@withbuddi/buddi 0.1.0-pre.27 → 0.1.0-pre.29

package/node_modules/@buddi/core/migrations/060_owner_places.sql

@@ -0,0 +1,30 @@
+-- The owner's places (docs/dashboard.md, Settings → Profile; docs/plugins.md
+-- §9b, owner.places).
+--
+-- Home, Work and any other place the owner names, beside the timezone: a
+-- label, the address as they typed it, what the geocoder matched it to (a
+-- town, with its region and country), coordinates and the place's own zone.
+-- Plugins that declare `owner:places` read them through ctx.buddi; nothing
+-- here is written by a plugin.
+create table if not exists core.owner_places (
+  id text primary key,
+  label text not null check (length(label) between 1 and 40),
+  address text check (address is null or length(address) <= 200),
+  place_name text not null,
+  latitude double precision not null check (latitude between -90 and 90),
+  longitude double precision not null check (longitude between -180 and 180),
+  timezone text,
+  position integer not null default 0,
+  created_at timestamptz not null default now(),
+  updated_at timestamptz not null default now()
+);
+create unique index if not exists owner_places_label on core.owner_places (lower(label));
+
+-- Places brought in once from somewhere they used to live (the weather
+-- plugin's Home and Work). One row per source: present means done, so a place
+-- the owner removes afterwards is not brought back at the next start.
+create table if not exists core.owner_place_imports (
+  source text primary key,
+  imported integer not null default 0,
+  at timestamptz not null default now()
+);

package/node_modules/@buddi/core/migrations/061_owner_formats.sql

@@ -0,0 +1,10 @@
+-- How the owner reads times and dates (docs/dashboard.md, Settings → Profile).
+--
+-- time_format: `12h` (2:05 PM) or `24h` (14:05); null is Auto, the browser's
+--              own locale.
+-- date_format: `short` (Thu, Oct 1), `long` (Thursday, 1 October) or `iso`
+--              (2026-10-01); null is Auto.
+-- Every date and time the dashboard draws goes through one formatter that
+-- reads these, and every agent is told them beside the timezone.
+alter table core.owner add column if not exists time_format text check (time_format in ('12h', '24h'));
+alter table core.owner add column if not exists date_format text check (date_format in ('short', 'long', 'iso'));

package/node_modules/@buddi/core/migrations/062_group_deleted.sql

@@ -0,0 +1,7 @@
+-- Deleting a group, with a short way back (docs/groups.md, "Deleting a group").
+--
+-- A delete marks the row first: the group leaves every list at once and can
+-- be restored for a minute. After that the gateway removes it for good — its
+-- conversations, their messages and requests, its members, and what the room
+-- remembered. The agents themselves are never touched.
+alter table core.groups add column if not exists deleted_at timestamptz null;

package/node_modules/@buddi/core/migrations/063_provider_account_limits.sql

@@ -0,0 +1,20 @@
+-- A model account a provider has rate-limited (docs/providers.md, "Rate limits").
+--
+-- One row per account while a limit stands: a spent daily quota (scope 'day',
+-- until the provider's reset) or a burst window a provider named (scope
+-- 'burst'). Calls to an account under a daily limit are refused here instead
+-- of hammering the provider; the row goes when the window passes, when a call
+-- succeeds, or when the account is edited. Never a key, never a body: the
+-- facts are the ones the owner reads ("Gemini's free tier allows 20 requests
+-- a day").
+create table if not exists core.provider_account_limits (
+  account_id text primary key references core.provider_accounts(id) on delete cascade,
+  scope text not null check (scope in ('day', 'burst')),
+  until timestamptz not null,
+  quota integer null,
+  unit text null check (unit is null or unit in ('requests', 'tokens')),
+  free_tier boolean not null default false,
+  provider text null,
+  model text null,
+  recorded_at timestamptz not null default now()
+);

package/node_modules/@buddi/core/migrations/064_mission_coalesce.sql

@@ -0,0 +1,12 @@
+-- Coalescing a mission's event-driven runs (docs/architecture.md, "Sentinels").
+--
+-- A mission that opts in gathers the occurrences enqueued for the same agent
+-- within a short window into one run carrying all of them: the first one
+-- waits `coalesce_window_seconds` for company, each arrival pushes the run
+-- back by the window again, and none waits longer than
+-- `coalesce_max_wait_seconds` after the first. Null is the default: one run
+-- per occurrence, as before.
+alter table core.missions add column if not exists coalesce_window_seconds integer null
+  check (coalesce_window_seconds is null or coalesce_window_seconds between 1 and 3600);
+alter table core.missions add column if not exists coalesce_max_wait_seconds integer null
+  check (coalesce_max_wait_seconds is null or coalesce_max_wait_seconds between 1 and 86400);

package/node_modules/@buddi/core/migrations/065_api_tokens.sql

@@ -0,0 +1,28 @@
+-- Owner API tokens (docs/api.md, "Authentication").
+--
+-- A token lets a script or another program call the dashboard's HTTP API as
+-- the owner, with `Authorization: Bearer <token>`, without a browser session.
+-- Made and revoked from Settings → API tokens or `buddi api-token`.
+--
+-- token_hash: sha256 of the token, hex. The token itself is shown once, when
+--             it is made, and never stored: a copy of this table cannot be
+--             replayed. Tokens are 32 random bytes, so a plain digest is
+--             enough; there is nothing to brute-force.
+-- hint:       the token's last four characters, so the owner can tell two
+--             apart in a list. Not enough to guess the rest.
+-- scope:      what it may do. Only 'owner' exists: the owner, minus what
+--             api-routes.ts refuses a token (deciding approvals, grants,
+--             installing code, access and secrets).
+-- created_via: where it was made.
+-- last_used_at: written at most once a minute.
+-- A revoked token's row is deleted.
+create table if not exists core.api_tokens (
+  id uuid primary key,
+  name text not null check (char_length(name) between 1 and 60),
+  token_hash text not null unique check (token_hash ~ '^[0-9a-f]{64}$'),
+  hint text not null check (char_length(hint) = 4),
+  scope text not null default 'owner' check (scope in ('owner')),
+  created_via text not null check (created_via in ('dashboard', 'cli')),
+  created_at timestamptz not null,
+  last_used_at timestamptz
+);