@srouterhq/server 0.0.0-stage → 0.9.0

package/dist/db/index.js

@@ -0,0 +1,203 @@
+import crypto from 'crypto';
+import fs from 'fs';
+import path from 'path';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'url';
+import { runMigrationsSync } from './migrate/runner.js';
+import { initEncryptionKey, isEncryptionKeyInitialized } from '../lib/crypto.js';
+import { restrictAllToOwner, restrictDirToOwner } from '../lib/file-permissions.js';
+import { nodeSqliteFactory } from './node-sqlite.js';
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const DB_PATH = path.resolve(__dirname, '../../data/srouter.db');
+const runtimeRequire = createRequire(import.meta.url);
+let db;
+export function getDb() {
+    if (!db) {
+        throw new Error('Database not initialized. Call initDb() or connectDb() first.');
+    }
+    return db;
+}
+export function getDefaultDbPath() {
+    return process.env.SROUTER_DB_PATH?.trim() || DB_PATH;
+}
+/** Default factory: opens a better-sqlite3 connection at the given path. */
+function betterSqliteFactory(resolvedPath) {
+    let BetterSqlite;
+    try {
+        BetterSqlite = runtimeRequire('better-sqlite3');
+    }
+    catch (cause) {
+        throw new Error('better-sqlite3 is not installed. Reinstall dependencies, or use Node.js 22.13+ on Android/Termux.', { cause });
+    }
+    return new BetterSqlite(resolvedPath);
+}
+export function defaultDbFactory(platform = process.platform) {
+    return platform === 'android' ? nodeSqliteFactory : betterSqliteFactory;
+}
+export function connectDb(dbPath, opts) {
+    const resolvedPath = dbPath ?? getDefaultDbPath();
+    const isMemory = resolvedPath === ':memory:';
+    const ensureDir = opts?.ensureDir ?? true;
+    const factory = opts?.factory ?? defaultDbFactory();
+    // Gated on ensureDir along with the mkdir: that flag means "this process does
+    // not shape the filesystem here", and changing a directory's permissions is
+    // exactly that kind of change. It also keeps the warning below from firing on
+    // every boot in the read-only environments the flag exists for.
+    if (!isMemory && ensureDir) {
+        const dataDir = path.dirname(resolvedPath);
+        let created = false;
+        if (!fs.existsSync(dataDir)) {
+            fs.mkdirSync(dataDir, { recursive: true });
+            created = true;
+        }
+        // Before the connection, not after: on Windows the restriction is inherited,
+        // so hardening first means the database file is born protected instead of
+        // spending its first moments with whatever ACL the parent handed down.
+        restrictDataDir(dataDir, created);
+    }
+    db = factory(resolvedPath);
+    if (!isMemory)
+        db.pragma('journal_mode = WAL');
+    db.pragma('foreign_keys = ON');
+    // The dashboard and the proxy hot path write concurrently; without a busy
+    // timeout the loser of a write race gets SQLITE_BUSY immediately and the
+    // request fails. Five seconds is far longer than any write here takes.
+    db.pragma('busy_timeout = 5000');
+    if (!isMemory)
+        restrictDbFilePermissions(resolvedPath);
+    console.log(`Database initialized at ${resolvedPath}`);
+    return db;
+}
+/**
+ * Whether the directory holding the database may be restricted to this account.
+ *
+ * The sidecars can only be covered by the directory: SQLite creates `-wal` and
+ * `-shm` on the first write and deletes them on the last clean close, so at
+ * startup there is nothing there to chmod. But the directory is also shared
+ * state — SROUTER_DB_PATH may point anywhere — and locking down a directory
+ * that is not ours is a worse outage than the leak it prevents. Pointing the DB
+ * at `/tmp/srouter.db` must not chmod 0700 `/tmp`.
+ *
+ * So the rule is ownership by construction rather than a guess about what is
+ * safe. Two cases qualify, and nothing else does:
+ *
+ *   1. We just created the directory. Nothing else can be living in a directory
+ *      that did not exist a moment ago.
+ *   2. It is the built-in default data directory, which ships as ours.
+ *
+ * Case 2 is what covers the installed base: an existing deployment already has
+ * `server/data`, so case 1 alone would harden new installs and quietly leave
+ * every upgrade behind.
+ *
+ * An operator who points SROUTER_DB_PATH at a dedicated directory can opt in
+ * with SROUTER_DB_DIR_HARDENING=1, and one who dislikes the default can opt out
+ * with =0. It is a deliberate default-on-where-safe rather than a flag, because
+ * hardening that only runs when someone remembers to ask for it is the same
+ * class of failure as hardening nobody noticed had stopped running.
+ */
+export function shouldHardenDataDir(dataDir, created, platform = process.platform) {
+    const override = parseDirHardeningOverride();
+    if (override !== undefined)
+        return override;
+    if (created)
+        return true;
+    // Windows paths are case-insensitive; comparing them case-sensitively would
+    // miss `C:\App\Data` vs `c:\app\data` and silently skip the default install.
+    const normalize = (p) => platform === 'win32' ? path.resolve(p).toLowerCase() : path.resolve(p);
+    return normalize(dataDir) === normalize(path.dirname(DB_PATH));
+}
+/** Tri-state, matching CSP_UPGRADE_INSECURE_REQUESTS in lib/config.ts: on, off,
+ *  or unset to leave the policy above in charge. */
+function parseDirHardeningOverride() {
+    const raw = process.env.SROUTER_DB_DIR_HARDENING;
+    if (raw === undefined || raw.trim() === '')
+        return undefined;
+    const lower = raw.trim().toLowerCase();
+    if (lower === 'true' || lower === '1' || lower === 'yes')
+        return true;
+    if (lower === 'false' || lower === '0' || lower === 'no')
+        return false;
+    return undefined;
+}
+/** Emitted at most once: connectDb runs once in a server, but a test suite
+ *  reconnects constantly and does not need the same line each time. */
+let warnedUnhardenedDataDir = false;
+function restrictDataDir(dataDir, created) {
+    if (!shouldHardenDataDir(dataDir, created)) {
+        if (!warnedUnhardenedDataDir) {
+            warnedUnhardenedDataDir = true;
+            console.log(`[db] leaving permissions on ${dataDir} as they are: it is not a directory this server created. ` +
+                'The WAL sidecars written there inherit whatever it already grants. ' +
+                'Set SROUTER_DB_DIR_HARDENING=1 if it belongs to this account alone.');
+        }
+        return;
+    }
+    if (!restrictDirToOwner(dataDir)) {
+        console.warn(`[db] could not restrict permissions on ${dataDir}; ` +
+            'the database and its WAL sidecars may be readable by other local accounts');
+    }
+}
+/** Restrict the DB and its WAL sidecars to the owner. The file holds encrypted
+ *  provider keys plus the dashboard password hash, so it must not be readable by
+ *  other local users. Best-effort: a filesystem that cannot express the
+ *  restriction must not stop startup — but it now says so instead of failing
+ *  silently, because a hardening step nobody can see failing is one nobody
+ *  notices is absent.
+ *
+ *  This pass only ever finds the main file on a clean start; the sidecars do not
+ *  exist yet. They are covered by the directory instead — see
+ *  shouldHardenDataDir. It still runs for both, because a directory this server
+ *  is not allowed to touch can still hold sidecars left behind by an unclean
+ *  shutdown, and because the main file predates the directory pass on any
+ *  install that upgraded into it. */
+function restrictDbFilePermissions(resolvedPath) {
+    const failed = restrictAllToOwner(['', '-wal', '-shm'].map(suffix => `${resolvedPath}${suffix}`));
+    if (failed.length > 0) {
+        console.warn(`[db] could not restrict database file permissions (${failed.length} of 3 targets); ` +
+            'the database may be readable by other local accounts');
+    }
+}
+export function initDb(dbPath, opts) {
+    const db = connectDb(dbPath, opts);
+    if (process.env.NODE_ENV !== 'development') {
+        runMigrationsSync(db, 'up');
+    }
+    else {
+        // In dev, verify the DB has been initialised. If not, give a clear error.
+        const ready = db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='migrations'").get();
+        if (!ready) {
+            console.error('\n  [dev] Database not initialised. Run:\n\n' +
+                '    npm run db:migration:up\n\n' +
+                '  Then restart the server.\n');
+            process.exit(1);
+        }
+    }
+    if (!isEncryptionKeyInitialized())
+        initEncryptionKey(db);
+    return db;
+}
+export function getUnifiedApiKey() {
+    const db = getDb();
+    const row = db.prepare("SELECT value FROM settings WHERE key = 'unified_api_key'").get();
+    return row.value;
+}
+export function regenerateUnifiedKey() {
+    const db = getDb();
+    const key = `sr-${crypto.randomBytes(24).toString('hex')}`;
+    db.prepare("UPDATE settings SET value = ? WHERE key = 'unified_api_key'").run(key);
+    return key;
+}
+// Generic key/value settings accessors (used by routing strategy, etc.).
+export function getSetting(key) {
+    const db = getDb();
+    const row = db.prepare('SELECT value FROM settings WHERE key = ?').get(key);
+    return row?.value;
+}
+export function setSetting(key, value) {
+    const db = getDb();
+    db.prepare(`
+    INSERT INTO settings (key, value) VALUES (?, ?)
+    ON CONFLICT(key) DO UPDATE SET value = excluded.value
+  `).run(key, value);
+}
+//# sourceMappingURL=index.js.map

package/dist/db/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAKrD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;AACjE,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEtD,IAAI,EAAM,CAAC;AAEX,MAAM,UAAU,KAAK;IACnB,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;AACxD,CAAC;AAED,4EAA4E;AAC5E,SAAS,mBAAmB,CAAC,YAAoB;IAC/C,IAAI,YAA2C,CAAC;IAChD,IAAI,CAAC;QACH,YAAY,GAAG,cAAc,CAAC,gBAAgB,CAAkC,CAAC;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,mGAAmG,EACnG,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,YAAY,CAAC,YAAY,CAAO,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAA4B,OAAO,CAAC,QAAQ;IAC3E,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,MAAe,EACf,IAMC;IAED,MAAM,YAAY,GAAG,MAAM,IAAI,gBAAgB,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,YAAY,KAAK,UAAU,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,gBAAgB,EAAE,CAAC;IAEpD,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,gEAAgE;IAChE,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,6EAA6E;QAC7E,0EAA0E;QAC1E,uEAAuE;QACvE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3B,IAAI,CAAC,QAAQ;QAAE,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC/C,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/B,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAEjC,IAAI,CAAC,QAAQ;QAAE,yBAAyB,CAAC,YAAY,CAAC,CAAC;IAEvD,OAAO,CAAC,GAAG,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAC;IACvD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,OAAgB,EAChB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,QAAQ,GAAG,yBAAyB,EAAE,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC;IAEzB,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CACtC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;oDACoD;AACpD,SAAS,yBAAyB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACjD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACtE,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;uEACuE;AACvE,IAAI,uBAAuB,GAAG,KAAK,CAAC;AAEpC,SAAS,eAAe,CAAC,OAAe,EAAE,OAAgB;IACxD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC7B,uBAAuB,GAAG,IAAI,CAAC;YAC/B,OAAO,CAAC,GAAG,CACT,+BAA+B,OAAO,2DAA2D;gBACjG,qEAAqE;gBACrE,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CACV,0CAA0C,OAAO,IAAI;YACrD,2EAA2E,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;qCAYqC;AACrC,SAAS,yBAAyB,CAAC,YAAoB;IACrD,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,YAAY,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAClG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CACV,sDAAsD,MAAM,CAAC,MAAM,kBAAkB;YACrF,sDAAsD,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CACpB,MAAe,EACf,IAAmD;IAEnD,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEnC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC3C,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,0EAA0E;QAC1E,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CACtB,yEAAyE,CAC1E,CAAC,GAAG,EAAE,CAAC;QACR,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CACX,8CAA8C;gBAC9C,iCAAiC;gBACjC,8BAA8B,CAC/B,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,0BAA0B,EAAE;QAAE,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAEzD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,EAAuB,CAAC;IAC9G,OAAO,GAAG,CAAC,KAAK,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3D,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAkC,CAAC;IAC7G,OAAO,GAAG,EAAE,KAAK,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,KAAa;IACnD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,EAAE,CAAC,OAAO,CAAC;;;GAGV,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrB,CAAC"}

package/dist/db/migrate/TEMPLATE.d.ts

@@ -0,0 +1,4 @@
+import type { Db } from '../types.js';
+export declare function up(db: Db): void;
+export declare function down(db: Db): void;
+//# sourceMappingURL=TEMPLATE.d.ts.map

package/dist/db/migrate/TEMPLATE.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TEMPLATE.d.ts","sourceRoot":"","sources":["../../../src/db/migrate/TEMPLATE.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,wBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAI/B;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAQjC"}

package/dist/db/migrate/TEMPLATE.js

@@ -0,0 +1,18 @@
+// Migration: <short description>
+// Created: <YYYY-MM-DD>
+//
+// DOWN: <reversible | irreversible - reason>
+export function up(db) {
+    db.exec(`
+    -- your SQL here
+  `);
+}
+export function down(db) {
+    // If reversible:
+    db.exec(`
+    -- inverse SQL here
+  `);
+    // If irreversible:
+    // throw new Error('irreversible migration: <reason>');
+}
+//# sourceMappingURL=TEMPLATE.js.map

package/dist/db/migrate/TEMPLATE.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TEMPLATE.js","sourceRoot":"","sources":["../../../src/db/migrate/TEMPLATE.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,wBAAwB;AACxB,EAAE;AACF,6CAA6C;AAI7C,MAAM,UAAU,EAAE,CAAC,EAAM;IACvB,EAAE,CAAC,IAAI,CAAC;;GAEP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,EAAM;IACzB,iBAAiB;IACjB,EAAE,CAAC,IAAI,CAAC;;GAEP,CAAC,CAAC;IAEH,mBAAmB;IACnB,uDAAuD;AACzD,CAAC"}

package/dist/db/migrate/cli.d.ts

@@ -0,0 +1,2 @@
+import '../../env.js';
+//# sourceMappingURL=cli.d.ts.map

package/dist/db/migrate/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/db/migrate/cli.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,CAAC"}

package/dist/db/migrate/cli.js

@@ -0,0 +1,177 @@
+import '../../env.js';
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { connectDb } from '../index.js';
+import { getMigrationStatuses, runMigrations } from './runner.js';
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const MIGRATIONS_DIR = path.resolve(__dirname, '../migrations');
+const TEMPLATE_PATH = path.resolve(__dirname, 'TEMPLATE.ts');
+const DEFAULTS_PATH = path.resolve(__dirname, 'defaults.ts');
+async function main() {
+    const command = process.argv[2];
+    if (command === 'create') {
+        createMigrationFile();
+        return;
+    }
+    const db = connectDb();
+    switch (command) {
+        case 'up':
+            await runMigrations(db, 'up');
+            return;
+        case 'down':
+            await runMigrations(db, 'down');
+            return;
+        case 'fresh':
+            await runFresh(db);
+            return;
+        case 'status':
+            printStatus(db);
+            return;
+        default:
+            console.error('Usage: tsx src/db/migrate/cli.ts <up|down|fresh|status|create>');
+            process.exit(1);
+    }
+}
+async function runFresh(db) {
+    if (process.env.NODE_ENV === 'production') {
+        console.error('db:migration:fresh is not allowed in production');
+        process.exit(1);
+    }
+    dropAllUserTables(db);
+    await runMigrations(db, 'up');
+}
+function printStatus(db) {
+    const statuses = getMigrationStatuses(db);
+    console.table(statuses.map(status => ({
+        filename: status.filename,
+        status: status.status,
+        applied_at: status.appliedAt ?? '',
+    })));
+}
+function createMigrationFile() {
+    const rawName = getMigrationName();
+    if (!rawName) {
+        console.error('Error: --name is required. Usage: npm run db:migration:create --name=<description>');
+        process.exit(1);
+    }
+    const sanitisedName = sanitiseMigrationName(rawName);
+    if (!sanitisedName) {
+        console.error('Error: --name must contain at least one letter or digit');
+        process.exit(1);
+    }
+    const now = new Date();
+    const filename = `${formatTimestamp(now)}_${sanitisedName}.ts`;
+    const outputPath = path.join(MIGRATIONS_DIR, filename);
+    const relativeOutputPath = toPosixPath(path.relative(process.cwd(), outputPath));
+    if (!fs.existsSync(TEMPLATE_PATH)) {
+        console.error(`Error: migration template not found at ${toPosixPath(TEMPLATE_PATH)}`);
+        process.exit(1);
+    }
+    if (fs.existsSync(outputPath)) {
+        console.error(`Error: migration already exists at ${relativeOutputPath}`);
+        process.exit(1);
+    }
+    fs.mkdirSync(MIGRATIONS_DIR, { recursive: true });
+    const template = fs.readFileSync(TEMPLATE_PATH, 'utf8');
+    const content = template
+        .replaceAll('<short description>', rawName)
+        .replaceAll('<YYYY-MM-DD>', formatDate(now));
+    fs.writeFileSync(outputPath, content, { flag: 'wx' });
+    updateDefaultMigrationRegistry(filename);
+    console.log(`Created ${relativeOutputPath}`);
+}
+function updateDefaultMigrationRegistry(filename) {
+    if (!fs.existsSync(DEFAULTS_PATH)) {
+        console.error(`Error: migration registry not found at ${toPosixPath(DEFAULTS_PATH)}`);
+        process.exit(1);
+    }
+    const bindingName = toMigrationBindingName(filename);
+    const importPath = `../migrations/${filename.replace(/\.ts$/, '.js')}`;
+    const importLine = `import * as ${bindingName} from '${importPath}';`;
+    const entryLine = `  { filename: '${filename}', module: ${bindingName} },`;
+    const registry = fs.readFileSync(DEFAULTS_PATH, 'utf8');
+    if (registry.includes(importLine) || registry.includes(entryLine))
+        return;
+    const withImport = registry.replace('\nexport interface MigrationModule', `\n${importLine}\n\nexport interface MigrationModule`);
+    if (withImport === registry) {
+        console.error('Error: could not update migration registry imports');
+        process.exit(1);
+    }
+    const withEntry = withImport.replace(/\n\];\s*$/, `\n${entryLine}\n];\n`);
+    if (withEntry === withImport) {
+        console.error('Error: could not update migration registry entries');
+        process.exit(1);
+    }
+    fs.writeFileSync(DEFAULTS_PATH, withEntry);
+}
+function getMigrationName() {
+    const argvName = process.argv
+        .map(arg => arg.match(/^--name=(.+)$/)?.[1]?.trim())
+        .find((name) => Boolean(name));
+    return argvName || process.env.npm_config_name?.trim();
+}
+function sanitiseMigrationName(name) {
+    return name
+        .toLowerCase()
+        .replace(/[ -]+/g, '_')
+        .replace(/[^a-z0-9_]/g, '')
+        .replace(/_+/g, '_')
+        .replace(/^_+|_+$/g, '');
+}
+function formatTimestamp(date) {
+    return [
+        date.getUTCFullYear(),
+        pad(date.getUTCMonth() + 1),
+        pad(date.getUTCDate()),
+        '_',
+        pad(date.getUTCHours()),
+        pad(date.getUTCMinutes()),
+        pad(date.getUTCSeconds()),
+    ].join('');
+}
+function formatDate(date) {
+    return [
+        date.getUTCFullYear(),
+        pad(date.getUTCMonth() + 1),
+        pad(date.getUTCDate()),
+    ].join('-');
+}
+function pad(value) {
+    return String(value).padStart(2, '0');
+}
+function toMigrationBindingName(filename) {
+    return `migration${filename.replace(/\.ts$/, '').replace(/[^a-zA-Z0-9_]/g, '_')}`;
+}
+function dropAllUserTables(db) {
+    const tables = db.prepare(`
+    SELECT name
+      FROM sqlite_master
+     WHERE type = 'table'
+       AND name NOT LIKE 'sqlite_%'
+     ORDER BY name ASC
+  `).all();
+    db.pragma('foreign_keys = OFF');
+    try {
+        const dropTables = db.transaction(() => {
+            for (const { name } of tables) {
+                db.exec(`DROP TABLE IF EXISTS ${quoteIdentifier(name)}`);
+            }
+        });
+        dropTables();
+    }
+    finally {
+        db.pragma('foreign_keys = ON');
+    }
+}
+function quoteIdentifier(identifier) {
+    return `"${identifier.replaceAll('"', '""')}"`;
+}
+function toPosixPath(value) {
+    return value.replaceAll(path.sep, '/');
+}
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/db/migrate/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../src/db/migrate/cli.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,CAAC;AACtB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAIlE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AAChE,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAE7D,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAwB,CAAC;IAEvD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,mBAAmB,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,IAAI;YACP,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO;QACT,KAAK,MAAM;YACT,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO;QACT,KAAK,OAAO;YACV,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnB,OAAO;QACT,KAAK,QAAQ;YACX,WAAW,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO;QACT;YACE,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,EAAM;IAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACtB,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,EAAM;IACzB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;KACnC,CAAC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACpG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,aAAa,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,aAAa,KAAK,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,kBAAkB,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IAEjF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,0CAA0C,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,sCAAsC,kBAAkB,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,QAAQ;SACrB,UAAU,CAAC,qBAAqB,EAAE,OAAO,CAAC;SAC1C,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/C,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,WAAW,kBAAkB,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAgB;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,0CAA0C,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,iBAAiB,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;IACvE,MAAM,UAAU,GAAG,eAAe,WAAW,UAAU,UAAU,IAAI,CAAC;IACtE,MAAM,SAAS,GAAG,kBAAkB,QAAQ,cAAc,WAAW,KAAK,CAAC;IAC3E,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAExD,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO;IAE1E,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CACjC,oCAAoC,EACpC,KAAK,UAAU,sCAAsC,CACtD,CAAC;IAEF,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAClC,WAAW,EACX,KAAK,SAAS,QAAQ,CACvB,CAAC;IAEF,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI;SAC1B,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;SACnD,IAAI,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjD,OAAO,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,IAAU;IACjC,OAAO;QACL,IAAI,CAAC,cAAc,EAAE;QACrB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACtB,GAAG;QACH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;KAC1B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,IAAU;IAC5B,OAAO;QACL,IAAI,CAAC,cAAc,EAAE;QACrB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;KACvB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,OAAO,YAAY,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAM;IAC/B,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;GAMzB,CAAC,CAAC,GAAG,EAAwB,CAAC;IAE/B,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACrC,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;gBAC9B,EAAE,CAAC,IAAI,CAAC,wBAAwB,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,UAAU,EAAE,CAAC;IACf,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/db/migrate/defaults.d.ts

@@ -0,0 +1,52 @@
+import type { Db } from '../types.js';
+export interface MigrationModule {
+    up(db: Db): void;
+    down(db: Db): void;
+}
+export interface DefaultMigration {
+    filename: string;
+    module: MigrationModule;
+}
+export declare const LEGACY_BASELINE_FILENAME = "20260101_000000_legacy_baseline.ts";
+export declare const CUSTOM_PROVIDER_MODALITIES_FILENAME = "20260627_000001_custom_provider_modalities.ts";
+export declare const CATALOG_MODEL_STATE_FILENAME = "20260627_000002_catalog_model_state.ts";
+export declare const REQUEST_AGGREGATES_FILENAME = "20260628_120000_request_aggregates.ts";
+export declare const GITHUB_GPT41_CONTEXT_FILENAME = "20260630_000001_github_gpt41_context.ts";
+export declare const REQUEST_CLIENT_INFO_FILENAME = "20260706_000001_request_client_info.ts";
+export declare const CUSTOM_MODEL_TOOL_SUPPORT_FILENAME = "20260706_000002_custom_model_tool_support.ts";
+export declare const PROFILE_CHAIN_BACKFILL_FILENAME = "20260714_000001_profile_chain_backfill.ts";
+export declare const KEY_HEALTH_ERROR_FILENAME = "20260720_000001_key_health_error.ts";
+export declare const COOLDOWN_PROBE_PROVENANCE_FILENAME = "20260726_000001_cooldown_probe_provenance.ts";
+export declare const REQUEST_ATTEMPTS_FILENAME = "20260726_000002_request_attempts.ts";
+export declare const MODEL_SOURCE_PROVENANCE_FILENAME = "20260726_000003_model_source_provenance.ts";
+export declare const MEDIA_MODEL_META_FILENAME = "20260726_000004_media_model_meta.ts";
+export declare const REQUEST_SERVED_MODEL_FILENAME = "20260726_000005_request_served_model.ts";
+export declare const ATTEMPT_ERROR_SUMMARY_FILENAME = "20260726_000006_attempt_error_summary.ts";
+export declare const AGENT_COMPATIBILITY_FILENAME = "20260727_000001_agent_compatibility.ts";
+export declare const TOMBSTONE_PROVENANCE_FILENAME = "20260728_000001_tombstone_provenance.ts";
+export declare const CUSTOM_MODEL_ENDPOINT_IDENTITY_FILENAME = "20260729_000001_custom_model_endpoint_identity.ts";
+export declare const CUSTOM_ENDPOINT_HOST_LABELS_FILENAME = "20260802_000001_custom_endpoint_host_labels.ts";
+export declare const KEY_MODEL_SCOPE_FILENAME = "20260805_000001_key_model_scope.ts";
+export declare const CLIENT_PROFILES_FILENAME = "20260805_000002_client_profiles.ts";
+export declare const API_KEY_PROXY_FILENAME = "20260810_000001_api_key_proxy.ts";
+export declare const PLAYGROUND_CONVERSATIONS_FILENAME = "20260820_000001_playground_conversations.ts";
+export declare const CUSTOM_MODEL_TOMBSTONES_FILENAME = "20260819_000001_custom_model_tombstones.ts";
+export declare const SERVER_LOGS_FILENAME = "20260823_000001_server_logs.ts";
+export declare const BACKUPS_TABLE_FILENAME = "20260823_000002_backups_table.ts";
+export declare const ATTEMPT_KEY_LABEL_FILENAME = "20260823_000003_attempt_key_label.ts";
+export declare const PROFILE_AUTO_INCLUDE_FILENAME = "20260823_000004_profile_auto_include.ts";
+export declare const IDEMPOTENCY_CLAIMS_FILENAME = "20260901_000001_idempotency_claims.ts";
+export declare const QUOTA_OBSERVATION_LOOKUP_FILENAME = "20260901_000002_quota_observation_lookup.ts";
+export declare const REQUEST_CALLER_FILENAME = "20260901_000003_request_caller.ts";
+export declare const ANALYTICS_LATENCY_PERCENTILE_INDEX_FILENAME = "20260902_000001_analytics_latency_percentile_index.ts";
+export declare const MCP_ENABLED_DEFAULT_FILENAME = "20260903_000001_mcp_enabled_default.ts";
+export declare const RESPONSE_CACHE_FILENAME = "20260903_000002_response_cache.ts";
+export declare const KEY_MONTHLY_BUDGET_FILENAME = "20260904_000001_key_monthly_budget.ts";
+export declare const REQUEST_MODEL_ATTRIBUTION_FILENAME = "20260913_000001_request_model_attribution.ts";
+export declare const KEY_MONTHLY_USAGE_FILENAME = "20260914_000001_key_monthly_usage.ts";
+export declare const QUOTA_SNAPSHOT_FRESHNESS_FILENAME = "20260915_000001_quota_snapshot_freshness.ts";
+export declare const UNIFIED_KEY_SR_PREFIX_FILENAME = "20261004_000001_unified_key_sr_prefix.ts";
+export declare const KEY_BUDGET_PERIOD_FILENAME = "20261005_000001_key_budget_period.ts";
+export declare const KEY_BUDGET_PERIOD_AUTO_FILENAME = "20261005_000002_key_budget_period_auto.ts";
+export declare const DEFAULT_MIGRATIONS: readonly DefaultMigration[];
+//# sourceMappingURL=defaults.d.ts.map

package/dist/db/migrate/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../../src/db/migrate/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AA2CtC,MAAM,WAAW,eAAe;IAC9B,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACjB,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,eAAO,MAAM,wBAAwB,uCAAuC,CAAC;AAC7E,eAAO,MAAM,mCAAmC,kDAAkD,CAAC;AACnG,eAAO,MAAM,4BAA4B,2CAA2C,CAAC;AACrF,eAAO,MAAM,2BAA2B,0CAA0C,CAAC;AACnF,eAAO,MAAM,6BAA6B,4CAA4C,CAAC;AACvF,eAAO,MAAM,4BAA4B,2CAA2C,CAAC;AACrF,eAAO,MAAM,kCAAkC,iDAAiD,CAAC;AACjG,eAAO,MAAM,+BAA+B,8CAA8C,CAAC;AAC3F,eAAO,MAAM,yBAAyB,wCAAwC,CAAC;AAC/E,eAAO,MAAM,kCAAkC,iDAAiD,CAAC;AACjG,eAAO,MAAM,yBAAyB,wCAAwC,CAAC;AAC/E,eAAO,MAAM,gCAAgC,+CAA+C,CAAC;AAC7F,eAAO,MAAM,yBAAyB,wCAAwC,CAAC;AAC/E,eAAO,MAAM,6BAA6B,4CAA4C,CAAC;AACvF,eAAO,MAAM,8BAA8B,6CAA6C,CAAC;AACzF,eAAO,MAAM,4BAA4B,2CAA2C,CAAC;AACrF,eAAO,MAAM,6BAA6B,4CAA4C,CAAC;AACvF,eAAO,MAAM,uCAAuC,sDAAsD,CAAC;AAC3G,eAAO,MAAM,oCAAoC,mDAAmD,CAAC;AACrG,eAAO,MAAM,wBAAwB,uCAAuC,CAAC;AAC7E,eAAO,MAAM,wBAAwB,uCAAuC,CAAC;AAC7E,eAAO,MAAM,sBAAsB,qCAAqC,CAAC;AACzE,eAAO,MAAM,iCAAiC,gDAAgD,CAAC;AAC/F,eAAO,MAAM,gCAAgC,+CAA+C,CAAC;AAC7F,eAAO,MAAM,oBAAoB,mCAAmC,CAAC;AACrE,eAAO,MAAM,sBAAsB,qCAAqC,CAAC;AACzE,eAAO,MAAM,0BAA0B,yCAAyC,CAAC;AACjF,eAAO,MAAM,6BAA6B,4CAA4C,CAAC;AACvF,eAAO,MAAM,2BAA2B,0CAA0C,CAAC;AACnF,eAAO,MAAM,iCAAiC,gDAAgD,CAAC;AAC/F,eAAO,MAAM,uBAAuB,sCAAsC,CAAC;AAC3E,eAAO,MAAM,2CAA2C,0DAA0D,CAAC;AACnH,eAAO,MAAM,4BAA4B,2CAA2C,CAAC;AACrF,eAAO,MAAM,uBAAuB,sCAAsC,CAAC;AAC3E,eAAO,MAAM,2BAA2B,0CAA0C,CAAC;AACnF,eAAO,MAAM,kCAAkC,iDAAiD,CAAC;AACjG,eAAO,MAAM,0BAA0B,yCAAyC,CAAC;AACjF,eAAO,MAAM,iCAAiC,gDAAgD,CAAC;AAC/F,eAAO,MAAM,8BAA8B,6CAA6C,CAAC;AACzF,eAAO,MAAM,0BAA0B,yCAAyC,CAAC;AACjF,eAAO,MAAM,+BAA+B,8CAA8C,CAAC;AAE3F,eAAO,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EA0CzD,CAAC"}

package/dist/db/migrate/defaults.js

@@ -0,0 +1,126 @@
+import * as legacyBaseline from '../migrations/20260101_000000_legacy_baseline.js';
+import * as customProviderModalities from '../migrations/20260627_000001_custom_provider_modalities.js';
+import * as catalogModelState from '../migrations/20260627_000002_catalog_model_state.js';
+import * as requestAggregates from '../migrations/20260628_120000_request_aggregates.js';
+import * as githubGpt41Context from '../migrations/20260630_000001_github_gpt41_context.js';
+import * as requestClientInfo from '../migrations/20260706_000001_request_client_info.js';
+import * as customModelToolSupport from '../migrations/20260706_000002_custom_model_tool_support.js';
+import * as profileChainBackfill from '../migrations/20260714_000001_profile_chain_backfill.js';
+import * as keyHealthError from '../migrations/20260720_000001_key_health_error.js';
+import * as cooldownProbeProvenance from '../migrations/20260726_000001_cooldown_probe_provenance.js';
+import * as requestAttempts from '../migrations/20260726_000002_request_attempts.js';
+import * as modelSourceProvenance from '../migrations/20260726_000003_model_source_provenance.js';
+import * as mediaModelMeta from '../migrations/20260726_000004_media_model_meta.js';
+import * as requestServedModel from '../migrations/20260726_000005_request_served_model.js';
+import * as attemptErrorSummary from '../migrations/20260726_000006_attempt_error_summary.js';
+import * as agentCompatibility from '../migrations/20260727_000001_agent_compatibility.js';
+import * as tombstoneProvenance from '../migrations/20260728_000001_tombstone_provenance.js';
+import * as customModelEndpointIdentity from '../migrations/20260729_000001_custom_model_endpoint_identity.js';
+import * as customEndpointHostLabels from '../migrations/20260802_000001_custom_endpoint_host_labels.js';
+import * as keyModelScope from '../migrations/20260805_000001_key_model_scope.js';
+import * as clientProfiles from '../migrations/20260805_000002_client_profiles.js';
+import * as apiKeyProxy from '../migrations/20260810_000001_api_key_proxy.js';
+import * as playgroundConversations from '../migrations/20260820_000001_playground_conversations.js';
+import * as customModelTombstones from '../migrations/20260819_000001_custom_model_tombstones.js';
+import * as serverLogs from '../migrations/20260823_000001_server_logs.js';
+import * as backupsTable from '../migrations/20260823_000002_backups_table.js';
+import * as attemptKeyLabel from '../migrations/20260823_000003_attempt_key_label.js';
+import * as profileAutoInclude from '../migrations/20260823_000004_profile_auto_include.js';
+import * as idempotencyClaims from '../migrations/20260901_000001_idempotency_claims.js';
+import * as requestCaller from '../migrations/20260901_000003_request_caller.js';
+import * as quotaObservationLookup from '../migrations/20260901_000002_quota_observation_lookup.js';
+import * as analyticsLatencyPercentileIndex from '../migrations/20260902_000001_analytics_latency_percentile_index.js';
+import * as mcpEnabledDefault from '../migrations/20260903_000001_mcp_enabled_default.js';
+import * as responseCache from '../migrations/20260903_000002_response_cache.js';
+import * as keyMonthlyBudget from '../migrations/20260904_000001_key_monthly_budget.js';
+import * as keyMonthlyUsage from '../migrations/20260914_000001_key_monthly_usage.js';
+import * as quotaSnapshotFreshness from '../migrations/20260915_000001_quota_snapshot_freshness.js';
+import * as requestModelAttribution from '../migrations/20260913_000001_request_model_attribution.js';
+import * as unifiedKeySrPrefix from '../migrations/20261004_000001_unified_key_sr_prefix.js';
+import * as keyBudgetPeriod from '../migrations/20261005_000001_key_budget_period.js';
+import * as keyBudgetPeriodAuto from '../migrations/20261005_000002_key_budget_period_auto.js';
+export const LEGACY_BASELINE_FILENAME = '20260101_000000_legacy_baseline.ts';
+export const CUSTOM_PROVIDER_MODALITIES_FILENAME = '20260627_000001_custom_provider_modalities.ts';
+export const CATALOG_MODEL_STATE_FILENAME = '20260627_000002_catalog_model_state.ts';
+export const REQUEST_AGGREGATES_FILENAME = '20260628_120000_request_aggregates.ts';
+export const GITHUB_GPT41_CONTEXT_FILENAME = '20260630_000001_github_gpt41_context.ts';
+export const REQUEST_CLIENT_INFO_FILENAME = '20260706_000001_request_client_info.ts';
+export const CUSTOM_MODEL_TOOL_SUPPORT_FILENAME = '20260706_000002_custom_model_tool_support.ts';
+export const PROFILE_CHAIN_BACKFILL_FILENAME = '20260714_000001_profile_chain_backfill.ts';
+export const KEY_HEALTH_ERROR_FILENAME = '20260720_000001_key_health_error.ts';
+export const COOLDOWN_PROBE_PROVENANCE_FILENAME = '20260726_000001_cooldown_probe_provenance.ts';
+export const REQUEST_ATTEMPTS_FILENAME = '20260726_000002_request_attempts.ts';
+export const MODEL_SOURCE_PROVENANCE_FILENAME = '20260726_000003_model_source_provenance.ts';
+export const MEDIA_MODEL_META_FILENAME = '20260726_000004_media_model_meta.ts';
+export const REQUEST_SERVED_MODEL_FILENAME = '20260726_000005_request_served_model.ts';
+export const ATTEMPT_ERROR_SUMMARY_FILENAME = '20260726_000006_attempt_error_summary.ts';
+export const AGENT_COMPATIBILITY_FILENAME = '20260727_000001_agent_compatibility.ts';
+export const TOMBSTONE_PROVENANCE_FILENAME = '20260728_000001_tombstone_provenance.ts';
+export const CUSTOM_MODEL_ENDPOINT_IDENTITY_FILENAME = '20260729_000001_custom_model_endpoint_identity.ts';
+export const CUSTOM_ENDPOINT_HOST_LABELS_FILENAME = '20260802_000001_custom_endpoint_host_labels.ts';
+export const KEY_MODEL_SCOPE_FILENAME = '20260805_000001_key_model_scope.ts';
+export const CLIENT_PROFILES_FILENAME = '20260805_000002_client_profiles.ts';
+export const API_KEY_PROXY_FILENAME = '20260810_000001_api_key_proxy.ts';
+export const PLAYGROUND_CONVERSATIONS_FILENAME = '20260820_000001_playground_conversations.ts';
+export const CUSTOM_MODEL_TOMBSTONES_FILENAME = '20260819_000001_custom_model_tombstones.ts';
+export const SERVER_LOGS_FILENAME = '20260823_000001_server_logs.ts';
+export const BACKUPS_TABLE_FILENAME = '20260823_000002_backups_table.ts';
+export const ATTEMPT_KEY_LABEL_FILENAME = '20260823_000003_attempt_key_label.ts';
+export const PROFILE_AUTO_INCLUDE_FILENAME = '20260823_000004_profile_auto_include.ts';
+export const IDEMPOTENCY_CLAIMS_FILENAME = '20260901_000001_idempotency_claims.ts';
+export const QUOTA_OBSERVATION_LOOKUP_FILENAME = '20260901_000002_quota_observation_lookup.ts';
+export const REQUEST_CALLER_FILENAME = '20260901_000003_request_caller.ts';
+export const ANALYTICS_LATENCY_PERCENTILE_INDEX_FILENAME = '20260902_000001_analytics_latency_percentile_index.ts';
+export const MCP_ENABLED_DEFAULT_FILENAME = '20260903_000001_mcp_enabled_default.ts';
+export const RESPONSE_CACHE_FILENAME = '20260903_000002_response_cache.ts';
+export const KEY_MONTHLY_BUDGET_FILENAME = '20260904_000001_key_monthly_budget.ts';
+export const REQUEST_MODEL_ATTRIBUTION_FILENAME = '20260913_000001_request_model_attribution.ts';
+export const KEY_MONTHLY_USAGE_FILENAME = '20260914_000001_key_monthly_usage.ts';
+export const QUOTA_SNAPSHOT_FRESHNESS_FILENAME = '20260915_000001_quota_snapshot_freshness.ts';
+export const UNIFIED_KEY_SR_PREFIX_FILENAME = '20261004_000001_unified_key_sr_prefix.ts';
+export const KEY_BUDGET_PERIOD_FILENAME = '20261005_000001_key_budget_period.ts';
+export const KEY_BUDGET_PERIOD_AUTO_FILENAME = '20261005_000002_key_budget_period_auto.ts';
+export const DEFAULT_MIGRATIONS = [
+    { filename: LEGACY_BASELINE_FILENAME, module: legacyBaseline },
+    { filename: CUSTOM_PROVIDER_MODALITIES_FILENAME, module: customProviderModalities },
+    { filename: CATALOG_MODEL_STATE_FILENAME, module: catalogModelState },
+    { filename: REQUEST_AGGREGATES_FILENAME, module: requestAggregates },
+    { filename: GITHUB_GPT41_CONTEXT_FILENAME, module: githubGpt41Context },
+    { filename: REQUEST_CLIENT_INFO_FILENAME, module: requestClientInfo },
+    { filename: CUSTOM_MODEL_TOOL_SUPPORT_FILENAME, module: customModelToolSupport },
+    { filename: PROFILE_CHAIN_BACKFILL_FILENAME, module: profileChainBackfill },
+    { filename: KEY_HEALTH_ERROR_FILENAME, module: keyHealthError },
+    { filename: COOLDOWN_PROBE_PROVENANCE_FILENAME, module: cooldownProbeProvenance },
+    { filename: REQUEST_ATTEMPTS_FILENAME, module: requestAttempts },
+    { filename: MODEL_SOURCE_PROVENANCE_FILENAME, module: modelSourceProvenance },
+    { filename: MEDIA_MODEL_META_FILENAME, module: mediaModelMeta },
+    { filename: REQUEST_SERVED_MODEL_FILENAME, module: requestServedModel },
+    { filename: ATTEMPT_ERROR_SUMMARY_FILENAME, module: attemptErrorSummary },
+    { filename: AGENT_COMPATIBILITY_FILENAME, module: agentCompatibility },
+    { filename: TOMBSTONE_PROVENANCE_FILENAME, module: tombstoneProvenance },
+    { filename: CUSTOM_MODEL_ENDPOINT_IDENTITY_FILENAME, module: customModelEndpointIdentity },
+    { filename: CUSTOM_ENDPOINT_HOST_LABELS_FILENAME, module: customEndpointHostLabels },
+    { filename: KEY_MODEL_SCOPE_FILENAME, module: keyModelScope },
+    { filename: CLIENT_PROFILES_FILENAME, module: clientProfiles },
+    { filename: API_KEY_PROXY_FILENAME, module: apiKeyProxy },
+    { filename: CUSTOM_MODEL_TOMBSTONES_FILENAME, module: customModelTombstones },
+    { filename: PLAYGROUND_CONVERSATIONS_FILENAME, module: playgroundConversations },
+    { filename: SERVER_LOGS_FILENAME, module: serverLogs },
+    { filename: BACKUPS_TABLE_FILENAME, module: backupsTable },
+    { filename: ATTEMPT_KEY_LABEL_FILENAME, module: attemptKeyLabel },
+    { filename: PROFILE_AUTO_INCLUDE_FILENAME, module: profileAutoInclude },
+    { filename: IDEMPOTENCY_CLAIMS_FILENAME, module: idempotencyClaims },
+    { filename: QUOTA_OBSERVATION_LOOKUP_FILENAME, module: quotaObservationLookup },
+    { filename: REQUEST_CALLER_FILENAME, module: requestCaller },
+    { filename: ANALYTICS_LATENCY_PERCENTILE_INDEX_FILENAME, module: analyticsLatencyPercentileIndex },
+    { filename: MCP_ENABLED_DEFAULT_FILENAME, module: mcpEnabledDefault },
+    { filename: RESPONSE_CACHE_FILENAME, module: responseCache },
+    { filename: KEY_MONTHLY_BUDGET_FILENAME, module: keyMonthlyBudget },
+    { filename: REQUEST_MODEL_ATTRIBUTION_FILENAME, module: requestModelAttribution },
+    { filename: KEY_MONTHLY_USAGE_FILENAME, module: keyMonthlyUsage },
+    { filename: QUOTA_SNAPSHOT_FRESHNESS_FILENAME, module: quotaSnapshotFreshness },
+    { filename: UNIFIED_KEY_SR_PREFIX_FILENAME, module: unifiedKeySrPrefix },
+    { filename: KEY_BUDGET_PERIOD_FILENAME, module: keyBudgetPeriod },
+    { filename: KEY_BUDGET_PERIOD_AUTO_FILENAME, module: keyBudgetPeriodAuto },
+];
+//# sourceMappingURL=defaults.js.map