latticesql 3.3.2 → 3.3.3

package/dist/cli.js

@@ -61766,6 +61766,44 @@ async function reconcileCloudMemberAccess(db) {
       );
     }
   }
+  const memberSystemGrants = [
+    ["_lattice_gui_meta", "SELECT, INSERT, UPDATE"],
+    ["_lattice_gui_column_meta", "SELECT, INSERT, UPDATE"],
+    ["_lattice_gui_audit", "SELECT, INSERT"],
+    ["__lattice_user_identity", "SELECT, INSERT, UPDATE"]
+  ];
+  for (const [tbl, privs] of memberSystemGrants) {
+    await runAsyncOrSync(
+      db.adapter,
+      `DO $LATTICE$ BEGIN
+         IF to_regclass('${tbl}') IS NOT NULL THEN
+           EXECUTE 'GRANT ${privs} ON "${tbl}" TO ${MEMBER_GROUP}';
+         END IF;
+       END $LATTICE$`
+    );
+  }
+  try {
+    await runAsyncOrSync(
+      db.adapter,
+      `GRANT EXECUTE ON FUNCTION json_extract(text, text), strftime(text, text) TO ${MEMBER_GROUP}`
+    );
+  } catch (err) {
+    console.warn(
+      "[reconcileCloudMemberAccess] could not grant EXECUTE on polyfills (will retry next open):",
+      err instanceof Error ? err.message : String(err)
+    );
+  }
+  for (const table of registered) {
+    if (table.startsWith("__lattice_") || table.startsWith("_lattice_")) continue;
+    const cols = db.getRegisteredColumns(table);
+    if (cols && !("deleted_at" in cols)) {
+      const q3 = `"${table.replace(/"/g, '""')}"`;
+      await runAsyncOrSync(
+        db.adapter,
+        `ALTER TABLE ${q3} ADD COLUMN IF NOT EXISTS "deleted_at" TEXT`
+      );
+    }
+  }
 }
 async function secureNewCloudTable(db, table, pk) {
   if (db.getDialect() !== "postgres") return;
@@ -61791,14 +61829,6 @@ async function secureCloud(db) {
     await secureNewCloudTable(db, table, db.getPrimaryKey(table));
   }
   await reconcileCloudMemberAccess(db);
-  await runAsyncOrSync(
-    db.adapter,
-    `DO $LATTICE$ BEGIN
-       IF to_regclass('__lattice_user_identity') IS NOT NULL THEN
-         EXECUTE 'GRANT SELECT, INSERT, UPDATE ON "__lattice_user_identity" TO ${MEMBER_GROUP}';
-       END IF;
-     END $LATTICE$`
-  );
 }
 
 // src/gui/meta-gen.ts
@@ -67783,7 +67813,7 @@ function printHelp() {
   );
 }
 function getVersion() {
-  if (true) return "3.3.2";
+  if (true) return "3.3.3";
   try {
     const pkgPath = new URL("../package.json", import.meta.url).pathname;
     const pkg = JSON.parse(readFileSync18(pkgPath, "utf-8"));

package/dist/index.cjs

@@ -54016,6 +54016,44 @@ async function reconcileCloudMemberAccess(db) {
       );
     }
   }
+  const memberSystemGrants = [
+    ["_lattice_gui_meta", "SELECT, INSERT, UPDATE"],
+    ["_lattice_gui_column_meta", "SELECT, INSERT, UPDATE"],
+    ["_lattice_gui_audit", "SELECT, INSERT"],
+    ["__lattice_user_identity", "SELECT, INSERT, UPDATE"]
+  ];
+  for (const [tbl, privs] of memberSystemGrants) {
+    await runAsyncOrSync(
+      db.adapter,
+      `DO $LATTICE$ BEGIN
+         IF to_regclass('${tbl}') IS NOT NULL THEN
+           EXECUTE 'GRANT ${privs} ON "${tbl}" TO ${MEMBER_GROUP}';
+         END IF;
+       END $LATTICE$`
+    );
+  }
+  try {
+    await runAsyncOrSync(
+      db.adapter,
+      `GRANT EXECUTE ON FUNCTION json_extract(text, text), strftime(text, text) TO ${MEMBER_GROUP}`
+    );
+  } catch (err) {
+    console.warn(
+      "[reconcileCloudMemberAccess] could not grant EXECUTE on polyfills (will retry next open):",
+      err instanceof Error ? err.message : String(err)
+    );
+  }
+  for (const table of registered) {
+    if (table.startsWith("__lattice_") || table.startsWith("_lattice_")) continue;
+    const cols = db.getRegisteredColumns(table);
+    if (cols && !("deleted_at" in cols)) {
+      const q3 = `"${table.replace(/"/g, '""')}"`;
+      await runAsyncOrSync(
+        db.adapter,
+        `ALTER TABLE ${q3} ADD COLUMN IF NOT EXISTS "deleted_at" TEXT`
+      );
+    }
+  }
 }
 async function secureNewCloudTable(db, table, pk) {
   if (db.getDialect() !== "postgres") return;
@@ -54041,14 +54079,6 @@ async function secureCloud(db) {
     await secureNewCloudTable(db, table, db.getPrimaryKey(table));
   }
   await reconcileCloudMemberAccess(db);
-  await runAsyncOrSync(
-    db.adapter,
-    `DO $LATTICE$ BEGIN
-       IF to_regclass('__lattice_user_identity') IS NOT NULL THEN
-         EXECUTE 'GRANT SELECT, INSERT, UPDATE ON "__lattice_user_identity" TO ${MEMBER_GROUP}';
-       END IF;
-     END $LATTICE$`
-  );
 }
 
 // src/index.ts

package/dist/index.js

@@ -53829,6 +53829,44 @@ async function reconcileCloudMemberAccess(db) {
       );
     }
   }
+  const memberSystemGrants = [
+    ["_lattice_gui_meta", "SELECT, INSERT, UPDATE"],
+    ["_lattice_gui_column_meta", "SELECT, INSERT, UPDATE"],
+    ["_lattice_gui_audit", "SELECT, INSERT"],
+    ["__lattice_user_identity", "SELECT, INSERT, UPDATE"]
+  ];
+  for (const [tbl, privs] of memberSystemGrants) {
+    await runAsyncOrSync(
+      db.adapter,
+      `DO $LATTICE$ BEGIN
+         IF to_regclass('${tbl}') IS NOT NULL THEN
+           EXECUTE 'GRANT ${privs} ON "${tbl}" TO ${MEMBER_GROUP}';
+         END IF;
+       END $LATTICE$`
+    );
+  }
+  try {
+    await runAsyncOrSync(
+      db.adapter,
+      `GRANT EXECUTE ON FUNCTION json_extract(text, text), strftime(text, text) TO ${MEMBER_GROUP}`
+    );
+  } catch (err) {
+    console.warn(
+      "[reconcileCloudMemberAccess] could not grant EXECUTE on polyfills (will retry next open):",
+      err instanceof Error ? err.message : String(err)
+    );
+  }
+  for (const table of registered) {
+    if (table.startsWith("__lattice_") || table.startsWith("_lattice_")) continue;
+    const cols = db.getRegisteredColumns(table);
+    if (cols && !("deleted_at" in cols)) {
+      const q3 = `"${table.replace(/"/g, '""')}"`;
+      await runAsyncOrSync(
+        db.adapter,
+        `ALTER TABLE ${q3} ADD COLUMN IF NOT EXISTS "deleted_at" TEXT`
+      );
+    }
+  }
 }
 async function secureNewCloudTable(db, table, pk) {
   if (db.getDialect() !== "postgres") return;
@@ -53854,14 +53892,6 @@ async function secureCloud(db) {
     await secureNewCloudTable(db, table, db.getPrimaryKey(table));
   }
   await reconcileCloudMemberAccess(db);
-  await runAsyncOrSync(
-    db.adapter,
-    `DO $LATTICE$ BEGIN
-       IF to_regclass('__lattice_user_identity') IS NOT NULL THEN
-         EXECUTE 'GRANT SELECT, INSERT, UPDATE ON "__lattice_user_identity" TO ${MEMBER_GROUP}';
-       END IF;
-     END $LATTICE$`
-  );
 }
 
 // src/index.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "latticesql",
-  "version": "3.3.2",
+  "version": "3.3.3",
   "description": "Persistent structured memory for AI agent systems — pluggable SQLite or Postgres backend, LLM context bridge",
   "type": "module",
   "main": "./dist/index.js",