mcpscraper-memory-db 1.0.0

package/dist/db/shares.js

@@ -0,0 +1,141 @@
+import { randomBytes } from "node:crypto";
+import { ensureSchema, query } from "./pool";
+function defaultNotePermissions() {
+  return { read: true, edit: false, delete: false, reshare: false };
+}
+function normalizeNotePermissions(input) {
+  if (!input) return defaultNotePermissions();
+  return { read: true, edit: input.edit === true, delete: input.delete === true, reshare: input.reshare === true };
+}
+function mapShare(r) {
+  return {
+    shareId: r.share_id,
+    noteId: r.note_id,
+    ownerIdentity: r.owner_identity,
+    srcVault: r.src_vault,
+    srcPath: r.src_path,
+    grantee: r.grantee,
+    permissions: normalizeNotePermissions(r.permissions),
+    status: r.status,
+    bundleRoot: r.bundle_root,
+    createdAt: r.created_at,
+    updatedAt: r.updated_at
+  };
+}
+const SHARE_COLUMNS = "share_id, note_id, owner_identity, src_vault, src_path, grantee, permissions, status, bundle_root, created_at, updated_at";
+async function createShare(args) {
+  await ensureSchema();
+  const shareId = `share_${randomBytes(12).toString("base64url")}`;
+  const status = args.autoAccept ? "accepted" : "pending";
+  const res = await query(
+    `INSERT INTO mem_note_shares (share_id, note_id, owner_identity, src_vault, src_path, grantee, permissions, status, bundle_root, updated_at)
+     VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8, $9, now())
+     ON CONFLICT (note_id, grantee) DO UPDATE SET
+       permissions = EXCLUDED.permissions, status = $8, bundle_root = EXCLUDED.bundle_root, updated_at = now()
+     RETURNING ${SHARE_COLUMNS}`,
+    [shareId, args.noteId, args.ownerIdentity, args.srcVault, args.srcPath, args.grantee, JSON.stringify(args.permissions), status, args.bundleRoot ?? null]
+  );
+  return mapShare(res.rows[0]);
+}
+async function getShare(shareId) {
+  await ensureSchema();
+  const res = await query(`SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE share_id = $1 LIMIT 1`, [shareId]);
+  return res.rows[0] ? mapShare(res.rows[0]) : null;
+}
+async function getShareByNoteAndGrantee(noteId, grantee) {
+  await ensureSchema();
+  const res = await query(`SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE note_id = $1 AND grantee = $2 LIMIT 1`, [noteId, grantee]);
+  return res.rows[0] ? mapShare(res.rows[0]) : null;
+}
+async function getAcceptedShareByNoteAndGrantee(noteId, grantee) {
+  await ensureSchema();
+  const res = await query(
+    `SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE note_id = $1 AND grantee = $2 AND status = 'accepted' LIMIT 1`,
+    [noteId, grantee]
+  );
+  return res.rows[0] ? mapShare(res.rows[0]) : null;
+}
+async function listPendingForGrantee(grantee) {
+  await ensureSchema();
+  const res = await query(
+    `SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE grantee = $1 AND status = 'pending' ORDER BY created_at ASC`,
+    [grantee]
+  );
+  return res.rows.map(mapShare);
+}
+async function listAcceptedForGrantee(grantee) {
+  await ensureSchema();
+  const res = await query(
+    `SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE grantee = $1 AND status = 'accepted' ORDER BY created_at ASC`,
+    [grantee]
+  );
+  return res.rows.map(mapShare);
+}
+async function acceptShareRow(shareId, grantee) {
+  await ensureSchema();
+  const res = await query(
+    `UPDATE mem_note_shares SET status = 'accepted', updated_at = now()
+     WHERE share_id = $1 AND grantee = $2 AND status = 'pending'
+     RETURNING ${SHARE_COLUMNS}`,
+    [shareId, grantee]
+  );
+  return res.rows[0] ? mapShare(res.rows[0]) : null;
+}
+async function declineShareRow(shareId, grantee) {
+  await ensureSchema();
+  const res = await query(
+    `UPDATE mem_note_shares SET status = 'declined', updated_at = now()
+     WHERE share_id = $1 AND grantee = $2 AND status = 'pending'
+     RETURNING ${SHARE_COLUMNS}`,
+    [shareId, grantee]
+  );
+  return res.rows[0] ? mapShare(res.rows[0]) : null;
+}
+async function unlinkShareRow(shareId, grantee) {
+  await ensureSchema();
+  const res = await query(
+    `DELETE FROM mem_note_shares WHERE share_id = $1 AND grantee = $2 AND status = 'accepted'`,
+    [shareId, grantee]
+  );
+  return (res.rowCount ?? 0) > 0;
+}
+async function revokeShareRow(shareId, ownerIdentity) {
+  await ensureSchema();
+  const res = await query(
+    `UPDATE mem_note_shares SET status = 'revoked', updated_at = now()
+     WHERE share_id = $1 AND owner_identity = $2 AND status IN ('pending', 'accepted')
+     RETURNING ${SHARE_COLUMNS}`,
+    [shareId, ownerIdentity]
+  );
+  return res.rows[0] ? mapShare(res.rows[0]) : null;
+}
+async function deleteSharesForNote(noteId) {
+  await ensureSchema();
+  const res = await query(`DELETE FROM mem_note_shares WHERE note_id = $1`, [noteId]);
+  return res.rowCount ?? 0;
+}
+async function resolveAcceptedShare(shareId, grantee) {
+  await ensureSchema();
+  const res = await query(
+    `SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE share_id = $1 AND grantee = $2 AND status = 'accepted' LIMIT 1`,
+    [shareId, grantee]
+  );
+  return res.rows[0] ? mapShare(res.rows[0]) : null;
+}
+export {
+  acceptShareRow,
+  createShare,
+  declineShareRow,
+  defaultNotePermissions,
+  deleteSharesForNote,
+  getAcceptedShareByNoteAndGrantee,
+  getShare,
+  getShareByNoteAndGrantee,
+  listAcceptedForGrantee,
+  listPendingForGrantee,
+  normalizeNotePermissions,
+  resolveAcceptedShare,
+  revokeShareRow,
+  unlinkShareRow
+};
+//# sourceMappingURL=shares.js.map

package/dist/db/shares.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/db/shares.ts"],"sourcesContent":["import { randomBytes } from 'node:crypto'\nimport { ensureSchema, query } from './pool'\n\nexport interface NotePermissions {\n  read: boolean\n  edit: boolean\n  delete: boolean\n  reshare: boolean\n}\n\nexport function defaultNotePermissions(): NotePermissions {\n  return { read: true, edit: false, delete: false, reshare: false }\n}\n\nexport function normalizeNotePermissions(input?: Partial<Record<keyof NotePermissions, boolean>>): NotePermissions {\n  if (!input) return defaultNotePermissions()\n  return { read: true, edit: input.edit === true, delete: input.delete === true, reshare: input.reshare === true }\n}\n\nexport type ShareStatus = 'pending' | 'accepted' | 'declined' | 'revoked'\n\nexport interface NoteShare {\n  shareId: string\n  noteId: string\n  ownerIdentity: string\n  srcVault: string\n  srcPath: string\n  grantee: string\n  permissions: NotePermissions\n  status: ShareStatus\n  bundleRoot: string | null\n  createdAt: string\n  updatedAt: string\n}\n\ninterface RawShareRow {\n  share_id: string\n  note_id: string\n  owner_identity: string\n  src_vault: string\n  src_path: string\n  grantee: string\n  permissions: unknown\n  status: string\n  bundle_root: string | null\n  created_at: string\n  updated_at: string\n}\n\nfunction mapShare(r: RawShareRow): NoteShare {\n  return {\n    shareId: r.share_id,\n    noteId: r.note_id,\n    ownerIdentity: r.owner_identity,\n    srcVault: r.src_vault,\n    srcPath: r.src_path,\n    grantee: r.grantee,\n    permissions: normalizeNotePermissions(r.permissions as Record<string, boolean>),\n    status: r.status as ShareStatus,\n    bundleRoot: r.bundle_root,\n    createdAt: r.created_at,\n    updatedAt: r.updated_at,\n  }\n}\n\nconst SHARE_COLUMNS = 'share_id, note_id, owner_identity, src_vault, src_path, grantee, permissions, status, bundle_root, created_at, updated_at'\n\nexport async function createShare(args: {\n  noteId: string\n  ownerIdentity: string\n  srcVault: string\n  srcPath: string\n  grantee: string\n  permissions: NotePermissions\n  bundleRoot?: string\n  autoAccept?: boolean\n}): Promise<NoteShare> {\n  await ensureSchema()\n  const shareId = `share_${randomBytes(12).toString('base64url')}`\n  const status = args.autoAccept ? 'accepted' : 'pending'\n  const res = await query<RawShareRow>(\n    `INSERT INTO mem_note_shares (share_id, note_id, owner_identity, src_vault, src_path, grantee, permissions, status, bundle_root, updated_at)\n     VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8, $9, now())\n     ON CONFLICT (note_id, grantee) DO UPDATE SET\n       permissions = EXCLUDED.permissions, status = $8, bundle_root = EXCLUDED.bundle_root, updated_at = now()\n     RETURNING ${SHARE_COLUMNS}`,\n    [shareId, args.noteId, args.ownerIdentity, args.srcVault, args.srcPath, args.grantee, JSON.stringify(args.permissions), status, args.bundleRoot ?? null],\n  )\n  return mapShare(res.rows[0])\n}\n\nexport async function getShare(shareId: string): Promise<NoteShare | null> {\n  await ensureSchema()\n  const res = await query<RawShareRow>(`SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE share_id = $1 LIMIT 1`, [shareId])\n  return res.rows[0] ? mapShare(res.rows[0]) : null\n}\n\nexport async function getShareByNoteAndGrantee(noteId: string, grantee: string): Promise<NoteShare | null> {\n  await ensureSchema()\n  const res = await query<RawShareRow>(`SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE note_id = $1 AND grantee = $2 LIMIT 1`, [noteId, grantee])\n  return res.rows[0] ? mapShare(res.rows[0]) : null\n}\n\nexport async function getAcceptedShareByNoteAndGrantee(noteId: string, grantee: string): Promise<NoteShare | null> {\n  await ensureSchema()\n  const res = await query<RawShareRow>(\n    `SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE note_id = $1 AND grantee = $2 AND status = 'accepted' LIMIT 1`,\n    [noteId, grantee],\n  )\n  return res.rows[0] ? mapShare(res.rows[0]) : null\n}\n\nexport async function listPendingForGrantee(grantee: string): Promise<NoteShare[]> {\n  await ensureSchema()\n  const res = await query<RawShareRow>(\n    `SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE grantee = $1 AND status = 'pending' ORDER BY created_at ASC`,\n    [grantee],\n  )\n  return res.rows.map(mapShare)\n}\n\nexport async function listAcceptedForGrantee(grantee: string): Promise<NoteShare[]> {\n  await ensureSchema()\n  const res = await query<RawShareRow>(\n    `SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE grantee = $1 AND status = 'accepted' ORDER BY created_at ASC`,\n    [grantee],\n  )\n  return res.rows.map(mapShare)\n}\n\nexport async function acceptShareRow(shareId: string, grantee: string): Promise<NoteShare | null> {\n  await ensureSchema()\n  const res = await query<RawShareRow>(\n    `UPDATE mem_note_shares SET status = 'accepted', updated_at = now()\n     WHERE share_id = $1 AND grantee = $2 AND status = 'pending'\n     RETURNING ${SHARE_COLUMNS}`,\n    [shareId, grantee],\n  )\n  return res.rows[0] ? mapShare(res.rows[0]) : null\n}\n\nexport async function declineShareRow(shareId: string, grantee: string): Promise<NoteShare | null> {\n  await ensureSchema()\n  const res = await query<RawShareRow>(\n    `UPDATE mem_note_shares SET status = 'declined', updated_at = now()\n     WHERE share_id = $1 AND grantee = $2 AND status = 'pending'\n     RETURNING ${SHARE_COLUMNS}`,\n    [shareId, grantee],\n  )\n  return res.rows[0] ? mapShare(res.rows[0]) : null\n}\n\nexport async function unlinkShareRow(shareId: string, grantee: string): Promise<boolean> {\n  await ensureSchema()\n  const res = await query(\n    `DELETE FROM mem_note_shares WHERE share_id = $1 AND grantee = $2 AND status = 'accepted'`,\n    [shareId, grantee],\n  )\n  return (res.rowCount ?? 0) > 0\n}\n\nexport async function revokeShareRow(shareId: string, ownerIdentity: string): Promise<NoteShare | null> {\n  await ensureSchema()\n  const res = await query<RawShareRow>(\n    `UPDATE mem_note_shares SET status = 'revoked', updated_at = now()\n     WHERE share_id = $1 AND owner_identity = $2 AND status IN ('pending', 'accepted')\n     RETURNING ${SHARE_COLUMNS}`,\n    [shareId, ownerIdentity],\n  )\n  return res.rows[0] ? mapShare(res.rows[0]) : null\n}\n\nexport async function deleteSharesForNote(noteId: string): Promise<number> {\n  await ensureSchema()\n  const res = await query(`DELETE FROM mem_note_shares WHERE note_id = $1`, [noteId])\n  return res.rowCount ?? 0\n}\n\nexport async function resolveAcceptedShare(shareId: string, grantee: string): Promise<NoteShare | null> {\n  await ensureSchema()\n  const res = await query<RawShareRow>(\n    `SELECT ${SHARE_COLUMNS} FROM mem_note_shares WHERE share_id = $1 AND grantee = $2 AND status = 'accepted' LIMIT 1`,\n    [shareId, grantee],\n  )\n  return res.rows[0] ? mapShare(res.rows[0]) : null\n}\n"],"mappings":"AAAA,SAAS,mBAAmB;AAC5B,SAAS,cAAc,aAAa;AAS7B,SAAS,yBAA0C;AACxD,SAAO,EAAE,MAAM,MAAM,MAAM,OAAO,QAAQ,OAAO,SAAS,MAAM;AAClE;AAEO,SAAS,yBAAyB,OAA0E;AACjH,MAAI,CAAC,MAAO,QAAO,uBAAuB;AAC1C,SAAO,EAAE,MAAM,MAAM,MAAM,MAAM,SAAS,MAAM,QAAQ,MAAM,WAAW,MAAM,SAAS,MAAM,YAAY,KAAK;AACjH;AAgCA,SAAS,SAAS,GAA2B;AAC3C,SAAO;AAAA,IACL,SAAS,EAAE;AAAA,IACX,QAAQ,EAAE;AAAA,IACV,eAAe,EAAE;AAAA,IACjB,UAAU,EAAE;AAAA,IACZ,SAAS,EAAE;AAAA,IACX,SAAS,EAAE;AAAA,IACX,aAAa,yBAAyB,EAAE,WAAsC;AAAA,IAC9E,QAAQ,EAAE;AAAA,IACV,YAAY,EAAE;AAAA,IACd,WAAW,EAAE;AAAA,IACb,WAAW,EAAE;AAAA,EACf;AACF;AAEA,MAAM,gBAAgB;AAEtB,eAAsB,YAAY,MASX;AACrB,QAAM,aAAa;AACnB,QAAM,UAAU,SAAS,YAAY,EAAE,EAAE,SAAS,WAAW,CAAC;AAC9D,QAAM,SAAS,KAAK,aAAa,aAAa;AAC9C,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA;AAAA;AAAA;AAAA,iBAIa,aAAa;AAAA,IAC1B,CAAC,SAAS,KAAK,QAAQ,KAAK,eAAe,KAAK,UAAU,KAAK,SAAS,KAAK,SAAS,KAAK,UAAU,KAAK,WAAW,GAAG,QAAQ,KAAK,cAAc,IAAI;AAAA,EACzJ;AACA,SAAO,SAAS,IAAI,KAAK,CAAC,CAAC;AAC7B;AAEA,eAAsB,SAAS,SAA4C;AACzE,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM,MAAmB,UAAU,aAAa,qDAAqD,CAAC,OAAO,CAAC;AAC1H,SAAO,IAAI,KAAK,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI;AAC/C;AAEA,eAAsB,yBAAyB,QAAgB,SAA4C;AACzG,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM,MAAmB,UAAU,aAAa,qEAAqE,CAAC,QAAQ,OAAO,CAAC;AAClJ,SAAO,IAAI,KAAK,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI;AAC/C;AAEA,eAAsB,iCAAiC,QAAgB,SAA4C;AACjH,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB,UAAU,aAAa;AAAA,IACvB,CAAC,QAAQ,OAAO;AAAA,EAClB;AACA,SAAO,IAAI,KAAK,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI;AAC/C;AAEA,eAAsB,sBAAsB,SAAuC;AACjF,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB,UAAU,aAAa;AAAA,IACvB,CAAC,OAAO;AAAA,EACV;AACA,SAAO,IAAI,KAAK,IAAI,QAAQ;AAC9B;AAEA,eAAsB,uBAAuB,SAAuC;AAClF,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB,UAAU,aAAa;AAAA,IACvB,CAAC,OAAO;AAAA,EACV;AACA,SAAO,IAAI,KAAK,IAAI,QAAQ;AAC9B;AAEA,eAAsB,eAAe,SAAiB,SAA4C;AAChG,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA;AAAA,iBAEa,aAAa;AAAA,IAC1B,CAAC,SAAS,OAAO;AAAA,EACnB;AACA,SAAO,IAAI,KAAK,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI;AAC/C;AAEA,eAAsB,gBAAgB,SAAiB,SAA4C;AACjG,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA;AAAA,iBAEa,aAAa;AAAA,IAC1B,CAAC,SAAS,OAAO;AAAA,EACnB;AACA,SAAO,IAAI,KAAK,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI;AAC/C;AAEA,eAAsB,eAAe,SAAiB,SAAmC;AACvF,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,CAAC,SAAS,OAAO;AAAA,EACnB;AACA,UAAQ,IAAI,YAAY,KAAK;AAC/B;AAEA,eAAsB,eAAe,SAAiB,eAAkD;AACtG,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA;AAAA,iBAEa,aAAa;AAAA,IAC1B,CAAC,SAAS,aAAa;AAAA,EACzB;AACA,SAAO,IAAI,KAAK,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI;AAC/C;AAEA,eAAsB,oBAAoB,QAAiC;AACzE,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM,MAAM,kDAAkD,CAAC,MAAM,CAAC;AAClF,SAAO,IAAI,YAAY;AACzB;AAEA,eAAsB,qBAAqB,SAAiB,SAA4C;AACtG,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB,UAAU,aAAa;AAAA,IACvB,CAAC,SAAS,OAAO;AAAA,EACnB;AACA,SAAO,IAAI,KAAK,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI;AAC/C;","names":[]}

package/dist/db/tables.d.ts

@@ -0,0 +1,50 @@
+declare const TABLE_NAME_RE: RegExp;
+declare const COLUMN_NAME_RE: RegExp;
+type ColumnType = 'text' | 'number' | 'integer' | 'boolean' | 'date' | 'timestamp' | 'json';
+declare class TableValidationError extends Error {
+}
+interface ColumnDef {
+    name: string;
+    type: ColumnType;
+}
+type FilterOp = 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'like' | 'in';
+interface TableFilter {
+    column: string;
+    op: FilterOp;
+    value?: unknown;
+}
+interface TableSort {
+    column: string;
+    direction?: 'asc' | 'desc';
+}
+declare function schemaNameFor(identity: string): string;
+declare function listUserTables(identity: string): Promise<string[]>;
+declare function tableExists(identity: string, tableName: string): Promise<boolean>;
+interface TableColumnInfo {
+    name: string;
+    type: string;
+}
+declare function describeUserTable(identity: string, tableName: string): Promise<TableColumnInfo[]>;
+declare function createUserTable(identity: string, tableName: string, columns: ColumnDef[]): Promise<{
+    created: boolean;
+    columns: ColumnDef[];
+}>;
+declare function dropUserTable(identity: string, tableName: string): Promise<boolean>;
+declare function insertUserTableRows(identity: string, tableName: string, rows: Array<Record<string, unknown>>): Promise<{
+    inserted: number;
+}>;
+interface TableQueryOptions {
+    filters?: TableFilter[];
+    sort?: TableSort;
+    limit?: number;
+    offset?: number;
+}
+declare function queryUserTable(identity: string, tableName: string, opts?: TableQueryOptions): Promise<{
+    rows: Record<string, unknown>[];
+    count: number;
+}>;
+declare function deleteUserTableRows(identity: string, tableName: string, filters: TableFilter[]): Promise<{
+    deleted: number;
+}>;
+
+export { COLUMN_NAME_RE, type ColumnDef, type ColumnType, type FilterOp, TABLE_NAME_RE, type TableColumnInfo, type TableFilter, type TableQueryOptions, type TableSort, TableValidationError, createUserTable, deleteUserTableRows, describeUserTable, dropUserTable, insertUserTableRows, listUserTables, queryUserTable, schemaNameFor, tableExists };

package/dist/db/tables.js

@@ -0,0 +1,226 @@
+import { createHash } from "node:crypto";
+import { ensureSchema as ensureNotesSchema, query } from "./pool";
+const TABLE_NAME_RE = /^[a-z][a-z0-9_]{0,62}$/;
+const COLUMN_NAME_RE = /^[a-z][a-z0-9_]{0,62}$/;
+const COLUMN_TYPE_SQL = {
+  text: "TEXT",
+  number: "DOUBLE PRECISION",
+  integer: "BIGINT",
+  boolean: "BOOLEAN",
+  date: "DATE",
+  timestamp: "TIMESTAMPTZ",
+  json: "JSONB"
+};
+const RESERVED_COLUMN_NAMES = /* @__PURE__ */ new Set(["id", "created_at", "updated_at"]);
+const MAX_COLUMNS_PER_TABLE = 40;
+const MAX_TABLES_PER_USER = 50;
+const MAX_ROWS_PER_INSERT = 500;
+const MAX_ROWS_PER_QUERY = 2e3;
+const DEFAULT_ROWS_PER_QUERY = 100;
+class TableValidationError extends Error {
+}
+const FILTER_OP_SQL = {
+  eq: "=",
+  neq: "!=",
+  gt: ">",
+  gte: ">=",
+  lt: "<",
+  lte: "<=",
+  like: "ILIKE",
+  in: "= ANY"
+};
+function assertSafeIdentifier(name, re, kind) {
+  if (!re.test(name)) {
+    throw new TableValidationError(`invalid ${kind} name "${name}" \u2014 use lowercase letters, numbers, underscores, starting with a letter`);
+  }
+}
+function schemaNameFor(identity) {
+  const hash = createHash("sha256").update(identity).digest("hex").slice(0, 32);
+  return `tbl_${hash}`;
+}
+async function ensureUserSchema(identity) {
+  await ensureNotesSchema();
+  await query(
+    `CREATE TABLE IF NOT EXISTS mem_table_schemas (
+       identity TEXT PRIMARY KEY,
+       schema_name TEXT UNIQUE NOT NULL,
+       created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+     )`
+  );
+  const schemaName = schemaNameFor(identity);
+  await query(`CREATE SCHEMA IF NOT EXISTS "${schemaName}"`);
+  await query(
+    `INSERT INTO mem_table_schemas (identity, schema_name) VALUES ($1, $2)
+     ON CONFLICT (identity) DO NOTHING`,
+    [identity, schemaName]
+  );
+  return schemaName;
+}
+async function listUserTables(identity) {
+  const schemaName = await ensureUserSchema(identity);
+  const res = await query(
+    `SELECT table_name FROM information_schema.tables WHERE table_schema = $1 ORDER BY table_name`,
+    [schemaName]
+  );
+  return res.rows.map((r) => r.table_name);
+}
+async function tableExists(identity, tableName) {
+  const schemaName = await ensureUserSchema(identity);
+  const res = await query(
+    `SELECT 1 FROM information_schema.tables WHERE table_schema = $1 AND table_name = $2 LIMIT 1`,
+    [schemaName, tableName]
+  );
+  return res.rows.length > 0;
+}
+async function describeUserTable(identity, tableName) {
+  assertSafeIdentifier(tableName, TABLE_NAME_RE, "table");
+  const schemaName = await ensureUserSchema(identity);
+  const res = await query(
+    `SELECT column_name, data_type FROM information_schema.columns
+     WHERE table_schema = $1 AND table_name = $2 ORDER BY ordinal_position`,
+    [schemaName, tableName]
+  );
+  return res.rows.map((r) => ({ name: r.column_name, type: r.data_type }));
+}
+async function createUserTable(identity, tableName, columns) {
+  assertSafeIdentifier(tableName, TABLE_NAME_RE, "table");
+  if (columns.length === 0) throw new TableValidationError("at least one column is required");
+  if (columns.length > MAX_COLUMNS_PER_TABLE) throw new TableValidationError(`at most ${MAX_COLUMNS_PER_TABLE} columns per table`);
+  const seen = /* @__PURE__ */ new Set();
+  for (const col of columns) {
+    assertSafeIdentifier(col.name, COLUMN_NAME_RE, "column");
+    if (RESERVED_COLUMN_NAMES.has(col.name)) throw new TableValidationError(`column name "${col.name}" is reserved`);
+    if (seen.has(col.name)) throw new TableValidationError(`duplicate column name "${col.name}"`);
+    seen.add(col.name);
+    if (!(col.type in COLUMN_TYPE_SQL)) throw new TableValidationError(`unsupported column type "${col.type}"`);
+  }
+  const schemaName = await ensureUserSchema(identity);
+  const existing = await listUserTables(identity);
+  if (!existing.includes(tableName) && existing.length >= MAX_TABLES_PER_USER) {
+    throw new TableValidationError(`at most ${MAX_TABLES_PER_USER} tables per account`);
+  }
+  const columnSql = columns.map((c) => `"${c.name}" ${COLUMN_TYPE_SQL[c.type]}`).join(", ");
+  await query(
+    `CREATE TABLE IF NOT EXISTS "${schemaName}"."${tableName}" (
+       id BIGSERIAL PRIMARY KEY,
+       ${columnSql},
+       created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+       updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+     )`
+  );
+  return { created: !existing.includes(tableName), columns };
+}
+async function dropUserTable(identity, tableName) {
+  assertSafeIdentifier(tableName, TABLE_NAME_RE, "table");
+  const schemaName = await ensureUserSchema(identity);
+  if (!await tableExists(identity, tableName)) return false;
+  await query(`DROP TABLE IF EXISTS "${schemaName}"."${tableName}"`);
+  return true;
+}
+async function knownColumns(identity, tableName) {
+  const cols = await describeUserTable(identity, tableName);
+  if (cols.length === 0) throw new TableValidationError(`table "${tableName}" does not exist`);
+  return new Set(cols.map((c) => c.name));
+}
+function assertKnownColumns(names, known) {
+  for (const name of names) {
+    if (name === "id" || name === "created_at" || name === "updated_at") continue;
+    if (!known.has(name)) throw new TableValidationError(`unknown column "${name}"`);
+  }
+}
+async function insertUserTableRows(identity, tableName, rows) {
+  assertSafeIdentifier(tableName, TABLE_NAME_RE, "table");
+  if (rows.length === 0) throw new TableValidationError("at least one row is required");
+  if (rows.length > MAX_ROWS_PER_INSERT) throw new TableValidationError(`at most ${MAX_ROWS_PER_INSERT} rows per insert`);
+  const schemaName = await ensureUserSchema(identity);
+  const known = await knownColumns(identity, tableName);
+  const columnNames = [...new Set(rows.flatMap((r) => Object.keys(r)))];
+  assertKnownColumns(columnNames, known);
+  if (columnNames.length === 0) throw new TableValidationError("rows must have at least one column value");
+  const valueRows = [];
+  const params = [];
+  let i = 1;
+  for (const row of rows) {
+    const placeholders = columnNames.map((col) => {
+      params.push(Object.prototype.hasOwnProperty.call(row, col) ? row[col] : null);
+      return `$${i++}`;
+    });
+    valueRows.push(`(${placeholders.join(", ")})`);
+  }
+  const columnSql = columnNames.map((c) => `"${c}"`).join(", ");
+  const res = await query(
+    `INSERT INTO "${schemaName}"."${tableName}" (${columnSql}) VALUES ${valueRows.join(", ")}`,
+    params
+  );
+  return { inserted: res.rowCount ?? 0 };
+}
+function buildWhereClause(filters, known, startParamIndex) {
+  if (filters.length === 0) return { sql: "", params: [] };
+  const parts = [];
+  const params = [];
+  let i = startParamIndex;
+  for (const f of filters) {
+    assertKnownColumns([f.column], known);
+    const opSql = FILTER_OP_SQL[f.op];
+    if (!opSql) throw new TableValidationError(`unsupported filter op "${f.op}"`);
+    if (f.op === "in") {
+      if (!Array.isArray(f.value)) throw new TableValidationError(`"in" filter requires an array value`);
+      parts.push(`"${f.column}" = ANY($${i++})`);
+      params.push(f.value);
+    } else {
+      parts.push(`"${f.column}" ${opSql} $${i++}`);
+      params.push(f.op === "like" ? `%${f.value}%` : f.value);
+    }
+  }
+  return { sql: `WHERE ${parts.join(" AND ")}`, params };
+}
+async function queryUserTable(identity, tableName, opts = {}) {
+  assertSafeIdentifier(tableName, TABLE_NAME_RE, "table");
+  const schemaName = await ensureUserSchema(identity);
+  const known = await knownColumns(identity, tableName);
+  const filters = opts.filters ?? [];
+  const { sql: whereSql, params: whereParams } = buildWhereClause(filters, known, 1);
+  let orderSql = "ORDER BY id ASC";
+  if (opts.sort) {
+    assertKnownColumns([opts.sort.column], known);
+    const dir = opts.sort.direction === "desc" ? "DESC" : "ASC";
+    orderSql = `ORDER BY "${opts.sort.column}" ${dir}`;
+  }
+  const limit = Math.min(Math.max(1, opts.limit ?? DEFAULT_ROWS_PER_QUERY), MAX_ROWS_PER_QUERY);
+  const offset = Math.max(0, opts.offset ?? 0);
+  const limitParamIndex = whereParams.length + 1;
+  const offsetParamIndex = whereParams.length + 2;
+  const res = await query(
+    `SELECT * FROM "${schemaName}"."${tableName}" ${whereSql} ${orderSql} LIMIT $${limitParamIndex} OFFSET $${offsetParamIndex}`,
+    [...whereParams, limit, offset]
+  );
+  const countRes = await query(
+    `SELECT COUNT(*) AS count FROM "${schemaName}"."${tableName}" ${whereSql}`,
+    whereParams
+  );
+  return { rows: res.rows, count: Number(countRes.rows[0]?.count ?? 0) };
+}
+async function deleteUserTableRows(identity, tableName, filters) {
+  assertSafeIdentifier(tableName, TABLE_NAME_RE, "table");
+  if (filters.length === 0) throw new TableValidationError("at least one filter is required \u2014 refusing an unfiltered delete");
+  const schemaName = await ensureUserSchema(identity);
+  const known = await knownColumns(identity, tableName);
+  const { sql: whereSql, params } = buildWhereClause(filters, known, 1);
+  const res = await query(`DELETE FROM "${schemaName}"."${tableName}" ${whereSql}`, params);
+  return { deleted: res.rowCount ?? 0 };
+}
+export {
+  COLUMN_NAME_RE,
+  TABLE_NAME_RE,
+  TableValidationError,
+  createUserTable,
+  deleteUserTableRows,
+  describeUserTable,
+  dropUserTable,
+  insertUserTableRows,
+  listUserTables,
+  queryUserTable,
+  schemaNameFor,
+  tableExists
+};
+//# sourceMappingURL=tables.js.map

package/dist/db/tables.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/db/tables.ts"],"sourcesContent":["import { createHash } from 'node:crypto'\nimport { ensureSchema as ensureNotesSchema, query } from './pool'\n\nexport const TABLE_NAME_RE = /^[a-z][a-z0-9_]{0,62}$/\nexport const COLUMN_NAME_RE = /^[a-z][a-z0-9_]{0,62}$/\n\nexport type ColumnType = 'text' | 'number' | 'integer' | 'boolean' | 'date' | 'timestamp' | 'json'\n\nconst COLUMN_TYPE_SQL: Record<ColumnType, string> = {\n  text: 'TEXT',\n  number: 'DOUBLE PRECISION',\n  integer: 'BIGINT',\n  boolean: 'BOOLEAN',\n  date: 'DATE',\n  timestamp: 'TIMESTAMPTZ',\n  json: 'JSONB',\n}\n\nconst RESERVED_COLUMN_NAMES = new Set(['id', 'created_at', 'updated_at'])\nconst MAX_COLUMNS_PER_TABLE = 40\nconst MAX_TABLES_PER_USER = 50\nconst MAX_ROWS_PER_INSERT = 500\nconst MAX_ROWS_PER_QUERY = 2000\nconst DEFAULT_ROWS_PER_QUERY = 100\n\nexport class TableValidationError extends Error {}\n\nexport interface ColumnDef {\n  name: string\n  type: ColumnType\n}\n\nexport type FilterOp = 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'like' | 'in'\n\nconst FILTER_OP_SQL: Record<FilterOp, string> = {\n  eq: '=',\n  neq: '!=',\n  gt: '>',\n  gte: '>=',\n  lt: '<',\n  lte: '<=',\n  like: 'ILIKE',\n  in: '= ANY',\n}\n\nexport interface TableFilter {\n  column: string\n  op: FilterOp\n  value?: unknown\n}\n\nexport interface TableSort {\n  column: string\n  direction?: 'asc' | 'desc'\n}\n\nfunction assertSafeIdentifier(name: string, re: RegExp, kind: string): void {\n  if (!re.test(name)) {\n    throw new TableValidationError(`invalid ${kind} name \"${name}\" — use lowercase letters, numbers, underscores, starting with a letter`)\n  }\n}\n\nexport function schemaNameFor(identity: string): string {\n  const hash = createHash('sha256').update(identity).digest('hex').slice(0, 32)\n  return `tbl_${hash}`\n}\n\nasync function ensureUserSchema(identity: string): Promise<string> {\n  await ensureNotesSchema()\n  await query(\n    `CREATE TABLE IF NOT EXISTS mem_table_schemas (\n       identity TEXT PRIMARY KEY,\n       schema_name TEXT UNIQUE NOT NULL,\n       created_at TIMESTAMPTZ NOT NULL DEFAULT now()\n     )`,\n  )\n  const schemaName = schemaNameFor(identity)\n  await query(`CREATE SCHEMA IF NOT EXISTS \"${schemaName}\"`)\n  await query(\n    `INSERT INTO mem_table_schemas (identity, schema_name) VALUES ($1, $2)\n     ON CONFLICT (identity) DO NOTHING`,\n    [identity, schemaName],\n  )\n  return schemaName\n}\n\nexport async function listUserTables(identity: string): Promise<string[]> {\n  const schemaName = await ensureUserSchema(identity)\n  const res = await query<{ table_name: string }>(\n    `SELECT table_name FROM information_schema.tables WHERE table_schema = $1 ORDER BY table_name`,\n    [schemaName],\n  )\n  return res.rows.map(r => r.table_name)\n}\n\nexport async function tableExists(identity: string, tableName: string): Promise<boolean> {\n  const schemaName = await ensureUserSchema(identity)\n  const res = await query(\n    `SELECT 1 FROM information_schema.tables WHERE table_schema = $1 AND table_name = $2 LIMIT 1`,\n    [schemaName, tableName],\n  )\n  return res.rows.length > 0\n}\n\nexport interface TableColumnInfo {\n  name: string\n  type: string\n}\n\nexport async function describeUserTable(identity: string, tableName: string): Promise<TableColumnInfo[]> {\n  assertSafeIdentifier(tableName, TABLE_NAME_RE, 'table')\n  const schemaName = await ensureUserSchema(identity)\n  const res = await query<{ column_name: string; data_type: string }>(\n    `SELECT column_name, data_type FROM information_schema.columns\n     WHERE table_schema = $1 AND table_name = $2 ORDER BY ordinal_position`,\n    [schemaName, tableName],\n  )\n  return res.rows.map(r => ({ name: r.column_name, type: r.data_type }))\n}\n\nexport async function createUserTable(identity: string, tableName: string, columns: ColumnDef[]): Promise<{ created: boolean; columns: ColumnDef[] }> {\n  assertSafeIdentifier(tableName, TABLE_NAME_RE, 'table')\n  if (columns.length === 0) throw new TableValidationError('at least one column is required')\n  if (columns.length > MAX_COLUMNS_PER_TABLE) throw new TableValidationError(`at most ${MAX_COLUMNS_PER_TABLE} columns per table`)\n  const seen = new Set<string>()\n  for (const col of columns) {\n    assertSafeIdentifier(col.name, COLUMN_NAME_RE, 'column')\n    if (RESERVED_COLUMN_NAMES.has(col.name)) throw new TableValidationError(`column name \"${col.name}\" is reserved`)\n    if (seen.has(col.name)) throw new TableValidationError(`duplicate column name \"${col.name}\"`)\n    seen.add(col.name)\n    if (!(col.type in COLUMN_TYPE_SQL)) throw new TableValidationError(`unsupported column type \"${col.type}\"`)\n  }\n\n  const schemaName = await ensureUserSchema(identity)\n  const existing = await listUserTables(identity)\n  if (!existing.includes(tableName) && existing.length >= MAX_TABLES_PER_USER) {\n    throw new TableValidationError(`at most ${MAX_TABLES_PER_USER} tables per account`)\n  }\n\n  const columnSql = columns.map(c => `\"${c.name}\" ${COLUMN_TYPE_SQL[c.type]}`).join(', ')\n  await query(\n    `CREATE TABLE IF NOT EXISTS \"${schemaName}\".\"${tableName}\" (\n       id BIGSERIAL PRIMARY KEY,\n       ${columnSql},\n       created_at TIMESTAMPTZ NOT NULL DEFAULT now(),\n       updated_at TIMESTAMPTZ NOT NULL DEFAULT now()\n     )`,\n  )\n  return { created: !existing.includes(tableName), columns }\n}\n\nexport async function dropUserTable(identity: string, tableName: string): Promise<boolean> {\n  assertSafeIdentifier(tableName, TABLE_NAME_RE, 'table')\n  const schemaName = await ensureUserSchema(identity)\n  if (!(await tableExists(identity, tableName))) return false\n  await query(`DROP TABLE IF EXISTS \"${schemaName}\".\"${tableName}\"`)\n  return true\n}\n\nasync function knownColumns(identity: string, tableName: string): Promise<Set<string>> {\n  const cols = await describeUserTable(identity, tableName)\n  if (cols.length === 0) throw new TableValidationError(`table \"${tableName}\" does not exist`)\n  return new Set(cols.map(c => c.name))\n}\n\nfunction assertKnownColumns(names: string[], known: Set<string>): void {\n  for (const name of names) {\n    if (name === 'id' || name === 'created_at' || name === 'updated_at') continue\n    if (!known.has(name)) throw new TableValidationError(`unknown column \"${name}\"`)\n  }\n}\n\nexport async function insertUserTableRows(identity: string, tableName: string, rows: Array<Record<string, unknown>>): Promise<{ inserted: number }> {\n  assertSafeIdentifier(tableName, TABLE_NAME_RE, 'table')\n  if (rows.length === 0) throw new TableValidationError('at least one row is required')\n  if (rows.length > MAX_ROWS_PER_INSERT) throw new TableValidationError(`at most ${MAX_ROWS_PER_INSERT} rows per insert`)\n  const schemaName = await ensureUserSchema(identity)\n  const known = await knownColumns(identity, tableName)\n\n  const columnNames = [...new Set(rows.flatMap(r => Object.keys(r)))]\n  assertKnownColumns(columnNames, known)\n  if (columnNames.length === 0) throw new TableValidationError('rows must have at least one column value')\n\n  const valueRows: string[] = []\n  const params: unknown[] = []\n  let i = 1\n  for (const row of rows) {\n    const placeholders = columnNames.map(col => {\n      params.push(Object.prototype.hasOwnProperty.call(row, col) ? row[col] : null)\n      return `$${i++}`\n    })\n    valueRows.push(`(${placeholders.join(', ')})`)\n  }\n\n  const columnSql = columnNames.map(c => `\"${c}\"`).join(', ')\n  const res = await query(\n    `INSERT INTO \"${schemaName}\".\"${tableName}\" (${columnSql}) VALUES ${valueRows.join(', ')}`,\n    params,\n  )\n  return { inserted: res.rowCount ?? 0 }\n}\n\nfunction buildWhereClause(filters: TableFilter[], known: Set<string>, startParamIndex: number): { sql: string; params: unknown[] } {\n  if (filters.length === 0) return { sql: '', params: [] }\n  const parts: string[] = []\n  const params: unknown[] = []\n  let i = startParamIndex\n  for (const f of filters) {\n    assertKnownColumns([f.column], known)\n    const opSql = FILTER_OP_SQL[f.op]\n    if (!opSql) throw new TableValidationError(`unsupported filter op \"${f.op}\"`)\n    if (f.op === 'in') {\n      if (!Array.isArray(f.value)) throw new TableValidationError(`\"in\" filter requires an array value`)\n      parts.push(`\"${f.column}\" = ANY($${i++})`)\n      params.push(f.value)\n    } else {\n      parts.push(`\"${f.column}\" ${opSql} $${i++}`)\n      params.push(f.op === 'like' ? `%${f.value}%` : f.value)\n    }\n  }\n  return { sql: `WHERE ${parts.join(' AND ')}`, params }\n}\n\nexport interface TableQueryOptions {\n  filters?: TableFilter[]\n  sort?: TableSort\n  limit?: number\n  offset?: number\n}\n\nexport async function queryUserTable(identity: string, tableName: string, opts: TableQueryOptions = {}): Promise<{ rows: Record<string, unknown>[]; count: number }> {\n  assertSafeIdentifier(tableName, TABLE_NAME_RE, 'table')\n  const schemaName = await ensureUserSchema(identity)\n  const known = await knownColumns(identity, tableName)\n\n  const filters = opts.filters ?? []\n  const { sql: whereSql, params: whereParams } = buildWhereClause(filters, known, 1)\n\n  let orderSql = 'ORDER BY id ASC'\n  if (opts.sort) {\n    assertKnownColumns([opts.sort.column], known)\n    const dir = opts.sort.direction === 'desc' ? 'DESC' : 'ASC'\n    orderSql = `ORDER BY \"${opts.sort.column}\" ${dir}`\n  }\n\n  const limit = Math.min(Math.max(1, opts.limit ?? DEFAULT_ROWS_PER_QUERY), MAX_ROWS_PER_QUERY)\n  const offset = Math.max(0, opts.offset ?? 0)\n  const limitParamIndex = whereParams.length + 1\n  const offsetParamIndex = whereParams.length + 2\n\n  const res = await query(\n    `SELECT * FROM \"${schemaName}\".\"${tableName}\" ${whereSql} ${orderSql} LIMIT $${limitParamIndex} OFFSET $${offsetParamIndex}`,\n    [...whereParams, limit, offset],\n  )\n\n  const countRes = await query<{ count: string }>(\n    `SELECT COUNT(*) AS count FROM \"${schemaName}\".\"${tableName}\" ${whereSql}`,\n    whereParams,\n  )\n\n  return { rows: res.rows as Record<string, unknown>[], count: Number(countRes.rows[0]?.count ?? 0) }\n}\n\nexport async function deleteUserTableRows(identity: string, tableName: string, filters: TableFilter[]): Promise<{ deleted: number }> {\n  assertSafeIdentifier(tableName, TABLE_NAME_RE, 'table')\n  if (filters.length === 0) throw new TableValidationError('at least one filter is required — refusing an unfiltered delete')\n  const schemaName = await ensureUserSchema(identity)\n  const known = await knownColumns(identity, tableName)\n  const { sql: whereSql, params } = buildWhereClause(filters, known, 1)\n  const res = await query(`DELETE FROM \"${schemaName}\".\"${tableName}\" ${whereSql}`, params)\n  return { deleted: res.rowCount ?? 0 }\n}\n"],"mappings":"AAAA,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB,mBAAmB,aAAa;AAElD,MAAM,gBAAgB;AACtB,MAAM,iBAAiB;AAI9B,MAAM,kBAA8C;AAAA,EAClD,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,MAAM;AAAA,EACN,WAAW;AAAA,EACX,MAAM;AACR;AAEA,MAAM,wBAAwB,oBAAI,IAAI,CAAC,MAAM,cAAc,YAAY,CAAC;AACxE,MAAM,wBAAwB;AAC9B,MAAM,sBAAsB;AAC5B,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,yBAAyB;AAExB,MAAM,6BAA6B,MAAM;AAAC;AASjD,MAAM,gBAA0C;AAAA,EAC9C,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,MAAM;AAAA,EACN,IAAI;AACN;AAaA,SAAS,qBAAqB,MAAc,IAAY,MAAoB;AAC1E,MAAI,CAAC,GAAG,KAAK,IAAI,GAAG;AAClB,UAAM,IAAI,qBAAqB,WAAW,IAAI,UAAU,IAAI,8EAAyE;AAAA,EACvI;AACF;AAEO,SAAS,cAAc,UAA0B;AACtD,QAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAC5E,SAAO,OAAO,IAAI;AACpB;AAEA,eAAe,iBAAiB,UAAmC;AACjE,QAAM,kBAAkB;AACxB,QAAM;AAAA,IACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAKF;AACA,QAAM,aAAa,cAAc,QAAQ;AACzC,QAAM,MAAM,gCAAgC,UAAU,GAAG;AACzD,QAAM;AAAA,IACJ;AAAA;AAAA,IAEA,CAAC,UAAU,UAAU;AAAA,EACvB;AACA,SAAO;AACT;AAEA,eAAsB,eAAe,UAAqC;AACxE,QAAM,aAAa,MAAM,iBAAiB,QAAQ;AAClD,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AACA,SAAO,IAAI,KAAK,IAAI,OAAK,EAAE,UAAU;AACvC;AAEA,eAAsB,YAAY,UAAkB,WAAqC;AACvF,QAAM,aAAa,MAAM,iBAAiB,QAAQ;AAClD,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,CAAC,YAAY,SAAS;AAAA,EACxB;AACA,SAAO,IAAI,KAAK,SAAS;AAC3B;AAOA,eAAsB,kBAAkB,UAAkB,WAA+C;AACvG,uBAAqB,WAAW,eAAe,OAAO;AACtD,QAAM,aAAa,MAAM,iBAAiB,QAAQ;AAClD,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA;AAAA,IAEA,CAAC,YAAY,SAAS;AAAA,EACxB;AACA,SAAO,IAAI,KAAK,IAAI,QAAM,EAAE,MAAM,EAAE,aAAa,MAAM,EAAE,UAAU,EAAE;AACvE;AAEA,eAAsB,gBAAgB,UAAkB,WAAmB,SAA2E;AACpJ,uBAAqB,WAAW,eAAe,OAAO;AACtD,MAAI,QAAQ,WAAW,EAAG,OAAM,IAAI,qBAAqB,iCAAiC;AAC1F,MAAI,QAAQ,SAAS,sBAAuB,OAAM,IAAI,qBAAqB,WAAW,qBAAqB,oBAAoB;AAC/H,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,OAAO,SAAS;AACzB,yBAAqB,IAAI,MAAM,gBAAgB,QAAQ;AACvD,QAAI,sBAAsB,IAAI,IAAI,IAAI,EAAG,OAAM,IAAI,qBAAqB,gBAAgB,IAAI,IAAI,eAAe;AAC/G,QAAI,KAAK,IAAI,IAAI,IAAI,EAAG,OAAM,IAAI,qBAAqB,0BAA0B,IAAI,IAAI,GAAG;AAC5F,SAAK,IAAI,IAAI,IAAI;AACjB,QAAI,EAAE,IAAI,QAAQ,iBAAkB,OAAM,IAAI,qBAAqB,4BAA4B,IAAI,IAAI,GAAG;AAAA,EAC5G;AAEA,QAAM,aAAa,MAAM,iBAAiB,QAAQ;AAClD,QAAM,WAAW,MAAM,eAAe,QAAQ;AAC9C,MAAI,CAAC,SAAS,SAAS,SAAS,KAAK,SAAS,UAAU,qBAAqB;AAC3E,UAAM,IAAI,qBAAqB,WAAW,mBAAmB,qBAAqB;AAAA,EACpF;AAEA,QAAM,YAAY,QAAQ,IAAI,OAAK,IAAI,EAAE,IAAI,KAAK,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI;AACtF,QAAM;AAAA,IACJ,+BAA+B,UAAU,MAAM,SAAS;AAAA;AAAA,SAEnD,SAAS;AAAA;AAAA;AAAA;AAAA,EAIhB;AACA,SAAO,EAAE,SAAS,CAAC,SAAS,SAAS,SAAS,GAAG,QAAQ;AAC3D;AAEA,eAAsB,cAAc,UAAkB,WAAqC;AACzF,uBAAqB,WAAW,eAAe,OAAO;AACtD,QAAM,aAAa,MAAM,iBAAiB,QAAQ;AAClD,MAAI,CAAE,MAAM,YAAY,UAAU,SAAS,EAAI,QAAO;AACtD,QAAM,MAAM,yBAAyB,UAAU,MAAM,SAAS,GAAG;AACjE,SAAO;AACT;AAEA,eAAe,aAAa,UAAkB,WAAyC;AACrF,QAAM,OAAO,MAAM,kBAAkB,UAAU,SAAS;AACxD,MAAI,KAAK,WAAW,EAAG,OAAM,IAAI,qBAAqB,UAAU,SAAS,kBAAkB;AAC3F,SAAO,IAAI,IAAI,KAAK,IAAI,OAAK,EAAE,IAAI,CAAC;AACtC;AAEA,SAAS,mBAAmB,OAAiB,OAA0B;AACrE,aAAW,QAAQ,OAAO;AACxB,QAAI,SAAS,QAAQ,SAAS,gBAAgB,SAAS,aAAc;AACrE,QAAI,CAAC,MAAM,IAAI,IAAI,EAAG,OAAM,IAAI,qBAAqB,mBAAmB,IAAI,GAAG;AAAA,EACjF;AACF;AAEA,eAAsB,oBAAoB,UAAkB,WAAmB,MAAqE;AAClJ,uBAAqB,WAAW,eAAe,OAAO;AACtD,MAAI,KAAK,WAAW,EAAG,OAAM,IAAI,qBAAqB,8BAA8B;AACpF,MAAI,KAAK,SAAS,oBAAqB,OAAM,IAAI,qBAAqB,WAAW,mBAAmB,kBAAkB;AACtH,QAAM,aAAa,MAAM,iBAAiB,QAAQ;AAClD,QAAM,QAAQ,MAAM,aAAa,UAAU,SAAS;AAEpD,QAAM,cAAc,CAAC,GAAG,IAAI,IAAI,KAAK,QAAQ,OAAK,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClE,qBAAmB,aAAa,KAAK;AACrC,MAAI,YAAY,WAAW,EAAG,OAAM,IAAI,qBAAqB,0CAA0C;AAEvG,QAAM,YAAsB,CAAC;AAC7B,QAAM,SAAoB,CAAC;AAC3B,MAAI,IAAI;AACR,aAAW,OAAO,MAAM;AACtB,UAAM,eAAe,YAAY,IAAI,SAAO;AAC1C,aAAO,KAAK,OAAO,UAAU,eAAe,KAAK,KAAK,GAAG,IAAI,IAAI,GAAG,IAAI,IAAI;AAC5E,aAAO,IAAI,GAAG;AAAA,IAChB,CAAC;AACD,cAAU,KAAK,IAAI,aAAa,KAAK,IAAI,CAAC,GAAG;AAAA,EAC/C;AAEA,QAAM,YAAY,YAAY,IAAI,OAAK,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI;AAC1D,QAAM,MAAM,MAAM;AAAA,IAChB,gBAAgB,UAAU,MAAM,SAAS,MAAM,SAAS,YAAY,UAAU,KAAK,IAAI,CAAC;AAAA,IACxF;AAAA,EACF;AACA,SAAO,EAAE,UAAU,IAAI,YAAY,EAAE;AACvC;AAEA,SAAS,iBAAiB,SAAwB,OAAoB,iBAA6D;AACjI,MAAI,QAAQ,WAAW,EAAG,QAAO,EAAE,KAAK,IAAI,QAAQ,CAAC,EAAE;AACvD,QAAM,QAAkB,CAAC;AACzB,QAAM,SAAoB,CAAC;AAC3B,MAAI,IAAI;AACR,aAAW,KAAK,SAAS;AACvB,uBAAmB,CAAC,EAAE,MAAM,GAAG,KAAK;AACpC,UAAM,QAAQ,cAAc,EAAE,EAAE;AAChC,QAAI,CAAC,MAAO,OAAM,IAAI,qBAAqB,0BAA0B,EAAE,EAAE,GAAG;AAC5E,QAAI,EAAE,OAAO,MAAM;AACjB,UAAI,CAAC,MAAM,QAAQ,EAAE,KAAK,EAAG,OAAM,IAAI,qBAAqB,qCAAqC;AACjG,YAAM,KAAK,IAAI,EAAE,MAAM,YAAY,GAAG,GAAG;AACzC,aAAO,KAAK,EAAE,KAAK;AAAA,IACrB,OAAO;AACL,YAAM,KAAK,IAAI,EAAE,MAAM,KAAK,KAAK,KAAK,GAAG,EAAE;AAC3C,aAAO,KAAK,EAAE,OAAO,SAAS,IAAI,EAAE,KAAK,MAAM,EAAE,KAAK;AAAA,IACxD;AAAA,EACF;AACA,SAAO,EAAE,KAAK,SAAS,MAAM,KAAK,OAAO,CAAC,IAAI,OAAO;AACvD;AASA,eAAsB,eAAe,UAAkB,WAAmB,OAA0B,CAAC,GAAgE;AACnK,uBAAqB,WAAW,eAAe,OAAO;AACtD,QAAM,aAAa,MAAM,iBAAiB,QAAQ;AAClD,QAAM,QAAQ,MAAM,aAAa,UAAU,SAAS;AAEpD,QAAM,UAAU,KAAK,WAAW,CAAC;AACjC,QAAM,EAAE,KAAK,UAAU,QAAQ,YAAY,IAAI,iBAAiB,SAAS,OAAO,CAAC;AAEjF,MAAI,WAAW;AACf,MAAI,KAAK,MAAM;AACb,uBAAmB,CAAC,KAAK,KAAK,MAAM,GAAG,KAAK;AAC5C,UAAM,MAAM,KAAK,KAAK,cAAc,SAAS,SAAS;AACtD,eAAW,aAAa,KAAK,KAAK,MAAM,KAAK,GAAG;AAAA,EAClD;AAEA,QAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,GAAG,KAAK,SAAS,sBAAsB,GAAG,kBAAkB;AAC5F,QAAM,SAAS,KAAK,IAAI,GAAG,KAAK,UAAU,CAAC;AAC3C,QAAM,kBAAkB,YAAY,SAAS;AAC7C,QAAM,mBAAmB,YAAY,SAAS;AAE9C,QAAM,MAAM,MAAM;AAAA,IAChB,kBAAkB,UAAU,MAAM,SAAS,KAAK,QAAQ,IAAI,QAAQ,WAAW,eAAe,YAAY,gBAAgB;AAAA,IAC1H,CAAC,GAAG,aAAa,OAAO,MAAM;AAAA,EAChC;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB,kCAAkC,UAAU,MAAM,SAAS,KAAK,QAAQ;AAAA,IACxE;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,IAAI,MAAmC,OAAO,OAAO,SAAS,KAAK,CAAC,GAAG,SAAS,CAAC,EAAE;AACpG;AAEA,eAAsB,oBAAoB,UAAkB,WAAmB,SAAsD;AACnI,uBAAqB,WAAW,eAAe,OAAO;AACtD,MAAI,QAAQ,WAAW,EAAG,OAAM,IAAI,qBAAqB,sEAAiE;AAC1H,QAAM,aAAa,MAAM,iBAAiB,QAAQ;AAClD,QAAM,QAAQ,MAAM,aAAa,UAAU,SAAS;AACpD,QAAM,EAAE,KAAK,UAAU,OAAO,IAAI,iBAAiB,SAAS,OAAO,CAAC;AACpE,QAAM,MAAM,MAAM,MAAM,gBAAgB,UAAU,MAAM,SAAS,KAAK,QAAQ,IAAI,MAAM;AACxF,SAAO,EAAE,SAAS,IAAI,YAAY,EAAE;AACtC;","names":[]}

package/dist/db/trust.d.ts

@@ -0,0 +1,10 @@
+declare function addApprovedSender(ownerIdentity: string, senderIdentity: string): Promise<void>;
+declare function removeApprovedSender(ownerIdentity: string, senderIdentity: string): Promise<number>;
+declare function listApprovedSenders(ownerIdentity: string): Promise<string[]>;
+declare function allowsUnapprovedSenders(identity: string): Promise<boolean>;
+declare function setAllowUnapprovedSenders(identity: string, allow: boolean): Promise<void>;
+declare function setIsAgent(identity: string, isAgent: boolean): Promise<void>;
+declare function isAgentIdentities(identities: string[]): Promise<Set<string>>;
+declare function maySend(sender: string, recipient: string): Promise<boolean>;
+
+export { addApprovedSender, allowsUnapprovedSenders, isAgentIdentities, listApprovedSenders, maySend, removeApprovedSender, setAllowUnapprovedSenders, setIsAgent };

package/dist/db/trust.js

@@ -0,0 +1,88 @@
+import { ensureSchema, query } from "./pool";
+import { getAccountGrant } from "./vaults";
+async function addApprovedSender(ownerIdentity, senderIdentity) {
+  await ensureSchema();
+  await query(
+    `INSERT INTO mem_approved_senders (owner_identity, sender_identity) VALUES ($1, $2)
+     ON CONFLICT (owner_identity, sender_identity) DO NOTHING`,
+    [ownerIdentity, senderIdentity]
+  );
+}
+async function removeApprovedSender(ownerIdentity, senderIdentity) {
+  await ensureSchema();
+  const res = await query(
+    `DELETE FROM mem_approved_senders WHERE owner_identity = $1 AND sender_identity = $2`,
+    [ownerIdentity, senderIdentity]
+  );
+  return res.rowCount ?? 0;
+}
+async function listApprovedSenders(ownerIdentity) {
+  await ensureSchema();
+  const res = await query(
+    `SELECT sender_identity FROM mem_approved_senders WHERE owner_identity = $1 ORDER BY created_at ASC`,
+    [ownerIdentity]
+  );
+  return res.rows.map((r) => r.sender_identity);
+}
+async function isApprovedSender(ownerIdentity, senderIdentity) {
+  await ensureSchema();
+  const res = await query(
+    `SELECT 1 FROM mem_approved_senders WHERE owner_identity = $1 AND sender_identity = $2 LIMIT 1`,
+    [ownerIdentity, senderIdentity]
+  );
+  return (res.rowCount ?? 0) > 0;
+}
+async function allowsUnapprovedSenders(identity) {
+  await ensureSchema();
+  const res = await query(
+    `SELECT allow_unapproved_senders FROM mem_settings WHERE identity = $1 LIMIT 1`,
+    [identity]
+  );
+  return res.rows[0]?.allow_unapproved_senders ?? false;
+}
+async function setAllowUnapprovedSenders(identity, allow) {
+  await ensureSchema();
+  await query(
+    `INSERT INTO mem_settings (identity, allow_unapproved_senders, updated_at)
+     VALUES ($1, $2, now())
+     ON CONFLICT (identity) DO UPDATE SET allow_unapproved_senders = EXCLUDED.allow_unapproved_senders, updated_at = now()`,
+    [identity, allow]
+  );
+}
+async function setIsAgent(identity, isAgent) {
+  await ensureSchema();
+  await query(
+    `INSERT INTO mem_settings (identity, is_agent, updated_at)
+     VALUES ($1, $2, now())
+     ON CONFLICT (identity) DO UPDATE SET is_agent = EXCLUDED.is_agent, updated_at = now()`,
+    [identity, isAgent]
+  );
+}
+async function isAgentIdentities(identities) {
+  await ensureSchema();
+  if (identities.length === 0) return /* @__PURE__ */ new Set();
+  const res = await query(
+    `SELECT identity FROM mem_settings WHERE identity = ANY($1) AND is_agent = TRUE`,
+    [identities]
+  );
+  return new Set(res.rows.map((r) => r.identity));
+}
+async function maySend(sender, recipient) {
+  if (sender === recipient) return true;
+  if (await isApprovedSender(recipient, sender)) return true;
+  if (await allowsUnapprovedSenders(recipient)) return true;
+  if (await getAccountGrant(recipient, sender) !== null) return true;
+  if (await getAccountGrant(sender, recipient) !== null) return true;
+  return false;
+}
+export {
+  addApprovedSender,
+  allowsUnapprovedSenders,
+  isAgentIdentities,
+  listApprovedSenders,
+  maySend,
+  removeApprovedSender,
+  setAllowUnapprovedSenders,
+  setIsAgent
+};
+//# sourceMappingURL=trust.js.map

package/dist/db/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/db/trust.ts"],"sourcesContent":["import { ensureSchema, query } from './pool'\nimport { getAccountGrant } from './vaults'\n\nexport async function addApprovedSender(ownerIdentity: string, senderIdentity: string): Promise<void> {\n  await ensureSchema()\n  await query(\n    `INSERT INTO mem_approved_senders (owner_identity, sender_identity) VALUES ($1, $2)\n     ON CONFLICT (owner_identity, sender_identity) DO NOTHING`,\n    [ownerIdentity, senderIdentity],\n  )\n}\n\nexport async function removeApprovedSender(ownerIdentity: string, senderIdentity: string): Promise<number> {\n  await ensureSchema()\n  const res = await query(\n    `DELETE FROM mem_approved_senders WHERE owner_identity = $1 AND sender_identity = $2`,\n    [ownerIdentity, senderIdentity],\n  )\n  return res.rowCount ?? 0\n}\n\nexport async function listApprovedSenders(ownerIdentity: string): Promise<string[]> {\n  await ensureSchema()\n  const res = await query<{ sender_identity: string }>(\n    `SELECT sender_identity FROM mem_approved_senders WHERE owner_identity = $1 ORDER BY created_at ASC`,\n    [ownerIdentity],\n  )\n  return res.rows.map(r => r.sender_identity)\n}\n\nasync function isApprovedSender(ownerIdentity: string, senderIdentity: string): Promise<boolean> {\n  await ensureSchema()\n  const res = await query(\n    `SELECT 1 FROM mem_approved_senders WHERE owner_identity = $1 AND sender_identity = $2 LIMIT 1`,\n    [ownerIdentity, senderIdentity],\n  )\n  return (res.rowCount ?? 0) > 0\n}\n\nexport async function allowsUnapprovedSenders(identity: string): Promise<boolean> {\n  await ensureSchema()\n  const res = await query<{ allow_unapproved_senders: boolean }>(\n    `SELECT allow_unapproved_senders FROM mem_settings WHERE identity = $1 LIMIT 1`,\n    [identity],\n  )\n  return res.rows[0]?.allow_unapproved_senders ?? false\n}\n\nexport async function setAllowUnapprovedSenders(identity: string, allow: boolean): Promise<void> {\n  await ensureSchema()\n  await query(\n    `INSERT INTO mem_settings (identity, allow_unapproved_senders, updated_at)\n     VALUES ($1, $2, now())\n     ON CONFLICT (identity) DO UPDATE SET allow_unapproved_senders = EXCLUDED.allow_unapproved_senders, updated_at = now()`,\n    [identity, allow],\n  )\n}\n\nexport async function setIsAgent(identity: string, isAgent: boolean): Promise<void> {\n  await ensureSchema()\n  await query(\n    `INSERT INTO mem_settings (identity, is_agent, updated_at)\n     VALUES ($1, $2, now())\n     ON CONFLICT (identity) DO UPDATE SET is_agent = EXCLUDED.is_agent, updated_at = now()`,\n    [identity, isAgent],\n  )\n}\n\nexport async function isAgentIdentities(identities: string[]): Promise<Set<string>> {\n  await ensureSchema()\n  if (identities.length === 0) return new Set()\n  const res = await query<{ identity: string }>(\n    `SELECT identity FROM mem_settings WHERE identity = ANY($1) AND is_agent = TRUE`,\n    [identities],\n  )\n  return new Set(res.rows.map(r => r.identity))\n}\n\nexport async function maySend(sender: string, recipient: string): Promise<boolean> {\n  if (sender === recipient) return true\n  if (await isApprovedSender(recipient, sender)) return true\n  if (await allowsUnapprovedSenders(recipient)) return true\n  if ((await getAccountGrant(recipient, sender)) !== null) return true\n  if ((await getAccountGrant(sender, recipient)) !== null) return true\n  return false\n}\n"],"mappings":"AAAA,SAAS,cAAc,aAAa;AACpC,SAAS,uBAAuB;AAEhC,eAAsB,kBAAkB,eAAuB,gBAAuC;AACpG,QAAM,aAAa;AACnB,QAAM;AAAA,IACJ;AAAA;AAAA,IAEA,CAAC,eAAe,cAAc;AAAA,EAChC;AACF;AAEA,eAAsB,qBAAqB,eAAuB,gBAAyC;AACzG,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,CAAC,eAAe,cAAc;AAAA,EAChC;AACA,SAAO,IAAI,YAAY;AACzB;AAEA,eAAsB,oBAAoB,eAA0C;AAClF,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,CAAC,aAAa;AAAA,EAChB;AACA,SAAO,IAAI,KAAK,IAAI,OAAK,EAAE,eAAe;AAC5C;AAEA,eAAe,iBAAiB,eAAuB,gBAA0C;AAC/F,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,CAAC,eAAe,cAAc;AAAA,EAChC;AACA,UAAQ,IAAI,YAAY,KAAK;AAC/B;AAEA,eAAsB,wBAAwB,UAAoC;AAChF,QAAM,aAAa;AACnB,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AACA,SAAO,IAAI,KAAK,CAAC,GAAG,4BAA4B;AAClD;AAEA,eAAsB,0BAA0B,UAAkB,OAA+B;AAC/F,QAAM,aAAa;AACnB,QAAM;AAAA,IACJ;AAAA;AAAA;AAAA,IAGA,CAAC,UAAU,KAAK;AAAA,EAClB;AACF;AAEA,eAAsB,WAAW,UAAkB,SAAiC;AAClF,QAAM,aAAa;AACnB,QAAM;AAAA,IACJ;AAAA;AAAA;AAAA,IAGA,CAAC,UAAU,OAAO;AAAA,EACpB;AACF;AAEA,eAAsB,kBAAkB,YAA4C;AAClF,QAAM,aAAa;AACnB,MAAI,WAAW,WAAW,EAAG,QAAO,oBAAI,IAAI;AAC5C,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AACA,SAAO,IAAI,IAAI,IAAI,KAAK,IAAI,OAAK,EAAE,QAAQ,CAAC;AAC9C;AAEA,eAAsB,QAAQ,QAAgB,WAAqC;AACjF,MAAI,WAAW,UAAW,QAAO;AACjC,MAAI,MAAM,iBAAiB,WAAW,MAAM,EAAG,QAAO;AACtD,MAAI,MAAM,wBAAwB,SAAS,EAAG,QAAO;AACrD,MAAK,MAAM,gBAAgB,WAAW,MAAM,MAAO,KAAM,QAAO;AAChE,MAAK,MAAM,gBAAgB,QAAQ,SAAS,MAAO,KAAM,QAAO;AAChE,SAAO;AACT;","names":[]}

package/dist/db/usage.d.ts

@@ -0,0 +1,30 @@
+type CostSource = 'llm' | 'embed' | 'storage' | 'compute';
+interface RecordCostArgs {
+    identity: string;
+    source: CostSource;
+    op: string;
+    tokens?: number;
+    costUsd: number;
+    vault?: string;
+    rawCostUsd?: number;
+}
+declare function recordCost(args: RecordCostArgs): Promise<void>;
+interface CostSummary {
+    total: number;
+    bySource: Record<string, number>;
+}
+declare function userCostThisPeriod(identity: string, period?: string): Promise<CostSummary>;
+interface TierCost {
+    plan: string;
+    users: number;
+    totalUsd: number;
+    avgUsdPerUser: number;
+}
+declare function costByTier(period?: string): Promise<TierCost[]>;
+declare function snapshotStorageCostForIdentity(identity: string, vaults: string[]): Promise<number>;
+declare function snapshotAllStorageCost(): Promise<{
+    identities: number;
+    totalUsd: number;
+}>;
+
+export { type CostSource, type CostSummary, type RecordCostArgs, type TierCost, costByTier, recordCost, snapshotAllStorageCost, snapshotStorageCostForIdentity, userCostThisPeriod };