@vellumai/assistant 0.5.6 → 0.5.8

package/src/memory/migrations/162-guardian-timestamps-epoch-ms.ts

@@ -281,3 +281,293 @@ function rebuildScopedApprovalGrants(raw: RawDb): void {
     raw.exec("PRAGMA foreign_keys = ON");
   }
 }
+
+// ---------------------------------------------------------------------------
+// Down functions
+// ---------------------------------------------------------------------------
+
+/**
+ * Reverse v29: convert epoch ms timestamps back to ISO 8601 text in guardian
+ * tables.
+ *
+ * Uses SQLite's datetime() to reconstruct ISO 8601 strings from the integer
+ * values. The millisecond component is appended manually since datetime()
+ * only returns second precision.
+ */
+export function migrateGuardianTimestampsEpochMsDown(
+  database: DrizzleDb,
+): void {
+  const raw = getSqliteFrom(database);
+
+  // Convert canonical_guardian_requests timestamp columns back to ISO 8601
+  raw.exec(/*sql*/ `
+    UPDATE canonical_guardian_requests
+    SET created_at = strftime('%Y-%m-%dT%H:%M:%S', created_at / 1000, 'unixepoch') || '.' || printf('%03d', created_at % 1000) || 'Z',
+        updated_at = strftime('%Y-%m-%dT%H:%M:%S', updated_at / 1000, 'unixepoch') || '.' || printf('%03d', updated_at % 1000) || 'Z',
+        expires_at = CASE
+          WHEN expires_at IS NOT NULL
+          THEN strftime('%Y-%m-%dT%H:%M:%S', expires_at / 1000, 'unixepoch') || '.' || printf('%03d', expires_at % 1000) || 'Z'
+          ELSE NULL
+        END
+    WHERE typeof(created_at) = 'integer'
+  `);
+
+  // Convert canonical_guardian_deliveries timestamp columns back to ISO 8601
+  raw.exec(/*sql*/ `
+    UPDATE canonical_guardian_deliveries
+    SET created_at = strftime('%Y-%m-%dT%H:%M:%S', created_at / 1000, 'unixepoch') || '.' || printf('%03d', created_at % 1000) || 'Z',
+        updated_at = strftime('%Y-%m-%dT%H:%M:%S', updated_at / 1000, 'unixepoch') || '.' || printf('%03d', updated_at % 1000) || 'Z'
+    WHERE typeof(created_at) = 'integer'
+  `);
+
+  // Convert scoped_approval_grants timestamp columns back to ISO 8601
+  raw.exec(/*sql*/ `
+    UPDATE scoped_approval_grants
+    SET expires_at = strftime('%Y-%m-%dT%H:%M:%S', expires_at / 1000, 'unixepoch') || '.' || printf('%03d', expires_at % 1000) || 'Z',
+        created_at = strftime('%Y-%m-%dT%H:%M:%S', created_at / 1000, 'unixepoch') || '.' || printf('%03d', created_at % 1000) || 'Z',
+        updated_at = strftime('%Y-%m-%dT%H:%M:%S', updated_at / 1000, 'unixepoch') || '.' || printf('%03d', updated_at % 1000) || 'Z',
+        consumed_at = CASE
+          WHEN consumed_at IS NOT NULL
+          THEN strftime('%Y-%m-%dT%H:%M:%S', consumed_at / 1000, 'unixepoch') || '.' || printf('%03d', consumed_at % 1000) || 'Z'
+          ELSE NULL
+        END
+    WHERE typeof(created_at) = 'integer'
+  `);
+}
+
+/**
+ * Reverse v30: rebuild guardian tables with TEXT affinity on timestamp columns.
+ *
+ * Restores the original TEXT column declarations so that timestamp columns
+ * have TEXT affinity (the state before the INTEGER rebuild).
+ */
+export function migrateGuardianTimestampsRebuildDown(
+  database: DrizzleDb,
+): void {
+  const raw = getSqliteFrom(database);
+
+  rebuildCanonicalGuardianRequestsToText(raw);
+  rebuildCanonicalGuardianDeliveriesToText(raw);
+  rebuildScopedApprovalGrantsToText(raw);
+}
+
+function hasTextAffinity(raw: RawDb, table: string, column: string): boolean {
+  const row = raw
+    .query(
+      `SELECT type FROM pragma_table_info('${table}') WHERE name = '${column}'`,
+    )
+    .get() as { type: string } | null;
+  if (!row) return true; // column doesn't exist — nothing to fix
+  return row.type.toUpperCase() === "TEXT";
+}
+
+function rebuildCanonicalGuardianRequestsToText(raw: RawDb): void {
+  if (hasTextAffinity(raw, "canonical_guardian_requests", "created_at")) return;
+
+  raw.exec("PRAGMA foreign_keys = OFF");
+  try {
+    raw.exec("BEGIN");
+
+    raw.exec(/*sql*/ `
+      CREATE TABLE canonical_guardian_requests_rb (
+        id TEXT PRIMARY KEY,
+        kind TEXT NOT NULL,
+        source_type TEXT NOT NULL,
+        source_channel TEXT,
+        conversation_id TEXT,
+        requester_external_user_id TEXT,
+        requester_chat_id TEXT,
+        guardian_external_user_id TEXT,
+        guardian_principal_id TEXT,
+        call_session_id TEXT,
+        pending_question_id TEXT,
+        question_text TEXT,
+        request_code TEXT,
+        tool_name TEXT,
+        input_digest TEXT,
+        status TEXT NOT NULL DEFAULT 'pending',
+        answer_text TEXT,
+        decided_by_external_user_id TEXT,
+        decided_by_principal_id TEXT,
+        followup_state TEXT,
+        expires_at TEXT,
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL
+      )
+    `);
+
+    raw.exec(/*sql*/ `
+      INSERT INTO canonical_guardian_requests_rb
+      SELECT id, kind, source_type, source_channel, conversation_id,
+             requester_external_user_id, requester_chat_id,
+             guardian_external_user_id, guardian_principal_id,
+             call_session_id, pending_question_id, question_text,
+             request_code, tool_name, input_digest, status, answer_text,
+             decided_by_external_user_id, decided_by_principal_id,
+             followup_state, expires_at, created_at, updated_at
+      FROM canonical_guardian_requests
+    `);
+
+    raw.exec(/*sql*/ `DROP TABLE canonical_guardian_requests`);
+    raw.exec(
+      /*sql*/ `ALTER TABLE canonical_guardian_requests_rb RENAME TO canonical_guardian_requests`,
+    );
+
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_canonical_guardian_requests_status ON canonical_guardian_requests(status)`,
+    );
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_canonical_guardian_requests_guardian ON canonical_guardian_requests(guardian_external_user_id, status)`,
+    );
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_canonical_guardian_requests_conversation ON canonical_guardian_requests(conversation_id, status)`,
+    );
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_canonical_guardian_requests_source ON canonical_guardian_requests(source_type, status)`,
+    );
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_canonical_guardian_requests_kind ON canonical_guardian_requests(kind, status)`,
+    );
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_canonical_guardian_requests_request_code ON canonical_guardian_requests(request_code)`,
+    );
+
+    raw.exec("COMMIT");
+  } catch (e) {
+    try {
+      raw.exec("ROLLBACK");
+    } catch {
+      /* no active transaction */
+    }
+    throw e;
+  } finally {
+    raw.exec("PRAGMA foreign_keys = ON");
+  }
+}
+
+function rebuildCanonicalGuardianDeliveriesToText(raw: RawDb): void {
+  if (hasTextAffinity(raw, "canonical_guardian_deliveries", "created_at"))
+    return;
+
+  raw.exec("PRAGMA foreign_keys = OFF");
+  try {
+    raw.exec("BEGIN");
+
+    raw.exec(/*sql*/ `
+      CREATE TABLE canonical_guardian_deliveries_rb (
+        id TEXT PRIMARY KEY,
+        request_id TEXT NOT NULL REFERENCES canonical_guardian_requests(id) ON DELETE CASCADE,
+        destination_channel TEXT NOT NULL,
+        destination_conversation_id TEXT,
+        destination_chat_id TEXT,
+        destination_message_id TEXT,
+        status TEXT NOT NULL DEFAULT 'pending',
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL
+      )
+    `);
+
+    raw.exec(/*sql*/ `
+      INSERT INTO canonical_guardian_deliveries_rb
+      SELECT id, request_id, destination_channel, destination_conversation_id,
+             destination_chat_id, destination_message_id, status,
+             created_at, updated_at
+      FROM canonical_guardian_deliveries
+    `);
+
+    raw.exec(/*sql*/ `DROP TABLE canonical_guardian_deliveries`);
+    raw.exec(
+      /*sql*/ `ALTER TABLE canonical_guardian_deliveries_rb RENAME TO canonical_guardian_deliveries`,
+    );
+
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_canonical_guardian_deliveries_request_id ON canonical_guardian_deliveries(request_id)`,
+    );
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_canonical_guardian_deliveries_status ON canonical_guardian_deliveries(status)`,
+    );
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_canonical_guardian_deliveries_destination ON canonical_guardian_deliveries(destination_channel, destination_chat_id)`,
+    );
+
+    raw.exec("COMMIT");
+  } catch (e) {
+    try {
+      raw.exec("ROLLBACK");
+    } catch {
+      /* no active transaction */
+    }
+    throw e;
+  } finally {
+    raw.exec("PRAGMA foreign_keys = ON");
+  }
+}
+
+function rebuildScopedApprovalGrantsToText(raw: RawDb): void {
+  if (hasTextAffinity(raw, "scoped_approval_grants", "created_at")) return;
+
+  raw.exec("PRAGMA foreign_keys = OFF");
+  try {
+    raw.exec("BEGIN");
+
+    raw.exec(/*sql*/ `
+      CREATE TABLE scoped_approval_grants_rb (
+        id TEXT PRIMARY KEY,
+        scope_mode TEXT NOT NULL,
+        request_id TEXT,
+        tool_name TEXT,
+        input_digest TEXT,
+        request_channel TEXT NOT NULL,
+        decision_channel TEXT NOT NULL,
+        execution_channel TEXT,
+        conversation_id TEXT,
+        call_session_id TEXT,
+        requester_external_user_id TEXT,
+        guardian_external_user_id TEXT,
+        status TEXT NOT NULL,
+        expires_at TEXT NOT NULL,
+        consumed_at TEXT,
+        consumed_by_request_id TEXT,
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL
+      )
+    `);
+
+    raw.exec(/*sql*/ `
+      INSERT INTO scoped_approval_grants_rb
+      SELECT id, scope_mode, request_id, tool_name, input_digest,
+             request_channel, decision_channel, execution_channel,
+             conversation_id, call_session_id,
+             requester_external_user_id, guardian_external_user_id,
+             status, expires_at, consumed_at, consumed_by_request_id,
+             created_at, updated_at
+      FROM scoped_approval_grants
+    `);
+
+    raw.exec(/*sql*/ `DROP TABLE scoped_approval_grants`);
+    raw.exec(
+      /*sql*/ `ALTER TABLE scoped_approval_grants_rb RENAME TO scoped_approval_grants`,
+    );
+
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_scoped_grants_request_id ON scoped_approval_grants(request_id) WHERE request_id IS NOT NULL`,
+    );
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_scoped_grants_tool_sig ON scoped_approval_grants(tool_name, input_digest) WHERE tool_name IS NOT NULL`,
+    );
+    raw.exec(
+      /*sql*/ `CREATE INDEX IF NOT EXISTS idx_scoped_grants_status_expires ON scoped_approval_grants(status, expires_at)`,
+    );
+
+    raw.exec("COMMIT");
+  } catch (e) {
+    try {
+      raw.exec("ROLLBACK");
+    } catch {
+      /* no active transaction */
+    }
+    throw e;
+  } finally {
+    raw.exec("PRAGMA foreign_keys = ON");
+  }
+}

package/src/memory/migrations/169-rename-gmail-provider-key-to-google.ts

@@ -1,4 +1,5 @@
-import { type DrizzleDb, getSqliteFrom } from "../db-connection.js";
+import type { DrizzleDb } from "../db-connection.js";
+import { getSqliteFrom } from "../db-connection.js";
 import { withCrashRecovery } from "./validate-migration-state.js";
 
 /**
@@ -62,3 +63,52 @@ export function migrateRenameGmailProviderKeyToGoogle(
     },
   );
 }
+
+/**
+ * Reverse: rename "integration:google" back to "integration:gmail" across
+ * OAuth tables.
+ *
+ * Mirrors the forward migration logic but in the opposite direction. If
+ * `integration:gmail` already exists (shouldn't normally happen on rollback),
+ * deletes the google rows to avoid duplicates.
+ */
+export function migrateRenameGmailProviderKeyToGoogleDown(
+  database: DrizzleDb,
+): void {
+  const raw = getSqliteFrom(database);
+
+  raw.exec("PRAGMA foreign_keys = OFF");
+  try {
+    const gmailExists = raw
+      .prepare(
+        /*sql*/ `SELECT 1 FROM oauth_providers WHERE provider_key = 'integration:gmail'`,
+      )
+      .get();
+
+    if (gmailExists) {
+      // Old gmail rows already exist — delete the google ones to avoid duplication.
+      raw.exec(
+        /*sql*/ `DELETE FROM oauth_connections WHERE provider_key = 'integration:google'`,
+      );
+      raw.exec(
+        /*sql*/ `DELETE FROM oauth_apps WHERE provider_key = 'integration:google'`,
+      );
+      raw.exec(
+        /*sql*/ `DELETE FROM oauth_providers WHERE provider_key = 'integration:google'`,
+      );
+    } else {
+      // Rename google back to gmail — children first, then parent.
+      raw.exec(
+        /*sql*/ `UPDATE oauth_connections SET provider_key = 'integration:gmail' WHERE provider_key = 'integration:google'`,
+      );
+      raw.exec(
+        /*sql*/ `UPDATE oauth_apps SET provider_key = 'integration:gmail' WHERE provider_key = 'integration:google'`,
+      );
+      raw.exec(
+        /*sql*/ `UPDATE oauth_providers SET provider_key = 'integration:gmail' WHERE provider_key = 'integration:google'`,
+      );
+    }
+  } finally {
+    raw.exec("PRAGMA foreign_keys = ON");
+  }
+}

package/src/memory/migrations/174-rename-thread-starters-table.ts

@@ -1,4 +1,5 @@
-import { type DrizzleDb, getSqliteFrom } from "../db-connection.js";
+import type { DrizzleDb } from "../db-connection.js";
+import { getSqliteFrom } from "../db-connection.js";
 import { withCrashRecovery } from "./validate-migration-state.js";
 
 /**
@@ -51,3 +52,48 @@ export function migrateRenameThreadStartersTable(database: DrizzleDb): void {
     },
   );
 }
+
+/**
+ * Reverse: rename conversation_starters back to thread_starters and recreate
+ * old index names.
+ *
+ * Idempotent — skips if the old table already exists or the new table is
+ * absent.
+ */
+export function migrateRenameThreadStartersTableDown(
+  database: DrizzleDb,
+): void {
+  const raw = getSqliteFrom(database);
+
+  // Guard: new table must exist
+  const newTableExists = raw
+    .query(
+      `SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'conversation_starters'`,
+    )
+    .get();
+  if (!newTableExists) return;
+
+  // Guard: old table must not already exist
+  const oldTableExists = raw
+    .query(
+      `SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'thread_starters'`,
+    )
+    .get();
+  if (oldTableExists) return;
+
+  // Rename the table back
+  raw.exec(
+    /*sql*/ `ALTER TABLE conversation_starters RENAME TO thread_starters`,
+  );
+
+  // Drop new indexes and recreate with old names
+  raw.exec(/*sql*/ `DROP INDEX IF EXISTS idx_conversation_starters_batch`);
+  raw.exec(
+    /*sql*/ `CREATE INDEX IF NOT EXISTS idx_thread_starters_batch ON thread_starters(generation_batch, created_at)`,
+  );
+
+  raw.exec(/*sql*/ `DROP INDEX IF EXISTS idx_conversation_starters_card_type`);
+  raw.exec(
+    /*sql*/ `CREATE INDEX IF NOT EXISTS idx_thread_starters_card_type ON thread_starters(card_type, scope_id)`,
+  );
+}

package/src/memory/migrations/176-drop-capability-card-state.ts

@@ -34,3 +34,16 @@ export function migrateDropCapabilityCardState(database: DrizzleDb): void {
     raw.exec(/*sql*/ `DROP TABLE IF EXISTS capability_card_categories`);
   });
 }
+
+/**
+ * Reverse: no-op.
+ *
+ * The forward migration deleted rows (card-type conversation starters,
+ * generate_capability_cards jobs, capability_cards checkpoints) and dropped
+ * the capability_card_categories table. The deleted data cannot be restored
+ * — it was discarded as dead state after the capability card feature was
+ * removed.
+ */
+export function migrateDropCapabilityCardStateDown(_database: DrizzleDb): void {
+  // No-op — see comment above.
+}

package/src/memory/migrations/180-backfill-inline-attachments-to-disk.ts

@@ -64,3 +64,19 @@ export function migrateBackfillInlineAttachmentsToDisk(
     },
   );
 }
+
+/**
+ * Reverse: no-op.
+ *
+ * The forward migration moved attachment data from inline base64 in the
+ * database to on-disk files and cleared the dataBase64 column. The original
+ * base64 data has been deleted from the DB, and re-reading it from disk
+ * back into the database would be unreliable (file paths may have changed,
+ * disk files may have been cleaned up). The on-disk files remain intact
+ * and functional.
+ */
+export function migrateBackfillInlineAttachmentsToDiskDown(
+  _database: DrizzleDb,
+): void {
+  // No-op — see comment above.
+}

package/src/memory/migrations/181-rename-thread-starters-checkpoints.ts

@@ -1,4 +1,5 @@
-import { type DrizzleDb, getSqliteFrom } from "../db-connection.js";
+import type { DrizzleDb } from "../db-connection.js";
+import { getSqliteFrom } from "../db-connection.js";
 import { withCrashRecovery } from "./validate-migration-state.js";
 
 /**
@@ -44,3 +45,29 @@ export function migrateRenameThreadStartersCheckpoints(
     },
   );
 }
+
+/**
+ * Reverse: rename checkpoint keys from "conversation_starters:" back to
+ * "thread_starters:" prefix.
+ *
+ * Mirrors the forward migration but in reverse. Handles collisions the same
+ * way — if an old-prefix key already exists, the new-prefix key is dropped.
+ */
+export function migrateRenameThreadStartersCheckpointsDown(
+  database: DrizzleDb,
+): void {
+  const raw = getSqliteFrom(database);
+
+  // 1. Delete conversation_starters: keys where a corresponding
+  //    thread_starters: key already exists.
+  raw.exec(/*sql*/ `DELETE FROM memory_checkpoints
+     WHERE key LIKE 'conversation_starters:%'
+       AND replace(key, 'conversation_starters:', 'thread_starters:') IN (
+         SELECT key FROM memory_checkpoints WHERE key LIKE 'thread_starters:%'
+       )`);
+
+  // 2. Rename remaining keys back to the old prefix.
+  raw.exec(
+    /*sql*/ `UPDATE memory_checkpoints SET key = replace(key, 'conversation_starters:', 'thread_starters:') WHERE key LIKE 'conversation_starters:%'`,
+  );
+}

package/src/memory/migrations/190-call-session-skip-disclosure.ts

@@ -0,0 +1,15 @@
+import type { DrizzleDb } from "../db-connection.js";
+
+/**
+ * Add skip_disclosure column to call_sessions so outbound calls can
+ * skip the disclosure announcement on a per-call basis.
+ */
+export function migrateCallSessionSkipDisclosure(database: DrizzleDb): void {
+  try {
+    database.run(
+      /*sql*/ `ALTER TABLE call_sessions ADD COLUMN skip_disclosure INTEGER NOT NULL DEFAULT 0`,
+    );
+  } catch {
+    /* already exists */
+  }
+}

package/src/memory/migrations/191-backfill-audio-attachment-mime-types.ts

@@ -0,0 +1,64 @@
+import type { DrizzleDb } from "../db-connection.js";
+import { getSqliteFrom } from "../db-connection.js";
+import { withCrashRecovery } from "./validate-migration-state.js";
+
+/**
+ * Backfill MIME types for audio attachments that were stored with
+ * "application/octet-stream" because the EXTENSION_MIME_MAP was
+ * missing audio format entries.
+ *
+ * Updates mime_type based on the file extension in original_filename.
+ */
+
+const AUDIO_EXT_MIME: Record<string, string> = {
+  mp3: "audio/mpeg",
+  wav: "audio/wav",
+  ogg: "audio/ogg",
+  flac: "audio/flac",
+  aac: "audio/aac",
+  m4a: "audio/x-m4a",
+  opus: "audio/opus",
+};
+
+export function migrateBackfillAudioAttachmentMimeTypes(
+  database: DrizzleDb,
+): void {
+  withCrashRecovery(
+    database,
+    "migration_backfill_audio_attachment_mime_types_v1",
+    () => {
+      const raw = getSqliteFrom(database);
+
+      for (const [ext, mime] of Object.entries(AUDIO_EXT_MIME)) {
+        const pattern = `%.${ext}`;
+        const result = raw
+          .query(
+            `UPDATE attachments
+             SET mime_type = ?, kind = 'document'
+             WHERE lower(original_filename) LIKE ?
+               AND mime_type = 'application/octet-stream'`,
+          )
+          .run(mime, pattern);
+
+        if ((result as { changes?: number }).changes) {
+          console.log(
+            `Backfilled ${(result as { changes: number }).changes} .${ext} attachments → ${mime}`,
+          );
+        }
+      }
+    },
+  );
+}
+
+/**
+ * Reverse: no-op.
+ *
+ * The forward migration corrected incorrect MIME types (application/octet-stream)
+ * to their proper audio/* values. Restoring the wrong MIME types would break
+ * audio playback and file handling. The corrected values are the desired state.
+ */
+export function migrateBackfillAudioAttachmentMimeTypesDown(
+  _database: DrizzleDb,
+): void {
+  // No-op — see comment above.
+}

package/src/memory/migrations/192-contacts-user-file-column.ts

@@ -0,0 +1,15 @@
+import type { DrizzleDb } from "../db-connection.js";
+import { getSqliteFrom } from "../db-connection.js";
+import { withCrashRecovery } from "./validate-migration-state.js";
+
+export function migrateContactsUserFileColumn(database: DrizzleDb): void {
+  withCrashRecovery(database, "migration_contacts_user_file_column_v1", () => {
+    const raw = getSqliteFrom(database);
+
+    try {
+      raw.exec(/*sql*/ `ALTER TABLE contacts ADD COLUMN user_file TEXT`);
+    } catch {
+      /* already exists */
+    }
+  });
+}

package/src/memory/migrations/193-add-source-type-columns.ts

@@ -0,0 +1,81 @@
+import type { DrizzleDb } from "../db-connection.js";
+import { getSqliteFrom } from "../db-connection.js";
+import { tableHasColumn } from "./schema-introspection.js";
+import { withCrashRecovery } from "./validate-migration-state.js";
+
+/**
+ * Add source_type and source_message_role columns to memory_items.
+ *
+ * - source_type: "extraction" (default) or "tool" — distinguishes how the
+ *   memory was created (LLM/pattern extraction vs explicit tool/API save).
+ * - source_message_role: the role of the source message (e.g. "user",
+ *   "assistant") when the item was created via extraction.
+ *
+ * Backfills:
+ * 1. Items with verification_state = "user_confirmed" → source_type = "tool"
+ * 2. source_message_role from the earliest source message's role via subquery
+ */
+export function migrateAddSourceTypeColumns(database: DrizzleDb): void {
+  withCrashRecovery(database, "migration_add_source_type_columns_v1", () => {
+    const raw = getSqliteFrom(database);
+
+    // Add source_type column if it doesn't exist
+    if (!tableHasColumn(database, "memory_items", "source_type")) {
+      raw.exec(
+        /*sql*/ `ALTER TABLE memory_items ADD COLUMN source_type TEXT NOT NULL DEFAULT 'extraction'`,
+      );
+    }
+
+    // Add source_message_role column if it doesn't exist
+    if (!tableHasColumn(database, "memory_items", "source_message_role")) {
+      raw.exec(
+        /*sql*/ `ALTER TABLE memory_items ADD COLUMN source_message_role TEXT`,
+      );
+    }
+
+    // Backfill source_type = 'tool' for items that were explicitly saved
+    raw.exec(
+      /*sql*/ `UPDATE memory_items SET source_type = 'tool' WHERE verification_state = 'user_confirmed'`,
+    );
+
+    // Backfill source_message_role from the earliest source message's role.
+    // Only backfill where source_message_role is currently NULL and a source
+    // message exists.
+    raw.exec(/*sql*/ `
+        UPDATE memory_items
+        SET source_message_role = (
+          SELECT m.role
+          FROM memory_item_sources mis
+          JOIN messages m ON m.id = mis.message_id
+          WHERE mis.memory_item_id = memory_items.id
+          ORDER BY mis.created_at ASC
+          LIMIT 1
+        )
+        WHERE source_message_role IS NULL
+          AND EXISTS (
+            SELECT 1
+            FROM memory_item_sources mis
+            WHERE mis.memory_item_id = memory_items.id
+          )
+      `);
+  });
+}
+
+/**
+ * Reverse: drop source_type and source_message_role columns.
+ *
+ * SQLite doesn't support DROP COLUMN on older versions, but modern SQLite
+ * (3.35.0+) does. Since Bun bundles a modern SQLite, this is safe.
+ */
+export function migrateAddSourceTypeColumnsDown(database: DrizzleDb): void {
+  const raw = getSqliteFrom(database);
+
+  if (tableHasColumn(database, "memory_items", "source_type")) {
+    raw.exec(/*sql*/ `ALTER TABLE memory_items DROP COLUMN source_type`);
+  }
+  if (tableHasColumn(database, "memory_items", "source_message_role")) {
+    raw.exec(
+      /*sql*/ `ALTER TABLE memory_items DROP COLUMN source_message_role`,
+    );
+  }
+}

package/src/memory/migrations/index.ts

@@ -128,6 +128,10 @@ export { migrateConversationForkLineage } from "./183-add-conversation-fork-line
 export { migrateLlmRequestLogProvider } from "./184-llm-request-log-provider.js";
 export { migrateScheduleQuietFlag } from "./188-schedule-quiet-flag.js";
 export { migrateDropSimplifiedMemory } from "./189-drop-simplified-memory.js";
+export { migrateCallSessionSkipDisclosure } from "./190-call-session-skip-disclosure.js";
+export { migrateBackfillAudioAttachmentMimeTypes } from "./191-backfill-audio-attachment-mime-types.js";
+export { migrateContactsUserFileColumn } from "./192-contacts-user-file-column.js";
+export { migrateAddSourceTypeColumns } from "./193-add-source-type-columns.js";
 export {
   MIGRATION_REGISTRY,
   type MigrationRegistryEntry,
@@ -135,6 +139,7 @@ export {
 } from "./registry.js";
 export {
   recoverCrashedMigrations,
+  rollbackMemoryMigration,
   validateMigrationState,
   withCrashRecovery,
 } from "./validate-migration-state.js";