forge-openclaw-plugin 0.2.24 → 0.2.26

package/dist/server/server/migrations/009_true_calendar_events.sql

@@ -0,0 +1,195 @@
+CREATE TABLE IF NOT EXISTS forge_events (
+  id TEXT PRIMARY KEY,
+  preferred_connection_id TEXT,
+  preferred_calendar_id TEXT,
+  ownership TEXT NOT NULL DEFAULT 'forge',
+  origin_type TEXT NOT NULL DEFAULT 'native',
+  status TEXT NOT NULL DEFAULT 'confirmed',
+  title TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  location TEXT NOT NULL DEFAULT '',
+  start_at TEXT NOT NULL,
+  end_at TEXT NOT NULL,
+  timezone TEXT NOT NULL DEFAULT 'UTC',
+  is_all_day INTEGER NOT NULL DEFAULT 0,
+  availability TEXT NOT NULL DEFAULT 'busy',
+  event_type TEXT NOT NULL DEFAULT '',
+  categories_json TEXT NOT NULL DEFAULT '[]',
+  deleted_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  FOREIGN KEY (preferred_connection_id) REFERENCES calendar_connections(id) ON DELETE SET NULL,
+  FOREIGN KEY (preferred_calendar_id) REFERENCES calendar_calendars(id) ON DELETE SET NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_forge_events_time
+  ON forge_events(start_at, end_at);
+
+CREATE INDEX IF NOT EXISTS idx_forge_events_calendar
+  ON forge_events(preferred_calendar_id, start_at, end_at);
+
+CREATE TABLE IF NOT EXISTS forge_event_sources (
+  id TEXT PRIMARY KEY,
+  forge_event_id TEXT NOT NULL,
+  provider TEXT NOT NULL,
+  connection_id TEXT,
+  calendar_id TEXT,
+  remote_calendar_id TEXT,
+  remote_event_id TEXT NOT NULL,
+  remote_uid TEXT,
+  recurrence_instance_id TEXT,
+  is_master_recurring INTEGER NOT NULL DEFAULT 0,
+  remote_href TEXT,
+  remote_etag TEXT,
+  sync_state TEXT NOT NULL DEFAULT 'synced',
+  raw_payload_json TEXT NOT NULL DEFAULT '{}',
+  last_synced_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  FOREIGN KEY (forge_event_id) REFERENCES forge_events(id) ON DELETE CASCADE,
+  FOREIGN KEY (connection_id) REFERENCES calendar_connections(id) ON DELETE SET NULL,
+  FOREIGN KEY (calendar_id) REFERENCES calendar_calendars(id) ON DELETE SET NULL,
+  UNIQUE(provider, connection_id, calendar_id, remote_event_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_forge_event_sources_event
+  ON forge_event_sources(forge_event_id);
+
+CREATE INDEX IF NOT EXISTS idx_forge_event_sources_remote
+  ON forge_event_sources(connection_id, calendar_id, remote_event_id);
+
+CREATE TABLE IF NOT EXISTS forge_event_links (
+  id TEXT PRIMARY KEY,
+  forge_event_id TEXT NOT NULL,
+  entity_type TEXT NOT NULL,
+  entity_id TEXT NOT NULL,
+  relationship_type TEXT NOT NULL DEFAULT 'context',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  FOREIGN KEY (forge_event_id) REFERENCES forge_events(id) ON DELETE CASCADE,
+  UNIQUE(forge_event_id, entity_type, entity_id, relationship_type)
+);
+
+CREATE INDEX IF NOT EXISTS idx_forge_event_links_entity
+  ON forge_event_links(entity_type, entity_id);
+
+CREATE TABLE IF NOT EXISTS forge_event_metadata (
+  id TEXT PRIMARY KEY,
+  forge_event_id TEXT NOT NULL,
+  namespace TEXT NOT NULL,
+  key TEXT NOT NULL,
+  value_json TEXT NOT NULL DEFAULT 'null',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  FOREIGN KEY (forge_event_id) REFERENCES forge_events(id) ON DELETE CASCADE,
+  UNIQUE(forge_event_id, namespace, key)
+);
+
+ALTER TABLE task_timeboxes ADD COLUMN forge_event_id TEXT REFERENCES forge_events(id) ON DELETE SET NULL;
+
+INSERT INTO forge_events (
+  id,
+  preferred_connection_id,
+  preferred_calendar_id,
+  ownership,
+  origin_type,
+  status,
+  title,
+  description,
+  location,
+  start_at,
+  end_at,
+  timezone,
+  is_all_day,
+  availability,
+  event_type,
+  categories_json,
+  deleted_at,
+  created_at,
+  updated_at
+)
+SELECT
+  calendar_events.id,
+  calendar_events.connection_id,
+  calendar_events.calendar_id,
+  calendar_events.ownership,
+  calendar_connections.provider,
+  calendar_events.status,
+  calendar_events.title,
+  calendar_events.description,
+  calendar_events.location,
+  calendar_events.start_at,
+  calendar_events.end_at,
+  COALESCE(calendar_calendars.timezone, 'UTC'),
+  calendar_events.is_all_day,
+  calendar_events.availability,
+  calendar_events.event_type,
+  calendar_events.categories_json,
+  calendar_events.deleted_at,
+  calendar_events.created_at,
+  calendar_events.updated_at
+FROM calendar_events
+LEFT JOIN calendar_connections
+  ON calendar_connections.id = calendar_events.connection_id
+LEFT JOIN calendar_calendars
+  ON calendar_calendars.id = calendar_events.calendar_id
+WHERE NOT EXISTS (
+  SELECT 1 FROM forge_events WHERE forge_events.id = calendar_events.id
+);
+
+INSERT INTO forge_event_sources (
+  id,
+  forge_event_id,
+  provider,
+  connection_id,
+  calendar_id,
+  remote_calendar_id,
+  remote_event_id,
+  remote_uid,
+  recurrence_instance_id,
+  is_master_recurring,
+  remote_href,
+  remote_etag,
+  sync_state,
+  raw_payload_json,
+  last_synced_at,
+  created_at,
+  updated_at
+)
+SELECT
+  'evsrc_' || lower(hex(randomblob(5))),
+  calendar_events.id,
+  calendar_connections.provider,
+  calendar_events.connection_id,
+  calendar_events.calendar_id,
+  calendar_calendars.remote_id,
+  calendar_events.remote_id,
+  json_extract(calendar_events.raw_payload_json, '$.uid'),
+  json_extract(calendar_events.raw_payload_json, '$.recurrenceid'),
+  CASE
+    WHEN json_extract(calendar_events.raw_payload_json, '$.rrule') IS NOT NULL THEN 1
+    ELSE 0
+  END,
+  calendar_events.remote_href,
+  calendar_events.remote_etag,
+  CASE
+    WHEN calendar_events.deleted_at IS NOT NULL THEN 'deleted'
+    ELSE 'synced'
+  END,
+  calendar_events.raw_payload_json,
+  COALESCE(calendar_events.remote_updated_at, calendar_events.updated_at),
+  calendar_events.created_at,
+  calendar_events.updated_at
+FROM calendar_events
+LEFT JOIN calendar_connections
+  ON calendar_connections.id = calendar_events.connection_id
+LEFT JOIN calendar_calendars
+  ON calendar_calendars.id = calendar_events.calendar_id
+WHERE NOT EXISTS (
+  SELECT 1
+  FROM forge_event_sources
+  WHERE forge_event_sources.forge_event_id = calendar_events.id
+    AND forge_event_sources.connection_id = calendar_events.connection_id
+    AND forge_event_sources.calendar_id = calendar_events.calendar_id
+    AND forge_event_sources.remote_event_id = calendar_events.remote_id
+);

package/dist/server/server/migrations/010_calendar_selection_state.sql

@@ -0,0 +1,6 @@
+ALTER TABLE calendar_calendars
+ADD COLUMN selected_for_sync INTEGER NOT NULL DEFAULT 1;
+
+UPDATE calendar_calendars
+SET selected_for_sync = 1
+WHERE selected_for_sync IS NULL;

package/dist/server/server/migrations/011_calendar_timezone_backfill.sql

@@ -0,0 +1,11 @@
+UPDATE calendar_calendars
+SET timezone = 'UTC'
+WHERE TRIM(COALESCE(timezone, '')) = '';
+
+UPDATE forge_events
+SET timezone = 'UTC'
+WHERE TRIM(COALESCE(timezone, '')) = '';
+
+UPDATE work_block_templates
+SET timezone = 'UTC'
+WHERE TRIM(COALESCE(timezone, '')) = '';

package/dist/server/server/migrations/012_work_block_ranges.sql

@@ -0,0 +1,7 @@
+ALTER TABLE work_block_templates ADD COLUMN starts_on TEXT;
+ALTER TABLE work_block_templates ADD COLUMN ends_on TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_work_block_templates_active_window
+  ON work_block_templates(starts_on, ends_on, start_minute);
+
+DROP TABLE IF EXISTS work_block_instances;

package/dist/server/server/migrations/013_microsoft_local_auth_settings.sql

@@ -0,0 +1,8 @@
+ALTER TABLE app_settings
+  ADD COLUMN microsoft_client_id TEXT NOT NULL DEFAULT '';
+
+ALTER TABLE app_settings
+  ADD COLUMN microsoft_tenant_id TEXT NOT NULL DEFAULT 'common';
+
+ALTER TABLE app_settings
+  ADD COLUMN microsoft_redirect_uri TEXT NOT NULL DEFAULT '';

package/dist/server/server/migrations/014_note_tags_and_ephemeral.sql

@@ -0,0 +1,8 @@
+ALTER TABLE notes
+  ADD COLUMN tags_json TEXT NOT NULL DEFAULT '[]';
+
+ALTER TABLE notes
+  ADD COLUMN destroy_at TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_notes_destroy_at
+  ON notes(destroy_at);

package/dist/server/server/migrations/015_multi_user_and_strategies.sql

@@ -0,0 +1,244 @@
+CREATE TABLE IF NOT EXISTS users (
+  id TEXT PRIMARY KEY,
+  kind TEXT NOT NULL CHECK (kind IN ('human', 'bot')),
+  handle TEXT NOT NULL UNIQUE,
+  display_name TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  accent_color TEXT NOT NULL DEFAULT '#c0c1ff',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS user_access_grants (
+  id TEXT PRIMARY KEY,
+  subject_user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  target_user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  access_level TEXT NOT NULL DEFAULT 'view',
+  config_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (subject_user_id, target_user_id, access_level)
+);
+
+CREATE TABLE IF NOT EXISTS entity_owners (
+  entity_type TEXT NOT NULL,
+  entity_id TEXT NOT NULL,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  role TEXT NOT NULL DEFAULT 'owner',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (entity_type, entity_id)
+);
+
+CREATE TABLE IF NOT EXISTS strategies (
+  id TEXT PRIMARY KEY,
+  title TEXT NOT NULL,
+  overview TEXT NOT NULL DEFAULT '',
+  end_state_description TEXT NOT NULL DEFAULT '',
+  status TEXT NOT NULL DEFAULT 'active',
+  target_goal_ids_json TEXT NOT NULL DEFAULT '[]',
+  target_project_ids_json TEXT NOT NULL DEFAULT '[]',
+  linked_entities_json TEXT NOT NULL DEFAULT '[]',
+  graph_json TEXT NOT NULL DEFAULT '{"nodes":[],"edges":[]}',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_users_kind ON users(kind, display_name);
+CREATE INDEX IF NOT EXISTS idx_entity_owners_user ON entity_owners(user_id, entity_type, entity_id);
+CREATE INDEX IF NOT EXISTS idx_strategies_status ON strategies(status, updated_at DESC);
+
+INSERT OR IGNORE INTO users (
+  id,
+  kind,
+  handle,
+  display_name,
+  description,
+  accent_color,
+  created_at,
+  updated_at
+)
+VALUES (
+  'user_operator',
+  'human',
+  'operator',
+  'Operator',
+  'Primary human Forge operator.',
+  '#f4b97a',
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+);
+
+UPDATE users
+SET handle = COALESCE(
+      (
+        SELECT CASE
+          WHEN trim(lower(replace(replace(replace(operator_name, ' ', '_'), '-', '_'), '.', ''))) = '' THEN 'operator'
+          ELSE trim(lower(replace(replace(replace(operator_name, ' ', '_'), '-', '_'), '.', '')))
+        END
+        FROM app_settings
+        WHERE id = 1
+      ),
+      handle
+    ),
+    display_name = COALESCE(
+      (
+        SELECT CASE
+          WHEN trim(operator_name) = '' THEN 'Operator'
+          ELSE trim(operator_name)
+        END
+        FROM app_settings
+        WHERE id = 1
+      ),
+      display_name
+    ),
+    updated_at = CURRENT_TIMESTAMP
+WHERE id = 'user_operator';
+
+INSERT OR IGNORE INTO users (
+  id,
+  kind,
+  handle,
+  display_name,
+  description,
+  accent_color,
+  created_at,
+  updated_at
+)
+VALUES (
+  'user_forge_bot',
+  'bot',
+  'forge_bot',
+  'Forge Bot',
+  'Autonomous or semi-autonomous execution partner inside Forge.',
+  '#7dd3fc',
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+);
+
+INSERT OR IGNORE INTO users (
+  id,
+  kind,
+  handle,
+  display_name,
+  description,
+  accent_color,
+  created_at,
+  updated_at
+)
+SELECT
+  'user_human_' || lower(hex(substr(owner, 1, 16))),
+  'human',
+  trim(lower(replace(replace(replace(owner, ' ', '_'), '-', '_'), '.', ''))),
+  trim(owner),
+  'Backfilled from existing task ownership labels.',
+  '#f4b97a',
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+FROM tasks
+WHERE trim(owner) != ''
+  AND lower(trim(owner)) NOT IN (SELECT lower(display_name) FROM users)
+GROUP BY trim(owner);
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'goal', id, 'user_operator', 'owner', created_at, updated_at FROM goals;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'project', id, 'user_operator', 'owner', created_at, updated_at FROM projects;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT
+  'task',
+  tasks.id,
+  COALESCE(
+    (
+      SELECT users.id
+      FROM users
+      WHERE lower(users.display_name) = lower(trim(tasks.owner))
+         OR lower(users.handle) = lower(trim(replace(replace(replace(tasks.owner, ' ', '_'), '-', '_'), '.', '')))
+      ORDER BY CASE WHEN users.kind = 'human' THEN 0 ELSE 1 END, users.created_at
+      LIMIT 1
+    ),
+    'user_operator'
+  ),
+  'owner',
+  tasks.created_at,
+  tasks.updated_at
+FROM tasks;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'habit', id, 'user_operator', 'owner', created_at, updated_at FROM habits;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'tag', id, 'user_operator', 'owner', created_at, created_at FROM tags;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'note', id, 'user_operator', 'owner', created_at, updated_at FROM notes;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'insight', id, 'user_operator', 'owner', created_at, updated_at FROM insights;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'calendar_event', id, 'user_operator', 'owner', created_at, updated_at FROM calendar_events;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'work_block_template', id, 'user_operator', 'owner', created_at, updated_at FROM work_block_templates;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'task_timebox', id, 'user_operator', 'owner', created_at, updated_at FROM task_timeboxes;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'psyche_value', id, 'user_operator', 'owner', created_at, updated_at FROM psyche_values;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'behavior_pattern', id, 'user_operator', 'owner', created_at, updated_at FROM behavior_patterns;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'behavior', id, 'user_operator', 'owner', created_at, updated_at FROM psyche_behaviors;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'belief_entry', id, 'user_operator', 'owner', created_at, updated_at FROM belief_entries;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'mode_profile', id, 'user_operator', 'owner', created_at, updated_at FROM mode_profiles;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'mode_guide_session', id, 'user_operator', 'owner', created_at, updated_at FROM mode_guide_sessions;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'event_type', id, 'user_operator', 'owner', created_at, updated_at FROM event_types;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'emotion_definition', id, 'user_operator', 'owner', created_at, updated_at FROM emotion_definitions;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'trigger_report', id, 'user_operator', 'owner', created_at, updated_at FROM trigger_reports;
+
+INSERT OR IGNORE INTO entity_owners (entity_type, entity_id, user_id, role, created_at, updated_at)
+SELECT 'strategy', id, 'user_operator', 'owner', created_at, updated_at FROM strategies;
+
+INSERT OR IGNORE INTO user_access_grants (
+  id,
+  subject_user_id,
+  target_user_id,
+  access_level,
+  config_json,
+  created_at,
+  updated_at
+)
+SELECT
+  'grant_' || lower(hex(randomblob(8))),
+  subject_users.id,
+  target_users.id,
+  CASE
+    WHEN subject_users.id = target_users.id THEN 'manage'
+    ELSE 'view'
+  END,
+  CASE
+    WHEN subject_users.id = target_users.id THEN '{"self":true,"mutable":true}'
+    ELSE '{"discoverable":true,"linkedEntities":true}'
+  END,
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+FROM users AS subject_users
+CROSS JOIN users AS target_users;

package/dist/server/server/migrations/016_health_companion.sql

@@ -0,0 +1,158 @@
+CREATE TABLE IF NOT EXISTS companion_pairing_sessions (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  label TEXT NOT NULL DEFAULT '',
+  pairing_token TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending',
+  capability_flags_json TEXT NOT NULL DEFAULT '[]',
+  device_name TEXT,
+  platform TEXT,
+  app_version TEXT,
+  api_base_url TEXT NOT NULL DEFAULT '',
+  last_seen_at TEXT,
+  last_sync_at TEXT,
+  last_sync_error TEXT,
+  paired_at TEXT,
+  expires_at TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_companion_pairing_token
+  ON companion_pairing_sessions(pairing_token);
+
+CREATE INDEX IF NOT EXISTS idx_companion_pairing_user
+  ON companion_pairing_sessions(user_id, status, updated_at DESC);
+
+CREATE TABLE IF NOT EXISTS health_import_runs (
+  id TEXT PRIMARY KEY,
+  pairing_session_id TEXT REFERENCES companion_pairing_sessions(id) ON DELETE SET NULL,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  source TEXT NOT NULL,
+  source_device TEXT NOT NULL DEFAULT '',
+  status TEXT NOT NULL DEFAULT 'completed',
+  payload_summary_json TEXT NOT NULL DEFAULT '{}',
+  imported_count INTEGER NOT NULL DEFAULT 0,
+  created_count INTEGER NOT NULL DEFAULT 0,
+  updated_count INTEGER NOT NULL DEFAULT 0,
+  merged_count INTEGER NOT NULL DEFAULT 0,
+  error_message TEXT,
+  imported_at TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_health_import_runs_user
+  ON health_import_runs(user_id, imported_at DESC);
+
+CREATE TABLE IF NOT EXISTS health_sleep_sessions (
+  id TEXT PRIMARY KEY,
+  external_uid TEXT NOT NULL,
+  pairing_session_id TEXT REFERENCES companion_pairing_sessions(id) ON DELETE SET NULL,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  source TEXT NOT NULL,
+  source_type TEXT NOT NULL DEFAULT 'healthkit',
+  source_device TEXT NOT NULL DEFAULT '',
+  started_at TEXT NOT NULL,
+  ended_at TEXT NOT NULL,
+  time_in_bed_seconds INTEGER NOT NULL DEFAULT 0,
+  asleep_seconds INTEGER NOT NULL DEFAULT 0,
+  awake_seconds INTEGER NOT NULL DEFAULT 0,
+  sleep_score REAL,
+  regularity_score REAL,
+  bedtime_consistency_minutes INTEGER,
+  wake_consistency_minutes INTEGER,
+  stage_breakdown_json TEXT NOT NULL DEFAULT '[]',
+  recovery_metrics_json TEXT NOT NULL DEFAULT '{}',
+  links_json TEXT NOT NULL DEFAULT '[]',
+  annotations_json TEXT NOT NULL DEFAULT '{}',
+  provenance_json TEXT NOT NULL DEFAULT '{}',
+  derived_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (user_id, source, external_uid)
+);
+
+CREATE INDEX IF NOT EXISTS idx_health_sleep_user
+  ON health_sleep_sessions(user_id, started_at DESC);
+
+CREATE TABLE IF NOT EXISTS health_workout_sessions (
+  id TEXT PRIMARY KEY,
+  external_uid TEXT NOT NULL,
+  pairing_session_id TEXT REFERENCES companion_pairing_sessions(id) ON DELETE SET NULL,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  source TEXT NOT NULL,
+  source_type TEXT NOT NULL DEFAULT 'healthkit',
+  workout_type TEXT NOT NULL,
+  source_device TEXT NOT NULL DEFAULT '',
+  started_at TEXT NOT NULL,
+  ended_at TEXT NOT NULL,
+  duration_seconds INTEGER NOT NULL DEFAULT 0,
+  active_energy_kcal REAL,
+  total_energy_kcal REAL,
+  distance_meters REAL,
+  step_count INTEGER,
+  exercise_minutes REAL,
+  average_heart_rate REAL,
+  max_heart_rate REAL,
+  subjective_effort INTEGER,
+  mood_before TEXT NOT NULL DEFAULT '',
+  mood_after TEXT NOT NULL DEFAULT '',
+  meaning_text TEXT NOT NULL DEFAULT '',
+  planned_context TEXT NOT NULL DEFAULT '',
+  social_context TEXT NOT NULL DEFAULT '',
+  links_json TEXT NOT NULL DEFAULT '[]',
+  tags_json TEXT NOT NULL DEFAULT '[]',
+  annotations_json TEXT NOT NULL DEFAULT '{}',
+  provenance_json TEXT NOT NULL DEFAULT '{}',
+  derived_json TEXT NOT NULL DEFAULT '{}',
+  generated_from_habit_id TEXT REFERENCES habits(id) ON DELETE SET NULL,
+  generated_from_check_in_id TEXT REFERENCES habit_check_ins(id) ON DELETE SET NULL,
+  reconciliation_status TEXT NOT NULL DEFAULT 'standalone',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (user_id, source, external_uid)
+);
+
+CREATE INDEX IF NOT EXISTS idx_health_workouts_user
+  ON health_workout_sessions(user_id, started_at DESC);
+
+CREATE TABLE IF NOT EXISTS health_daily_summaries (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  date_key TEXT NOT NULL,
+  summary_type TEXT NOT NULL,
+  metrics_json TEXT NOT NULL DEFAULT '{}',
+  derived_json TEXT NOT NULL DEFAULT '{}',
+  source TEXT NOT NULL DEFAULT 'derived',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (user_id, date_key, summary_type)
+);
+
+CREATE INDEX IF NOT EXISTS idx_health_daily_summaries_user
+  ON health_daily_summaries(user_id, date_key DESC, summary_type);
+
+ALTER TABLE habits
+  ADD COLUMN generated_health_event_template_json TEXT NOT NULL DEFAULT '{}';
+
+ALTER TABLE forge_events
+  ADD COLUMN place_label TEXT NOT NULL DEFAULT '';
+
+ALTER TABLE forge_events
+  ADD COLUMN place_address TEXT NOT NULL DEFAULT '';
+
+ALTER TABLE forge_events
+  ADD COLUMN place_timezone TEXT NOT NULL DEFAULT '';
+
+ALTER TABLE forge_events
+  ADD COLUMN place_latitude REAL;
+
+ALTER TABLE forge_events
+  ADD COLUMN place_longitude REAL;
+
+ALTER TABLE forge_events
+  ADD COLUMN place_source TEXT NOT NULL DEFAULT '';
+
+ALTER TABLE forge_events
+  ADD COLUMN place_external_id TEXT NOT NULL DEFAULT '';

package/dist/server/server/migrations/016_strategy_contracts_and_user_graph.sql

@@ -0,0 +1,22 @@
+ALTER TABLE strategies ADD COLUMN is_locked INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE strategies ADD COLUMN locked_at TEXT;
+ALTER TABLE strategies ADD COLUMN locked_by_user_id TEXT REFERENCES users(id) ON DELETE SET NULL;
+
+CREATE INDEX IF NOT EXISTS idx_strategies_locked_by_user ON strategies(locked_by_user_id, updated_at DESC);
+
+DELETE FROM user_access_grants
+WHERE rowid NOT IN (
+  SELECT MIN(rowid)
+  FROM user_access_grants
+  GROUP BY subject_user_id, target_user_id
+);
+
+UPDATE user_access_grants
+SET access_level = 'manage',
+    config_json = CASE
+      WHEN subject_user_id = target_user_id THEN
+        '{"self":true,"mutable":true,"linkedEntities":true,"rights":{"discoverable":true,"canListUsers":true,"canReadProfile":true,"canReadEntities":true,"canSearchEntities":true,"canLinkEntities":true,"canAffectEntities":true,"canManageStrategies":true,"canCreateOnBehalf":true,"canViewMetrics":true,"canViewActivity":true}}'
+      ELSE
+        '{"self":false,"mutable":false,"linkedEntities":true,"rights":{"discoverable":true,"canListUsers":true,"canReadProfile":true,"canReadEntities":true,"canSearchEntities":true,"canLinkEntities":true,"canAffectEntities":true,"canManageStrategies":true,"canCreateOnBehalf":true,"canViewMetrics":true,"canViewActivity":true}}'
+    END,
+    updated_at = CURRENT_TIMESTAMP;