mcpscraper-memory-db 1.0.0

package/dist/db/scheduled-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/db/scheduled-actions.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto'\nimport { ensureSchema, query } from './pool'\nimport type { ScheduleCadence } from '../lib/schedule-cadence'\n\nexport type ScheduledActionStatus = 'active' | 'paused' | 'deleted' | 'completed'\n\nexport interface ScheduledActionRecord {\n  id: string\n  identity: string\n  description: string\n  vault: string\n  cadence: ScheduleCadence\n  timeOfDay: string | null\n  timezone: string\n  status: ScheduledActionStatus\n  nextRunAt: string\n  lastRunAt: string | null\n  lastRunStatus: string | null\n  createdAt: string\n  updatedAt: string\n  system: string | null\n}\n\ninterface RawRow {\n  id: string\n  identity: string\n  description: string\n  vault: string\n  cadence: string\n  time_of_day: string | null\n  timezone: string\n  status: string\n  next_run_at: string\n  last_run_at: string | null\n  last_run_status: string | null\n  created_at: string\n  updated_at: string\n  system: string | null\n}\n\nfunction mapRow(r: RawRow): ScheduledActionRecord {\n  return {\n    id: r.id,\n    identity: r.identity,\n    description: r.description,\n    vault: r.vault,\n    cadence: r.cadence as ScheduleCadence,\n    timeOfDay: r.time_of_day,\n    timezone: r.timezone,\n    status: r.status as ScheduledActionStatus,\n    nextRunAt: r.next_run_at,\n    lastRunAt: r.last_run_at,\n    lastRunStatus: r.last_run_status,\n    createdAt: r.created_at,\n    updatedAt: r.updated_at,\n    system: r.system,\n  }\n}\n\nconst COLUMNS = 'id, identity, description, vault, cadence, time_of_day, timezone, status, next_run_at, last_run_at, last_run_status, created_at, updated_at, system'\n\nexport async function createScheduledAction(args: {\n  identity: string\n  description: string\n  vault: string\n  cadence: ScheduleCadence\n  timeOfDay?: string | null\n  timezone?: string | null\n  nextRunAt: string\n  system?: string | null\n}): Promise<ScheduledActionRecord> {\n  await ensureSchema()\n  const id = randomUUID()\n  const res = await query<RawRow>(\n    `INSERT INTO mem_scheduled_actions (id, identity, description, vault, cadence, time_of_day, timezone, status, next_run_at, system)\n     VALUES ($1, $2, $3, $4, $5, $6, $7, 'active', $8, $9)\n     RETURNING ${COLUMNS}`,\n    [id, args.identity, args.description, args.vault, args.cadence, args.timeOfDay ?? null, args.timezone ?? 'UTC', args.nextRunAt, args.system ?? null],\n  )\n  return mapRow(res.rows[0])\n}\n\nexport async function getSystemScheduledAction(identity: string, system: string): Promise<ScheduledActionRecord | null> {\n  await ensureSchema()\n  const res = await query<RawRow>(\n    `SELECT ${COLUMNS} FROM mem_scheduled_actions WHERE identity = $1 AND system = $2 AND status != 'deleted' LIMIT 1`,\n    [identity, system],\n  )\n  return res.rows[0] ? mapRow(res.rows[0]) : null\n}\n\nexport async function getScheduledAction(id: string, identity: string): Promise<ScheduledActionRecord | null> {\n  await ensureSchema()\n  const res = await query<RawRow>(\n    `SELECT ${COLUMNS} FROM mem_scheduled_actions WHERE id = $1 AND identity = $2 AND status != 'deleted' LIMIT 1`,\n    [id, identity],\n  )\n  return res.rows[0] ? mapRow(res.rows[0]) : null\n}\n\nexport async function listScheduledActionsForIdentity(identity: string): Promise<ScheduledActionRecord[]> {\n  await ensureSchema()\n  const res = await query<RawRow>(\n    `SELECT ${COLUMNS} FROM mem_scheduled_actions WHERE identity = $1 AND status != 'deleted' ORDER BY created_at DESC`,\n    [identity],\n  )\n  return res.rows.map(mapRow)\n}\n\nexport async function patchScheduledAction(args: {\n  id: string\n  identity: string\n  status?: 'active' | 'paused'\n  description?: string\n  cadence?: ScheduleCadence\n  timeOfDay?: string | null\n  timezone?: string | null\n  nextRunAt?: string\n}): Promise<ScheduledActionRecord | null> {\n  await ensureSchema()\n  const sets: string[] = []\n  const params: unknown[] = []\n  if (args.status !== undefined) { params.push(args.status); sets.push(`status = $${params.length}`) }\n  if (args.description !== undefined) { params.push(args.description); sets.push(`description = $${params.length}`) }\n  if (args.cadence !== undefined) { params.push(args.cadence); sets.push(`cadence = $${params.length}`) }\n  if (args.timeOfDay !== undefined) { params.push(args.timeOfDay); sets.push(`time_of_day = $${params.length}`) }\n  if (args.timezone !== undefined) { params.push(args.timezone); sets.push(`timezone = $${params.length}`) }\n  if (args.nextRunAt !== undefined) { params.push(args.nextRunAt); sets.push(`next_run_at = $${params.length}`) }\n  if (sets.length === 0) return getScheduledAction(args.id, args.identity)\n  sets.push('updated_at = now()')\n  params.push(args.id, args.identity)\n  const res = await query<RawRow>(\n    `UPDATE mem_scheduled_actions SET ${sets.join(', ')}\n     WHERE id = $${params.length - 1} AND identity = $${params.length} AND status != 'deleted'\n     RETURNING ${COLUMNS}`,\n    params,\n  )\n  return res.rows[0] ? mapRow(res.rows[0]) : null\n}\n\nexport type DeleteScheduledActionResult =\n  | { deleted: true }\n  | { deleted: false; reason: 'not_found' | 'system' }\n\nexport async function deleteScheduledAction(id: string, identity: string): Promise<DeleteScheduledActionResult> {\n  await ensureSchema()\n  const existing = await getScheduledAction(id, identity)\n  if (!existing) return { deleted: false, reason: 'not_found' }\n  if (existing.system) return { deleted: false, reason: 'system' }\n  const res = await query(\n    `UPDATE mem_scheduled_actions SET status = 'deleted', updated_at = now() WHERE id = $1 AND identity = $2 AND status != 'deleted'`,\n    [id, identity],\n  )\n  return (res.rowCount ?? 0) > 0 ? { deleted: true } : { deleted: false, reason: 'not_found' }\n}\n\nexport async function listDueScheduledActions(nowIso: string, limit: number): Promise<ScheduledActionRecord[]> {\n  await ensureSchema()\n  const res = await query<RawRow>(\n    `SELECT ${COLUMNS} FROM mem_scheduled_actions WHERE status = 'active' AND next_run_at <= $1 ORDER BY next_run_at ASC LIMIT $2`,\n    [nowIso, limit],\n  )\n  return res.rows.map(mapRow)\n}\n\nexport async function markScheduledActionRan(id: string, args: { lastRunAt: string; nextRunAt: string; lastRunStatus: string; status?: ScheduledActionStatus }): Promise<void> {\n  await ensureSchema()\n  if (args.status !== undefined) {\n    await query(\n      `UPDATE mem_scheduled_actions SET last_run_at = $2, next_run_at = $3, last_run_status = $4, status = $5, updated_at = now() WHERE id = $1`,\n      [id, args.lastRunAt, args.nextRunAt, args.lastRunStatus, args.status],\n    )\n    return\n  }\n  await query(\n    `UPDATE mem_scheduled_actions SET last_run_at = $2, next_run_at = $3, last_run_status = $4, updated_at = now() WHERE id = $1`,\n    [id, args.lastRunAt, args.nextRunAt, args.lastRunStatus],\n  )\n}\n"],"mappings":"AAAA,SAAS,kBAAkB;AAC3B,SAAS,cAAc,aAAa;AAuCpC,SAAS,OAAO,GAAkC;AAChD,SAAO;AAAA,IACL,IAAI,EAAE;AAAA,IACN,UAAU,EAAE;AAAA,IACZ,aAAa,EAAE;AAAA,IACf,OAAO,EAAE;AAAA,IACT,SAAS,EAAE;AAAA,IACX,WAAW,EAAE;AAAA,IACb,UAAU,EAAE;AAAA,IACZ,QAAQ,EAAE;AAAA,IACV,WAAW,EAAE;AAAA,IACb,WAAW,EAAE;AAAA,IACb,eAAe,EAAE;AAAA,IACjB,WAAW,EAAE;AAAA,IACb,WAAW,EAAE;AAAA,IACb,QAAQ,EAAE;AAAA,EACZ;AACF;AAEA,MAAM,UAAU;AAEhB,eAAsB,sBAAsB,MAST;AACjC,QAAM,aAAa;AACnB,QAAM,KAAK,WAAW;AACtB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA;AAAA,iBAEa,OAAO;AAAA,IACpB,CAAC,IAAI,KAAK,UAAU,KAAK,aAAa,KAAK,OAAO,KAAK,SAAS,KAAK,aAAa,MAAM,KAAK,YAAY,OAAO,KAAK,WAAW,KAAK,UAAU,IAAI;AAAA,EACrJ;AACA,SAAO,OAAO,IAAI,KAAK,CAAC,CAAC;AAC3B;AAEA,eAAsB,yBAAyB,UAAkB,QAAuD;AACtH,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB,UAAU,OAAO;AAAA,IACjB,CAAC,UAAU,MAAM;AAAA,EACnB;AACA,SAAO,IAAI,KAAK,CAAC,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI;AAC7C;AAEA,eAAsB,mBAAmB,IAAY,UAAyD;AAC5G,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB,UAAU,OAAO;AAAA,IACjB,CAAC,IAAI,QAAQ;AAAA,EACf;AACA,SAAO,IAAI,KAAK,CAAC,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI;AAC7C;AAEA,eAAsB,gCAAgC,UAAoD;AACxG,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB,UAAU,OAAO;AAAA,IACjB,CAAC,QAAQ;AAAA,EACX;AACA,SAAO,IAAI,KAAK,IAAI,MAAM;AAC5B;AAEA,eAAsB,qBAAqB,MASD;AACxC,QAAM,aAAa;AACnB,QAAM,OAAiB,CAAC;AACxB,QAAM,SAAoB,CAAC;AAC3B,MAAI,KAAK,WAAW,QAAW;AAAE,WAAO,KAAK,KAAK,MAAM;AAAG,SAAK,KAAK,aAAa,OAAO,MAAM,EAAE;AAAA,EAAE;AACnG,MAAI,KAAK,gBAAgB,QAAW;AAAE,WAAO,KAAK,KAAK,WAAW;AAAG,SAAK,KAAK,kBAAkB,OAAO,MAAM,EAAE;AAAA,EAAE;AAClH,MAAI,KAAK,YAAY,QAAW;AAAE,WAAO,KAAK,KAAK,OAAO;AAAG,SAAK,KAAK,cAAc,OAAO,MAAM,EAAE;AAAA,EAAE;AACtG,MAAI,KAAK,cAAc,QAAW;AAAE,WAAO,KAAK,KAAK,SAAS;AAAG,SAAK,KAAK,kBAAkB,OAAO,MAAM,EAAE;AAAA,EAAE;AAC9G,MAAI,KAAK,aAAa,QAAW;AAAE,WAAO,KAAK,KAAK,QAAQ;AAAG,SAAK,KAAK,eAAe,OAAO,MAAM,EAAE;AAAA,EAAE;AACzG,MAAI,KAAK,cAAc,QAAW;AAAE,WAAO,KAAK,KAAK,SAAS;AAAG,SAAK,KAAK,kBAAkB,OAAO,MAAM,EAAE;AAAA,EAAE;AAC9G,MAAI,KAAK,WAAW,EAAG,QAAO,mBAAmB,KAAK,IAAI,KAAK,QAAQ;AACvE,OAAK,KAAK,oBAAoB;AAC9B,SAAO,KAAK,KAAK,IAAI,KAAK,QAAQ;AAClC,QAAM,MAAM,MAAM;AAAA,IAChB,oCAAoC,KAAK,KAAK,IAAI,CAAC;AAAA,mBACpC,OAAO,SAAS,CAAC,oBAAoB,OAAO,MAAM;AAAA,iBACpD,OAAO;AAAA,IACpB;AAAA,EACF;AACA,SAAO,IAAI,KAAK,CAAC,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI;AAC7C;AAMA,eAAsB,sBAAsB,IAAY,UAAwD;AAC9G,QAAM,aAAa;AACnB,QAAM,WAAW,MAAM,mBAAmB,IAAI,QAAQ;AACtD,MAAI,CAAC,SAAU,QAAO,EAAE,SAAS,OAAO,QAAQ,YAAY;AAC5D,MAAI,SAAS,OAAQ,QAAO,EAAE,SAAS,OAAO,QAAQ,SAAS;AAC/D,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,CAAC,IAAI,QAAQ;AAAA,EACf;AACA,UAAQ,IAAI,YAAY,KAAK,IAAI,EAAE,SAAS,KAAK,IAAI,EAAE,SAAS,OAAO,QAAQ,YAAY;AAC7F;AAEA,eAAsB,wBAAwB,QAAgB,OAAiD;AAC7G,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB,UAAU,OAAO;AAAA,IACjB,CAAC,QAAQ,KAAK;AAAA,EAChB;AACA,SAAO,IAAI,KAAK,IAAI,MAAM;AAC5B;AAEA,eAAsB,uBAAuB,IAAY,MAAsH;AAC7K,QAAM,aAAa;AACnB,MAAI,KAAK,WAAW,QAAW;AAC7B,UAAM;AAAA,MACJ;AAAA,MACA,CAAC,IAAI,KAAK,WAAW,KAAK,WAAW,KAAK,eAAe,KAAK,MAAM;AAAA,IACtE;AACA;AAAA,EACF;AACA,QAAM;AAAA,IACJ;AAAA,IACA,CAAC,IAAI,KAAK,WAAW,KAAK,WAAW,KAAK,aAAa;AAAA,EACzD;AACF;","names":[]}

package/dist/db/schema.d.ts

@@ -0,0 +1,3 @@
+declare const schemaSql = "\nCREATE TABLE IF NOT EXISTS mem_keys (\n  key_id        TEXT PRIMARY KEY,\n  secret_hash   TEXT NOT NULL,\n  identity      TEXT NOT NULL,\n  vaults        JSONB NOT NULL DEFAULT '[]'::jsonb,\n  scope         JSONB NOT NULL DEFAULT '{}'::jsonb,\n  plan          TEXT NOT NULL DEFAULT 'free',\n  expires_at    TIMESTAMPTZ,\n  revoked       BOOLEAN NOT NULL DEFAULT FALSE,\n  created_at    TIMESTAMPTZ NOT NULL DEFAULT now(),\n  last_used_at  TIMESTAMPTZ,\n  usage_count   INTEGER NOT NULL DEFAULT 0\n);\nCREATE INDEX IF NOT EXISTS mem_keys_secret_hash_idx ON mem_keys (secret_hash);\nCREATE INDEX IF NOT EXISTS mem_keys_identity_idx ON mem_keys (identity);\n\nCREATE TABLE IF NOT EXISTS mem_provenance (\n  id        BIGSERIAL PRIMARY KEY,\n  key_id    TEXT,\n  identity  TEXT NOT NULL,\n  session   TEXT,\n  op        TEXT NOT NULL,\n  target    TEXT,\n  detail    JSONB NOT NULL DEFAULT '{}'::jsonb,\n  ts        TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_provenance_identity_idx ON mem_provenance (identity);\nCREATE INDEX IF NOT EXISTS mem_provenance_ts_idx ON mem_provenance (ts);\n\nCREATE TABLE IF NOT EXISTS mem_vault_registry (\n  id                 BIGSERIAL PRIMARY KEY,\n  grantee            TEXT NOT NULL,\n  vault              TEXT NOT NULL,\n  owner_identity     TEXT NOT NULL,\n  entitlement        JSONB NOT NULL DEFAULT '{}'::jsonb,\n  shared             BOOLEAN NOT NULL DEFAULT FALSE,\n  precedence_default TEXT DEFAULT 'recency',\n  created_at         TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (grantee, vault)\n);\nCREATE INDEX IF NOT EXISTS mem_vault_registry_grantee_idx ON mem_vault_registry (grantee);\nALTER TABLE mem_vault_registry ADD COLUMN IF NOT EXISTS precedence_default TEXT DEFAULT 'recency';\nALTER TABLE mem_vault_registry ADD COLUMN IF NOT EXISTS contract JSONB;\n\nCREATE TABLE IF NOT EXISTS mem_sessions (\n  session_id    TEXT PRIMARY KEY,\n  identity      TEXT NOT NULL,\n  active_vault  TEXT,\n  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()\n);\n\n-- Owner-qualified addressing for shared vaults: a grantee addresses a vault by\n-- its handle (own vaults = bare name, shared vaults = \"owner/Name\"). Re-key the\n-- registry on (grantee, handle) so a shared vault can coexist with an own vault\n-- of the same name without colliding.\nALTER TABLE mem_vault_registry ADD COLUMN IF NOT EXISTS handle TEXT;\nUPDATE mem_vault_registry SET handle = vault WHERE handle IS NULL;\nALTER TABLE mem_vault_registry DROP CONSTRAINT IF EXISTS mem_vault_registry_grantee_vault_key;\nCREATE UNIQUE INDEX IF NOT EXISTS mem_vault_registry_grantee_handle_uniq ON mem_vault_registry (grantee, handle);\n\n-- Account-level grant: grantee may act inside owner's FULL database (all current\n-- and future vaults) at the granted entitlement. Distinct from a single-vault\n-- share (which writes one mem_vault_registry row).\nCREATE TABLE IF NOT EXISTS mem_account_grants (\n  id              BIGSERIAL PRIMARY KEY,\n  owner_identity  TEXT NOT NULL,\n  grantee         TEXT NOT NULL,\n  entitlement     JSONB NOT NULL DEFAULT '{}'::jsonb,\n  created_at      TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (owner_identity, grantee)\n);\nCREATE INDEX IF NOT EXISTS mem_account_grants_grantee_idx ON mem_account_grants (grantee);\n\n-- Persistent per-identity active context (whose DB / which vault is the default\n-- target). Keyed by identity, NOT session, so a brand-new client instance\n-- inherits the last toggle instead of re-prompting. active_owner = identity (or\n-- NULL) means \"my own account\".\nCREATE TABLE IF NOT EXISTS mem_active_context (\n  identity      TEXT PRIMARY KEY,\n  active_owner  TEXT,\n  active_vault  TEXT,\n  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()\n);\n\nCREATE TABLE IF NOT EXISTS mem_approved_senders (\n  id               BIGSERIAL PRIMARY KEY,\n  owner_identity   TEXT NOT NULL,\n  sender_identity  TEXT NOT NULL,\n  created_at       TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (owner_identity, sender_identity)\n);\nCREATE INDEX IF NOT EXISTS mem_approved_senders_owner_idx ON mem_approved_senders (owner_identity);\n\nCREATE TABLE IF NOT EXISTS mem_settings (\n  identity                  TEXT PRIMARY KEY,\n  allow_unapproved_senders  BOOLEAN NOT NULL DEFAULT FALSE,\n  updated_at                TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nALTER TABLE mem_settings ADD COLUMN IF NOT EXISTS is_agent BOOLEAN NOT NULL DEFAULT FALSE;\nALTER TABLE mem_settings ADD COLUMN IF NOT EXISTS chat_link_key_id TEXT;\nALTER TABLE mem_settings ADD COLUMN IF NOT EXISTS schedule_link_key_id TEXT;\n\nCREATE TABLE IF NOT EXISTS mem_notes (\n  id          TEXT PRIMARY KEY,\n  vault       TEXT NOT NULL,\n  path        TEXT NOT NULL,\n  title       TEXT NOT NULL DEFAULT '',\n  content     TEXT NOT NULL DEFAULT '',\n  kind        TEXT NOT NULL DEFAULT 'note',\n  source      TEXT NOT NULL DEFAULT '',\n  captured_at TIMESTAMPTZ NOT NULL DEFAULT now(),\n  created_at  TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at  TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (vault, path)\n);\nCREATE INDEX IF NOT EXISTS mem_notes_vault_idx ON mem_notes (vault);\nCREATE INDEX IF NOT EXISTS mem_notes_kind_idx ON mem_notes (kind);\nCREATE INDEX IF NOT EXISTS mem_notes_captured_at_idx ON mem_notes (captured_at);\nALTER TABLE mem_notes ADD COLUMN IF NOT EXISTS props JSONB NOT NULL DEFAULT '{}'::jsonb;\nALTER TABLE mem_notes ADD COLUMN IF NOT EXISTS revision INTEGER NOT NULL DEFAULT 1;\nALTER TABLE mem_notes ADD COLUMN IF NOT EXISTS updated_by TEXT;\n\n-- Entirely separate from mem_notes: never indexed, never searched, never shared, by construction\n-- (nothing else queries this table). Content is application-layer encrypted before it lands here.\nCREATE TABLE IF NOT EXISTS mem_secure_notes (\n  id           TEXT PRIMARY KEY,\n  vault        TEXT NOT NULL,\n  path         TEXT NOT NULL,\n  title        TEXT NOT NULL DEFAULT '',\n  content_enc  TEXT NOT NULL,\n  created_at   TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at   TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_by   TEXT,\n  UNIQUE (vault, path)\n);\nCREATE INDEX IF NOT EXISTS mem_secure_notes_vault_idx ON mem_secure_notes (vault);\n\nCREATE TABLE IF NOT EXISTS mem_note_shares (\n  share_id       TEXT PRIMARY KEY,\n  note_id        TEXT NOT NULL,\n  owner_identity TEXT NOT NULL,\n  src_vault      TEXT NOT NULL,\n  src_path       TEXT NOT NULL,\n  grantee        TEXT NOT NULL,\n  permissions    JSONB NOT NULL DEFAULT '{}'::jsonb,\n  status         TEXT NOT NULL DEFAULT 'pending',\n  bundle_root    TEXT,\n  created_at     TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at     TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (note_id, grantee)\n);\nCREATE INDEX IF NOT EXISTS mem_note_shares_grantee_status_idx ON mem_note_shares (grantee, status);\nCREATE INDEX IF NOT EXISTS mem_note_shares_note_idx ON mem_note_shares (note_id);\n\nCREATE TABLE IF NOT EXISTS mem_channel_cursor (\n  identity        TEXT NOT NULL,\n  vault           TEXT NOT NULL,\n  last_polled_at  TIMESTAMPTZ NOT NULL DEFAULT now(),\n  PRIMARY KEY (identity, vault)\n);\n\nCREATE TABLE IF NOT EXISTS mem_message_reactions (\n  id         BIGSERIAL PRIMARY KEY,\n  message_id TEXT NOT NULL,\n  identity   TEXT NOT NULL,\n  emoji      TEXT NOT NULL,\n  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (message_id, identity, emoji)\n);\nCREATE INDEX IF NOT EXISTS mem_message_reactions_message_idx ON mem_message_reactions (message_id);\n\nCREATE TABLE IF NOT EXISTS mem_mentions (\n  id              BIGSERIAL PRIMARY KEY,\n  message_id      TEXT NOT NULL,\n  owner_identity  TEXT NOT NULL,\n  vault           TEXT NOT NULL,\n  mentioned       TEXT NOT NULL,\n  created_at      TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_mentions_mentioned_idx ON mem_mentions (mentioned, created_at DESC);\n\nCREATE TABLE IF NOT EXISTS mem_message_reads (\n  message_id TEXT NOT NULL,\n  identity   TEXT NOT NULL,\n  read_at    TIMESTAMPTZ NOT NULL DEFAULT now(),\n  PRIMARY KEY (message_id, identity)\n);\n\nCREATE TABLE IF NOT EXISTS mem_note_presence (\n  note_id      TEXT NOT NULL,\n  identity     TEXT NOT NULL,\n  heartbeat_at TIMESTAMPTZ NOT NULL DEFAULT now(),\n  PRIMARY KEY (note_id, identity)\n);\nCREATE INDEX IF NOT EXISTS mem_note_presence_note_idx ON mem_note_presence (note_id);\n\nCREATE TABLE IF NOT EXISTS mem_facts (\n  id            TEXT PRIMARY KEY,\n  vault         TEXT NOT NULL,\n  subject       TEXT NOT NULL,\n  value         TEXT NOT NULL,\n  source        TEXT NOT NULL DEFAULT '',\n  confidence    REAL NOT NULL DEFAULT 0.5,\n  status        TEXT NOT NULL DEFAULT 'active',\n  superseded_by TEXT,\n  resolution    TEXT,\n  precedence    TEXT,\n  identity      TEXT NOT NULL,\n  created_at    TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_facts_vault_subject_status_idx ON mem_facts (vault, subject, status);\nCREATE INDEX IF NOT EXISTS mem_facts_identity_idx ON mem_facts (identity);\nCREATE INDEX IF NOT EXISTS mem_facts_superseded_by_idx ON mem_facts (superseded_by);\n\nCREATE TABLE IF NOT EXISTS mem_usage_ledger (\n  id        BIGSERIAL PRIMARY KEY,\n  identity  TEXT NOT NULL,\n  ts        TIMESTAMPTZ NOT NULL DEFAULT now(),\n  source    TEXT NOT NULL,\n  op        TEXT NOT NULL DEFAULT '',\n  tokens    INTEGER NOT NULL DEFAULT 0,\n  cost_usd  NUMERIC NOT NULL DEFAULT 0,\n  vault     TEXT,\n  period    TEXT NOT NULL\n);\nCREATE INDEX IF NOT EXISTS mem_usage_ledger_identity_period_idx ON mem_usage_ledger (identity, period);\nCREATE INDEX IF NOT EXISTS mem_usage_ledger_period_idx ON mem_usage_ledger (period);\n\nCREATE TABLE IF NOT EXISTS mem_schedule_entitlements (\n  identity              TEXT PRIMARY KEY,\n  enabled               BOOLEAN NOT NULL DEFAULT FALSE,\n  quota_per_period      INTEGER NOT NULL DEFAULT 1000,\n  used_this_period      INTEGER NOT NULL DEFAULT 0,\n  period_start          DATE NOT NULL DEFAULT CURRENT_DATE,\n  scraper_api_key_enc   TEXT,\n  updated_at            TIMESTAMPTZ NOT NULL DEFAULT now()\n);\n\nCREATE TABLE IF NOT EXISTS mem_scheduled_actions (\n  id               TEXT PRIMARY KEY,\n  identity         TEXT NOT NULL,\n  description      TEXT NOT NULL,\n  vault            TEXT NOT NULL,\n  cadence          TEXT NOT NULL,\n  status           TEXT NOT NULL DEFAULT 'active',\n  next_run_at      TIMESTAMPTZ NOT NULL,\n  last_run_at      TIMESTAMPTZ,\n  last_run_status  TEXT,\n  created_at       TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at       TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_scheduled_actions_identity_idx ON mem_scheduled_actions (identity);\nCREATE INDEX IF NOT EXISTS mem_scheduled_actions_due_idx ON mem_scheduled_actions (status, next_run_at);\nALTER TABLE mem_scheduled_actions ADD COLUMN IF NOT EXISTS time_of_day TEXT;\nALTER TABLE mem_scheduled_actions ADD COLUMN IF NOT EXISTS timezone TEXT NOT NULL DEFAULT 'UTC';\nDO $$ BEGIN\n  ALTER TABLE mem_scheduled_actions ADD CONSTRAINT mem_scheduled_actions_cadence_check CHECK (cadence IN ('once','daily','weekly','monthly'));\nEXCEPTION WHEN duplicate_object THEN NULL;\nEND $$;\nDO $$ BEGIN\n  ALTER TABLE mem_scheduled_actions ADD CONSTRAINT mem_scheduled_actions_status_check CHECK (status IN ('active','paused','deleted','completed'));\nEXCEPTION WHEN duplicate_object THEN NULL;\nEND $$;\nALTER TABLE mem_scheduled_actions ADD COLUMN IF NOT EXISTS system TEXT;\nCREATE UNIQUE INDEX IF NOT EXISTS mem_scheduled_actions_system_uniq ON mem_scheduled_actions (identity, system) WHERE system IS NOT NULL;\n\nCREATE TABLE IF NOT EXISTS mem_props_snapshots (\n  id          BIGSERIAL PRIMARY KEY,\n  vault       TEXT NOT NULL,\n  path        TEXT NOT NULL,\n  prev_props  JSONB NOT NULL,\n  run_id      TEXT,\n  created_at  TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_props_snapshots_vault_path_idx ON mem_props_snapshots (vault, path, created_at DESC);\nCREATE INDEX IF NOT EXISTS mem_props_snapshots_created_at_idx ON mem_props_snapshots (created_at);\n\nCREATE TABLE IF NOT EXISTS mem_interlink_state (\n  identity      TEXT PRIMARY KEY,\n  cursor        JSONB,\n  last_run_at   TEXT,\n  last_summary  TEXT,\n  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()\n);\n\nCREATE TABLE IF NOT EXISTS mem_webhooks (\n  id           TEXT PRIMARY KEY,\n  identity     TEXT NOT NULL,\n  key_id       TEXT NOT NULL,\n  vault        TEXT NOT NULL,\n  label        TEXT,\n  created_at   TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_webhooks_identity_idx ON mem_webhooks (identity);\n\nCREATE TABLE IF NOT EXISTS mem_video_runs (\n  id             TEXT PRIMARY KEY,\n  identity       TEXT NOT NULL,\n  vault          TEXT NOT NULL,\n  source_url     TEXT NOT NULL,\n  media_url      TEXT,\n  scraper_api_key TEXT,\n  interval_s     REAL NOT NULL,\n  max_frames     INTEGER NOT NULL,\n  detail         TEXT NOT NULL DEFAULT 'standard',\n  duration_s     REAL,\n  frame_count    INTEGER NOT NULL DEFAULT 0,\n  status         TEXT NOT NULL DEFAULT 'queued',\n  error          TEXT,\n  transcript     JSONB,\n  metrics        JSONB,\n  lenses         JSONB,\n  qc             JSONB,\n  report_md      TEXT,\n  artifact_path  TEXT,\n  cost_usd       REAL NOT NULL DEFAULT 0,\n  created_at     TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at     TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_video_runs_identity_idx ON mem_video_runs (identity);\n\nCREATE TABLE IF NOT EXISTS mem_video_frames (\n  run_id       TEXT NOT NULL REFERENCES mem_video_runs(id) ON DELETE CASCADE,\n  idx          INTEGER NOT NULL,\n  t_sec        REAL NOT NULL,\n  img_b64      TEXT,\n  observation  JSONB,\n  detail       JSONB,\n  status       TEXT NOT NULL DEFAULT 'pending',\n  PRIMARY KEY (run_id, idx)\n);\nCREATE INDEX IF NOT EXISTS mem_video_frames_run_idx ON mem_video_frames (run_id, idx);\nALTER TABLE mem_video_frames ADD COLUMN IF NOT EXISTS img_b64 TEXT;\n";
+
+export { schemaSql };

package/dist/db/schema.js

@@ -0,0 +1,340 @@
+const schemaSql = `
+CREATE TABLE IF NOT EXISTS mem_keys (
+  key_id        TEXT PRIMARY KEY,
+  secret_hash   TEXT NOT NULL,
+  identity      TEXT NOT NULL,
+  vaults        JSONB NOT NULL DEFAULT '[]'::jsonb,
+  scope         JSONB NOT NULL DEFAULT '{}'::jsonb,
+  plan          TEXT NOT NULL DEFAULT 'free',
+  expires_at    TIMESTAMPTZ,
+  revoked       BOOLEAN NOT NULL DEFAULT FALSE,
+  created_at    TIMESTAMPTZ NOT NULL DEFAULT now(),
+  last_used_at  TIMESTAMPTZ,
+  usage_count   INTEGER NOT NULL DEFAULT 0
+);
+CREATE INDEX IF NOT EXISTS mem_keys_secret_hash_idx ON mem_keys (secret_hash);
+CREATE INDEX IF NOT EXISTS mem_keys_identity_idx ON mem_keys (identity);
+
+CREATE TABLE IF NOT EXISTS mem_provenance (
+  id        BIGSERIAL PRIMARY KEY,
+  key_id    TEXT,
+  identity  TEXT NOT NULL,
+  session   TEXT,
+  op        TEXT NOT NULL,
+  target    TEXT,
+  detail    JSONB NOT NULL DEFAULT '{}'::jsonb,
+  ts        TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS mem_provenance_identity_idx ON mem_provenance (identity);
+CREATE INDEX IF NOT EXISTS mem_provenance_ts_idx ON mem_provenance (ts);
+
+CREATE TABLE IF NOT EXISTS mem_vault_registry (
+  id                 BIGSERIAL PRIMARY KEY,
+  grantee            TEXT NOT NULL,
+  vault              TEXT NOT NULL,
+  owner_identity     TEXT NOT NULL,
+  entitlement        JSONB NOT NULL DEFAULT '{}'::jsonb,
+  shared             BOOLEAN NOT NULL DEFAULT FALSE,
+  precedence_default TEXT DEFAULT 'recency',
+  created_at         TIMESTAMPTZ NOT NULL DEFAULT now(),
+  UNIQUE (grantee, vault)
+);
+CREATE INDEX IF NOT EXISTS mem_vault_registry_grantee_idx ON mem_vault_registry (grantee);
+ALTER TABLE mem_vault_registry ADD COLUMN IF NOT EXISTS precedence_default TEXT DEFAULT 'recency';
+ALTER TABLE mem_vault_registry ADD COLUMN IF NOT EXISTS contract JSONB;
+
+CREATE TABLE IF NOT EXISTS mem_sessions (
+  session_id    TEXT PRIMARY KEY,
+  identity      TEXT NOT NULL,
+  active_vault  TEXT,
+  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+-- Owner-qualified addressing for shared vaults: a grantee addresses a vault by
+-- its handle (own vaults = bare name, shared vaults = "owner/Name"). Re-key the
+-- registry on (grantee, handle) so a shared vault can coexist with an own vault
+-- of the same name without colliding.
+ALTER TABLE mem_vault_registry ADD COLUMN IF NOT EXISTS handle TEXT;
+UPDATE mem_vault_registry SET handle = vault WHERE handle IS NULL;
+ALTER TABLE mem_vault_registry DROP CONSTRAINT IF EXISTS mem_vault_registry_grantee_vault_key;
+CREATE UNIQUE INDEX IF NOT EXISTS mem_vault_registry_grantee_handle_uniq ON mem_vault_registry (grantee, handle);
+
+-- Account-level grant: grantee may act inside owner's FULL database (all current
+-- and future vaults) at the granted entitlement. Distinct from a single-vault
+-- share (which writes one mem_vault_registry row).
+CREATE TABLE IF NOT EXISTS mem_account_grants (
+  id              BIGSERIAL PRIMARY KEY,
+  owner_identity  TEXT NOT NULL,
+  grantee         TEXT NOT NULL,
+  entitlement     JSONB NOT NULL DEFAULT '{}'::jsonb,
+  created_at      TIMESTAMPTZ NOT NULL DEFAULT now(),
+  UNIQUE (owner_identity, grantee)
+);
+CREATE INDEX IF NOT EXISTS mem_account_grants_grantee_idx ON mem_account_grants (grantee);
+
+-- Persistent per-identity active context (whose DB / which vault is the default
+-- target). Keyed by identity, NOT session, so a brand-new client instance
+-- inherits the last toggle instead of re-prompting. active_owner = identity (or
+-- NULL) means "my own account".
+CREATE TABLE IF NOT EXISTS mem_active_context (
+  identity      TEXT PRIMARY KEY,
+  active_owner  TEXT,
+  active_vault  TEXT,
+  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+CREATE TABLE IF NOT EXISTS mem_approved_senders (
+  id               BIGSERIAL PRIMARY KEY,
+  owner_identity   TEXT NOT NULL,
+  sender_identity  TEXT NOT NULL,
+  created_at       TIMESTAMPTZ NOT NULL DEFAULT now(),
+  UNIQUE (owner_identity, sender_identity)
+);
+CREATE INDEX IF NOT EXISTS mem_approved_senders_owner_idx ON mem_approved_senders (owner_identity);
+
+CREATE TABLE IF NOT EXISTS mem_settings (
+  identity                  TEXT PRIMARY KEY,
+  allow_unapproved_senders  BOOLEAN NOT NULL DEFAULT FALSE,
+  updated_at                TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+ALTER TABLE mem_settings ADD COLUMN IF NOT EXISTS is_agent BOOLEAN NOT NULL DEFAULT FALSE;
+ALTER TABLE mem_settings ADD COLUMN IF NOT EXISTS chat_link_key_id TEXT;
+ALTER TABLE mem_settings ADD COLUMN IF NOT EXISTS schedule_link_key_id TEXT;
+
+CREATE TABLE IF NOT EXISTS mem_notes (
+  id          TEXT PRIMARY KEY,
+  vault       TEXT NOT NULL,
+  path        TEXT NOT NULL,
+  title       TEXT NOT NULL DEFAULT '',
+  content     TEXT NOT NULL DEFAULT '',
+  kind        TEXT NOT NULL DEFAULT 'note',
+  source      TEXT NOT NULL DEFAULT '',
+  captured_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  created_at  TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at  TIMESTAMPTZ NOT NULL DEFAULT now(),
+  UNIQUE (vault, path)
+);
+CREATE INDEX IF NOT EXISTS mem_notes_vault_idx ON mem_notes (vault);
+CREATE INDEX IF NOT EXISTS mem_notes_kind_idx ON mem_notes (kind);
+CREATE INDEX IF NOT EXISTS mem_notes_captured_at_idx ON mem_notes (captured_at);
+ALTER TABLE mem_notes ADD COLUMN IF NOT EXISTS props JSONB NOT NULL DEFAULT '{}'::jsonb;
+ALTER TABLE mem_notes ADD COLUMN IF NOT EXISTS revision INTEGER NOT NULL DEFAULT 1;
+ALTER TABLE mem_notes ADD COLUMN IF NOT EXISTS updated_by TEXT;
+
+-- Entirely separate from mem_notes: never indexed, never searched, never shared, by construction
+-- (nothing else queries this table). Content is application-layer encrypted before it lands here.
+CREATE TABLE IF NOT EXISTS mem_secure_notes (
+  id           TEXT PRIMARY KEY,
+  vault        TEXT NOT NULL,
+  path         TEXT NOT NULL,
+  title        TEXT NOT NULL DEFAULT '',
+  content_enc  TEXT NOT NULL,
+  created_at   TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at   TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_by   TEXT,
+  UNIQUE (vault, path)
+);
+CREATE INDEX IF NOT EXISTS mem_secure_notes_vault_idx ON mem_secure_notes (vault);
+
+CREATE TABLE IF NOT EXISTS mem_note_shares (
+  share_id       TEXT PRIMARY KEY,
+  note_id        TEXT NOT NULL,
+  owner_identity TEXT NOT NULL,
+  src_vault      TEXT NOT NULL,
+  src_path       TEXT NOT NULL,
+  grantee        TEXT NOT NULL,
+  permissions    JSONB NOT NULL DEFAULT '{}'::jsonb,
+  status         TEXT NOT NULL DEFAULT 'pending',
+  bundle_root    TEXT,
+  created_at     TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at     TIMESTAMPTZ NOT NULL DEFAULT now(),
+  UNIQUE (note_id, grantee)
+);
+CREATE INDEX IF NOT EXISTS mem_note_shares_grantee_status_idx ON mem_note_shares (grantee, status);
+CREATE INDEX IF NOT EXISTS mem_note_shares_note_idx ON mem_note_shares (note_id);
+
+CREATE TABLE IF NOT EXISTS mem_channel_cursor (
+  identity        TEXT NOT NULL,
+  vault           TEXT NOT NULL,
+  last_polled_at  TIMESTAMPTZ NOT NULL DEFAULT now(),
+  PRIMARY KEY (identity, vault)
+);
+
+CREATE TABLE IF NOT EXISTS mem_message_reactions (
+  id         BIGSERIAL PRIMARY KEY,
+  message_id TEXT NOT NULL,
+  identity   TEXT NOT NULL,
+  emoji      TEXT NOT NULL,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  UNIQUE (message_id, identity, emoji)
+);
+CREATE INDEX IF NOT EXISTS mem_message_reactions_message_idx ON mem_message_reactions (message_id);
+
+CREATE TABLE IF NOT EXISTS mem_mentions (
+  id              BIGSERIAL PRIMARY KEY,
+  message_id      TEXT NOT NULL,
+  owner_identity  TEXT NOT NULL,
+  vault           TEXT NOT NULL,
+  mentioned       TEXT NOT NULL,
+  created_at      TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS mem_mentions_mentioned_idx ON mem_mentions (mentioned, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS mem_message_reads (
+  message_id TEXT NOT NULL,
+  identity   TEXT NOT NULL,
+  read_at    TIMESTAMPTZ NOT NULL DEFAULT now(),
+  PRIMARY KEY (message_id, identity)
+);
+
+CREATE TABLE IF NOT EXISTS mem_note_presence (
+  note_id      TEXT NOT NULL,
+  identity     TEXT NOT NULL,
+  heartbeat_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  PRIMARY KEY (note_id, identity)
+);
+CREATE INDEX IF NOT EXISTS mem_note_presence_note_idx ON mem_note_presence (note_id);
+
+CREATE TABLE IF NOT EXISTS mem_facts (
+  id            TEXT PRIMARY KEY,
+  vault         TEXT NOT NULL,
+  subject       TEXT NOT NULL,
+  value         TEXT NOT NULL,
+  source        TEXT NOT NULL DEFAULT '',
+  confidence    REAL NOT NULL DEFAULT 0.5,
+  status        TEXT NOT NULL DEFAULT 'active',
+  superseded_by TEXT,
+  resolution    TEXT,
+  precedence    TEXT,
+  identity      TEXT NOT NULL,
+  created_at    TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS mem_facts_vault_subject_status_idx ON mem_facts (vault, subject, status);
+CREATE INDEX IF NOT EXISTS mem_facts_identity_idx ON mem_facts (identity);
+CREATE INDEX IF NOT EXISTS mem_facts_superseded_by_idx ON mem_facts (superseded_by);
+
+CREATE TABLE IF NOT EXISTS mem_usage_ledger (
+  id        BIGSERIAL PRIMARY KEY,
+  identity  TEXT NOT NULL,
+  ts        TIMESTAMPTZ NOT NULL DEFAULT now(),
+  source    TEXT NOT NULL,
+  op        TEXT NOT NULL DEFAULT '',
+  tokens    INTEGER NOT NULL DEFAULT 0,
+  cost_usd  NUMERIC NOT NULL DEFAULT 0,
+  vault     TEXT,
+  period    TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS mem_usage_ledger_identity_period_idx ON mem_usage_ledger (identity, period);
+CREATE INDEX IF NOT EXISTS mem_usage_ledger_period_idx ON mem_usage_ledger (period);
+
+CREATE TABLE IF NOT EXISTS mem_schedule_entitlements (
+  identity              TEXT PRIMARY KEY,
+  enabled               BOOLEAN NOT NULL DEFAULT FALSE,
+  quota_per_period      INTEGER NOT NULL DEFAULT 1000,
+  used_this_period      INTEGER NOT NULL DEFAULT 0,
+  period_start          DATE NOT NULL DEFAULT CURRENT_DATE,
+  scraper_api_key_enc   TEXT,
+  updated_at            TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+CREATE TABLE IF NOT EXISTS mem_scheduled_actions (
+  id               TEXT PRIMARY KEY,
+  identity         TEXT NOT NULL,
+  description      TEXT NOT NULL,
+  vault            TEXT NOT NULL,
+  cadence          TEXT NOT NULL,
+  status           TEXT NOT NULL DEFAULT 'active',
+  next_run_at      TIMESTAMPTZ NOT NULL,
+  last_run_at      TIMESTAMPTZ,
+  last_run_status  TEXT,
+  created_at       TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at       TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS mem_scheduled_actions_identity_idx ON mem_scheduled_actions (identity);
+CREATE INDEX IF NOT EXISTS mem_scheduled_actions_due_idx ON mem_scheduled_actions (status, next_run_at);
+ALTER TABLE mem_scheduled_actions ADD COLUMN IF NOT EXISTS time_of_day TEXT;
+ALTER TABLE mem_scheduled_actions ADD COLUMN IF NOT EXISTS timezone TEXT NOT NULL DEFAULT 'UTC';
+DO $$ BEGIN
+  ALTER TABLE mem_scheduled_actions ADD CONSTRAINT mem_scheduled_actions_cadence_check CHECK (cadence IN ('once','daily','weekly','monthly'));
+EXCEPTION WHEN duplicate_object THEN NULL;
+END $$;
+DO $$ BEGIN
+  ALTER TABLE mem_scheduled_actions ADD CONSTRAINT mem_scheduled_actions_status_check CHECK (status IN ('active','paused','deleted','completed'));
+EXCEPTION WHEN duplicate_object THEN NULL;
+END $$;
+ALTER TABLE mem_scheduled_actions ADD COLUMN IF NOT EXISTS system TEXT;
+CREATE UNIQUE INDEX IF NOT EXISTS mem_scheduled_actions_system_uniq ON mem_scheduled_actions (identity, system) WHERE system IS NOT NULL;
+
+CREATE TABLE IF NOT EXISTS mem_props_snapshots (
+  id          BIGSERIAL PRIMARY KEY,
+  vault       TEXT NOT NULL,
+  path        TEXT NOT NULL,
+  prev_props  JSONB NOT NULL,
+  run_id      TEXT,
+  created_at  TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS mem_props_snapshots_vault_path_idx ON mem_props_snapshots (vault, path, created_at DESC);
+CREATE INDEX IF NOT EXISTS mem_props_snapshots_created_at_idx ON mem_props_snapshots (created_at);
+
+CREATE TABLE IF NOT EXISTS mem_interlink_state (
+  identity      TEXT PRIMARY KEY,
+  cursor        JSONB,
+  last_run_at   TEXT,
+  last_summary  TEXT,
+  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+CREATE TABLE IF NOT EXISTS mem_webhooks (
+  id           TEXT PRIMARY KEY,
+  identity     TEXT NOT NULL,
+  key_id       TEXT NOT NULL,
+  vault        TEXT NOT NULL,
+  label        TEXT,
+  created_at   TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS mem_webhooks_identity_idx ON mem_webhooks (identity);
+
+CREATE TABLE IF NOT EXISTS mem_video_runs (
+  id             TEXT PRIMARY KEY,
+  identity       TEXT NOT NULL,
+  vault          TEXT NOT NULL,
+  source_url     TEXT NOT NULL,
+  media_url      TEXT,
+  scraper_api_key TEXT,
+  interval_s     REAL NOT NULL,
+  max_frames     INTEGER NOT NULL,
+  detail         TEXT NOT NULL DEFAULT 'standard',
+  duration_s     REAL,
+  frame_count    INTEGER NOT NULL DEFAULT 0,
+  status         TEXT NOT NULL DEFAULT 'queued',
+  error          TEXT,
+  transcript     JSONB,
+  metrics        JSONB,
+  lenses         JSONB,
+  qc             JSONB,
+  report_md      TEXT,
+  artifact_path  TEXT,
+  cost_usd       REAL NOT NULL DEFAULT 0,
+  created_at     TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at     TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS mem_video_runs_identity_idx ON mem_video_runs (identity);
+
+CREATE TABLE IF NOT EXISTS mem_video_frames (
+  run_id       TEXT NOT NULL REFERENCES mem_video_runs(id) ON DELETE CASCADE,
+  idx          INTEGER NOT NULL,
+  t_sec        REAL NOT NULL,
+  img_b64      TEXT,
+  observation  JSONB,
+  detail       JSONB,
+  status       TEXT NOT NULL DEFAULT 'pending',
+  PRIMARY KEY (run_id, idx)
+);
+CREATE INDEX IF NOT EXISTS mem_video_frames_run_idx ON mem_video_frames (run_id, idx);
+ALTER TABLE mem_video_frames ADD COLUMN IF NOT EXISTS img_b64 TEXT;
+`;
+export {
+  schemaSql
+};
+//# sourceMappingURL=schema.js.map

package/dist/db/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/db/schema.ts"],"sourcesContent":["export const schemaSql = `\nCREATE TABLE IF NOT EXISTS mem_keys (\n  key_id        TEXT PRIMARY KEY,\n  secret_hash   TEXT NOT NULL,\n  identity      TEXT NOT NULL,\n  vaults        JSONB NOT NULL DEFAULT '[]'::jsonb,\n  scope         JSONB NOT NULL DEFAULT '{}'::jsonb,\n  plan          TEXT NOT NULL DEFAULT 'free',\n  expires_at    TIMESTAMPTZ,\n  revoked       BOOLEAN NOT NULL DEFAULT FALSE,\n  created_at    TIMESTAMPTZ NOT NULL DEFAULT now(),\n  last_used_at  TIMESTAMPTZ,\n  usage_count   INTEGER NOT NULL DEFAULT 0\n);\nCREATE INDEX IF NOT EXISTS mem_keys_secret_hash_idx ON mem_keys (secret_hash);\nCREATE INDEX IF NOT EXISTS mem_keys_identity_idx ON mem_keys (identity);\n\nCREATE TABLE IF NOT EXISTS mem_provenance (\n  id        BIGSERIAL PRIMARY KEY,\n  key_id    TEXT,\n  identity  TEXT NOT NULL,\n  session   TEXT,\n  op        TEXT NOT NULL,\n  target    TEXT,\n  detail    JSONB NOT NULL DEFAULT '{}'::jsonb,\n  ts        TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_provenance_identity_idx ON mem_provenance (identity);\nCREATE INDEX IF NOT EXISTS mem_provenance_ts_idx ON mem_provenance (ts);\n\nCREATE TABLE IF NOT EXISTS mem_vault_registry (\n  id                 BIGSERIAL PRIMARY KEY,\n  grantee            TEXT NOT NULL,\n  vault              TEXT NOT NULL,\n  owner_identity     TEXT NOT NULL,\n  entitlement        JSONB NOT NULL DEFAULT '{}'::jsonb,\n  shared             BOOLEAN NOT NULL DEFAULT FALSE,\n  precedence_default TEXT DEFAULT 'recency',\n  created_at         TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (grantee, vault)\n);\nCREATE INDEX IF NOT EXISTS mem_vault_registry_grantee_idx ON mem_vault_registry (grantee);\nALTER TABLE mem_vault_registry ADD COLUMN IF NOT EXISTS precedence_default TEXT DEFAULT 'recency';\nALTER TABLE mem_vault_registry ADD COLUMN IF NOT EXISTS contract JSONB;\n\nCREATE TABLE IF NOT EXISTS mem_sessions (\n  session_id    TEXT PRIMARY KEY,\n  identity      TEXT NOT NULL,\n  active_vault  TEXT,\n  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()\n);\n\n-- Owner-qualified addressing for shared vaults: a grantee addresses a vault by\n-- its handle (own vaults = bare name, shared vaults = \"owner/Name\"). Re-key the\n-- registry on (grantee, handle) so a shared vault can coexist with an own vault\n-- of the same name without colliding.\nALTER TABLE mem_vault_registry ADD COLUMN IF NOT EXISTS handle TEXT;\nUPDATE mem_vault_registry SET handle = vault WHERE handle IS NULL;\nALTER TABLE mem_vault_registry DROP CONSTRAINT IF EXISTS mem_vault_registry_grantee_vault_key;\nCREATE UNIQUE INDEX IF NOT EXISTS mem_vault_registry_grantee_handle_uniq ON mem_vault_registry (grantee, handle);\n\n-- Account-level grant: grantee may act inside owner's FULL database (all current\n-- and future vaults) at the granted entitlement. Distinct from a single-vault\n-- share (which writes one mem_vault_registry row).\nCREATE TABLE IF NOT EXISTS mem_account_grants (\n  id              BIGSERIAL PRIMARY KEY,\n  owner_identity  TEXT NOT NULL,\n  grantee         TEXT NOT NULL,\n  entitlement     JSONB NOT NULL DEFAULT '{}'::jsonb,\n  created_at      TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (owner_identity, grantee)\n);\nCREATE INDEX IF NOT EXISTS mem_account_grants_grantee_idx ON mem_account_grants (grantee);\n\n-- Persistent per-identity active context (whose DB / which vault is the default\n-- target). Keyed by identity, NOT session, so a brand-new client instance\n-- inherits the last toggle instead of re-prompting. active_owner = identity (or\n-- NULL) means \"my own account\".\nCREATE TABLE IF NOT EXISTS mem_active_context (\n  identity      TEXT PRIMARY KEY,\n  active_owner  TEXT,\n  active_vault  TEXT,\n  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()\n);\n\nCREATE TABLE IF NOT EXISTS mem_approved_senders (\n  id               BIGSERIAL PRIMARY KEY,\n  owner_identity   TEXT NOT NULL,\n  sender_identity  TEXT NOT NULL,\n  created_at       TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (owner_identity, sender_identity)\n);\nCREATE INDEX IF NOT EXISTS mem_approved_senders_owner_idx ON mem_approved_senders (owner_identity);\n\nCREATE TABLE IF NOT EXISTS mem_settings (\n  identity                  TEXT PRIMARY KEY,\n  allow_unapproved_senders  BOOLEAN NOT NULL DEFAULT FALSE,\n  updated_at                TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nALTER TABLE mem_settings ADD COLUMN IF NOT EXISTS is_agent BOOLEAN NOT NULL DEFAULT FALSE;\nALTER TABLE mem_settings ADD COLUMN IF NOT EXISTS chat_link_key_id TEXT;\nALTER TABLE mem_settings ADD COLUMN IF NOT EXISTS schedule_link_key_id TEXT;\n\nCREATE TABLE IF NOT EXISTS mem_notes (\n  id          TEXT PRIMARY KEY,\n  vault       TEXT NOT NULL,\n  path        TEXT NOT NULL,\n  title       TEXT NOT NULL DEFAULT '',\n  content     TEXT NOT NULL DEFAULT '',\n  kind        TEXT NOT NULL DEFAULT 'note',\n  source      TEXT NOT NULL DEFAULT '',\n  captured_at TIMESTAMPTZ NOT NULL DEFAULT now(),\n  created_at  TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at  TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (vault, path)\n);\nCREATE INDEX IF NOT EXISTS mem_notes_vault_idx ON mem_notes (vault);\nCREATE INDEX IF NOT EXISTS mem_notes_kind_idx ON mem_notes (kind);\nCREATE INDEX IF NOT EXISTS mem_notes_captured_at_idx ON mem_notes (captured_at);\nALTER TABLE mem_notes ADD COLUMN IF NOT EXISTS props JSONB NOT NULL DEFAULT '{}'::jsonb;\nALTER TABLE mem_notes ADD COLUMN IF NOT EXISTS revision INTEGER NOT NULL DEFAULT 1;\nALTER TABLE mem_notes ADD COLUMN IF NOT EXISTS updated_by TEXT;\n\n-- Entirely separate from mem_notes: never indexed, never searched, never shared, by construction\n-- (nothing else queries this table). Content is application-layer encrypted before it lands here.\nCREATE TABLE IF NOT EXISTS mem_secure_notes (\n  id           TEXT PRIMARY KEY,\n  vault        TEXT NOT NULL,\n  path         TEXT NOT NULL,\n  title        TEXT NOT NULL DEFAULT '',\n  content_enc  TEXT NOT NULL,\n  created_at   TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at   TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_by   TEXT,\n  UNIQUE (vault, path)\n);\nCREATE INDEX IF NOT EXISTS mem_secure_notes_vault_idx ON mem_secure_notes (vault);\n\nCREATE TABLE IF NOT EXISTS mem_note_shares (\n  share_id       TEXT PRIMARY KEY,\n  note_id        TEXT NOT NULL,\n  owner_identity TEXT NOT NULL,\n  src_vault      TEXT NOT NULL,\n  src_path       TEXT NOT NULL,\n  grantee        TEXT NOT NULL,\n  permissions    JSONB NOT NULL DEFAULT '{}'::jsonb,\n  status         TEXT NOT NULL DEFAULT 'pending',\n  bundle_root    TEXT,\n  created_at     TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at     TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (note_id, grantee)\n);\nCREATE INDEX IF NOT EXISTS mem_note_shares_grantee_status_idx ON mem_note_shares (grantee, status);\nCREATE INDEX IF NOT EXISTS mem_note_shares_note_idx ON mem_note_shares (note_id);\n\nCREATE TABLE IF NOT EXISTS mem_channel_cursor (\n  identity        TEXT NOT NULL,\n  vault           TEXT NOT NULL,\n  last_polled_at  TIMESTAMPTZ NOT NULL DEFAULT now(),\n  PRIMARY KEY (identity, vault)\n);\n\nCREATE TABLE IF NOT EXISTS mem_message_reactions (\n  id         BIGSERIAL PRIMARY KEY,\n  message_id TEXT NOT NULL,\n  identity   TEXT NOT NULL,\n  emoji      TEXT NOT NULL,\n  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),\n  UNIQUE (message_id, identity, emoji)\n);\nCREATE INDEX IF NOT EXISTS mem_message_reactions_message_idx ON mem_message_reactions (message_id);\n\nCREATE TABLE IF NOT EXISTS mem_mentions (\n  id              BIGSERIAL PRIMARY KEY,\n  message_id      TEXT NOT NULL,\n  owner_identity  TEXT NOT NULL,\n  vault           TEXT NOT NULL,\n  mentioned       TEXT NOT NULL,\n  created_at      TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_mentions_mentioned_idx ON mem_mentions (mentioned, created_at DESC);\n\nCREATE TABLE IF NOT EXISTS mem_message_reads (\n  message_id TEXT NOT NULL,\n  identity   TEXT NOT NULL,\n  read_at    TIMESTAMPTZ NOT NULL DEFAULT now(),\n  PRIMARY KEY (message_id, identity)\n);\n\nCREATE TABLE IF NOT EXISTS mem_note_presence (\n  note_id      TEXT NOT NULL,\n  identity     TEXT NOT NULL,\n  heartbeat_at TIMESTAMPTZ NOT NULL DEFAULT now(),\n  PRIMARY KEY (note_id, identity)\n);\nCREATE INDEX IF NOT EXISTS mem_note_presence_note_idx ON mem_note_presence (note_id);\n\nCREATE TABLE IF NOT EXISTS mem_facts (\n  id            TEXT PRIMARY KEY,\n  vault         TEXT NOT NULL,\n  subject       TEXT NOT NULL,\n  value         TEXT NOT NULL,\n  source        TEXT NOT NULL DEFAULT '',\n  confidence    REAL NOT NULL DEFAULT 0.5,\n  status        TEXT NOT NULL DEFAULT 'active',\n  superseded_by TEXT,\n  resolution    TEXT,\n  precedence    TEXT,\n  identity      TEXT NOT NULL,\n  created_at    TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_facts_vault_subject_status_idx ON mem_facts (vault, subject, status);\nCREATE INDEX IF NOT EXISTS mem_facts_identity_idx ON mem_facts (identity);\nCREATE INDEX IF NOT EXISTS mem_facts_superseded_by_idx ON mem_facts (superseded_by);\n\nCREATE TABLE IF NOT EXISTS mem_usage_ledger (\n  id        BIGSERIAL PRIMARY KEY,\n  identity  TEXT NOT NULL,\n  ts        TIMESTAMPTZ NOT NULL DEFAULT now(),\n  source    TEXT NOT NULL,\n  op        TEXT NOT NULL DEFAULT '',\n  tokens    INTEGER NOT NULL DEFAULT 0,\n  cost_usd  NUMERIC NOT NULL DEFAULT 0,\n  vault     TEXT,\n  period    TEXT NOT NULL\n);\nCREATE INDEX IF NOT EXISTS mem_usage_ledger_identity_period_idx ON mem_usage_ledger (identity, period);\nCREATE INDEX IF NOT EXISTS mem_usage_ledger_period_idx ON mem_usage_ledger (period);\n\nCREATE TABLE IF NOT EXISTS mem_schedule_entitlements (\n  identity              TEXT PRIMARY KEY,\n  enabled               BOOLEAN NOT NULL DEFAULT FALSE,\n  quota_per_period      INTEGER NOT NULL DEFAULT 1000,\n  used_this_period      INTEGER NOT NULL DEFAULT 0,\n  period_start          DATE NOT NULL DEFAULT CURRENT_DATE,\n  scraper_api_key_enc   TEXT,\n  updated_at            TIMESTAMPTZ NOT NULL DEFAULT now()\n);\n\nCREATE TABLE IF NOT EXISTS mem_scheduled_actions (\n  id               TEXT PRIMARY KEY,\n  identity         TEXT NOT NULL,\n  description      TEXT NOT NULL,\n  vault            TEXT NOT NULL,\n  cadence          TEXT NOT NULL,\n  status           TEXT NOT NULL DEFAULT 'active',\n  next_run_at      TIMESTAMPTZ NOT NULL,\n  last_run_at      TIMESTAMPTZ,\n  last_run_status  TEXT,\n  created_at       TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at       TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_scheduled_actions_identity_idx ON mem_scheduled_actions (identity);\nCREATE INDEX IF NOT EXISTS mem_scheduled_actions_due_idx ON mem_scheduled_actions (status, next_run_at);\nALTER TABLE mem_scheduled_actions ADD COLUMN IF NOT EXISTS time_of_day TEXT;\nALTER TABLE mem_scheduled_actions ADD COLUMN IF NOT EXISTS timezone TEXT NOT NULL DEFAULT 'UTC';\nDO $$ BEGIN\n  ALTER TABLE mem_scheduled_actions ADD CONSTRAINT mem_scheduled_actions_cadence_check CHECK (cadence IN ('once','daily','weekly','monthly'));\nEXCEPTION WHEN duplicate_object THEN NULL;\nEND $$;\nDO $$ BEGIN\n  ALTER TABLE mem_scheduled_actions ADD CONSTRAINT mem_scheduled_actions_status_check CHECK (status IN ('active','paused','deleted','completed'));\nEXCEPTION WHEN duplicate_object THEN NULL;\nEND $$;\nALTER TABLE mem_scheduled_actions ADD COLUMN IF NOT EXISTS system TEXT;\nCREATE UNIQUE INDEX IF NOT EXISTS mem_scheduled_actions_system_uniq ON mem_scheduled_actions (identity, system) WHERE system IS NOT NULL;\n\nCREATE TABLE IF NOT EXISTS mem_props_snapshots (\n  id          BIGSERIAL PRIMARY KEY,\n  vault       TEXT NOT NULL,\n  path        TEXT NOT NULL,\n  prev_props  JSONB NOT NULL,\n  run_id      TEXT,\n  created_at  TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_props_snapshots_vault_path_idx ON mem_props_snapshots (vault, path, created_at DESC);\nCREATE INDEX IF NOT EXISTS mem_props_snapshots_created_at_idx ON mem_props_snapshots (created_at);\n\nCREATE TABLE IF NOT EXISTS mem_interlink_state (\n  identity      TEXT PRIMARY KEY,\n  cursor        JSONB,\n  last_run_at   TEXT,\n  last_summary  TEXT,\n  updated_at    TIMESTAMPTZ NOT NULL DEFAULT now()\n);\n\nCREATE TABLE IF NOT EXISTS mem_webhooks (\n  id           TEXT PRIMARY KEY,\n  identity     TEXT NOT NULL,\n  key_id       TEXT NOT NULL,\n  vault        TEXT NOT NULL,\n  label        TEXT,\n  created_at   TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_webhooks_identity_idx ON mem_webhooks (identity);\n\nCREATE TABLE IF NOT EXISTS mem_video_runs (\n  id             TEXT PRIMARY KEY,\n  identity       TEXT NOT NULL,\n  vault          TEXT NOT NULL,\n  source_url     TEXT NOT NULL,\n  media_url      TEXT,\n  scraper_api_key TEXT,\n  interval_s     REAL NOT NULL,\n  max_frames     INTEGER NOT NULL,\n  detail         TEXT NOT NULL DEFAULT 'standard',\n  duration_s     REAL,\n  frame_count    INTEGER NOT NULL DEFAULT 0,\n  status         TEXT NOT NULL DEFAULT 'queued',\n  error          TEXT,\n  transcript     JSONB,\n  metrics        JSONB,\n  lenses         JSONB,\n  qc             JSONB,\n  report_md      TEXT,\n  artifact_path  TEXT,\n  cost_usd       REAL NOT NULL DEFAULT 0,\n  created_at     TIMESTAMPTZ NOT NULL DEFAULT now(),\n  updated_at     TIMESTAMPTZ NOT NULL DEFAULT now()\n);\nCREATE INDEX IF NOT EXISTS mem_video_runs_identity_idx ON mem_video_runs (identity);\n\nCREATE TABLE IF NOT EXISTS mem_video_frames (\n  run_id       TEXT NOT NULL REFERENCES mem_video_runs(id) ON DELETE CASCADE,\n  idx          INTEGER NOT NULL,\n  t_sec        REAL NOT NULL,\n  img_b64      TEXT,\n  observation  JSONB,\n  detail       JSONB,\n  status       TEXT NOT NULL DEFAULT 'pending',\n  PRIMARY KEY (run_id, idx)\n);\nCREATE INDEX IF NOT EXISTS mem_video_frames_run_idx ON mem_video_frames (run_id, idx);\nALTER TABLE mem_video_frames ADD COLUMN IF NOT EXISTS img_b64 TEXT;\n`\n"],"mappings":"AAAO,MAAM,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":[]}

package/dist/db/secure-notes.d.ts

@@ -0,0 +1,26 @@
+interface SecureNoteRecord {
+    id: string;
+    vault: string;
+    path: string;
+    title: string;
+    content: string;
+    createdAt: string;
+    updatedAt: string;
+    updatedBy: string | null;
+}
+declare function putSecureNote(args: {
+    vault: string;
+    path: string;
+    title?: string;
+    content: string;
+    updatedBy?: string;
+}): Promise<SecureNoteRecord>;
+declare function getSecureNote(vault: string, path: string): Promise<SecureNoteRecord | null>;
+declare function listSecureNotes(vault: string): Promise<Array<{
+    path: string;
+    title: string;
+    updatedAt: string;
+}>>;
+declare function deleteSecureNote(vault: string, path: string): Promise<boolean>;
+
+export { type SecureNoteRecord, deleteSecureNote, getSecureNote, listSecureNotes, putSecureNote };

package/dist/db/secure-notes.js

@@ -0,0 +1,59 @@
+import { ensureSchema, query } from "./pool";
+import { encryptSecret, decryptSecret } from "../lib/secret-crypto";
+const COLUMNS = "id, vault, path, title, content_enc, created_at, updated_at, updated_by";
+function secureNoteId(vault, path) {
+  return `secure::${vault}::${path}`;
+}
+function mapRow(r) {
+  return {
+    id: r.id,
+    vault: r.vault,
+    path: r.path,
+    title: r.title,
+    content: decryptSecret(r.content_enc),
+    createdAt: r.created_at,
+    updatedAt: r.updated_at,
+    updatedBy: r.updated_by
+  };
+}
+async function putSecureNote(args) {
+  await ensureSchema();
+  const id = secureNoteId(args.vault, args.path);
+  const res = await query(
+    `INSERT INTO mem_secure_notes (id, vault, path, title, content_enc, updated_at, updated_by)
+     VALUES ($1, $2, $3, $4, $5, now(), $6)
+     ON CONFLICT (vault, path) DO UPDATE SET
+       title = EXCLUDED.title, content_enc = EXCLUDED.content_enc, updated_at = now(), updated_by = EXCLUDED.updated_by
+     RETURNING ${COLUMNS}`,
+    [id, args.vault, args.path, args.title ?? args.path, encryptSecret(args.content), args.updatedBy ?? null]
+  );
+  return mapRow(res.rows[0]);
+}
+async function getSecureNote(vault, path) {
+  await ensureSchema();
+  const res = await query(
+    `SELECT ${COLUMNS} FROM mem_secure_notes WHERE vault = $1 AND path = $2 LIMIT 1`,
+    [vault, path]
+  );
+  return res.rows[0] ? mapRow(res.rows[0]) : null;
+}
+async function listSecureNotes(vault) {
+  await ensureSchema();
+  const res = await query(
+    `SELECT path, title, updated_at FROM mem_secure_notes WHERE vault = $1 ORDER BY updated_at DESC`,
+    [vault]
+  );
+  return res.rows.map((r) => ({ path: r.path, title: r.title, updatedAt: r.updated_at }));
+}
+async function deleteSecureNote(vault, path) {
+  await ensureSchema();
+  const res = await query(`DELETE FROM mem_secure_notes WHERE vault = $1 AND path = $2`, [vault, path]);
+  return (res.rowCount ?? 0) > 0;
+}
+export {
+  deleteSecureNote,
+  getSecureNote,
+  listSecureNotes,
+  putSecureNote
+};
+//# sourceMappingURL=secure-notes.js.map

package/dist/db/secure-notes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/db/secure-notes.ts"],"sourcesContent":["import { ensureSchema, query } from './pool'\nimport { encryptSecret, decryptSecret } from '../lib/secret-crypto'\n\nexport interface SecureNoteRecord {\n  id: string\n  vault: string\n  path: string\n  title: string\n  content: string\n  createdAt: string\n  updatedAt: string\n  updatedBy: string | null\n}\n\ninterface RawSecureNoteRow {\n  id: string\n  vault: string\n  path: string\n  title: string\n  content_enc: string\n  created_at: string\n  updated_at: string\n  updated_by: string | null\n}\n\nconst COLUMNS = 'id, vault, path, title, content_enc, created_at, updated_at, updated_by'\n\nfunction secureNoteId(vault: string, path: string): string {\n  return `secure::${vault}::${path}`\n}\n\nfunction mapRow(r: RawSecureNoteRow): SecureNoteRecord {\n  return {\n    id: r.id,\n    vault: r.vault,\n    path: r.path,\n    title: r.title,\n    content: decryptSecret(r.content_enc),\n    createdAt: r.created_at,\n    updatedAt: r.updated_at,\n    updatedBy: r.updated_by,\n  }\n}\n\nexport async function putSecureNote(args: { vault: string; path: string; title?: string; content: string; updatedBy?: string }): Promise<SecureNoteRecord> {\n  await ensureSchema()\n  const id = secureNoteId(args.vault, args.path)\n  const res = await query<RawSecureNoteRow>(\n    `INSERT INTO mem_secure_notes (id, vault, path, title, content_enc, updated_at, updated_by)\n     VALUES ($1, $2, $3, $4, $5, now(), $6)\n     ON CONFLICT (vault, path) DO UPDATE SET\n       title = EXCLUDED.title, content_enc = EXCLUDED.content_enc, updated_at = now(), updated_by = EXCLUDED.updated_by\n     RETURNING ${COLUMNS}`,\n    [id, args.vault, args.path, args.title ?? args.path, encryptSecret(args.content), args.updatedBy ?? null],\n  )\n  return mapRow(res.rows[0])\n}\n\nexport async function getSecureNote(vault: string, path: string): Promise<SecureNoteRecord | null> {\n  await ensureSchema()\n  const res = await query<RawSecureNoteRow>(\n    `SELECT ${COLUMNS} FROM mem_secure_notes WHERE vault = $1 AND path = $2 LIMIT 1`,\n    [vault, path],\n  )\n  return res.rows[0] ? mapRow(res.rows[0]) : null\n}\n\nexport async function listSecureNotes(vault: string): Promise<Array<{ path: string; title: string; updatedAt: string }>> {\n  await ensureSchema()\n  const res = await query<{ path: string; title: string; updated_at: string }>(\n    `SELECT path, title, updated_at FROM mem_secure_notes WHERE vault = $1 ORDER BY updated_at DESC`,\n    [vault],\n  )\n  return res.rows.map(r => ({ path: r.path, title: r.title, updatedAt: r.updated_at }))\n}\n\nexport async function deleteSecureNote(vault: string, path: string): Promise<boolean> {\n  await ensureSchema()\n  const res = await query(`DELETE FROM mem_secure_notes WHERE vault = $1 AND path = $2`, [vault, path])\n  return (res.rowCount ?? 0) > 0\n}\n"],"mappings":"AAAA,SAAS,cAAc,aAAa;AACpC,SAAS,eAAe,qBAAqB;AAwB7C,MAAM,UAAU;AAEhB,SAAS,aAAa,OAAe,MAAsB;AACzD,SAAO,WAAW,KAAK,KAAK,IAAI;AAClC;AAEA,SAAS,OAAO,GAAuC;AACrD,SAAO;AAAA,IACL,IAAI,EAAE;AAAA,IACN,OAAO,EAAE;AAAA,IACT,MAAM,EAAE;AAAA,IACR,OAAO,EAAE;AAAA,IACT,SAAS,cAAc,EAAE,WAAW;AAAA,IACpC,WAAW,EAAE;AAAA,IACb,WAAW,EAAE;AAAA,IACb,WAAW,EAAE;AAAA,EACf;AACF;AAEA,eAAsB,cAAc,MAAuH;AACzJ,QAAM,aAAa;AACnB,QAAM,KAAK,aAAa,KAAK,OAAO,KAAK,IAAI;AAC7C,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA;AAAA;AAAA;AAAA,iBAIa,OAAO;AAAA,IACpB,CAAC,IAAI,KAAK,OAAO,KAAK,MAAM,KAAK,SAAS,KAAK,MAAM,cAAc,KAAK,OAAO,GAAG,KAAK,aAAa,IAAI;AAAA,EAC1G;AACA,SAAO,OAAO,IAAI,KAAK,CAAC,CAAC;AAC3B;AAEA,eAAsB,cAAc,OAAe,MAAgD;AACjG,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB,UAAU,OAAO;AAAA,IACjB,CAAC,OAAO,IAAI;AAAA,EACd;AACA,SAAO,IAAI,KAAK,CAAC,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI;AAC7C;AAEA,eAAsB,gBAAgB,OAAmF;AACvH,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,CAAC,KAAK;AAAA,EACR;AACA,SAAO,IAAI,KAAK,IAAI,QAAM,EAAE,MAAM,EAAE,MAAM,OAAO,EAAE,OAAO,WAAW,EAAE,WAAW,EAAE;AACtF;AAEA,eAAsB,iBAAiB,OAAe,MAAgC;AACpF,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM,MAAM,+DAA+D,CAAC,OAAO,IAAI,CAAC;AACpG,UAAQ,IAAI,YAAY,KAAK;AAC/B;","names":[]}

package/dist/db/shares.d.ts

@@ -0,0 +1,45 @@
+interface NotePermissions {
+    read: boolean;
+    edit: boolean;
+    delete: boolean;
+    reshare: boolean;
+}
+declare function defaultNotePermissions(): NotePermissions;
+declare function normalizeNotePermissions(input?: Partial<Record<keyof NotePermissions, boolean>>): NotePermissions;
+type ShareStatus = 'pending' | 'accepted' | 'declined' | 'revoked';
+interface NoteShare {
+    shareId: string;
+    noteId: string;
+    ownerIdentity: string;
+    srcVault: string;
+    srcPath: string;
+    grantee: string;
+    permissions: NotePermissions;
+    status: ShareStatus;
+    bundleRoot: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+declare function createShare(args: {
+    noteId: string;
+    ownerIdentity: string;
+    srcVault: string;
+    srcPath: string;
+    grantee: string;
+    permissions: NotePermissions;
+    bundleRoot?: string;
+    autoAccept?: boolean;
+}): Promise<NoteShare>;
+declare function getShare(shareId: string): Promise<NoteShare | null>;
+declare function getShareByNoteAndGrantee(noteId: string, grantee: string): Promise<NoteShare | null>;
+declare function getAcceptedShareByNoteAndGrantee(noteId: string, grantee: string): Promise<NoteShare | null>;
+declare function listPendingForGrantee(grantee: string): Promise<NoteShare[]>;
+declare function listAcceptedForGrantee(grantee: string): Promise<NoteShare[]>;
+declare function acceptShareRow(shareId: string, grantee: string): Promise<NoteShare | null>;
+declare function declineShareRow(shareId: string, grantee: string): Promise<NoteShare | null>;
+declare function unlinkShareRow(shareId: string, grantee: string): Promise<boolean>;
+declare function revokeShareRow(shareId: string, ownerIdentity: string): Promise<NoteShare | null>;
+declare function deleteSharesForNote(noteId: string): Promise<number>;
+declare function resolveAcceptedShare(shareId: string, grantee: string): Promise<NoteShare | null>;
+
+export { type NotePermissions, type NoteShare, type ShareStatus, acceptShareRow, createShare, declineShareRow, defaultNotePermissions, deleteSharesForNote, getAcceptedShareByNoteAndGrantee, getShare, getShareByNoteAndGrantee, listAcceptedForGrantee, listPendingForGrantee, normalizeNotePermissions, resolveAcceptedShare, revokeShareRow, unlinkShareRow };