@taopao/memoir 0.0.0-stage → 0.1.0

package/assets/migrations-pg/0110_icbc_debit_card.sql

@@ -0,0 +1,87 @@
+-- 工行借记账户历史明细使用专属事实表，既有银行记录、批次和审计不重写。
+-- 只扩展批次来源枚举；时间精度、正负方向、原始十三列与原件批次外键明确保存。
+ALTER TABLE import_batches DROP CONSTRAINT import_batches_source_kind_check;
+ALTER TABLE import_batches ADD CONSTRAINT import_batches_source_kind_check CHECK (source_kind IN (
+  'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+  'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+  'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+  'bocom_debit_card', 'bocom_credit_card', 'psbc_debit_card', 'tailong_debit_card', 'ccb_debit_card', 'ccb_credit_card', 'icbc_debit_card'
+));
+
+CREATE TABLE "icbc_bank_statements" (
+  statement_key TEXT PRIMARY KEY,
+  source_kind TEXT NOT NULL CHECK (source_kind = 'icbc_debit_card'),
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  owner_name TEXT NOT NULL,
+  account_type TEXT NOT NULL,
+  branch TEXT NOT NULL,
+  period_from TEXT NOT NULL,
+  period_to TEXT NOT NULL CHECK (period_to >= period_from),
+  requested_at TEXT NOT NULL,
+  verification_code TEXT NOT NULL,
+  page_count BIGINT NOT NULL CHECK (page_count > 0),
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json))
+);
+
+CREATE TABLE "icbc_bank_transactions" (
+  transaction_key TEXT PRIMARY KEY,
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  card_last_four TEXT NOT NULL CHECK (length(card_last_four) = 4),
+  currency TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  direction TEXT NOT NULL CHECK (direction IN ('in', 'out', 'neutral')),
+  amount_cents BIGINT NOT NULL CHECK (amount_cents >= 0),
+  balance_cents BIGINT NOT NULL,
+  counterparty TEXT NOT NULL,
+  counterparty_account TEXT NOT NULL,
+  institution TEXT NOT NULL,
+  description TEXT NOT NULL,
+  bank_txn_id TEXT NOT NULL,
+  transaction_card TEXT NOT NULL,
+  status TEXT NOT NULL,
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  source_sheet TEXT NOT NULL,
+  row_number BIGINT NOT NULL CHECK (row_number > 0),
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json)),
+  source_kind TEXT NOT NULL DEFAULT 'icbc_debit_card' CHECK (source_kind = 'icbc_debit_card'),
+  date_precision TEXT NOT NULL DEFAULT 'second' CHECK (date_precision = 'second'),
+  page_number BIGINT NOT NULL CHECK (page_number > 0),
+  statement_key TEXT NOT NULL REFERENCES icbc_bank_statements(statement_key),
+  CHECK ((direction = 'neutral' AND amount_cents = 0) OR (direction IN ('in', 'out') AND amount_cents > 0))
+);
+
+
+CREATE INDEX ix_icbc_statement_account_period ON icbc_bank_statements(account_key, period_from, period_to);
+CREATE INDEX ix_icbc_transaction_account_date ON icbc_bank_transactions(account_key, occurred_at);
+CREATE INDEX ix_icbc_transaction_statement ON icbc_bank_transactions(statement_key);
+
+-- 新表按原始事实保护，只有 importer/migration 会话可写；每行审计、数据版本和
+-- TRUNCATE 防护与现有银行卡完全一致。增量 SQL 同时用于旧库升级和新库逐步安装。
+DO $$
+DECLARE target_table text; key_column text; grant_row record;
+BEGIN
+  FOREACH target_table IN ARRAY ARRAY['icbc_bank_statements', 'icbc_bank_transactions'] LOOP
+    key_column := CASE WHEN target_table = 'icbc_bank_statements' THEN 'statement_key' ELSE 'transaction_key' END;
+    EXECUTE format('CREATE TRIGGER trg_%s_guard BEFORE INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_truncate BEFORE TRUNCATE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_version AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_touch()', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_audit AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_audit(%L)', target_table, target_table, key_column);
+    -- 继承同类事实表的现有应用/只读权限，不写死部署角色，也不授予新的管理权限。
+    FOR grant_row IN SELECT grantee, privilege_type FROM information_schema.role_table_grants
+      WHERE table_schema = 'public' AND role_table_grants.table_name = 'bank_card_transactions'
+        AND grantee <> current_user AND privilege_type IN ('SELECT', 'INSERT', 'UPDATE', 'DELETE')
+    LOOP
+      EXECUTE format('GRANT %s ON TABLE %I TO %s', grant_row.privilege_type, target_table,
+        CASE WHEN grant_row.grantee = 'PUBLIC' THEN 'PUBLIC' ELSE quote_ident(grant_row.grantee) END);
+    END LOOP;
+  END LOOP;
+END $$;

package/assets/migrations-pg/0111_icbc_credit_card.sql

@@ -0,0 +1,66 @@
+-- 工行信用卡历史明细使用专属事实表，既有银行记录、批次和审计不重写。
+-- 只扩展批次来源枚举；时间精度、正负方向、原始十二列与原件批次外键明确保存。
+ALTER TABLE import_batches DROP CONSTRAINT import_batches_source_kind_check;
+ALTER TABLE import_batches ADD CONSTRAINT import_batches_source_kind_check CHECK (source_kind IN (
+  'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+  'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+  'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+  'bocom_debit_card', 'bocom_credit_card', 'psbc_debit_card', 'tailong_debit_card', 'ccb_debit_card', 'ccb_credit_card', 'icbc_debit_card', 'icbc_credit_card'
+));
+
+CREATE TABLE "icbc_credit_card_transactions" (
+  transaction_key TEXT PRIMARY KEY,
+  statement_key TEXT CHECK (statement_key IS NULL),
+  transaction_date TEXT,
+  posting_date TEXT NOT NULL,
+  card_last_four TEXT NOT NULL CHECK (length(card_last_four) = 4),
+  description TEXT NOT NULL,
+  transaction_currency TEXT,
+  transaction_amount_cents BIGINT NOT NULL,
+  settlement_currency TEXT NOT NULL,
+  settlement_amount_cents BIGINT NOT NULL,
+  transaction_kind TEXT NOT NULL CHECK (transaction_kind IN ('charge', 'fee', 'refund', 'repayment', 'credit')),
+  occurrence BIGINT NOT NULL CHECK (occurrence > 0),
+  page_number BIGINT NOT NULL CHECK (page_number > 0),
+  end_page_number BIGINT NOT NULL CHECK (end_page_number >= page_number),
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json)),
+  original_amount_raw TEXT NOT NULL DEFAULT '',
+  source_kind TEXT NOT NULL CHECK (source_kind='icbc_credit_card'),
+  card_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  date_precision TEXT NOT NULL CHECK (date_precision IN ('day','second')),
+  transaction_time_raw TEXT NOT NULL,
+  bank_type TEXT NOT NULL,
+  direction TEXT NOT NULL CHECK (direction IN ('in','out')),
+  payment_channel TEXT NOT NULL,
+  counterparty TEXT NOT NULL,
+  remark TEXT NOT NULL,
+  source_sheet TEXT NOT NULL,
+  row_number BIGINT NOT NULL CHECK (row_number>0),
+  original_sequence BIGINT CHECK (original_sequence IS NULL),
+  bank_balance_cents BIGINT NOT NULL,
+  transaction_card_masked TEXT NOT NULL,
+  counterparty_account TEXT NOT NULL,
+  CHECK (transaction_currency IN ('CNY','USD','HKD') AND settlement_currency IN ('CNY','USD','HKD')),
+  CHECK (transaction_currency<>settlement_currency OR transaction_amount_cents=settlement_amount_cents),
+  CHECK ((direction='out' AND transaction_kind IN ('charge','fee') AND settlement_amount_cents>0) OR (direction='in' AND transaction_kind IN ('refund','credit') AND settlement_amount_cents<0))
+);
+
+CREATE INDEX ix_icbc_credit_card_date ON icbc_credit_card_transactions(card_key,transaction_date);
+CREATE INDEX ix_icbc_credit_source ON icbc_credit_card_transactions(source_sha256,row_number);
+
+-- 独立交易事实沿用现有导入会话、逐行审计与数据版本保护，不伪造月度账单。
+CREATE TRIGGER trg_icbc_credit_card_transactions_guard BEFORE INSERT OR UPDATE OR DELETE ON icbc_credit_card_transactions FOR EACH ROW EXECUTE FUNCTION vault_guard('fact');
+CREATE TRIGGER trg_icbc_credit_card_transactions_truncate BEFORE TRUNCATE ON icbc_credit_card_transactions FOR EACH STATEMENT EXECUTE FUNCTION vault_guard('fact');
+CREATE TRIGGER trg_icbc_credit_card_transactions_version AFTER INSERT OR UPDATE OR DELETE ON icbc_credit_card_transactions FOR EACH STATEMENT EXECUTE FUNCTION vault_touch();
+CREATE TRIGGER trg_icbc_credit_card_transactions_audit AFTER INSERT OR UPDATE OR DELETE ON icbc_credit_card_transactions FOR EACH ROW EXECUTE FUNCTION vault_audit('transaction_key');
+DO $$ DECLARE grant_row record; BEGIN
+  FOR grant_row IN SELECT grantee,privilege_type FROM information_schema.role_table_grants
+    WHERE table_schema='public' AND table_name='credit_card_transactions' AND grantee<>current_user AND privilege_type IN ('SELECT','INSERT','UPDATE','DELETE')
+  LOOP EXECUTE format('GRANT %s ON TABLE icbc_credit_card_transactions TO %s',grant_row.privilege_type,CASE WHEN grant_row.grantee='PUBLIC' THEN 'PUBLIC' ELSE quote_ident(grant_row.grantee) END); END LOOP;
+END $$;

package/assets/migrations-pg/0112_boc_debit_card.sql

@@ -0,0 +1,88 @@
+-- 中国银行借记卡交易明细使用专属事实表，既有银行记录、批次和审计不重写。
+-- 只扩展批次来源枚举；秒级时间精度、多币种收支方向、原始十五列与原件批次外键明确保存。
+ALTER TABLE import_batches DROP CONSTRAINT import_batches_source_kind_check;
+ALTER TABLE import_batches ADD CONSTRAINT import_batches_source_kind_check CHECK (source_kind IN (
+  'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+  'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+  'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+  'bocom_debit_card', 'bocom_credit_card', 'psbc_debit_card', 'tailong_debit_card',
+  'ccb_debit_card', 'ccb_credit_card', 'icbc_debit_card', 'icbc_credit_card', 'boc_debit_card'
+));
+
+-- 预留账单头表以兼容未来官方账单导出；截图汇总 Excel 无官方账单头时 statement_key 保持 NULL。
+CREATE TABLE "boc_bank_statements" (
+  statement_key TEXT PRIMARY KEY,
+  source_kind TEXT NOT NULL CHECK (source_kind = 'boc_debit_card'),
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  owner_name TEXT NOT NULL,
+  account_type TEXT NOT NULL,
+  branch TEXT NOT NULL,
+  period_from TEXT NOT NULL,
+  period_to TEXT NOT NULL CHECK (period_to >= period_from),
+  requested_at TEXT NOT NULL,
+  verification_code TEXT NOT NULL,
+  page_count BIGINT CHECK (page_count IS NULL OR page_count > 0),
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json))
+);
+
+CREATE TABLE "boc_bank_transactions" (
+  transaction_key TEXT PRIMARY KEY,
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  card_last_four TEXT NOT NULL CHECK (length(card_last_four) = 4),
+  currency TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  direction TEXT NOT NULL CHECK (direction IN ('in', 'out', 'neutral')),
+  amount_cents BIGINT NOT NULL CHECK (amount_cents >= 0),
+  balance_cents BIGINT NOT NULL,
+  counterparty TEXT NOT NULL,
+  counterparty_account TEXT NOT NULL,
+  institution TEXT NOT NULL,
+  description TEXT NOT NULL,
+  bank_txn_id TEXT NOT NULL,
+  transaction_card TEXT NOT NULL,
+  status TEXT NOT NULL,
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  source_sheet TEXT NOT NULL CHECK (length(source_sheet) > 0),
+  row_number BIGINT NOT NULL CHECK (row_number > 0),
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json)),
+  source_kind TEXT NOT NULL DEFAULT 'boc_debit_card' CHECK (source_kind = 'boc_debit_card'),
+  date_precision TEXT NOT NULL DEFAULT 'second' CHECK (date_precision IN ('day', 'second')),
+  page_number BIGINT CHECK (page_number IS NULL OR page_number > 0),
+  statement_key TEXT REFERENCES boc_bank_statements(statement_key),
+  CHECK ((direction = 'neutral' AND amount_cents = 0) OR (direction IN ('in', 'out') AND amount_cents > 0))
+);
+
+CREATE INDEX ix_boc_statement_account_period ON boc_bank_statements(account_key, period_from, period_to);
+CREATE INDEX ix_boc_transaction_account_date ON boc_bank_transactions(account_key, occurred_at);
+CREATE INDEX ix_boc_transaction_statement ON boc_bank_transactions(statement_key);
+
+-- 新表按原始事实保护，只有 importer/migration 会话可写；每行审计、数据版本和
+-- TRUNCATE 防护与现有银行卡完全一致。增量 SQL 同时用于旧库升级和新库逐步安装。
+DO $$
+DECLARE target_table text; key_column text; grant_row record;
+BEGIN
+  FOREACH target_table IN ARRAY ARRAY['boc_bank_statements', 'boc_bank_transactions'] LOOP
+    key_column := CASE WHEN target_table = 'boc_bank_statements' THEN 'statement_key' ELSE 'transaction_key' END;
+    EXECUTE format('CREATE TRIGGER trg_%s_guard BEFORE INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_truncate BEFORE TRUNCATE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_version AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_touch()', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_audit AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_audit(%L)', target_table, target_table, key_column);
+    -- 继承同类事实表的现有应用/只读权限，不写死部署角色，也不授予新的管理权限。
+    FOR grant_row IN SELECT grantee, privilege_type FROM information_schema.role_table_grants
+      WHERE table_schema = 'public' AND role_table_grants.table_name = 'bank_card_transactions'
+        AND grantee <> current_user AND privilege_type IN ('SELECT', 'INSERT', 'UPDATE', 'DELETE')
+    LOOP
+      EXECUTE format('GRANT %s ON TABLE %I TO %s', grant_row.privilege_type, target_table,
+        CASE WHEN grant_row.grantee = 'PUBLIC' THEN 'PUBLIC' ELSE quote_ident(grant_row.grantee) END);
+    END LOOP;
+  END LOOP;
+END $$;

package/assets/migrations-pg/0113_jsb_debit_card.sql

@@ -0,0 +1,88 @@
+-- 江苏银行借记账户交易明细使用专属事实表，既有银行记录、批次和审计不重写。
+-- 只扩展批次来源枚举；按日精度、收支方向、原始九列与原件批次外键明确保存。
+ALTER TABLE import_batches DROP CONSTRAINT import_batches_source_kind_check;
+ALTER TABLE import_batches ADD CONSTRAINT import_batches_source_kind_check CHECK (source_kind IN (
+  'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+  'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+  'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+  'bocom_debit_card', 'bocom_credit_card', 'psbc_debit_card', 'tailong_debit_card',
+  'ccb_debit_card', 'ccb_credit_card', 'icbc_debit_card', 'icbc_credit_card', 'boc_debit_card', 'jsb_debit_card'
+));
+
+CREATE TABLE "jsb_bank_statements" (
+  statement_key TEXT PRIMARY KEY,
+  source_kind TEXT NOT NULL CHECK (source_kind = 'jsb_debit_card'),
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  owner_name TEXT NOT NULL,
+  account_type TEXT NOT NULL,
+  branch TEXT NOT NULL,
+  period_from TEXT NOT NULL,
+  period_to TEXT NOT NULL CHECK (period_to >= period_from),
+  requested_at TEXT NOT NULL,
+  verification_code TEXT NOT NULL,
+  page_count BIGINT NOT NULL CHECK (page_count > 0),
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json))
+);
+
+CREATE TABLE "jsb_bank_transactions" (
+  transaction_key TEXT PRIMARY KEY,
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  card_last_four TEXT NOT NULL CHECK (length(card_last_four) = 4),
+  currency TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  direction TEXT NOT NULL CHECK (direction IN ('in', 'out', 'neutral')),
+  amount_cents BIGINT NOT NULL CHECK (amount_cents >= 0),
+  balance_cents BIGINT NOT NULL,
+  counterparty TEXT NOT NULL,
+  counterparty_account TEXT NOT NULL,
+  institution TEXT NOT NULL,
+  description TEXT NOT NULL,
+  bank_txn_id TEXT NOT NULL,
+  transaction_card TEXT NOT NULL,
+  status TEXT NOT NULL,
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  source_sheet TEXT NOT NULL,
+  row_number BIGINT NOT NULL CHECK (row_number > 0),
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json)),
+  source_kind TEXT NOT NULL DEFAULT 'jsb_debit_card' CHECK (source_kind = 'jsb_debit_card'),
+  date_precision TEXT NOT NULL DEFAULT 'day' CHECK (date_precision = 'day'),
+  page_number BIGINT NOT NULL CHECK (page_number > 0),
+  statement_key TEXT NOT NULL REFERENCES jsb_bank_statements(statement_key),
+  CHECK ((direction = 'neutral' AND amount_cents = 0) OR (direction IN ('in', 'out') AND amount_cents > 0))
+);
+
+
+CREATE INDEX ix_jsb_statement_account_period ON jsb_bank_statements(account_key, period_from, period_to);
+CREATE INDEX ix_jsb_transaction_account_date ON jsb_bank_transactions(account_key, occurred_at);
+CREATE INDEX ix_jsb_transaction_statement ON jsb_bank_transactions(statement_key);
+
+-- 新表按原始事实保护，只有 importer/migration 会话可写；每行审计、数据版本和
+-- TRUNCATE 防护与现有银行卡完全一致。增量 SQL 同时用于旧库升级和新库逐步安装。
+DO $$
+DECLARE target_table text; key_column text; grant_row record;
+BEGIN
+  FOREACH target_table IN ARRAY ARRAY['jsb_bank_statements', 'jsb_bank_transactions'] LOOP
+    key_column := CASE WHEN target_table = 'jsb_bank_statements' THEN 'statement_key' ELSE 'transaction_key' END;
+    EXECUTE format('CREATE TRIGGER trg_%s_guard BEFORE INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_truncate BEFORE TRUNCATE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_version AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_touch()', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_audit AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_audit(%L)', target_table, target_table, key_column);
+    -- 继承同类事实表的现有应用/只读权限，不写死部署角色，也不授予新的管理权限。
+    FOR grant_row IN SELECT grantee, privilege_type FROM information_schema.role_table_grants
+      WHERE table_schema = 'public' AND role_table_grants.table_name = 'bank_card_transactions'
+        AND grantee <> current_user AND privilege_type IN ('SELECT', 'INSERT', 'UPDATE', 'DELETE')
+    LOOP
+      EXECUTE format('GRANT %s ON TABLE %I TO %s', grant_row.privilege_type, target_table,
+        CASE WHEN grant_row.grantee = 'PUBLIC' THEN 'PUBLIC' ELSE quote_ident(grant_row.grantee) END);
+    END LOOP;
+  END LOOP;
+END $$;

package/assets/migrations-pg/0114_cmbc_debit_card.sql

@@ -0,0 +1,88 @@
+-- 民生银行借记账户交易明细使用专属事实表，既有银行记录、批次和审计不重写。
+-- 只扩展批次来源枚举；按秒精度、收支方向、原始十一列与原件批次外键明确保存。
+ALTER TABLE import_batches DROP CONSTRAINT import_batches_source_kind_check;
+ALTER TABLE import_batches ADD CONSTRAINT import_batches_source_kind_check CHECK (source_kind IN (
+  'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+  'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+  'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+  'bocom_debit_card', 'bocom_credit_card', 'psbc_debit_card', 'tailong_debit_card',
+  'ccb_debit_card', 'ccb_credit_card', 'icbc_debit_card', 'icbc_credit_card',
+  'boc_debit_card', 'jsb_debit_card', 'cmbc_debit_card'
+));
+
+CREATE TABLE "cmbc_bank_statements" (
+  statement_key TEXT PRIMARY KEY,
+  source_kind TEXT NOT NULL CHECK (source_kind = 'cmbc_debit_card'),
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  owner_name TEXT NOT NULL,
+  account_type TEXT NOT NULL,
+  branch TEXT NOT NULL,
+  period_from TEXT NOT NULL,
+  period_to TEXT NOT NULL CHECK (period_to >= period_from),
+  requested_at TEXT NOT NULL,
+  verification_code TEXT NOT NULL,
+  page_count BIGINT NOT NULL CHECK (page_count > 0),
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json))
+);
+
+CREATE TABLE "cmbc_bank_transactions" (
+  transaction_key TEXT PRIMARY KEY,
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  card_last_four TEXT NOT NULL CHECK (length(card_last_four) = 4),
+  currency TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  direction TEXT NOT NULL CHECK (direction IN ('in', 'out', 'neutral')),
+  amount_cents BIGINT NOT NULL CHECK (amount_cents >= 0),
+  balance_cents BIGINT NOT NULL,
+  counterparty TEXT NOT NULL,
+  counterparty_account TEXT NOT NULL,
+  institution TEXT NOT NULL,
+  description TEXT NOT NULL,
+  bank_txn_id TEXT NOT NULL,
+  transaction_card TEXT NOT NULL,
+  status TEXT NOT NULL,
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  source_sheet TEXT NOT NULL,
+  row_number BIGINT NOT NULL CHECK (row_number > 0),
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json)),
+  source_kind TEXT NOT NULL DEFAULT 'cmbc_debit_card' CHECK (source_kind = 'cmbc_debit_card'),
+  date_precision TEXT NOT NULL DEFAULT 'second' CHECK (date_precision = 'second'),
+  page_number BIGINT NOT NULL CHECK (page_number > 0),
+  statement_key TEXT NOT NULL REFERENCES cmbc_bank_statements(statement_key),
+  CHECK ((direction = 'neutral' AND amount_cents = 0) OR (direction IN ('in', 'out') AND amount_cents > 0))
+);
+
+CREATE INDEX ix_cmbc_statement_account_period ON cmbc_bank_statements(account_key, period_from, period_to);
+CREATE INDEX ix_cmbc_transaction_account_date ON cmbc_bank_transactions(account_key, occurred_at);
+CREATE INDEX ix_cmbc_transaction_statement ON cmbc_bank_transactions(statement_key);
+
+-- 新表按原始事实保护，只有 importer/migration 会话可写；每行审计、数据版本和
+-- TRUNCATE 防护与现有银行卡完全一致。增量 SQL 同时用于旧库升级和新库逐步安装。
+DO $$
+DECLARE target_table text; key_column text; grant_row record;
+BEGIN
+  FOREACH target_table IN ARRAY ARRAY['cmbc_bank_statements', 'cmbc_bank_transactions'] LOOP
+    key_column := CASE WHEN target_table = 'cmbc_bank_statements' THEN 'statement_key' ELSE 'transaction_key' END;
+    EXECUTE format('CREATE TRIGGER trg_%s_guard BEFORE INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_truncate BEFORE TRUNCATE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_version AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_touch()', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_audit AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_audit(%L)', target_table, target_table, key_column);
+    -- 继承同类事实表的现有应用/只读权限，不写死部署角色，也不授予新的管理权限。
+    FOR grant_row IN SELECT grantee, privilege_type FROM information_schema.role_table_grants
+      WHERE table_schema = 'public' AND role_table_grants.table_name = 'bank_card_transactions'
+        AND grantee <> current_user AND privilege_type IN ('SELECT', 'INSERT', 'UPDATE', 'DELETE')
+    LOOP
+      EXECUTE format('GRANT %s ON TABLE %I TO %s', grant_row.privilege_type, target_table,
+        CASE WHEN grant_row.grantee = 'PUBLIC' THEN 'PUBLIC' ELSE quote_ident(grant_row.grantee) END);
+    END LOOP;
+  END LOOP;
+END $$;

package/assets/migrations-pg/0115_hzbank_debit_card.sql

@@ -0,0 +1,88 @@
+-- 杭州银行借记账户交易明细使用专属事实表，既有银行记录、批次和审计不重写。
+-- 只扩展批次来源枚举；按日精度、收支方向、原始七列与原件批次外键明确保存。
+ALTER TABLE import_batches DROP CONSTRAINT import_batches_source_kind_check;
+ALTER TABLE import_batches ADD CONSTRAINT import_batches_source_kind_check CHECK (source_kind IN (
+  'wechat_chat', 'audio_db', 'alipay', 'wechatpay', 'jd', 'taobao', 'pdd',
+  'meituan', 'taobao_takeout', 'train12306', 'manual_ledger', 'legacy_md',
+  'citic_credit_card', 'citic_debit_card', 'cmb_debit_card', 'cmb_credit_card',
+  'bocom_debit_card', 'bocom_credit_card', 'psbc_debit_card', 'tailong_debit_card',
+  'ccb_debit_card', 'ccb_credit_card', 'icbc_debit_card', 'icbc_credit_card',
+  'boc_debit_card', 'jsb_debit_card', 'cmbc_debit_card', 'hzbank_debit_card'
+));
+
+CREATE TABLE "hzbank_bank_statements" (
+  statement_key TEXT PRIMARY KEY,
+  source_kind TEXT NOT NULL CHECK (source_kind = 'hzbank_debit_card'),
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  owner_name TEXT NOT NULL,
+  account_type TEXT NOT NULL,
+  branch TEXT NOT NULL,
+  period_from TEXT NOT NULL,
+  period_to TEXT NOT NULL CHECK (period_to >= period_from),
+  requested_at TEXT NOT NULL,
+  verification_code TEXT NOT NULL,
+  page_count BIGINT NOT NULL CHECK (page_count > 0),
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json))
+);
+
+CREATE TABLE "hzbank_bank_transactions" (
+  transaction_key TEXT PRIMARY KEY,
+  account_key TEXT NOT NULL,
+  account_masked TEXT NOT NULL,
+  card_last_four TEXT NOT NULL CHECK (length(card_last_four) = 4),
+  currency TEXT NOT NULL,
+  occurred_at TEXT NOT NULL,
+  direction TEXT NOT NULL CHECK (direction IN ('in', 'out', 'neutral')),
+  amount_cents BIGINT NOT NULL CHECK (amount_cents >= 0),
+  balance_cents BIGINT NOT NULL,
+  counterparty TEXT NOT NULL,
+  counterparty_account TEXT NOT NULL,
+  institution TEXT NOT NULL,
+  description TEXT NOT NULL,
+  bank_txn_id TEXT NOT NULL,
+  transaction_card TEXT NOT NULL,
+  status TEXT NOT NULL,
+  source_file TEXT NOT NULL,
+  source_sha256 TEXT NOT NULL,
+  source_sheet TEXT NOT NULL,
+  row_number BIGINT NOT NULL CHECK (row_number > 0),
+  first_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  last_batch_id TEXT NOT NULL REFERENCES import_batches(id),
+  raw_json TEXT NOT NULL CHECK (vault_json_valid(raw_json)),
+  source_kind TEXT NOT NULL DEFAULT 'hzbank_debit_card' CHECK (source_kind = 'hzbank_debit_card'),
+  date_precision TEXT NOT NULL DEFAULT 'day' CHECK (date_precision = 'day'),
+  page_number BIGINT NOT NULL CHECK (page_number > 0),
+  statement_key TEXT NOT NULL REFERENCES hzbank_bank_statements(statement_key),
+  CHECK ((direction = 'neutral' AND amount_cents = 0) OR (direction IN ('in', 'out') AND amount_cents > 0))
+);
+
+CREATE INDEX ix_hzbank_statement_account_period ON hzbank_bank_statements(account_key, period_from, period_to);
+CREATE INDEX ix_hzbank_transaction_account_date ON hzbank_bank_transactions(account_key, occurred_at);
+CREATE INDEX ix_hzbank_transaction_statement ON hzbank_bank_transactions(statement_key);
+
+-- 新表按原始事实保护，只有 importer/migration 会话可写；每行审计、数据版本和
+-- TRUNCATE 防护与现有银行卡完全一致。增量 SQL 同时用于旧库升级和新库逐步安装。
+DO $$
+DECLARE target_table text; key_column text; grant_row record;
+BEGIN
+  FOREACH target_table IN ARRAY ARRAY['hzbank_bank_statements', 'hzbank_bank_transactions'] LOOP
+    key_column := CASE WHEN target_table = 'hzbank_bank_statements' THEN 'statement_key' ELSE 'transaction_key' END;
+    EXECUTE format('CREATE TRIGGER trg_%s_guard BEFORE INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_truncate BEFORE TRUNCATE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_guard(''fact'')', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_version AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH STATEMENT EXECUTE FUNCTION vault_touch()', target_table, target_table);
+    EXECUTE format('CREATE TRIGGER trg_%s_audit AFTER INSERT OR UPDATE OR DELETE ON %I FOR EACH ROW EXECUTE FUNCTION vault_audit(%L)', target_table, target_table, key_column);
+    -- 继承同类事实表的现有应用/只读权限，不写死部署角色，也不授予新的管理权限。
+    FOR grant_row IN SELECT grantee, privilege_type FROM information_schema.role_table_grants
+      WHERE table_schema = 'public' AND role_table_grants.table_name = 'bank_card_transactions'
+        AND grantee <> current_user AND privilege_type IN ('SELECT', 'INSERT', 'UPDATE', 'DELETE')
+    LOOP
+      EXECUTE format('GRANT %s ON TABLE %I TO %s', grant_row.privilege_type, target_table,
+        CASE WHEN grant_row.grantee = 'PUBLIC' THEN 'PUBLIC' ELSE quote_ident(grant_row.grantee) END);
+    END LOOP;
+  END LOOP;
+END $$;