@taopao/memoir 0.0.0-stage → 0.1.0

package/assets/migrations-pg/0103_constraints.sql

@@ -0,0 +1,147 @@
+-- 数据搬迁完成后安装外键，再逐条验证。
+ALTER TABLE "analysis_terms" ADD CONSTRAINT "fk_analysis_terms_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "audio_records" ADD CONSTRAINT "fk_audio_records_1" FOREIGN KEY ("first_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "audio_records" ADD CONSTRAINT "fk_audio_records_2" FOREIGN KEY ("last_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "audio_sentences" ADD CONSTRAINT "fk_audio_sentences_1" FOREIGN KEY ("record_sha1") REFERENCES audio_records (sha1)  NOT VALID;
+ALTER TABLE "audio_sentences" ADD CONSTRAINT "fk_audio_sentences_2" FOREIGN KEY ("first_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "audio_sentences" ADD CONSTRAINT "fk_audio_sentences_3" FOREIGN KEY ("last_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "audio_summaries" ADD CONSTRAINT "fk_audio_summaries_1" FOREIGN KEY ("record_sha1") REFERENCES audio_records (sha1)  NOT VALID;
+ALTER TABLE "audio_summaries" ADD CONSTRAINT "fk_audio_summaries_2" FOREIGN KEY ("first_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "audio_summaries" ADD CONSTRAINT "fk_audio_summaries_3" FOREIGN KEY ("last_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "bank_card_statements" ADD CONSTRAINT "fk_bank_card_statements_1" FOREIGN KEY ("first_batch_id") REFERENCES import_batches(id)  NOT VALID;
+ALTER TABLE "bank_card_statements" ADD CONSTRAINT "fk_bank_card_statements_2" FOREIGN KEY ("last_batch_id") REFERENCES import_batches(id)  NOT VALID;
+ALTER TABLE "bank_card_transactions" ADD CONSTRAINT "fk_bank_card_transactions_1" FOREIGN KEY ("first_batch_id") REFERENCES import_batches(id)  NOT VALID;
+ALTER TABLE "bank_card_transactions" ADD CONSTRAINT "fk_bank_card_transactions_2" FOREIGN KEY ("last_batch_id") REFERENCES import_batches(id)  NOT VALID;
+ALTER TABLE "bank_card_transactions" ADD CONSTRAINT "fk_bank_card_transactions_3" FOREIGN KEY ("statement_key") REFERENCES bank_card_statements(statement_key)  NOT VALID;
+ALTER TABLE "beneficiaries" ADD CONSTRAINT "fk_beneficiaries_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "credit_card_statements" ADD CONSTRAINT "fk_credit_card_statements_1" FOREIGN KEY ("first_batch_id") REFERENCES import_batches(id)  NOT VALID;
+ALTER TABLE "credit_card_statements" ADD CONSTRAINT "fk_credit_card_statements_2" FOREIGN KEY ("last_batch_id") REFERENCES import_batches(id)  NOT VALID;
+ALTER TABLE "credit_card_transactions" ADD CONSTRAINT "fk_credit_card_transactions_1" FOREIGN KEY ("statement_key") REFERENCES credit_card_statements(statement_key)  NOT VALID;
+ALTER TABLE "credit_card_transactions" ADD CONSTRAINT "fk_credit_card_transactions_2" FOREIGN KEY ("first_batch_id") REFERENCES import_batches(id)  NOT VALID;
+ALTER TABLE "credit_card_transactions" ADD CONSTRAINT "fk_credit_card_transactions_3" FOREIGN KEY ("last_batch_id") REFERENCES import_batches(id)  NOT VALID;
+ALTER TABLE "event_links" ADD CONSTRAINT "fk_event_links_1" FOREIGN KEY ("event_id") REFERENCES events (id)  NOT VALID;
+ALTER TABLE "event_participants" ADD CONSTRAINT "fk_event_participants_1" FOREIGN KEY ("event_id") REFERENCES events (id)  NOT VALID;
+ALTER TABLE "event_participants" ADD CONSTRAINT "fk_event_participants_2" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "events" ADD CONSTRAINT "fk_events_1" FOREIGN KEY ("parent_event_id") REFERENCES events (id)  NOT VALID;
+ALTER TABLE "families" ADD CONSTRAINT "fk_families_1" FOREIGN KEY ("anchor_person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "families" ADD CONSTRAINT "fk_families_2" FOREIGN KEY ("parent_family_id") REFERENCES families (id)  NOT VALID;
+ALTER TABLE "family_members" ADD CONSTRAINT "fk_family_members_1" FOREIGN KEY ("family_id") REFERENCES families (id)  NOT VALID;
+ALTER TABLE "family_members" ADD CONSTRAINT "fk_family_members_2" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "gift_ideas" ADD CONSTRAINT "fk_gift_ideas_1" FOREIGN KEY ("for_person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "gift_ideas" ADD CONSTRAINT "fk_gift_ideas_2" FOREIGN KEY ("wish_id") REFERENCES wishes (id)  NOT VALID;
+ALTER TABLE "gift_ideas" ADD CONSTRAINT "fk_gift_ideas_3" FOREIGN KEY ("given_event_id") REFERENCES events (id)  NOT VALID;
+ALTER TABLE "health_events" ADD CONSTRAINT "fk_health_events_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "identities" ADD CONSTRAINT "fk_identities_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "import_changes" ADD CONSTRAINT "fk_import_changes_1" FOREIGN KEY ("batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "import_files" ADD CONSTRAINT "fk_import_files_1" FOREIGN KEY ("batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "important_dates" ADD CONSTRAINT "fk_important_dates_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "intimacy_events" ADD CONSTRAINT "fk_intimacy_events_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "intimacy_events" ADD CONSTRAINT "fk_intimacy_events_2" FOREIGN KEY ("partner_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "journal_entries" ADD CONSTRAINT "fk_journal_entries_1" FOREIGN KEY ("author_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "journal_entries" ADD CONSTRAINT "fk_journal_entries_2" FOREIGN KEY ("about_person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "menstrual_cycles" ADD CONSTRAINT "fk_menstrual_cycles_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "menstrual_daily_logs" ADD CONSTRAINT "fk_menstrual_daily_logs_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "menstrual_daily_logs" ADD CONSTRAINT "fk_menstrual_daily_logs_2" FOREIGN KEY ("cycle_id") REFERENCES menstrual_cycles (id)  NOT VALID;
+ALTER TABLE "order_items" ADD CONSTRAINT "fk_order_items_1" FOREIGN KEY ("first_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "order_items" ADD CONSTRAINT "fk_order_items_2" FOREIGN KEY ("last_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "order_items" ADD CONSTRAINT "fk_order_items_3" FOREIGN KEY (platform, order_no) REFERENCES orders (platform, order_no) NOT VALID;
+ALTER TABLE "orders" ADD CONSTRAINT "fk_orders_1" FOREIGN KEY ("first_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "orders" ADD CONSTRAINT "fk_orders_2" FOREIGN KEY ("last_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "payment_order_links" ADD CONSTRAINT "fk_payment_order_links_1" FOREIGN KEY (payment_platform, payment_txn_id) REFERENCES payments (platform, txn_id) NOT VALID;
+ALTER TABLE "payment_order_links" ADD CONSTRAINT "fk_payment_order_links_2" FOREIGN KEY (order_platform, order_no) REFERENCES orders (platform, order_no) NOT VALID;
+ALTER TABLE "payments" ADD CONSTRAINT "fk_payments_1" FOREIGN KEY ("first_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "payments" ADD CONSTRAINT "fk_payments_2" FOREIGN KEY ("last_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "person_aliases" ADD CONSTRAINT "fk_person_aliases_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "preferences" ADD CONSTRAINT "fk_preferences_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "private_profiles" ADD CONSTRAINT "fk_private_profiles_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "profile_facts" ADD CONSTRAINT "fk_profile_facts_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "promise_checks" ADD CONSTRAINT "fk_promise_checks_1" FOREIGN KEY ("promise_id") REFERENCES promises (id)  NOT VALID;
+ALTER TABLE "promises" ADD CONSTRAINT "fk_promises_1" FOREIGN KEY ("promiser_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "promises" ADD CONSTRAINT "fk_promises_2" FOREIGN KEY ("recipient_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "relations" ADD CONSTRAINT "fk_relations_1" FOREIGN KEY ("from_person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "relations" ADD CONSTRAINT "fk_relations_2" FOREIGN KEY ("to_person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "todos" ADD CONSTRAINT "fk_todos_1" FOREIGN KEY ("owner_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "todos" ADD CONSTRAINT "fk_todos_2" FOREIGN KEY ("related_person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "train_tickets" ADD CONSTRAINT "fk_train_tickets_1" FOREIGN KEY ("first_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "train_tickets" ADD CONSTRAINT "fk_train_tickets_2" FOREIGN KEY ("last_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "wechat_messages" ADD CONSTRAINT "fk_wechat_messages_1" FOREIGN KEY ("session_key") REFERENCES wechat_sessions (session_key)  NOT VALID;
+ALTER TABLE "wechat_messages" ADD CONSTRAINT "fk_wechat_messages_2" FOREIGN KEY ("first_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "wechat_messages" ADD CONSTRAINT "fk_wechat_messages_3" FOREIGN KEY ("last_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "wechat_sessions" ADD CONSTRAINT "fk_wechat_sessions_1" FOREIGN KEY ("first_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "wechat_sessions" ADD CONSTRAINT "fk_wechat_sessions_2" FOREIGN KEY ("last_batch_id") REFERENCES import_batches (id)  NOT VALID;
+ALTER TABLE "wiki_revisions" ADD CONSTRAINT "fk_wiki_revisions_1" FOREIGN KEY ("slug") REFERENCES wiki_pages (slug)  NOT VALID;
+ALTER TABLE "wishes" ADD CONSTRAINT "fk_wishes_1" FOREIGN KEY ("person_id") REFERENCES persons (id)  NOT VALID;
+ALTER TABLE "wishes" ADD CONSTRAINT "fk_wishes_2" FOREIGN KEY ("done_event_id") REFERENCES events (id)  NOT VALID;
+ALTER TABLE "analysis_terms" VALIDATE CONSTRAINT "fk_analysis_terms_1";
+ALTER TABLE "audio_records" VALIDATE CONSTRAINT "fk_audio_records_1";
+ALTER TABLE "audio_records" VALIDATE CONSTRAINT "fk_audio_records_2";
+ALTER TABLE "audio_sentences" VALIDATE CONSTRAINT "fk_audio_sentences_1";
+ALTER TABLE "audio_sentences" VALIDATE CONSTRAINT "fk_audio_sentences_2";
+ALTER TABLE "audio_sentences" VALIDATE CONSTRAINT "fk_audio_sentences_3";
+ALTER TABLE "audio_summaries" VALIDATE CONSTRAINT "fk_audio_summaries_1";
+ALTER TABLE "audio_summaries" VALIDATE CONSTRAINT "fk_audio_summaries_2";
+ALTER TABLE "audio_summaries" VALIDATE CONSTRAINT "fk_audio_summaries_3";
+ALTER TABLE "bank_card_statements" VALIDATE CONSTRAINT "fk_bank_card_statements_1";
+ALTER TABLE "bank_card_statements" VALIDATE CONSTRAINT "fk_bank_card_statements_2";
+ALTER TABLE "bank_card_transactions" VALIDATE CONSTRAINT "fk_bank_card_transactions_1";
+ALTER TABLE "bank_card_transactions" VALIDATE CONSTRAINT "fk_bank_card_transactions_2";
+ALTER TABLE "bank_card_transactions" VALIDATE CONSTRAINT "fk_bank_card_transactions_3";
+ALTER TABLE "beneficiaries" VALIDATE CONSTRAINT "fk_beneficiaries_1";
+ALTER TABLE "credit_card_statements" VALIDATE CONSTRAINT "fk_credit_card_statements_1";
+ALTER TABLE "credit_card_statements" VALIDATE CONSTRAINT "fk_credit_card_statements_2";
+ALTER TABLE "credit_card_transactions" VALIDATE CONSTRAINT "fk_credit_card_transactions_1";
+ALTER TABLE "credit_card_transactions" VALIDATE CONSTRAINT "fk_credit_card_transactions_2";
+ALTER TABLE "credit_card_transactions" VALIDATE CONSTRAINT "fk_credit_card_transactions_3";
+ALTER TABLE "event_links" VALIDATE CONSTRAINT "fk_event_links_1";
+ALTER TABLE "event_participants" VALIDATE CONSTRAINT "fk_event_participants_1";
+ALTER TABLE "event_participants" VALIDATE CONSTRAINT "fk_event_participants_2";
+ALTER TABLE "events" VALIDATE CONSTRAINT "fk_events_1";
+ALTER TABLE "families" VALIDATE CONSTRAINT "fk_families_1";
+ALTER TABLE "families" VALIDATE CONSTRAINT "fk_families_2";
+ALTER TABLE "family_members" VALIDATE CONSTRAINT "fk_family_members_1";
+ALTER TABLE "family_members" VALIDATE CONSTRAINT "fk_family_members_2";
+ALTER TABLE "gift_ideas" VALIDATE CONSTRAINT "fk_gift_ideas_1";
+ALTER TABLE "gift_ideas" VALIDATE CONSTRAINT "fk_gift_ideas_2";
+ALTER TABLE "gift_ideas" VALIDATE CONSTRAINT "fk_gift_ideas_3";
+ALTER TABLE "health_events" VALIDATE CONSTRAINT "fk_health_events_1";
+ALTER TABLE "identities" VALIDATE CONSTRAINT "fk_identities_1";
+ALTER TABLE "import_changes" VALIDATE CONSTRAINT "fk_import_changes_1";
+ALTER TABLE "import_files" VALIDATE CONSTRAINT "fk_import_files_1";
+ALTER TABLE "important_dates" VALIDATE CONSTRAINT "fk_important_dates_1";
+ALTER TABLE "intimacy_events" VALIDATE CONSTRAINT "fk_intimacy_events_1";
+ALTER TABLE "intimacy_events" VALIDATE CONSTRAINT "fk_intimacy_events_2";
+ALTER TABLE "journal_entries" VALIDATE CONSTRAINT "fk_journal_entries_1";
+ALTER TABLE "journal_entries" VALIDATE CONSTRAINT "fk_journal_entries_2";
+ALTER TABLE "menstrual_cycles" VALIDATE CONSTRAINT "fk_menstrual_cycles_1";
+ALTER TABLE "menstrual_daily_logs" VALIDATE CONSTRAINT "fk_menstrual_daily_logs_1";
+ALTER TABLE "menstrual_daily_logs" VALIDATE CONSTRAINT "fk_menstrual_daily_logs_2";
+ALTER TABLE "order_items" VALIDATE CONSTRAINT "fk_order_items_1";
+ALTER TABLE "order_items" VALIDATE CONSTRAINT "fk_order_items_2";
+ALTER TABLE "order_items" VALIDATE CONSTRAINT "fk_order_items_3";
+ALTER TABLE "orders" VALIDATE CONSTRAINT "fk_orders_1";
+ALTER TABLE "orders" VALIDATE CONSTRAINT "fk_orders_2";
+ALTER TABLE "payment_order_links" VALIDATE CONSTRAINT "fk_payment_order_links_1";
+ALTER TABLE "payment_order_links" VALIDATE CONSTRAINT "fk_payment_order_links_2";
+ALTER TABLE "payments" VALIDATE CONSTRAINT "fk_payments_1";
+ALTER TABLE "payments" VALIDATE CONSTRAINT "fk_payments_2";
+ALTER TABLE "person_aliases" VALIDATE CONSTRAINT "fk_person_aliases_1";
+ALTER TABLE "preferences" VALIDATE CONSTRAINT "fk_preferences_1";
+ALTER TABLE "private_profiles" VALIDATE CONSTRAINT "fk_private_profiles_1";
+ALTER TABLE "profile_facts" VALIDATE CONSTRAINT "fk_profile_facts_1";
+ALTER TABLE "promise_checks" VALIDATE CONSTRAINT "fk_promise_checks_1";
+ALTER TABLE "promises" VALIDATE CONSTRAINT "fk_promises_1";
+ALTER TABLE "promises" VALIDATE CONSTRAINT "fk_promises_2";
+ALTER TABLE "relations" VALIDATE CONSTRAINT "fk_relations_1";
+ALTER TABLE "relations" VALIDATE CONSTRAINT "fk_relations_2";
+ALTER TABLE "todos" VALIDATE CONSTRAINT "fk_todos_1";
+ALTER TABLE "todos" VALIDATE CONSTRAINT "fk_todos_2";
+ALTER TABLE "train_tickets" VALIDATE CONSTRAINT "fk_train_tickets_1";
+ALTER TABLE "train_tickets" VALIDATE CONSTRAINT "fk_train_tickets_2";
+ALTER TABLE "wechat_messages" VALIDATE CONSTRAINT "fk_wechat_messages_1";
+ALTER TABLE "wechat_messages" VALIDATE CONSTRAINT "fk_wechat_messages_2";
+ALTER TABLE "wechat_messages" VALIDATE CONSTRAINT "fk_wechat_messages_3";
+ALTER TABLE "wechat_sessions" VALIDATE CONSTRAINT "fk_wechat_sessions_1";
+ALTER TABLE "wechat_sessions" VALIDATE CONSTRAINT "fk_wechat_sessions_2";
+ALTER TABLE "wiki_revisions" VALIDATE CONSTRAINT "fk_wiki_revisions_1";
+ALTER TABLE "wishes" VALIDATE CONSTRAINT "fk_wishes_1";
+ALTER TABLE "wishes" VALIDATE CONSTRAINT "fk_wishes_2";

package/assets/migrations-pg/0104_protection.sql

@@ -0,0 +1,33 @@
+-- 保护规则由共享表清单安装触发器，此文件定义稳定的数据库函数。
+CREATE FUNCTION vault_guard() RETURNS trigger LANGUAGE plpgsql AS $$
+DECLARE actor text := nullif(current_setting('vault.actor',true),'');
+BEGIN
+ IF TG_OP='TRUNCATE' THEN RAISE EXCEPTION '禁止 TRUNCATE'; END IF;
+ IF actor IS NULL THEN RAISE EXCEPTION '未设置写入会话'; END IF;
+ IF TG_ARGV[0]='append' AND TG_OP IN('UPDATE','DELETE') THEN RAISE EXCEPTION '只增表禁止修改或删除'; END IF;
+ IF TG_ARGV[0]='fact' AND actor NOT IN('importer','migration') THEN RAISE EXCEPTION '事实表只允许导入程序修改'; END IF;
+ IF TG_TABLE_NAME='backup_log' AND TG_OP='DELETE' THEN RAISE EXCEPTION '备份记录不能删除'; END IF;
+ IF TG_TABLE_NAME='import_batches' THEN
+   IF TG_OP='DELETE' THEN RAISE EXCEPTION '导入批次不能删除'; END IF;
+   IF TG_OP='UPDATE' AND OLD.status<>'running' AND actor<>'migration' THEN RAISE EXCEPTION '已完成的导入批次不能修改'; END IF;
+ END IF;
+ IF TG_OP='DELETE' THEN RETURN OLD; END IF; RETURN NEW;
+END $$;
+CREATE FUNCTION vault_audit() RETURNS trigger LANGUAGE plpgsql AS $$
+DECLARE item jsonb; row_key text; old_value text; new_value text;
+BEGIN
+ item:=CASE WHEN TG_OP='DELETE' THEN to_jsonb(OLD) ELSE to_jsonb(NEW) END;
+ SELECT string_agg(item ->> key, ':' ORDER BY ord) INTO row_key FROM unnest(TG_ARGV) WITH ORDINALITY AS keys(key,ord);
+ IF TG_OP<>'INSERT' THEN old_value:=to_jsonb(OLD)::text; END IF;
+ IF TG_OP<>'DELETE' THEN new_value:=to_jsonb(NEW)::text; END IF;
+ INSERT INTO audit_log(at,actor,reason,table_name,row_key,op,before_json,after_json)
+ VALUES(to_char(clock_timestamp() AT TIME ZONE 'Asia/Shanghai','YYYY-MM-DD HH24:MI:SS'),current_setting('vault.actor'),nullif(current_setting('vault.reason',true),''),TG_TABLE_NAME,row_key,lower(TG_OP),old_value,new_value);
+ RETURN NULL;
+END $$;
+CREATE FUNCTION vault_touch() RETURNS trigger LANGUAGE plpgsql SECURITY DEFINER SET search_path=pg_catalog,public AS $$
+BEGIN UPDATE public.vault_meta SET data_version=data_version+1 WHERE id=1; RETURN NULL; END $$;
+REVOKE ALL ON FUNCTION vault_touch() FROM PUBLIC;
+CREATE INDEX ix_search_docs_title_trgm ON search_docs USING gin(title gin_trgm_ops);
+CREATE INDEX ix_search_docs_body_trgm ON search_docs USING gin(body gin_trgm_ops);
+CREATE INDEX ix_wechat_messages_content_trgm ON wechat_messages USING gin(content gin_trgm_ops);
+CREATE INDEX ix_wechat_messages_sender_trgm ON wechat_messages USING gin(sender_name gin_trgm_ops);

package/assets/migrations-pg/0105_bocom_credit_card.sql

@@ -0,0 +1,43 @@
+-- 交通银行信用卡逐笔明细新增来源 bocom_credit_card。
+-- 该来源是把邮箱电子账单汇总成 xlsx（交易明细 + 账单对账两张表），不是银行 PDF 原件：
+-- 没有 PDF 页码，也没有披露最低还款额，部分期数未给到期还款日。
+-- 因此只放宽这三列为可空，并用「空值或正数」的约束替代原来的 > 0，
+-- 既有中信、招商账单继续保存非空值，字段、自然键、原文和证据外键均不变。
+ALTER TABLE "import_batches" DROP CONSTRAINT "import_batches_source_kind_check";
+ALTER TABLE "import_batches"
+  ADD CONSTRAINT "import_batches_source_kind_check" CHECK (source_kind IN (
+    'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+    'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+    'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+    'bocom_debit_card', 'bocom_credit_card'
+  ));
+
+ALTER TABLE "credit_card_statements"
+  DROP CONSTRAINT "credit_card_statements_source_kind_check";
+ALTER TABLE "credit_card_statements"
+  ADD CONSTRAINT "credit_card_statements_source_kind_check"
+  CHECK (source_kind IN ('citic_credit_card', 'cmb_credit_card', 'bocom_credit_card'));
+
+ALTER TABLE "credit_card_statements" ALTER COLUMN "due_date" DROP NOT NULL;
+ALTER TABLE "credit_card_statements" ALTER COLUMN "minimum_due_cents" DROP NOT NULL;
+ALTER TABLE "credit_card_statements" ALTER COLUMN "page_number" DROP NOT NULL;
+ALTER TABLE "credit_card_statements"
+  DROP CONSTRAINT "credit_card_statements_page_number_check";
+ALTER TABLE "credit_card_statements"
+  ADD CONSTRAINT "credit_card_statements_page_number_check"
+  CHECK (page_number IS NULL OR page_number > 0);
+
+-- 表格来源的逐笔交易同样没有页码：两个页码列要么同时为空，要么同时有值且顺序正确。
+ALTER TABLE "credit_card_transactions" ALTER COLUMN "page_number" DROP NOT NULL;
+ALTER TABLE "credit_card_transactions" ALTER COLUMN "end_page_number" DROP NOT NULL;
+ALTER TABLE "credit_card_transactions"
+  DROP CONSTRAINT "credit_card_transactions_page_number_check";
+ALTER TABLE "credit_card_transactions"
+  ADD CONSTRAINT "credit_card_transactions_page_number_check"
+  CHECK (page_number IS NULL OR page_number > 0);
+ALTER TABLE "credit_card_transactions" DROP CONSTRAINT "credit_card_transactions_check";
+ALTER TABLE "credit_card_transactions"
+  ADD CONSTRAINT "credit_card_transactions_check" CHECK (
+    (page_number IS NULL AND end_page_number IS NULL)
+    OR (page_number IS NOT NULL AND end_page_number IS NOT NULL AND end_page_number >= page_number)
+  );

package/assets/migrations-pg/0106_psbc_debit_card.sql

@@ -0,0 +1,87 @@
+-- 邮储借记账户历史明细使用专属事实表，既有银行记录、批次和审计不重写。
+-- 只扩展批次来源枚举；时间精度、正负方向、原始十二列与原件批次外键明确保存。
+ALTER TABLE import_batches DROP CONSTRAINT import_batches_source_kind_check;
+ALTER TABLE import_batches ADD CONSTRAINT import_batches_source_kind_check CHECK (source_kind IN (
+  'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+  'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+  'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+  'bocom_debit_card', 'bocom_credit_card', 'psbc_debit_card'
+));
+
+CREATE TABLE "psbc_bank_statements" (
+  statement_key TEXT PRIMARY KEY,
+  source_kind TEXT NOT NULL CHECK (source_kind = 'psbc_debit_card'),
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  owner_name TEXT NOT NULL,
+  account_type TEXT NOT NULL,
+  branch TEXT NOT NULL,
+  period_from TEXT NOT NULL,
+  period_to TEXT NOT NULL CHECK (period_to >= period_from),
+  requested_at TEXT NOT NULL,
+  verification_code TEXT NOT NULL,
+  page_count BIGINT NOT NULL CHECK (page_count > 0),
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json))
+);
+
+CREATE TABLE "psbc_bank_transactions" (
+  transaction_key TEXT PRIMARY KEY,
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  card_last_four TEXT NOT NULL CHECK (length(card_last_four) = 4),
+  currency TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  direction TEXT NOT NULL CHECK (direction IN ('in', 'out', 'neutral')),
+  amount_cents BIGINT NOT NULL CHECK (amount_cents >= 0),
+  balance_cents BIGINT NOT NULL,
+  counterparty TEXT NOT NULL,
+  counterparty_account TEXT NOT NULL,
+  institution TEXT NOT NULL,
+  description TEXT NOT NULL,
+  bank_txn_id TEXT NOT NULL,
+  transaction_card TEXT NOT NULL,
+  status TEXT NOT NULL,
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  source_sheet TEXT NOT NULL,
+  row_number BIGINT NOT NULL CHECK (row_number > 0),
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json)),
+  source_kind TEXT NOT NULL DEFAULT 'psbc_debit_card' CHECK (source_kind = 'psbc_debit_card'),
+  date_precision TEXT NOT NULL DEFAULT 'second' CHECK (date_precision = 'second'),
+  page_number BIGINT NOT NULL CHECK (page_number > 0),
+  statement_key TEXT NOT NULL REFERENCES psbc_bank_statements(statement_key),
+  CHECK ((direction = 'neutral' AND amount_cents = 0) OR (direction IN ('in', 'out') AND amount_cents > 0))
+);
+
+
+CREATE INDEX ix_psbc_statement_account_period ON psbc_bank_statements(account_key, period_from, period_to);
+CREATE INDEX ix_psbc_transaction_account_date ON psbc_bank_transactions(account_key, occurred_at);
+CREATE INDEX ix_psbc_transaction_statement ON psbc_bank_transactions(statement_key);
+
+-- 新表按原始事实保护，只有 importer/migration 会话可写；每行审计、数据版本和
+-- TRUNCATE 防护与现有银行卡完全一致。增量 SQL 同时用于旧库升级和新库逐步安装。
+DO $$
+DECLARE target_table text; key_column text; grant_row record;
+BEGIN
+  FOREACH target_table IN ARRAY ARRAY['psbc_bank_statements', 'psbc_bank_transactions'] LOOP
+    key_column := CASE WHEN target_table = 'psbc_bank_statements' THEN 'statement_key' ELSE 'transaction_key' END;
+    EXECUTE format('CREATE TRIGGER trg_%s_guard BEFORE INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_truncate BEFORE TRUNCATE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_version AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_touch()', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_audit AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_audit(%L)', target_table, target_table, key_column);
+    -- 继承同类事实表的现有应用/只读权限，不写死部署角色，也不授予新的管理权限。
+    FOR grant_row IN SELECT grantee, privilege_type FROM information_schema.role_table_grants
+      WHERE table_schema = 'public' AND role_table_grants.table_name = 'bank_card_transactions'
+        AND grantee <> current_user AND privilege_type IN ('SELECT', 'INSERT', 'UPDATE', 'DELETE')
+    LOOP
+      EXECUTE format('GRANT %s ON TABLE %I TO %s', grant_row.privilege_type, target_table,
+        CASE WHEN grant_row.grantee = 'PUBLIC' THEN 'PUBLIC' ELSE quote_ident(grant_row.grantee) END);
+    END LOOP;
+  END LOOP;
+END $$;

package/assets/migrations-pg/0107_tailong_debit_card.sql

@@ -0,0 +1,87 @@
+-- 泰隆借记账户对账单使用专属事实表，既有银行记录、批次和审计不重写。
+-- 只扩展批次来源枚举；时间精度、正负方向、原始七列与原件批次外键明确保存。
+ALTER TABLE import_batches DROP CONSTRAINT import_batches_source_kind_check;
+ALTER TABLE import_batches ADD CONSTRAINT import_batches_source_kind_check CHECK (source_kind IN (
+  'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+  'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+  'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+  'bocom_debit_card', 'bocom_credit_card', 'psbc_debit_card', 'tailong_debit_card'
+));
+
+CREATE TABLE "tailong_bank_statements" (
+  statement_key TEXT PRIMARY KEY,
+  source_kind TEXT NOT NULL CHECK (source_kind = 'tailong_debit_card'),
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  owner_name TEXT NOT NULL,
+  account_type TEXT NOT NULL,
+  branch TEXT NOT NULL,
+  period_from TEXT NOT NULL,
+  period_to TEXT NOT NULL CHECK (period_to >= period_from),
+  requested_at TEXT NOT NULL,
+  verification_code TEXT NOT NULL,
+  page_count BIGINT NOT NULL CHECK (page_count > 0),
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json))
+);
+
+CREATE TABLE "tailong_bank_transactions" (
+  transaction_key TEXT PRIMARY KEY,
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  card_last_four TEXT NOT NULL CHECK (length(card_last_four) = 4),
+  currency TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  direction TEXT NOT NULL CHECK (direction IN ('in', 'out', 'neutral')),
+  amount_cents BIGINT NOT NULL CHECK (amount_cents >= 0),
+  balance_cents BIGINT NOT NULL,
+  counterparty TEXT NOT NULL,
+  counterparty_account TEXT NOT NULL,
+  institution TEXT NOT NULL,
+  description TEXT NOT NULL,
+  bank_txn_id TEXT NOT NULL,
+  transaction_card TEXT NOT NULL,
+  status TEXT NOT NULL,
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  source_sheet TEXT NOT NULL,
+  row_number BIGINT NOT NULL CHECK (row_number > 0),
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json)),
+  source_kind TEXT NOT NULL DEFAULT 'tailong_debit_card' CHECK (source_kind = 'tailong_debit_card'),
+  date_precision TEXT NOT NULL DEFAULT 'day' CHECK (date_precision = 'day'),
+  page_number BIGINT NOT NULL CHECK (page_number > 0),
+  statement_key TEXT NOT NULL REFERENCES tailong_bank_statements(statement_key),
+  CHECK ((direction = 'neutral' AND amount_cents = 0) OR (direction IN ('in', 'out') AND amount_cents > 0))
+);
+
+
+CREATE INDEX ix_tailong_statement_account_period ON tailong_bank_statements(account_key, period_from, period_to);
+CREATE INDEX ix_tailong_transaction_account_date ON tailong_bank_transactions(account_key, occurred_at);
+CREATE INDEX ix_tailong_transaction_statement ON tailong_bank_transactions(statement_key);
+
+-- 新表按原始事实保护，只有 importer/migration 会话可写；每行审计、数据版本和
+-- TRUNCATE 防护与现有银行卡完全一致。增量 SQL 同时用于旧库升级和新库逐步安装。
+DO $$
+DECLARE target_table text; key_column text; grant_row record;
+BEGIN
+  FOREACH target_table IN ARRAY ARRAY['tailong_bank_statements', 'tailong_bank_transactions'] LOOP
+    key_column := CASE WHEN target_table = 'tailong_bank_statements' THEN 'statement_key' ELSE 'transaction_key' END;
+    EXECUTE format('CREATE TRIGGER trg_%s_guard BEFORE INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_truncate BEFORE TRUNCATE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_version AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_touch()', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_audit AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_audit(%L)', target_table, target_table, key_column);
+    -- 继承同类事实表的现有应用/只读权限，不写死部署角色，也不授予新的管理权限。
+    FOR grant_row IN SELECT grantee, privilege_type FROM information_schema.role_table_grants
+      WHERE table_schema = 'public' AND role_table_grants.table_name = 'bank_card_transactions'
+        AND grantee <> current_user AND privilege_type IN ('SELECT', 'INSERT', 'UPDATE', 'DELETE')
+    LOOP
+      EXECUTE format('GRANT %s ON TABLE %I TO %s', grant_row.privilege_type, target_table,
+        CASE WHEN grant_row.grantee = 'PUBLIC' THEN 'PUBLIC' ELSE quote_ident(grant_row.grantee) END);
+    END LOOP;
+  END LOOP;
+END $$;

package/assets/migrations-pg/0108_ccb_debit_card.sql

@@ -0,0 +1,87 @@
+-- 建设银行 Excel 活期明细使用专属事实表，既有银行记录、批次和审计不重写。
+-- 只扩展批次来源枚举；时间精度、正负方向、原始九列与原件批次外键明确保存。
+ALTER TABLE import_batches DROP CONSTRAINT import_batches_source_kind_check;
+ALTER TABLE import_batches ADD CONSTRAINT import_batches_source_kind_check CHECK (source_kind IN (
+  'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+  'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+  'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+  'bocom_debit_card', 'bocom_credit_card', 'psbc_debit_card', 'tailong_debit_card', 'ccb_debit_card'
+));
+
+CREATE TABLE "ccb_bank_statements" (
+  statement_key TEXT PRIMARY KEY,
+  source_kind TEXT NOT NULL CHECK (source_kind = 'ccb_debit_card'),
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  owner_name TEXT NOT NULL,
+  account_type TEXT NOT NULL,
+  branch TEXT NOT NULL,
+  period_from TEXT NOT NULL,
+  period_to TEXT NOT NULL CHECK (period_to >= period_from),
+  requested_at TEXT NOT NULL,
+  verification_code TEXT NOT NULL,
+  page_count BIGINT CHECK (page_count IS NULL OR page_count > 0),
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json))
+);
+
+CREATE TABLE "ccb_bank_transactions" (
+  transaction_key TEXT PRIMARY KEY,
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  card_last_four TEXT NOT NULL CHECK (length(card_last_four) = 4),
+  currency TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  direction TEXT NOT NULL CHECK (direction IN ('in', 'out', 'neutral')),
+  amount_cents BIGINT NOT NULL CHECK (amount_cents >= 0),
+  balance_cents BIGINT NOT NULL,
+  counterparty TEXT NOT NULL,
+  counterparty_account TEXT NOT NULL,
+  institution TEXT NOT NULL,
+  description TEXT NOT NULL,
+  bank_txn_id TEXT NOT NULL,
+  transaction_card TEXT NOT NULL,
+  status TEXT NOT NULL,
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  source_sheet TEXT NOT NULL CHECK (length(source_sheet) > 0),
+  row_number BIGINT NOT NULL CHECK (row_number > 0),
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json)),
+  source_kind TEXT NOT NULL DEFAULT 'ccb_debit_card' CHECK (source_kind = 'ccb_debit_card'),
+  date_precision TEXT NOT NULL DEFAULT 'day' CHECK (date_precision = 'day'),
+  page_number BIGINT CHECK (page_number IS NULL),
+  statement_key TEXT NOT NULL REFERENCES ccb_bank_statements(statement_key),
+  CHECK ((direction = 'neutral' AND amount_cents = 0) OR (direction IN ('in', 'out') AND amount_cents > 0))
+);
+
+
+CREATE INDEX ix_ccb_statement_account_period ON ccb_bank_statements(account_key, period_from, period_to);
+CREATE INDEX ix_ccb_transaction_account_date ON ccb_bank_transactions(account_key, occurred_at);
+CREATE INDEX ix_ccb_transaction_statement ON ccb_bank_transactions(statement_key);
+
+-- 新表按原始事实保护，只有 importer/migration 会话可写；每行审计、数据版本和
+-- TRUNCATE 防护与现有银行卡完全一致。增量 SQL 同时用于旧库升级和新库逐步安装。
+DO $$
+DECLARE target_table text; key_column text; grant_row record;
+BEGIN
+  FOREACH target_table IN ARRAY ARRAY['ccb_bank_statements', 'ccb_bank_transactions'] LOOP
+    key_column := CASE WHEN target_table = 'ccb_bank_statements' THEN 'statement_key' ELSE 'transaction_key' END;
+    EXECUTE format('CREATE TRIGGER trg_%s_guard BEFORE INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_truncate BEFORE TRUNCATE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_version AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_touch()', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_audit AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_audit(%L)', target_table, target_table, key_column);
+    -- 继承同类事实表的现有应用/只读权限，不写死部署角色，也不授予新的管理权限。
+    FOR grant_row IN SELECT grantee, privilege_type FROM information_schema.role_table_grants
+      WHERE table_schema = 'public' AND role_table_grants.table_name = 'bank_card_transactions'
+        AND grantee <> current_user AND privilege_type IN ('SELECT', 'INSERT', 'UPDATE', 'DELETE')
+    LOOP
+      EXECUTE format('GRANT %s ON TABLE %I TO %s', grant_row.privilege_type, target_table,
+        CASE WHEN grant_row.grantee = 'PUBLIC' THEN 'PUBLIC' ELSE quote_ident(grant_row.grantee) END);
+    END LOOP;
+  END LOOP;
+END $$;

package/assets/migrations-pg/0109_ccb_credit_card.sql

@@ -0,0 +1,63 @@
+-- 建设银行信用卡交易汇总使用专属事实表，既有银行记录、批次和审计不重写。
+-- 只扩展批次来源枚举；时间精度、正负方向、原始十五列与原件批次外键明确保存。
+ALTER TABLE import_batches DROP CONSTRAINT import_batches_source_kind_check;
+ALTER TABLE import_batches ADD CONSTRAINT import_batches_source_kind_check CHECK (source_kind IN (
+  'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+  'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+  'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+  'bocom_debit_card', 'bocom_credit_card', 'psbc_debit_card', 'tailong_debit_card', 'ccb_debit_card', 'ccb_credit_card'
+));
+
+CREATE TABLE "ccb_credit_card_transactions" (
+  transaction_key TEXT PRIMARY KEY,
+  statement_key TEXT CHECK (statement_key IS NULL),
+  transaction_date TEXT NOT NULL,
+  posting_date TEXT NOT NULL,
+  card_last_four TEXT NOT NULL CHECK (length(card_last_four) = 4),
+  description TEXT NOT NULL,
+  transaction_currency TEXT,
+  transaction_amount_cents BIGINT NOT NULL,
+  settlement_currency TEXT NOT NULL,
+  settlement_amount_cents BIGINT NOT NULL,
+  transaction_kind TEXT NOT NULL CHECK (transaction_kind IN ('charge', 'fee', 'refund', 'repayment', 'credit')),
+  occurrence BIGINT NOT NULL CHECK (occurrence > 0),
+  page_number BIGINT CHECK (page_number IS NULL),
+  end_page_number BIGINT CHECK (end_page_number IS NULL),
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json)),
+  original_amount_raw TEXT NOT NULL DEFAULT '',
+  source_kind TEXT NOT NULL CHECK (source_kind='ccb_credit_card'),
+  card_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  date_precision TEXT NOT NULL CHECK (date_precision IN ('day','second')),
+  transaction_time_raw TEXT NOT NULL,
+  bank_type TEXT NOT NULL,
+  direction TEXT NOT NULL CHECK (direction IN ('in','out')),
+  payment_channel TEXT NOT NULL,
+  counterparty TEXT NOT NULL,
+  remark TEXT NOT NULL,
+  source_sheet TEXT NOT NULL,
+  row_number BIGINT NOT NULL CHECK (row_number>0),
+  original_sequence BIGINT NOT NULL CHECK (original_sequence>0),
+  CHECK (transaction_currency='CNY' AND settlement_currency='CNY'),
+  CHECK (transaction_amount_cents=settlement_amount_cents),
+  CHECK ((direction='out' AND transaction_kind IN ('charge','fee') AND settlement_amount_cents>0) OR (direction='in' AND transaction_kind IN ('refund','credit') AND settlement_amount_cents<0))
+);
+
+CREATE INDEX ix_ccb_credit_card_date ON ccb_credit_card_transactions(card_key,transaction_date);
+CREATE INDEX ix_ccb_credit_source ON ccb_credit_card_transactions(source_sha256,row_number);
+
+-- 独立交易事实沿用现有导入会话、逐行审计与数据版本保护，不伪造月度账单。
+CREATE TRIGGER trg_ccb_credit_card_transactions_guard BEFORE INSERT OR UPDATE OR DELETE ON ccb_credit_card_transactions FOR EACH ROW EXECUTE FUNCTION vault_guard('fact');
+CREATE TRIGGER trg_ccb_credit_card_transactions_truncate BEFORE TRUNCATE ON ccb_credit_card_transactions FOR EACH STATEMENT EXECUTE FUNCTION vault_guard('fact');
+CREATE TRIGGER trg_ccb_credit_card_transactions_version AFTER INSERT OR UPDATE OR DELETE ON ccb_credit_card_transactions FOR EACH STATEMENT EXECUTE FUNCTION vault_touch();
+CREATE TRIGGER trg_ccb_credit_card_transactions_audit AFTER INSERT OR UPDATE OR DELETE ON ccb_credit_card_transactions FOR EACH ROW EXECUTE FUNCTION vault_audit('transaction_key');
+DO $$ DECLARE grant_row record; BEGIN
+  FOR grant_row IN SELECT grantee,privilege_type FROM information_schema.role_table_grants
+    WHERE table_schema='public' AND table_name='credit_card_transactions' AND grantee<>current_user AND privilege_type IN ('SELECT','INSERT','UPDATE','DELETE')
+  LOOP EXECUTE format('GRANT %s ON TABLE ccb_credit_card_transactions TO %s',grant_row.privilege_type,CASE WHEN grant_row.grantee='PUBLIC' THEN 'PUBLIC' ELSE quote_ident(grant_row.grantee) END); END LOOP;
+END $$;