getPendingTasks` /
+ *     `getTaskByUuidOnly`）。除了发消息本身要用的字段，还必须带 `retry_after`
+ *     —— run-tick 的退避守卫就是拿这一列判断「这条还在等重试，现在别跑」，列
+ *     不在行里，守卫读到的永远是 undefined，等于没有守卫。
+ *   - `TASK_DETAIL_COLUMNS`：读接口返回的行（`getTaskByUuid` / `listTasks`），
+ *     多了 `last_error` 和两个时间戳，不带 `lease_until` 这类内部调度列。
+ *
+ * 收进来之前每个适配器各写各的 SELECT 列表，加列时漏掉其中一个不会有任何报
+ * 错，只会在那种部署上静默少一列。
+ */
+export const TASK_DELIVERY_COLUMNS: "id, user_id, uuid, encrypted_payload, message_type, next_send_at, retry_after, status, retry_count";
+export const TASK_DETAIL_COLUMNS: "id, user_id, uuid, encrypted_payload, message_type, next_send_at, status, retry_count, last_error, created_at, updated_at";

package/dist/adapters/schema.sqlite.d.ts

@@ -0,0 +1,49 @@
+/**
+ * SQLite (Cloudflare D1) dialect schema for scheduled_messages.
+ *
+ * 定时触发用的 `lease_until` / `retry_after` / `serialize_group` 三列分别是什么
+ * 意思，写在 Postgres 那份 schema 的文件头（adapters/schema.js）。
+ *
+ * Differences from the Postgres schema (adapters/schema.js):
+ *   - id: INTEGER PRIMARY KEY AUTOINCREMENT (vs SERIAL)
+ *   - timestamps stored as TEXT ISO8601 UTC (vs TIMESTAMP WITH TIME ZONE)
+ *   - no NOW()/DEFAULT; the adapter always writes timestamps explicitly
+ *   - retry_count is NOT NULL here (Postgres omits NOT NULL); every write path
+ *     sets it explicitly, so the tighter constraint just documents that intent
+ * Partial indexes and CHECK constraints are native to SQLite, so they carry over.
+ * Index entries mirror the Postgres INDEXES shape ({ name, sql, description,
+ * critical }) so both adapters' initSchema() return the same index metadata.
+ */
+export const SQLITE_TABLE_SQL: "\n  CREATE TABLE IF NOT EXISTS scheduled_messages (\n    id INTEGER PRIMARY KEY AUTOINCREMENT,\n    user_id TEXT NOT NULL,\n    uuid TEXT,\n    encrypted_payload TEXT NOT NULL,\n    message_type TEXT NOT NULL CHECK (message_type IN ('fixed', 'prompted', 'auto', 'instant')),\n    next_send_at TEXT NOT NULL,\n    lease_until TEXT,\n    retry_after TEXT,\n    serialize_group TEXT,\n    status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'sent', 'failed')),\n    retry_count INTEGER NOT NULL DEFAULT 0,\n    last_error TEXT,\n    created_at TEXT NOT NULL,\n    updated_at TEXT NOT NULL\n  )\n";
+/**
+ * 建表语句用的是 CREATE TABLE IF NOT EXISTS，已经存在的表不会被改动，所以
+ * 后加的列要单独补。initSchema 每次都会跑一遍，列已经在了就跳过。
+ */
+export const SQLITE_MIGRATIONS: {
+    name: string;
+    sql: string;
+    description: string;
+}[];
+export const SQLITE_INDEXES: {
+    name: string;
+    sql: string;
+    description: string;
+    critical: boolean;
+}[];
+export const CLIENT_STATE_TABLE_SQL: "\n  CREATE TABLE IF NOT EXISTS client_state (\n    user_id TEXT NOT NULL,\n    namespace TEXT NOT NULL,\n    key TEXT NOT NULL,\n    value TEXT NOT NULL,\n    updated_at INTEGER NOT NULL,\n    PRIMARY KEY (user_id, namespace, key)\n  )\n";
+export const PUSH_SUBSCRIPTION_TABLE_SQL: "\n  CREATE TABLE IF NOT EXISTS push_subscriptions (\n    user_id TEXT PRIMARY KEY,\n    subscription TEXT NOT NULL,\n    updated_at INTEGER NOT NULL\n  )\n";
+export const LLM_CREDENTIALS_TABLE_SQL: "\n  CREATE TABLE IF NOT EXISTS llm_credentials (\n    user_id TEXT NOT NULL,\n    cred_id TEXT NOT NULL,\n    encrypted_value TEXT NOT NULL,\n    created_at TEXT NOT NULL,\n    updated_at TEXT NOT NULL,\n    PRIMARY KEY (user_id, cred_id)\n  )\n";
+export const MESSAGE_OUTBOX_TABLE_SQL: "\n  CREATE TABLE IF NOT EXISTS message_outbox (\n    id INTEGER PRIMARY KEY AUTOINCREMENT,\n    user_id TEXT NOT NULL,\n    message_id TEXT NOT NULL,\n    task_uuid TEXT,\n    session_id TEXT,\n    message_index INTEGER,\n    total_messages INTEGER,\n    payload TEXT NOT NULL,\n    created_at INTEGER NOT NULL,\n    delivered_at INTEGER,\n    acked_at INTEGER,\n    UNIQUE (user_id, message_id)\n  )\n";
+export const MESSAGE_OUTBOX_INDEX_SQL: "\n  CREATE INDEX IF NOT EXISTS idx_outbox_unacked\n    ON message_outbox (user_id, id)\n    WHERE acked_at IS NULL\n";
+/**
+ * 这一版代码跑起来需要的表 / 列 / 索引。
+ *
+ * 索引只列 critical 的那几个（uidx_uuid 之类）：其余索引缺了只是慢，缺了它则
+ * 是正确性问题。
+ *
+ * @type {{ tables: Record<string, string[]>, indexes: string[] }}
+ */
+export const SQLITE_REQUIRED_SCHEMA: {
+    tables: Record<string, string[]>;
+    indexes: string[];
+};

package/dist/chunk-7NMQFTDJ.cjs

@@ -0,0 +1,148 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/server/adapters/schema.js
+var TABLE_SQL = `
+  CREATE TABLE IF NOT EXISTS scheduled_messages (
+    id SERIAL PRIMARY KEY,
+    user_id VARCHAR(255) NOT NULL,
+    uuid VARCHAR(36),
+    encrypted_payload TEXT NOT NULL,
+    message_type VARCHAR(50) NOT NULL CHECK (message_type IN ('fixed', 'prompted', 'auto', 'instant')),
+    next_send_at TIMESTAMP WITH TIME ZONE NOT NULL,
+    lease_until TIMESTAMP WITH TIME ZONE,
+    retry_after TIMESTAMP WITH TIME ZONE,
+    serialize_group VARCHAR(64),
+    status VARCHAR(50) NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'sent', 'failed')),
+    retry_count INTEGER DEFAULT 0,
+    last_error TEXT,
+    created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+    updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
+  )
+`;
+var MIGRATIONS = [
+  {
+    name: "add_lease_until",
+    sql: "ALTER TABLE scheduled_messages ADD COLUMN IF NOT EXISTS lease_until TIMESTAMP WITH TIME ZONE",
+    description: "Task claim lease (2.6.0)"
+  },
+  {
+    name: "add_retry_after",
+    sql: "ALTER TABLE scheduled_messages ADD COLUMN IF NOT EXISTS retry_after TIMESTAMP WITH TIME ZONE",
+    description: "Retry backoff, held apart from the claim lease (2.6.0)"
+  },
+  {
+    name: "add_serialize_group",
+    sql: "ALTER TABLE scheduled_messages ADD COLUMN IF NOT EXISTS serialize_group VARCHAR(64)",
+    description: "Serialization group for runScheduledTick serializeBy (2.6.0)"
+  },
+  {
+    name: "add_last_error",
+    // 上一次投递失败的脱敏摘要（JSON：{ at, occurrence, reason }）。payload 里
+    // 的 lastError 是密文里的完整记录，这一列是它的明文出口——payload 本身
+    // 解密失败时也写得进去，GET /message 对已失败的行也读得出来。
+    sql: "ALTER TABLE scheduled_messages ADD COLUMN IF NOT EXISTS last_error TEXT",
+    description: "Sanitized last delivery-failure summary (2.6.0)"
+  }
+];
+var INDEXES = [
+  {
+    name: "idx_pending_tasks_optimized",
+    sql: `CREATE INDEX IF NOT EXISTS idx_pending_tasks_optimized
+          ON scheduled_messages (status, next_send_at, id, retry_count)
+          WHERE status = 'pending'`,
+    description: "Main query index (Cron Job finds pending tasks)"
+  },
+  {
+    name: "idx_cleanup_completed",
+    sql: `CREATE INDEX IF NOT EXISTS idx_cleanup_completed
+          ON scheduled_messages (status, updated_at)
+          WHERE status IN ('sent', 'failed')`,
+    description: "Cleanup query index"
+  },
+  {
+    name: "idx_failed_retry",
+    sql: `CREATE INDEX IF NOT EXISTS idx_failed_retry
+          ON scheduled_messages (status, retry_count, next_send_at)
+          WHERE status = 'failed' AND retry_count < 3`,
+    description: "Failed retry index"
+  },
+  {
+    name: "idx_user_id",
+    sql: `CREATE INDEX IF NOT EXISTS idx_user_id
+          ON scheduled_messages (user_id)`,
+    description: "User task query index"
+  },
+  {
+    name: "uidx_uuid",
+    sql: `CREATE UNIQUE INDEX IF NOT EXISTS uidx_uuid
+          ON scheduled_messages (uuid)
+          WHERE uuid IS NOT NULL`,
+    description: "UUID uniqueness guard",
+    critical: true
+  },
+  {
+    name: "idx_serialize_group_lease",
+    sql: `CREATE INDEX IF NOT EXISTS idx_serialize_group_lease
+          ON scheduled_messages (serialize_group, lease_until)
+          WHERE serialize_group IS NOT NULL AND status = 'pending'`,
+    description: "Serialization group busy-check index (claimTask)"
+  }
+];
+var PUSH_SUBSCRIPTION_TABLE_SQL = `
+  CREATE TABLE IF NOT EXISTS push_subscriptions (
+    user_id VARCHAR(255) PRIMARY KEY,
+    subscription TEXT NOT NULL,
+    updated_at BIGINT NOT NULL
+  )
+`;
+var LLM_CREDENTIALS_TABLE_SQL = `
+  CREATE TABLE IF NOT EXISTS llm_credentials (
+    user_id VARCHAR(255) NOT NULL,
+    cred_id VARCHAR(128) NOT NULL,
+    encrypted_value TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    PRIMARY KEY (user_id, cred_id)
+  )
+`;
+var VERIFY_TABLE_SQL = `
+  SELECT table_name
+  FROM information_schema.tables
+  WHERE table_schema = 'public'
+    AND table_name = 'scheduled_messages'
+`;
+var COLUMNS_SQL = `
+  SELECT column_name, data_type, is_nullable
+  FROM information_schema.columns
+  WHERE table_schema = 'public'
+    AND table_name = 'scheduled_messages'
+  ORDER BY ordinal_position
+`;
+var UPDATABLE_COLUMNS = /* @__PURE__ */ new Set([
+  "user_id",
+  "uuid",
+  "encrypted_payload",
+  "message_type",
+  "next_send_at",
+  "lease_until",
+  "retry_after",
+  "serialize_group",
+  "status",
+  "retry_count",
+  "last_error",
+  "created_at",
+  "updated_at"
+]);
+var TASK_DELIVERY_COLUMNS = "id, user_id, uuid, encrypted_payload, message_type, next_send_at, retry_after, status, retry_count";
+var TASK_DETAIL_COLUMNS = "id, user_id, uuid, encrypted_payload, message_type, next_send_at, status, retry_count, last_error, created_at, updated_at";
+
+
+
+
+
+
+
+
+
+
+
+
+exports.TABLE_SQL = TABLE_SQL; exports.MIGRATIONS = MIGRATIONS; exports.INDEXES = INDEXES; exports.PUSH_SUBSCRIPTION_TABLE_SQL = PUSH_SUBSCRIPTION_TABLE_SQL; exports.LLM_CREDENTIALS_TABLE_SQL = LLM_CREDENTIALS_TABLE_SQL; exports.VERIFY_TABLE_SQL = VERIFY_TABLE_SQL; exports.COLUMNS_SQL = COLUMNS_SQL; exports.UPDATABLE_COLUMNS = UPDATABLE_COLUMNS; exports.TASK_DELIVERY_COLUMNS = TASK_DELIVERY_COLUMNS; exports.TASK_DETAIL_COLUMNS = TASK_DETAIL_COLUMNS;

package/dist/chunk-E7OWP3VL.cjs

@@ -0,0 +1,135 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/server/adapters/pg-shared.js
+async function claimTask(query, taskId, expectedNextSendAt, leaseUntil, serializeGroup = null) {
+  const grouped = typeof serializeGroup === "string" && serializeGroup.length > 0;
+  const params = [leaseUntil, taskId, expectedNextSendAt];
+  let setClause = "lease_until = $1, updated_at = NOW()";
+  let groupGuard = "";
+  if (grouped) {
+    params.push(serializeGroup);
+    setClause = "lease_until = $1, serialize_group = $4, updated_at = NOW()";
+    groupGuard = `
+        AND NOT EXISTS (
+          SELECT 1 FROM scheduled_messages busy
+           WHERE busy.serialize_group = $4 AND busy.id <> $2
+             AND busy.status = 'pending' AND busy.lease_until > NOW()
+        )`;
+  }
+  const rows = await query(
+    `UPDATE scheduled_messages
+        SET ${setClause}
+      WHERE id = $2 AND status = 'pending'
+        AND date_trunc('milliseconds', next_send_at)
+          = date_trunc('milliseconds', $3::timestamptz)
+        AND (lease_until IS NULL OR lease_until <= NOW())${groupGuard}
+     RETURNING id`,
+    params
+  );
+  if (rows.length === 0) return false;
+  if (!grouped) return true;
+  const conflict = await query(
+    `SELECT 1 FROM scheduled_messages busy
+      WHERE busy.serialize_group = $1 AND busy.id <> $2
+        AND busy.status = 'pending' AND busy.lease_until > NOW()
+      LIMIT 1`,
+    [serializeGroup, taskId]
+  );
+  if (conflict.length === 0) return true;
+  await query(
+    "UPDATE scheduled_messages SET lease_until = NULL, updated_at = NOW() WHERE id = $1",
+    [taskId]
+  );
+  return false;
+}
+async function renewTaskLease(query, taskId, leaseUntil) {
+  const rows = await query(
+    `UPDATE scheduled_messages SET lease_until = $1
+      WHERE id = $2 AND status = 'pending' AND lease_until IS NOT NULL
+     RETURNING id`,
+    [leaseUntil, taskId]
+  );
+  return rows.length > 0;
+}
+async function getTaskStatusInfo(query, uuid, userId) {
+  const rows = await query(
+    "SELECT status, last_error FROM scheduled_messages WHERE uuid = $1 AND user_id = $2 LIMIT 1",
+    [uuid, userId]
+  );
+  if (rows.length === 0) return null;
+  return { status: rows[0].status, last_error: _nullishCoalesce(rows[0].last_error, () => ( null)) };
+}
+async function getPushSubscription(query, userId) {
+  const rows = await query(
+    "SELECT subscription, updated_at FROM push_subscriptions WHERE user_id = $1 LIMIT 1",
+    [userId]
+  );
+  if (rows.length === 0) return null;
+  return { subscription: rows[0].subscription, updated_at: Number(rows[0].updated_at) };
+}
+async function upsertPushSubscription(query, userId, encryptedSubscription, updatedAt) {
+  const rows = await query(
+    `INSERT INTO push_subscriptions (user_id, subscription, updated_at)
+     VALUES ($1, $2, $3)
+     ON CONFLICT (user_id) DO UPDATE SET
+       subscription = EXCLUDED.subscription,
+       updated_at = EXCLUDED.updated_at
+     RETURNING user_id`,
+    [userId, encryptedSubscription, updatedAt]
+  );
+  return rows.length > 0;
+}
+async function deletePushSubscription(query, userId) {
+  const rows = await query(
+    "DELETE FROM push_subscriptions WHERE user_id = $1 RETURNING user_id",
+    [userId]
+  );
+  return rows.length > 0;
+}
+async function upsertLlmCredentials(query, userId, entries, now) {
+  let upserted = 0;
+  for (const entry of entries) {
+    const rows = await query(
+      `INSERT INTO llm_credentials (user_id, cred_id, encrypted_value, created_at, updated_at)
+       VALUES ($1, $2, $3, $4, $4)
+       ON CONFLICT (user_id, cred_id) DO UPDATE SET
+         encrypted_value = EXCLUDED.encrypted_value,
+         updated_at = EXCLUDED.updated_at
+       RETURNING cred_id`,
+      [userId, entry.credId, entry.encryptedValue, now]
+    );
+    if (rows.length > 0) upserted++;
+  }
+  return upserted;
+}
+async function getLlmCredentials(query, userId, credIds) {
+  if (!credIds || credIds.length === 0) return [];
+  return query(
+    `SELECT cred_id, encrypted_value, updated_at
+     FROM llm_credentials
+     WHERE user_id = $1 AND cred_id = ANY($2)`,
+    [userId, credIds]
+  );
+}
+async function listLlmCredentials(query, userId) {
+  return query(
+    "SELECT cred_id, updated_at FROM llm_credentials WHERE user_id = $1 ORDER BY cred_id ASC",
+    [userId]
+  );
+}
+async function deleteLlmCredentials(query, userId, credIds = null) {
+  if (credIds !== null && credIds.length === 0) return 0;
+  const rows = credIds === null ? await query("DELETE FROM llm_credentials WHERE user_id = $1 RETURNING cred_id", [userId]) : await query("DELETE FROM llm_credentials WHERE user_id = $1 AND cred_id = ANY($2) RETURNING cred_id", [userId, credIds]);
+  return rows.length;
+}
+
+
+
+
+
+
+
+
+
+
+
+
+exports.claimTask = claimTask; exports.renewTaskLease = renewTaskLease; exports.getTaskStatusInfo = getTaskStatusInfo; exports.getPushSubscription = getPushSubscription; exports.upsertPushSubscription = upsertPushSubscription; exports.deletePushSubscription = deletePushSubscription; exports.upsertLlmCredentials = upsertLlmCredentials; exports.getLlmCredentials = getLlmCredentials; exports.listLlmCredentials = listLlmCredentials; exports.deleteLlmCredentials = deleteLlmCredentials;

package/dist/chunk-GN44PST5.mjs

@@ -0,0 +1,148 @@
+// src/server/adapters/schema.js
+var TABLE_SQL = `
+  CREATE TABLE IF NOT EXISTS scheduled_messages (
+    id SERIAL PRIMARY KEY,
+    user_id VARCHAR(255) NOT NULL,
+    uuid VARCHAR(36),
+    encrypted_payload TEXT NOT NULL,
+    message_type VARCHAR(50) NOT NULL CHECK (message_type IN ('fixed', 'prompted', 'auto', 'instant')),
+    next_send_at TIMESTAMP WITH TIME ZONE NOT NULL,
+    lease_until TIMESTAMP WITH TIME ZONE,
+    retry_after TIMESTAMP WITH TIME ZONE,
+    serialize_group VARCHAR(64),
+    status VARCHAR(50) NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'sent', 'failed')),
+    retry_count INTEGER DEFAULT 0,
+    last_error TEXT,
+    created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+    updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
+  )
+`;
+var MIGRATIONS = [
+  {
+    name: "add_lease_until",
+    sql: "ALTER TABLE scheduled_messages ADD COLUMN IF NOT EXISTS lease_until TIMESTAMP WITH TIME ZONE",
+    description: "Task claim lease (2.6.0)"
+  },
+  {
+    name: "add_retry_after",
+    sql: "ALTER TABLE scheduled_messages ADD COLUMN IF NOT EXISTS retry_after TIMESTAMP WITH TIME ZONE",
+    description: "Retry backoff, held apart from the claim lease (2.6.0)"
+  },
+  {
+    name: "add_serialize_group",
+    sql: "ALTER TABLE scheduled_messages ADD COLUMN IF NOT EXISTS serialize_group VARCHAR(64)",
+    description: "Serialization group for runScheduledTick serializeBy (2.6.0)"
+  },
+  {
+    name: "add_last_error",
+    // 上一次投递失败的脱敏摘要（JSON：{ at, occurrence, reason }）。payload 里
+    // 的 lastError 是密文里的完整记录，这一列是它的明文出口——payload 本身
+    // 解密失败时也写得进去，GET /message 对已失败的行也读得出来。
+    sql: "ALTER TABLE scheduled_messages ADD COLUMN IF NOT EXISTS last_error TEXT",
+    description: "Sanitized last delivery-failure summary (2.6.0)"
+  }
+];
+var INDEXES = [
+  {
+    name: "idx_pending_tasks_optimized",
+    sql: `CREATE INDEX IF NOT EXISTS idx_pending_tasks_optimized
+          ON scheduled_messages (status, next_send_at, id, retry_count)
+          WHERE status = 'pending'`,
+    description: "Main query index (Cron Job finds pending tasks)"
+  },
+  {
+    name: "idx_cleanup_completed",
+    sql: `CREATE INDEX IF NOT EXISTS idx_cleanup_completed
+          ON scheduled_messages (status, updated_at)
+          WHERE status IN ('sent', 'failed')`,
+    description: "Cleanup query index"
+  },
+  {
+    name: "idx_failed_retry",
+    sql: `CREATE INDEX IF NOT EXISTS idx_failed_retry
+          ON scheduled_messages (status, retry_count, next_send_at)
+          WHERE status = 'failed' AND retry_count < 3`,
+    description: "Failed retry index"
+  },
+  {
+    name: "idx_user_id",
+    sql: `CREATE INDEX IF NOT EXISTS idx_user_id
+          ON scheduled_messages (user_id)`,
+    description: "User task query index"
+  },
+  {
+    name: "uidx_uuid",
+    sql: `CREATE UNIQUE INDEX IF NOT EXISTS uidx_uuid
+          ON scheduled_messages (uuid)
+          WHERE uuid IS NOT NULL`,
+    description: "UUID uniqueness guard",
+    critical: true
+  },
+  {
+    name: "idx_serialize_group_lease",
+    sql: `CREATE INDEX IF NOT EXISTS idx_serialize_group_lease
+          ON scheduled_messages (serialize_group, lease_until)
+          WHERE serialize_group IS NOT NULL AND status = 'pending'`,
+    description: "Serialization group busy-check index (claimTask)"
+  }
+];
+var PUSH_SUBSCRIPTION_TABLE_SQL = `
+  CREATE TABLE IF NOT EXISTS push_subscriptions (
+    user_id VARCHAR(255) PRIMARY KEY,
+    subscription TEXT NOT NULL,
+    updated_at BIGINT NOT NULL
+  )
+`;
+var LLM_CREDENTIALS_TABLE_SQL = `
+  CREATE TABLE IF NOT EXISTS llm_credentials (
+    user_id VARCHAR(255) NOT NULL,
+    cred_id VARCHAR(128) NOT NULL,
+    encrypted_value TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    PRIMARY KEY (user_id, cred_id)
+  )
+`;
+var VERIFY_TABLE_SQL = `
+  SELECT table_name
+  FROM information_schema.tables
+  WHERE table_schema = 'public'
+    AND table_name = 'scheduled_messages'
+`;
+var COLUMNS_SQL = `
+  SELECT column_name, data_type, is_nullable
+  FROM information_schema.columns
+  WHERE table_schema = 'public'
+    AND table_name = 'scheduled_messages'
+  ORDER BY ordinal_position
+`;
+var UPDATABLE_COLUMNS = /* @__PURE__ */ new Set([
+  "user_id",
+  "uuid",
+  "encrypted_payload",
+  "message_type",
+  "next_send_at",
+  "lease_until",
+  "retry_after",
+  "serialize_group",
+  "status",
+  "retry_count",
+  "last_error",
+  "created_at",
+  "updated_at"
+]);
+var TASK_DELIVERY_COLUMNS = "id, user_id, uuid, encrypted_payload, message_type, next_send_at, retry_after, status, retry_count";
+var TASK_DETAIL_COLUMNS = "id, user_id, uuid, encrypted_payload, message_type, next_send_at, status, retry_count, last_error, created_at, updated_at";
+
+export {
+  TABLE_SQL,
+  MIGRATIONS,
+  INDEXES,
+  PUSH_SUBSCRIPTION_TABLE_SQL,
+  LLM_CREDENTIALS_TABLE_SQL,
+  VERIFY_TABLE_SQL,
+  COLUMNS_SQL,
+  UPDATABLE_COLUMNS,
+  TASK_DELIVERY_COLUMNS,
+  TASK_DETAIL_COLUMNS
+};