aimeat 2.6.1 → 3.0.0

package/dist/src/storage/providers/postgres-kysely/methods/outbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound.js","sourceRoot":"","sources":["../../../../../../src/storage/providers/postgres-kysely/methods/outbound.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,GAAG,EAAmB,MAAM,QAAQ,CAAC;AAQ9C,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,SAAS,SAAS,CAAC,CAAyB;IAC1C,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;QACpB,IAAI,EAAG,CAAC,CAAC,IAAwB,IAAI,EAAE;QACvC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;QAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;QACpC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,CAAyB;IAC1C,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,CAAC,CAAC,OAA0B;QACrC,IAAI,EAAE,CAAC,CAAC,IAAoB;QAC5B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;QAChC,MAAM,EAAE,CAAC,CAAC,MAAwB;QAClC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QAC9B,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAyD;IACnF,KAAK,CAAC,qBAAqB,CAA8B,GAA0B;QACjF,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;YACjD,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;YACtE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAoB;YACxD,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5E,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;YAC9E,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;SACnD,CAAC,CAAC,OAAO,EAAE,CAAC;IACf,CAAC;IAED,KAAK,CAAC,kBAAkB,CAA8B,EAAU;QAC9D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1G,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,0BAA0B,CAA8B,SAAiB,EAAE,KAAa;QAC5F,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE;aAC9D,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,SAAS,CAAC;aAClC,KAAK,CAAC,GAAG,CAAS,oBAAoB,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;aAC5D,gBAAgB,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,0BAA0B,CAA8B,WAAmB;QAC/E,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE;aAC9D,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,WAAW,CAAC;aACtC,gBAAgB,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,oBAAoB,CAA8B,KAA2B;QACjF,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACnG,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/E,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzI,IAAI,KAAK,CAAC,GAAG;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAS,aAAa,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1F,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,qBAAqB,CAA8B,KAA2B;QAClF,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAQ,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7H,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/E,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzI,IAAI,KAAK,CAAC,GAAG;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAS,aAAa,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,qBAAqB,CAA8B,GAA0B;QACjF,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC;YAC/C,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI;YAChD,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAoB;YACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;YAC9C,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;YAC9E,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAA8B,EAAU;QACjE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC9F,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,qBAAqB,CAA8B,GAA0B;QACjF,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;YACjD,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;YAC9D,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;YAC1D,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;YAChE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;SACnD,CAAC,CAAC,OAAO,EAAE,CAAC;IACf,CAAC;IAED,KAAK,CAAC,oBAAoB,CAA8B,KAAuB;QAC7E,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACnG,IAAI,KAAK,CAAC,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,IAAI;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,qBAAqB,CAA8B,KAAuB;QAC9E,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAQ,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7H,IAAI,KAAK,CAAC,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,IAAI;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,0BAA0B,CAA8B,SAAiB,EAAE,QAAgB;QAC/F,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC;aAClD,MAAM,CAAC,GAAG,CAAQ,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;aACrC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,SAAS,CAAC;aAClC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC;aAClC,gBAAgB,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;CACF,CAAC"}

package/dist/src/storage/providers/postgres-kysely/methods/owner-cascade.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @file src/storage/providers/postgres-kysely/methods/owner-cascade.ts
+ * @description The owner deletion cascade for the Postgres backend, mirroring
+ *   {@link ../../sqlite/methods/owner-cascade.js the SQLite one} table for table.
+ *
+ *   WHY THIS FILE EXISTS. Until 2026-08-11 `deleteOwner` on Postgres cleared five tables (Memory,
+ *   Agent, Ghii, Session, Owner) where SQLite cleared forty-one, and both returned true. Postgres is
+ *   the production backend, so deleting an account left that person's work, disputes, wallet
+ *   transactions, board posts, files, consents, telemetry, OAuth tokens and push subscriptions in
+ *   place. A deleted username is released for reuse (decision 2026-08-10), which puts the whole
+ *   weight of erasure on this cascade.
+ *
+ *   WHY NOBODY SAW IT. Two gates were built for exactly this and both missed. The static one
+ *   (scripts/check-storage-parity.ts) only inspects columns named ownerGaii/ownerName/buyerOwner/
+ *   sellerOwner/agentGaii/flaggedBy, and the wallet ledger's column is `gaii`. The dynamic one
+ *   (test/unit/storage-conformance.test.ts) compares both providers, but it passed `databaseUrl` to a
+ *   factory whose option is `dbUrl`, and test/ sits outside tsconfig's include, so the wrong key never
+ *   failed to compile: the Postgres arm silently reported "unavailable" and the suite compared SQLite
+ *   against itself for its whole life.
+ *
+ *   KEY COLUMNS ARE NOT THE SURROGATE ids. DisputeAudit.disputeId references Dispute.disputeId and
+ *   BoardPost/BoardSubscription.boardId references Board.boardId — both business keys, not the `id`
+ *   column. AgentTaskEvent.taskId is the exception: it references AgentTask.id. Getting this wrong
+ *   deletes nothing and still returns success.
+ *
+ * @structure
+ *   - cascadeDeleteIdentityData(db, gaii) — every owner-scoped table for ONE identity (GHII or GAII)
+ *   - deleteOwnerCascade(db, name) — agents + GHIIs through the cascade, then the owner-level tables
+ * @usage Called by identityMethods.deleteOwner inside one db.transaction().
+ * @version-history
+ *   v1.0.0 — 2026-08-11 — Initial: Postgres reaches parity with the SQLite cascade, and the whole
+ *     delete runs in one transaction (GAP-001's first half).
+ */
+import type { Kysely } from 'kysely';
+import type { DB } from '../db-types.js';
+/** A Kysely handle: the root connection or an open transaction. */
+type Db = Kysely<DB>;
+/**
+ * Delete every owner-scoped row belonging to ONE identity. Called once per agent GAII and once per
+ * owner GHII, exactly like the SQLite cascade: owner sessions and app grants both resolve to the
+ * GHII, so most of what a person has is written under that identity rather than an agent's.
+ */
+export declare function cascadeDeleteIdentityData(db: Db, gaii: string): Promise<void>;
+/**
+ * Delete an owner and everything owner-scoped underneath. Runs every agent GAII and every GHII
+ * through {@link cascadeDeleteIdentityData}, then clears the tables keyed by the owner NAME.
+ * Returns true when an Owner row was actually removed.
+ */
+export declare function deleteOwnerCascade(db: Db, name: string): Promise<boolean>;
+export {};
+//# sourceMappingURL=owner-cascade.d.ts.map

package/dist/src/storage/providers/postgres-kysely/methods/owner-cascade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-cascade.d.ts","sourceRoot":"","sources":["../../../../../../src/storage/providers/postgres-kysely/methods/owner-cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAEzC,mEAAmE;AACnE,KAAK,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;AAErB;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA6EnF;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAsC/E"}

package/dist/src/storage/providers/postgres-kysely/methods/owner-cascade.js

@@ -0,0 +1,111 @@
+/**
+ * Delete every owner-scoped row belonging to ONE identity. Called once per agent GAII and once per
+ * owner GHII, exactly like the SQLite cascade: owner sessions and app grants both resolve to the
+ * GHII, so most of what a person has is written under that identity rather than an agent's.
+ */
+export async function cascadeDeleteIdentityData(db, gaii) {
+    // Memory and micro-memory
+    await db.deleteFrom('Memory').where('ownerGaii', '=', gaii).execute();
+    await db.deleteFrom('MicroMemory').where('gaii', '=', gaii).execute();
+    // Actions offered by this identity
+    await db.deleteFrom('Action').where('providerGaii', '=', gaii).execute();
+    // Work, and the disputes hanging off each work item. DisputeAudit keys on Dispute.disputeId.
+    const workRows = await db.selectFrom('Work').select('trackingCode')
+        .where(eb => eb.or([eb('providerGaii', '=', gaii), eb('requesterGaii', '=', gaii)])).execute();
+    const trackingCodes = workRows.map(w => w.trackingCode);
+    if (trackingCodes.length) {
+        const disputes = await db.selectFrom('Dispute').select('disputeId')
+            .where('trackingCode', 'in', trackingCodes).execute();
+        const disputeIds = disputes.map(d => d.disputeId);
+        if (disputeIds.length)
+            await db.deleteFrom('DisputeAudit').where('disputeId', 'in', disputeIds).execute();
+        await db.deleteFrom('Dispute').where('trackingCode', 'in', trackingCodes).execute();
+    }
+    await db.deleteFrom('Work')
+        .where(eb => eb.or([eb('providerGaii', '=', gaii), eb('requesterGaii', '=', gaii)])).execute();
+    // Wallet ledger
+    await db.deleteFrom('Transaction').where('gaii', '=', gaii).execute();
+    // Boards: posts authored, subscriptions held, then boards owned (with their posts and subscriptions)
+    await db.deleteFrom('BoardPost').where('authorGaii', '=', gaii).execute();
+    await db.deleteFrom('BoardSubscription').where('gaii', '=', gaii).execute();
+    const boards = await db.selectFrom('Board').select('boardId').where('ownerGaii', '=', gaii).execute();
+    const boardIds = boards.map(b => b.boardId);
+    if (boardIds.length) {
+        await db.deleteFrom('BoardPost').where('boardId', 'in', boardIds).execute();
+        await db.deleteFrom('BoardSubscription').where('boardId', 'in', boardIds).execute();
+    }
+    await db.deleteFrom('Board').where('ownerGaii', '=', gaii).execute();
+    // Consent and its audit trail
+    await db.deleteFrom('ConsentAudit').where('ownerGaii', '=', gaii).execute();
+    await db.deleteFrom('Consent').where('ownerGaii', '=', gaii).execute();
+    // Files
+    await db.deleteFrom('StorageFile').where('ownerGaii', '=', gaii).execute();
+    // Matches on either side
+    await db.deleteFrom('Match')
+        .where(eb => eb.or([eb('profileA', '=', gaii), eb('profileB', '=', gaii)])).execute();
+    // Moderation flags raised by this identity
+    await db.deleteFrom('Flag').where('flaggedBy', '=', gaii).execute();
+    // Escrow holds
+    await db.deleteFrom('EscrowHold').where('fromGaii', '=', gaii).execute();
+    // One-time keys
+    await db.deleteFrom('Otk').where('ownerGaii', '=', gaii).execute();
+    // OAuth tokens and approvals
+    await db.deleteFrom('OAuthRefreshToken').where('gaii', '=', gaii).execute();
+    await db.deleteFrom('OAuthApproval').where('gaii', '=', gaii).execute();
+    // Tasks and their event log. AgentTaskEvent.taskId references AgentTask.id (the surrogate), unlike
+    // the dispute and board relations above.
+    const tasks = await db.selectFrom('AgentTask').select('id').where('agentGaii', '=', gaii).execute();
+    const taskIds = tasks.map(t => t.id);
+    if (taskIds.length)
+        await db.deleteFrom('AgentTaskEvent').where('taskId', 'in', taskIds).execute();
+    await db.deleteFrom('AgentTask').where('agentGaii', '=', gaii).execute();
+    // Directives, activity, messages, telemetry, webhook log, onboarding
+    await db.deleteFrom('AgentDirective').where('agentGaii', '=', gaii).execute();
+    await db.deleteFrom('AgentActivity').where('agentGaii', '=', gaii).execute();
+    await db.deleteFrom('AgentMessage').where('agentGaii', '=', gaii).execute();
+    await db.deleteFrom('TelemetryEvent').where('agentGaii', '=', gaii).execute();
+    await db.deleteFrom('WebhookDeliveryLog').where('agentGaii', '=', gaii).execute();
+    await db.deleteFrom('AgentOnboarding').where('agentGaii', '=', gaii).execute();
+    // Sharing groups
+    await db.deleteFrom('SharingGroup').where('ownerGaii', '=', gaii).execute();
+}
+/**
+ * Delete an owner and everything owner-scoped underneath. Runs every agent GAII and every GHII
+ * through {@link cascadeDeleteIdentityData}, then clears the tables keyed by the owner NAME.
+ * Returns true when an Owner row was actually removed.
+ */
+export async function deleteOwnerCascade(db, name) {
+    // Per-identity data: agents first, then the person's own GHIIs.
+    const agents = await db.selectFrom('Agent').select('gaii').where('owner', '=', name).execute();
+    for (const a of agents)
+        await cascadeDeleteIdentityData(db, a.gaii);
+    await db.deleteFrom('Agent').where('owner', '=', name).execute();
+    const ghiis = await db.selectFrom('Ghii').select('ghii').where('ownerName', '=', name).execute();
+    for (const g of ghiis)
+        await cascadeDeleteIdentityData(db, g.ghii);
+    await db.deleteFrom('Ghii').where('ownerName', '=', name).execute();
+    // Personal nodes carry mailbox items, push subscriptions and notification preferences by node id.
+    const nodes = await db.selectFrom('PersonalNode').select('id').where('ownerName', '=', name).execute();
+    const nodeIds = nodes.map(n => n.id);
+    if (nodeIds.length) {
+        await db.deleteFrom('MailboxItem').where('personalNodeId', 'in', nodeIds).execute();
+        await db.deleteFrom('PersonalPushSubscription').where('personalNodeId', 'in', nodeIds).execute();
+        await db.deleteFrom('NotificationPreference').where('personalNodeId', 'in', nodeIds).execute();
+    }
+    await db.deleteFrom('PersonalNode').where('ownerName', '=', name).execute();
+    // Push subscriptions held directly by the owner
+    await db.deleteFrom('PushSubscription').where('ownerName', '=', name).execute();
+    await db.deleteFrom('PersonalPushSubscription').where('ownerName', '=', name).execute();
+    // Marketplace
+    await db.deleteFrom('Listing').where('ownerName', '=', name).execute();
+    await db.deleteFrom('Purchase')
+        .where(eb => eb.or([eb('buyerOwner', '=', name), eb('sellerOwner', '=', name)])).execute();
+    // Chat instances and pending email verifications
+    await db.deleteFrom('ChatInstance').where('ownerName', '=', name).execute();
+    await db.deleteFrom('EmailVerification').where('ownerName', '=', name).execute();
+    // Live sessions: a surviving refresh token for a deleted account is a live credential.
+    await db.deleteFrom('Session').where('owner', '=', name).execute();
+    const r = await db.deleteFrom('Owner').where('name', '=', name).executeTakeFirst();
+    return Number(r.numDeletedRows ?? 0) > 0;
+}
+//# sourceMappingURL=owner-cascade.js.map

package/dist/src/storage/providers/postgres-kysely/methods/owner-cascade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-cascade.js","sourceRoot":"","sources":["../../../../../../src/storage/providers/postgres-kysely/methods/owner-cascade.ts"],"names":[],"mappings":"AAuCA;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAAM,EAAE,IAAY;IAClE,0BAA0B;IAC1B,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACtE,MAAM,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEtE,mCAAmC;IACnC,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEzE,6FAA6F;IAC7F,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;SAChE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjG,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACxD,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;aAChE,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,MAAM;YAAE,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1G,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;SACxB,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAEjG,gBAAgB;IAChB,MAAM,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEtE,qGAAqG;IACrG,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1E,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACtG,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;QAC5E,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAErE,8BAA8B;IAC9B,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5E,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEvE,QAAQ;IACR,MAAM,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAE3E,yBAAyB;IACzB,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;SACzB,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAExF,2CAA2C;IAC3C,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEpE,eAAe;IACf,MAAM,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEzE,gBAAgB;IAChB,MAAM,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEnE,6BAA6B;IAC7B,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5E,MAAM,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAExE,mGAAmG;IACnG,yCAAyC;IACzC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACpG,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACnG,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEzE,qEAAqE;IACrE,MAAM,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9E,MAAM,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7E,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5E,MAAM,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9E,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAClF,MAAM,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAE/E,iBAAiB;IACjB,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAM,EAAE,IAAY;IAC3D,gEAAgE;IAChE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/F,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,MAAM,yBAAyB,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEjE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACjG,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,yBAAyB,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEpE,kGAAkG;IAClG,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACvG,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QACpF,MAAM,EAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QACjG,MAAM,EAAE,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAE5E,gDAAgD;IAChD,MAAM,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAChF,MAAM,EAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAExF,cAAc;IACd,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACvE,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;SAC5B,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAE7F,iDAAiD;IACjD,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5E,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEjF,uFAAuF;IACvF,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IAEnE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACnF,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC"}

package/dist/src/storage/providers/postgres-kysely/methods/wallet.d.ts

@@ -3,6 +3,7 @@ import type { PostgresKyselyStorage } from '../index.js';
 export declare const walletMethods: {
     addTransaction(this: PostgresKyselyStorage, tx: WalletTransaction): Promise<WalletTransaction>;
     getTransactions(this: PostgresKyselyStorage, gaii: string, limit?: number): Promise<WalletTransaction[]>;
+    findTransactionByTrackingCode(this: PostgresKyselyStorage, gaii: string, trackingCode: string, type: string): Promise<WalletTransaction | null>;
     listAllTransactions(this: PostgresKyselyStorage, limit?: number): Promise<WalletTransaction[]>;
     deleteTransactions(this: PostgresKyselyStorage, gaii: string): Promise<number>;
     debitBalance(this: PostgresKyselyStorage, gaii: string, amount: number): Promise<boolean>;

package/dist/src/storage/providers/postgres-kysely/methods/wallet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../../../../../src/storage/providers/postgres-kysely/methods/wallet.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AA8BzD,eAAO,MAAM,aAAa;yBACG,qBAAqB,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;0BAQxE,qBAAqB,QAAQ,MAAM,mBAAe,OAAO,CAAC,iBAAiB,EAAE,CAAC;8BAI1E,qBAAqB,mBAAkB,OAAO,CAAC,iBAAiB,EAAE,CAAC;6BAIpE,qBAAqB,QAAQ,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;uBAM3D,qBAAqB,QAAQ,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;wBAYrE,qBAAqB,QAAQ,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;8BAUhE,qBAAqB,QAAQ,MAAM,UAAU,MAAM,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;0BAgBtF,qBAAqB,YAAY,MAAM,UAAU,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAiBvH,CAAC"}
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../../../../../src/storage/providers/postgres-kysely/methods/wallet.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AA8BzD,eAAO,MAAM,aAAa;yBACG,qBAAqB,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;0BAQxE,qBAAqB,QAAQ,MAAM,mBAAe,OAAO,CAAC,iBAAiB,EAAE,CAAC;wCAIhE,qBAAqB,QAAQ,MAAM,gBAAgB,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;8BAMrH,qBAAqB,mBAAkB,OAAO,CAAC,iBAAiB,EAAE,CAAC;6BAIpE,qBAAqB,QAAQ,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;uBAM3D,qBAAqB,QAAQ,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;wBAYrE,qBAAqB,QAAQ,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;8BAUhE,qBAAqB,QAAQ,MAAM,UAAU,MAAM,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;0BAiBtF,qBAAqB,YAAY,MAAM,UAAU,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAkBvH,CAAC"}

package/dist/src/storage/providers/postgres-kysely/methods/wallet.js

@@ -50,6 +50,12 @@ export const walletMethods = {
         const rows = await this.db.selectFrom('Transaction').selectAll().where('gaii', '=', gaii).orderBy('timestamp', 'desc').limit(limit).execute();
         return rows.map(mapTx);
     },
+    async findTransactionByTrackingCode(gaii, trackingCode, type) {
+        const r = await this.db.selectFrom('Transaction').selectAll()
+            .where('gaii', '=', gaii).where('trackingCode', '=', trackingCode).where('type', '=', type)
+            .executeTakeFirst();
+        return r ? mapTx(r) : null;
+    },
     async listAllTransactions(limit = 10000) {
         const rows = await this.db.selectFrom('Transaction').selectAll().orderBy('timestamp', 'desc').limit(Math.min(limit, 10000)).execute();
         return rows.map(mapTx);
@@ -92,7 +98,8 @@ export const walletMethods = {
         const ghii = await resolveGhii(this.db, gaii);
         if (!ghii)
             return 0;
-        return this.db.transaction().execute(async (trx) => {
+        return this.transaction(async () => {
+            const trx = this.db;
             const row = await trx.selectFrom('Ghii').select('morselBalance').where('ghii', '=', ghii).forUpdate().executeTakeFirst();
             if (!row)
                 return 0;
@@ -116,7 +123,8 @@ export const walletMethods = {
             return false;
         if (fromGhii === toGhii)
             return true; // Same owner — no-op
-        return this.db.transaction().execute(async (trx) => {
+        return this.transaction(async () => {
+            const trx = this.db;
             const debit = await trx.updateTable('Ghii')
                 .set({ morselBalance: sql `COALESCE("morselBalance", 0) - ${amount}` })
                 .where('ghii', '=', fromGhii).where(sql `COALESCE("morselBalance", 0) >= ${amount}`)

package/dist/src/storage/providers/postgres-kysely/methods/wallet.js.map

@@ -1 +1 @@
-{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../../../../../src/storage/providers/postgres-kysely/methods/wallet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAU,GAAG,EAAE,MAAM,QAAQ,CAAC;AAMrC,SAAS,KAAK,CAAC,CAA0B;IACvC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;QACxD,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,SAAS;QAC5F,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,SAAS;QAC3C,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;KAC7F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,EAAc,EAAE,QAAgB;IACzD,mDAAmD;IACnD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvE,2EAA2E;IAC3E,IAAI,KAAK,GAAG,QAAQ,CAAC;IACrB,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QAClC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACxG,OAAO,GAAG,EAAE,IAAI,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,KAAK,CAAC,cAAc,CAA8B,EAAqB;QACrE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;YAC3D,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM;YAC5D,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,IAAI,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,YAAY,IAAI,IAAI;YACpF,aAAa,EAAE,EAAE,CAAC,aAAa,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC;SAC3E,CAAC,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,eAAe,CAA8B,IAAY,EAAE,KAAK,GAAG,EAAE;QACzE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9I,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,mBAAmB,CAA8B,KAAK,GAAG,KAAK;QAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACtI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,kBAAkB,CAA8B,IAAY;QAChE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC9F,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,YAAY,CAA8B,IAAY,EAAE,MAAc;QAC1E,oGAAoG;QACpG,uEAAuE;QACvE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;aACxC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAA,kCAAkC,MAAM,EAAE,EAAE,CAAC;aACrE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAS,mCAAmC,MAAM,EAAE,CAAC;aACvF,gBAAgB,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,aAAa,CAA8B,IAAY,EAAE,MAAc;QAC3E,uGAAuG;QACvG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;aACxC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAA,kCAAkC,MAAM,EAAE,EAAE,CAAC;aACrE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,mBAAmB,CAA8B,IAAY,EAAE,MAAc,EAAE,GAAW;QAC9F,sGAAsG;QACtG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACjD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,gBAAgB,EAAE,CAAC;YACzH,IAAI,CAAC,GAAG;gBAAE,OAAO,CAAC,CAAC;YACnB,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC1C,IAAI,UAAU,IAAI,GAAG;gBAAE,OAAO,CAAC,CAAC;YAChC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC;YACxD,IAAI,YAAY,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC;YAChC,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAA,kCAAkC,YAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC7I,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,eAAe,CAA8B,QAAgB,EAAE,MAAc,EAAE,MAAc;QACjG,8GAA8G;QAC9G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB;QAC3D,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACjD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;iBACxC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAA,kCAAkC,MAAM,EAAE,EAAE,CAAC;iBACrE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAS,mCAAmC,MAAM,EAAE,CAAC;iBAC3F,gBAAgB,EAAE,CAAC;YACtB,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAA,kCAAkC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YACzI,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../../../../../src/storage/providers/postgres-kysely/methods/wallet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAU,GAAG,EAAE,MAAM,QAAQ,CAAC;AAMrC,SAAS,KAAK,CAAC,CAA0B;IACvC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;QACxD,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,SAAS;QAC5F,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,SAAS;QAC3C,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;KAC7F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,EAAc,EAAE,QAAgB;IACzD,mDAAmD;IACnD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvE,2EAA2E;IAC3E,IAAI,KAAK,GAAG,QAAQ,CAAC;IACrB,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QAClC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACxG,OAAO,GAAG,EAAE,IAAI,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,KAAK,CAAC,cAAc,CAA8B,EAAqB;QACrE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;YAC3D,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM;YAC5D,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,IAAI,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,YAAY,IAAI,IAAI;YACpF,aAAa,EAAE,EAAE,CAAC,aAAa,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC;SAC3E,CAAC,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,eAAe,CAA8B,IAAY,EAAE,KAAK,GAAG,EAAE;QACzE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9I,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,6BAA6B,CAA8B,IAAY,EAAE,YAAoB,EAAE,IAAY;QAC/G,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE;aAC1D,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;aAC1F,gBAAgB,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IACD,KAAK,CAAC,mBAAmB,CAA8B,KAAK,GAAG,KAAK;QAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACtI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,kBAAkB,CAA8B,IAAY;QAChE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC9F,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,YAAY,CAA8B,IAAY,EAAE,MAAc;QAC1E,oGAAoG;QACpG,uEAAuE;QACvE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;aACxC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAA,kCAAkC,MAAM,EAAE,EAAE,CAAC;aACrE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAS,mCAAmC,MAAM,EAAE,CAAC;aACvF,gBAAgB,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,aAAa,CAA8B,IAAY,EAAE,MAAc;QAC3E,uGAAuG;QACvG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;aACxC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAA,kCAAkC,MAAM,EAAE,EAAE,CAAC;aACrE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,mBAAmB,CAA8B,IAAY,EAAE,MAAc,EAAE,GAAW;QAC9F,sGAAsG;QACtG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,gBAAgB,EAAE,CAAC;YACzH,IAAI,CAAC,GAAG;gBAAE,OAAO,CAAC,CAAC;YACnB,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC1C,IAAI,UAAU,IAAI,GAAG;gBAAE,OAAO,CAAC,CAAC;YAChC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC;YACxD,IAAI,YAAY,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC;YAChC,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAA,kCAAkC,YAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC7I,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,eAAe,CAA8B,QAAgB,EAAE,MAAc,EAAE,MAAc;QACjG,8GAA8G;QAC9G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB;QAC3D,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;iBACxC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAA,kCAAkC,MAAM,EAAE,EAAE,CAAC;iBACrE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAS,mCAAmC,MAAM,EAAE,CAAC;iBAC3F,gBAAgB,EAAE,CAAC;YACtB,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAA,kCAAkC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YACzI,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/src/storage/providers/postgres-kysely/migrations/0024_principal_provider_clients.sql

@@ -0,0 +1,42 @@
+-- 0024_principal_provider_clients.sql
+-- Let a principal bring their OWN app (TARGET-057).
+--
+-- WHY. Until now every user of a node reached a provider through one registration: the node's. That
+-- works, and it costs something real. To LinkedIn or X, a thousand users of one node are one
+-- application. They share its rate limit, they share its reputation, and at X they share its BILL,
+-- because pay-per-use charges the app rather than the member. A principal who brings their own app
+-- spends their own allowance and carries their own name.
+--
+-- The client id and secret still authorise nothing on their own. They let the node ASK a person for
+-- consent; the consent is still given at the provider, and the resulting token is still the
+-- person's, still encrypted, still keyed to the principal.
+
+ALTER TABLE "ProviderClient" ADD COLUMN IF NOT EXISTS "principal" TEXT;
+
+-- An instance-scoped registration has an instance and no principal; a brought-along client has a
+-- principal and (for a fixed-endpoint provider) no instance. Neither is the other's missing value.
+ALTER TABLE "ProviderClient" ALTER COLUMN "instance" DROP NOT NULL;
+
+-- The existing key covered (provider, instance) while instance was mandatory. With principal rows
+-- present it has to stop applying to them, or one row per provider is all anyone gets.
+DROP INDEX IF EXISTS "ProviderClient_provider_instance_key";
+CREATE UNIQUE INDEX IF NOT EXISTS "ProviderClient_provider_instance_key"
+    ON "ProviderClient"("provider", "instance") WHERE "instance" IS NOT NULL AND "principal" IS NULL;
+
+-- One client per principal per provider. Bringing a second replaces the first rather than leaving
+-- two and a coin toss over which one a refresh uses.
+CREATE UNIQUE INDEX IF NOT EXISTS "ProviderClient_provider_principal_key"
+    ON "ProviderClient"("provider", "principal") WHERE "principal" IS NOT NULL;
+
+-- WHICH client minted a connection's token.
+--
+-- This column is the whole reason the feature is safe to ship. A token can only be refreshed by the
+-- client that issued it. Without remembering the issuer, a user who brings their own app gets a
+-- connection that authorises perfectly and then fails its first renewal with an invalid_grant that
+-- names nothing, hours later, looking exactly like a revoked account.
+--
+-- NULL means the node's configured client: the default, and every connection made before today.
+ALTER TABLE "Connection" ADD COLUMN IF NOT EXISTS "providerClientId" TEXT;
+
+CREATE INDEX IF NOT EXISTS "Connection_providerClientId_idx"
+    ON "Connection"("providerClientId") WHERE "providerClientId" IS NOT NULL;

package/dist/src/storage/providers/postgres-kysely/migrations/0025_publish_metrics.sql

@@ -0,0 +1,33 @@
+-- 0025_publish_metrics.sql
+-- How a published item is actually doing (TARGET-057).
+--
+-- A TIME SERIES, not a column on the attempt. "How did that post do" is a question about a curve. A
+-- field holding only the latest value can say a post has 40 likes and can never say whether that
+-- took an hour or a month, which is the part that decides what to publish next.
+--
+-- APPEND-ONLY. A series that can be edited is not a record of anything. Corrections are new rows.
+--
+-- NULL IS NOT ZERO. A platform that does not report impressions to the author reports nothing, and
+-- writing 0 there would invent a measurement nobody made. Every normalised column is nullable and
+-- means "not reported" when null.
+CREATE TABLE IF NOT EXISTS "PublishMetric" (
+    "id"          TEXT NOT NULL,
+    "attemptId"   TEXT NOT NULL,
+    -- When THIS node asked. Not when the platform computed it, which is rarely knowable.
+    "fetchedAt"   TEXT NOT NULL,
+    "impressions" INTEGER,
+    "likes"       INTEGER,
+    "comments"    INTEGER,
+    -- Reblogs, reposts, retweets, shares. Cousins rather than synonyms, named once so that a
+    -- comparison across platforms is possible at all.
+    "shares"      INTEGER,
+    -- Exactly what the provider returned, so a wrong mapping stays discoverable instead of becoming
+    -- the only surviving record.
+    "raw"         JSONB NOT NULL DEFAULT '{}'::jsonb,
+
+    CONSTRAINT "PublishMetric_pkey" PRIMARY KEY ("id")
+);
+
+-- The two reads this table exists for: the newest sample per attempt, and one attempt's whole curve.
+CREATE INDEX IF NOT EXISTS "PublishMetric_attempt_time_idx"
+    ON "PublishMetric"("attemptId", "fetchedAt" DESC);

package/dist/src/storage/providers/postgres-kysely/migrations/0026_finance.sql

@@ -0,0 +1,130 @@
+-- 0026_finance.sql
+--
+-- Company-in-a-box phase 1: the generic finance domain — sales invoices (Finvoice 3.0),
+-- accounting vouchers (tositteet), the node-global VAT-code registry, fiscal years and
+-- the atomic counters behind gapless invoice/voucher numbering.
+--
+-- Design notes:
+--   * Tables are prefixed Finance* because "invoice" already means the io.aimeat.invoice
+--     payment RAIL in src/commerce/ (settle offline); these are bookkeeping documents.
+--   * Money is integer minor units (cents); VAT rates are basis points (2550 = 25.5 %).
+--     Rates live in FinanceVatCode with validity windows — the reduced rate changed
+--     14 % -> 13.5 % on 2026-01-01, which is why rates are data, not code.
+--   * FinanceVoucher is append-only: no UPDATE path except the attachments list
+--     (added evidence never changes the booking). Corrections are new vouchers with
+--     "reversesVoucherId" set.
+--   * "numberSeq" is NULL while an invoice is a draft; the number is claimed atomically
+--     from FinanceCounter on the draft->sent transition so the sequence stays gapless
+--     (a deleted draft never consumes a number). The partial unique index enforces
+--     one number per owner among sent invoices only.
+--   * No foreign keys, matching the rest of the schema: "trackingCode" joins to the
+--     commerce books (memory records), "externalRef" to Stripe/bank ids.
+
+CREATE TABLE IF NOT EXISTS "FinanceInvoice" (
+  "id" TEXT NOT NULL,
+  "ownerGhii" TEXT NOT NULL,
+  "organismId" TEXT,
+  "type" TEXT NOT NULL DEFAULT 'invoice',
+  "creditsInvoiceId" TEXT,
+  "status" TEXT NOT NULL DEFAULT 'draft',
+  "numberSeq" INTEGER,
+  "invoiceNumber" TEXT,
+  "seller" JSONB NOT NULL,
+  "buyer" JSONB NOT NULL,
+  "lines" JSONB NOT NULL DEFAULT '[]',
+  "currency" TEXT NOT NULL DEFAULT 'EUR',
+  "totalNetMinor" BIGINT NOT NULL DEFAULT 0,
+  "totalVatMinor" BIGINT NOT NULL DEFAULT 0,
+  "totalGrossMinor" BIGINT NOT NULL DEFAULT 0,
+  "vatBreakdown" JSONB NOT NULL DEFAULT '[]',
+  "referenceNumber" TEXT,
+  "paymentTermsDays" INTEGER NOT NULL DEFAULT 14,
+  "invoiceDate" TEXT,
+  "dueDate" TEXT,
+  "deliveryMethod" TEXT,
+  "sentAt" TEXT,
+  "deliveryStatus" TEXT,
+  "operatorMessageId" TEXT,
+  "finvoiceXmlKey" TEXT,
+  "paidAt" TEXT,
+  "paidTrackingCode" TEXT,
+  "externalRef" TEXT,
+  "fiscalYearId" TEXT,
+  "notes" TEXT,
+  "createdAt" TEXT NOT NULL,
+  "updatedAt" TEXT NOT NULL,
+  CONSTRAINT "FinanceInvoice_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX IF NOT EXISTS "FinanceInvoice_owner_idx" ON "FinanceInvoice"("ownerGhii", "status");
+CREATE INDEX IF NOT EXISTS "FinanceInvoice_owner_date_idx" ON "FinanceInvoice"("ownerGhii", "invoiceDate");
+CREATE UNIQUE INDEX IF NOT EXISTS "FinanceInvoice_owner_seq_key" ON "FinanceInvoice"("ownerGhii", "numberSeq") WHERE "numberSeq" IS NOT NULL;
+CREATE INDEX IF NOT EXISTS "FinanceInvoice_reference_idx" ON "FinanceInvoice"("ownerGhii", "referenceNumber") WHERE "referenceNumber" IS NOT NULL;
+
+CREATE TABLE IF NOT EXISTS "FinanceVoucher" (
+  "id" TEXT NOT NULL,
+  "ownerGhii" TEXT NOT NULL,
+  "organismId" TEXT,
+  "fiscalYearId" TEXT NOT NULL,
+  "voucherNumber" INTEGER NOT NULL,
+  "date" TEXT NOT NULL,
+  "description" TEXT NOT NULL,
+  "direction" TEXT NOT NULL,
+  "source" TEXT NOT NULL,
+  "amountMinor" BIGINT NOT NULL,
+  "currency" TEXT NOT NULL DEFAULT 'EUR',
+  "vatBreakdown" JSONB NOT NULL DEFAULT '[]',
+  "counterparty" TEXT,
+  "invoiceId" TEXT,
+  "trackingCode" TEXT,
+  "externalRef" TEXT,
+  "attachments" JSONB NOT NULL DEFAULT '[]',
+  "reversesVoucherId" TEXT,
+  "createdAt" TEXT NOT NULL,
+  "updatedAt" TEXT NOT NULL,
+  CONSTRAINT "FinanceVoucher_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "FinanceVoucher_year_number_key" ON "FinanceVoucher"("ownerGhii", "fiscalYearId", "voucherNumber");
+CREATE INDEX IF NOT EXISTS "FinanceVoucher_owner_date_idx" ON "FinanceVoucher"("ownerGhii", "date");
+-- Webhook idempotency lookup: one booking per external event per owner.
+CREATE UNIQUE INDEX IF NOT EXISTS "FinanceVoucher_external_key" ON "FinanceVoucher"("ownerGhii", "externalRef") WHERE "externalRef" IS NOT NULL;
+
+CREATE TABLE IF NOT EXISTS "FinanceVatCode" (
+  "id" TEXT NOT NULL,
+  "countryCode" TEXT NOT NULL DEFAULT 'FI',
+  "category" TEXT NOT NULL,
+  "rateBp" INTEGER NOT NULL,
+  "label" JSONB NOT NULL,
+  "validFrom" TEXT NOT NULL,
+  "validTo" TEXT,
+  "createdAt" TEXT NOT NULL,
+  "updatedAt" TEXT NOT NULL,
+  CONSTRAINT "FinanceVatCode_pkey" PRIMARY KEY ("id")
+);
+
+CREATE TABLE IF NOT EXISTS "FinanceFiscalYear" (
+  "id" TEXT NOT NULL,
+  "ownerGhii" TEXT NOT NULL,
+  "organismId" TEXT,
+  "label" TEXT NOT NULL,
+  "startDate" TEXT NOT NULL,
+  "endDate" TEXT NOT NULL,
+  "locked" BOOLEAN NOT NULL DEFAULT false,
+  "lockedAt" TEXT,
+  "createdAt" TEXT NOT NULL,
+  "updatedAt" TEXT NOT NULL,
+  CONSTRAINT "FinanceFiscalYear_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX IF NOT EXISTS "FinanceFiscalYear_owner_idx" ON "FinanceFiscalYear"("ownerGhii", "startDate");
+
+-- Named counters: kind is 'invoice' (per owner) or 'voucher:{fiscalYearId}'.
+-- The next value is claimed with a single INSERT ... ON CONFLICT DO UPDATE RETURNING,
+-- so two concurrent sends can never share a number.
+CREATE TABLE IF NOT EXISTS "FinanceCounter" (
+  "ownerGhii" TEXT NOT NULL,
+  "kind" TEXT NOT NULL,
+  "value" INTEGER NOT NULL DEFAULT 0,
+  CONSTRAINT "FinanceCounter_pkey" PRIMARY KEY ("ownerGhii", "kind")
+);

package/dist/src/storage/providers/postgres-kysely/migrations/0027_outbound.sql

@@ -0,0 +1,52 @@
+-- 0027_outbound.sql
+--
+-- Company-in-a-box phase 2: the outbound messaging door — recipient registry and the
+-- append-only send log.
+--
+--   * OutboundContact is the structural anti-spam device: /v1/outbound/send accepts a
+--     contact id, never a free address, so every recipient is a saved entry carrying its
+--     own opt-out and bounce state. One entry per owner per email (unique index on the
+--     lower-cased address). "optOutToken" backs the public unsubscribe link, so it gets
+--     its own unique index and must be unguessable.
+--   * OutboundMessage is the send log (GDPR-answerable "what left this node"), append-only.
+--     The daily limit counts rows here in SQL — a gate and a display must not drift.
+
+CREATE TABLE IF NOT EXISTS "OutboundContact" (
+  "id" TEXT NOT NULL,
+  "ownerGhii" TEXT NOT NULL,
+  "name" TEXT NOT NULL,
+  "email" TEXT NOT NULL,
+  "ghii" TEXT,
+  "tags" JSONB NOT NULL DEFAULT '[]',
+  "optedOut" BOOLEAN NOT NULL DEFAULT false,
+  "optOutAt" TEXT,
+  "optOutToken" TEXT NOT NULL,
+  "bounceCount" INTEGER NOT NULL DEFAULT 0,
+  "suppressedAt" TEXT,
+  "notes" TEXT,
+  "createdAt" TEXT NOT NULL,
+  "updatedAt" TEXT NOT NULL,
+  CONSTRAINT "OutboundContact_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "OutboundContact_owner_email_key" ON "OutboundContact"("ownerGhii", lower("email"));
+CREATE UNIQUE INDEX IF NOT EXISTS "OutboundContact_token_key" ON "OutboundContact"("optOutToken");
+CREATE INDEX IF NOT EXISTS "OutboundContact_owner_idx" ON "OutboundContact"("ownerGhii", "createdAt");
+
+CREATE TABLE IF NOT EXISTS "OutboundMessage" (
+  "id" TEXT NOT NULL,
+  "ownerGhii" TEXT NOT NULL,
+  "contactId" TEXT NOT NULL,
+  "channel" TEXT NOT NULL,
+  "kind" TEXT NOT NULL,
+  "subject" TEXT NOT NULL,
+  "templateId" TEXT,
+  "status" TEXT NOT NULL,
+  "error" TEXT,
+  "invoiceId" TEXT,
+  "createdAt" TEXT NOT NULL,
+  CONSTRAINT "OutboundMessage_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX IF NOT EXISTS "OutboundMessage_owner_idx" ON "OutboundMessage"("ownerGhii", "createdAt");
+CREATE INDEX IF NOT EXISTS "OutboundMessage_contact_idx" ON "OutboundMessage"("contactId", "createdAt");

package/dist/src/storage/providers/postgres-kysely/migrations/0028_companies.sql

@@ -0,0 +1,44 @@
+-- 0028_companies.sql
+--
+-- The company registry (company-in-a-box): a company is a first-class entity like an app,
+-- and creating one reserves {slug}.co.<apex>. The co family is to companies what the apps
+-- family is to apps.
+--
+--   * The slug lives HERE rather than in "SubdomainSite" on purpose. That table holds one
+--     flat label namespace shared by the apps family, and a company named "tinki" must not
+--     collide with an app named "tinki" — they are different hosts. Separate registry,
+--     separate namespace, no coordination needed between the two.
+--   * The unique index on lower("slug") is the arbitration: two founders claiming the same
+--     name at the same moment cannot both win, without any read-then-write window.
+--   * The legal-identity columns are the seller-party snapshot an invoice needs, so a founder
+--     types them once here and every later invoice prefills from them.
+
+CREATE TABLE IF NOT EXISTS "Company" (
+  "id" TEXT NOT NULL,
+  "slug" TEXT NOT NULL,
+  "ownerGhii" TEXT NOT NULL,
+  "name" TEXT NOT NULL,
+  "description" TEXT,
+  "organismId" TEXT,
+  "frontPageKind" TEXT NOT NULL DEFAULT 'none',
+  "frontPageTarget" TEXT NOT NULL DEFAULT '',
+  "businessId" TEXT,
+  "vatId" TEXT,
+  "streetAddress" TEXT,
+  "postalCode" TEXT,
+  "city" TEXT,
+  "country" TEXT,
+  "email" TEXT,
+  "phone" TEXT,
+  "iban" TEXT,
+  "bic" TEXT,
+  "einvoiceAddress" TEXT,
+  "einvoiceOperator" TEXT,
+  "status" TEXT NOT NULL DEFAULT 'active',
+  "createdAt" TEXT NOT NULL,
+  "updatedAt" TEXT NOT NULL,
+  CONSTRAINT "Company_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "Company_slug_key" ON "Company"(lower("slug"));
+CREATE INDEX IF NOT EXISTS "Company_owner_idx" ON "Company"("ownerGhii", "createdAt");

package/dist/src/storage/providers/postgres-kysely/migrations/0029_company_smtp.sql

@@ -0,0 +1,30 @@
+-- 0029_company_smtp.sql
+--
+-- Per-company sending identity for the outbound door: a company sends under its OWN domain
+-- and mailbox instead of the node's shared sender.
+--
+--   * Its own table rather than columns on "Company": most companies never set one, and a
+--     row that exists only when configured makes "does this company send as itself?" a
+--     presence question rather than a nullable-column question.
+--   * "passwordEnc" is AES-256-GCM ciphertext (services/encryption.ts), never plaintext —
+--     the same discipline the connection credentials use. The node refuses to store an SMTP
+--     password at all when AIMEAT_ENCRYPTION_KEY is unset, rather than writing it in the clear.
+--   * companyId is the primary key: one sending identity per company.
+
+CREATE TABLE IF NOT EXISTS "CompanySmtp" (
+  "companyId" TEXT NOT NULL,
+  "ownerGhii" TEXT NOT NULL,
+  "host" TEXT NOT NULL,
+  "port" INTEGER NOT NULL DEFAULT 587,
+  "secure" BOOLEAN NOT NULL DEFAULT false,
+  "username" TEXT,
+  "passwordEnc" TEXT,
+  "fromAddress" TEXT NOT NULL,
+  "fromName" TEXT,
+  "replyTo" TEXT,
+  "createdAt" TEXT NOT NULL,
+  "updatedAt" TEXT NOT NULL,
+  CONSTRAINT "CompanySmtp_pkey" PRIMARY KEY ("companyId")
+);
+
+CREATE INDEX IF NOT EXISTS "CompanySmtp_owner_idx" ON "CompanySmtp"("ownerGhii");