team-chat 0.0.0-stage → 0.3.0

package/server/dist/src/local/local.controller.js

@@ -0,0 +1,197 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalController = void 0;
+const common_1 = require("@nestjs/common");
+const collector_service_1 = require("../collector/collector.service");
+const knowledge_service_1 = require("../knowledge/knowledge.service");
+const sharing_service_1 = require("../sharing/sharing.service");
+const docs_sync_service_1 = require("./docs-sync.service");
+const local_guard_1 = require("./local.guard");
+const setup_service_1 = require("./setup.service");
+const transfer_service_1 = require("./transfer.service");
+/** Служебные пути для CLI этой машины: то, что раньше делал `php artisan`. */
+let LocalController = class LocalController {
+    setupService;
+    transfer;
+    docs;
+    sharing;
+    collector;
+    knowledge;
+    constructor(setupService, transfer, docs, sharing, collector, knowledge) {
+        this.setupService = setupService;
+        this.transfer = transfer;
+        this.docs = docs;
+        this.sharing = sharing;
+        this.collector = collector;
+        this.knowledge = knowledge;
+    }
+    setup(body) {
+        return this.setupService.setup(body);
+    }
+    login(body) {
+        return this.setupService.loginLink(body);
+    }
+    participants() {
+        return this.setupService.list();
+    }
+    participant(body) {
+        return this.setupService.upsert(body);
+    }
+    dump() {
+        return this.transfer.dump();
+    }
+    restore(body) {
+        return this.transfer.restore(body);
+    }
+    exportDocs(chat) {
+        return this.docs.exportData(chat);
+    }
+    importDocs(body) {
+        return this.docs.importDocuments(body);
+    }
+    // --- опыт агентов: правка карточки владельцем машины, согласие на отправку автору пакета ---
+    replaceCard(id, body) {
+        return this.knowledge.replace(id, body);
+    }
+    consent() {
+        return this.sharing.status();
+    }
+    setConsent(body) {
+        return this.sharing.setConsent(body);
+    }
+    /** Отправить накопленное сейчас, не дожидаясь таймера. */
+    share() {
+        return this.sharing.share();
+    }
+    // --- сборщик: что собрано, удаление — только владельцем этой машины ---
+    collected() {
+        return this.collector.overview();
+    }
+    removeInstallation(id) {
+        return this.collector.removeInstallation(id);
+    }
+};
+exports.LocalController = LocalController;
+__decorate([
+    (0, common_1.Post)('setup'),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "setup", null);
+__decorate([
+    (0, common_1.Post)('login'),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "login", null);
+__decorate([
+    (0, common_1.Get)('participants'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "participants", null);
+__decorate([
+    (0, common_1.Post)('participants'),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "participant", null);
+__decorate([
+    (0, common_1.Get)('dump'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "dump", null);
+__decorate([
+    (0, common_1.Post)('restore'),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "restore", null);
+__decorate([
+    (0, common_1.Get)('export'),
+    __param(0, (0, common_1.Query)('chat')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "exportDocs", null);
+__decorate([
+    (0, common_1.Post)('documents'),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "importDocs", null);
+__decorate([
+    (0, common_1.Put)('knowledge/:id'),
+    __param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number, Object]),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "replaceCard", null);
+__decorate([
+    (0, common_1.Get)('consent'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "consent", null);
+__decorate([
+    (0, common_1.Post)('consent'),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "setConsent", null);
+__decorate([
+    (0, common_1.Post)('share'),
+    (0, common_1.HttpCode)(200),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "share", null);
+__decorate([
+    (0, common_1.Get)('collected'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "collected", null);
+__decorate([
+    (0, common_1.Delete)('collected/installations/:id'),
+    __param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number]),
+    __metadata("design:returntype", void 0)
+], LocalController.prototype, "removeInstallation", null);
+exports.LocalController = LocalController = __decorate([
+    (0, common_1.Controller)('api/local'),
+    (0, common_1.UseGuards)(local_guard_1.LocalGuard),
+    __metadata("design:paramtypes", [setup_service_1.SetupService,
+        transfer_service_1.TransferService,
+        docs_sync_service_1.DocsSyncService,
+        sharing_service_1.SharingService,
+        collector_service_1.CollectorService,
+        knowledge_service_1.KnowledgeService])
+], LocalController);

package/server/dist/src/local/local.guard.js

@@ -0,0 +1,55 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalGuard = exports.LOCAL_HEADER = void 0;
+const common_1 = require("@nestjs/common");
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const errors_1 = require("../common/errors");
+const config_1 = require("../config/config");
+exports.LOCAL_HEADER = 'x-local-secret';
+/**
+ * Служебные пути для CLI на этой же машине. Пускает по секрету из конфига CLI
+ * (~/.team-chat/config.json, права 600): кто может его прочитать, тот и владелец машины —
+ * тот же принцип, что у прежнего `php artisan chat:login`. Сервер без секрета этих путей
+ * не показывает вовсе.
+ */
+let LocalGuard = class LocalGuard {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    canActivate(context) {
+        const secret = this.config.localSecret;
+        if (!secret)
+            throw (0, errors_1.notFound)();
+        const given = context.switchToHttp().getRequest().headers[exports.LOCAL_HEADER];
+        if (typeof given !== 'string' || !sameSecret(given, secret))
+            throw (0, errors_1.forbidden)('Нужен секрет CLI этой машины.');
+        return true;
+    }
+};
+exports.LocalGuard = LocalGuard;
+exports.LocalGuard = LocalGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(config_1.SERVER_CONFIG)),
+    __metadata("design:paramtypes", [Object])
+], LocalGuard);
+function sameSecret(a, b) {
+    const x = Buffer.from(a);
+    const y = Buffer.from(b);
+    return x.length === y.length && node_crypto_1.default.timingSafeEqual(x, y);
+}

package/server/dist/src/local/local.module.js

@@ -0,0 +1,30 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalModule = void 0;
+const common_1 = require("@nestjs/common");
+const conversation_module_1 = require("../conversation.module");
+const collector_module_1 = require("../collector/collector.module");
+const knowledge_module_1 = require("../knowledge/knowledge.module");
+const sharing_module_1 = require("../sharing/sharing.module");
+const web_module_1 = require("../web/web.module");
+const docs_sync_service_1 = require("./docs-sync.service");
+const local_controller_1 = require("./local.controller");
+const local_guard_1 = require("./local.guard");
+const setup_service_1 = require("./setup.service");
+const transfer_service_1 = require("./transfer.service");
+let LocalModule = class LocalModule {
+};
+exports.LocalModule = LocalModule;
+exports.LocalModule = LocalModule = __decorate([
+    (0, common_1.Module)({
+        imports: [conversation_module_1.ConversationModule, knowledge_module_1.KnowledgeModule, sharing_module_1.SharingModule, collector_module_1.CollectorModule, web_module_1.WebModule],
+        providers: [local_guard_1.LocalGuard, setup_service_1.SetupService, transfer_service_1.TransferService, docs_sync_service_1.DocsSyncService],
+        controllers: [local_controller_1.LocalController],
+    })
+], LocalModule);

package/server/dist/src/local/setup.service.js

@@ -0,0 +1,154 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SetupService = void 0;
+const common_1 = require("@nestjs/common");
+const drizzle_orm_1 = require("drizzle-orm");
+const zod_1 = require("zod");
+const errors_1 = require("../common/errors");
+const format_1 = require("../common/format");
+const slug_1 = require("../common/slug");
+const validation_1 = require("../common/validation");
+const database_module_1 = require("../db/database.module");
+const schema_1 = require("../db/schema");
+const participants_service_1 = require("../participants/participants.service");
+const web_login_service_1 = require("../web/web-login.service");
+const setupSchema = zod_1.z.object({
+    name: zod_1.z.string().max(60).nullish(),
+    handle: zod_1.z.string().nullish(),
+    rotate_host: (0, validation_1.flag)().optional(),
+    // имя:движок:роль — агенты под движки, найденные на машине
+    agents: zod_1.z.array(zod_1.z.string()).optional(),
+});
+const participantSchema = zod_1.z.object({
+    handle: zod_1.z.string().regex(participants_service_1.HANDLE_PATTERN, { error: 'Имя — латиница, цифры, дефис и подчёркивание, от 2 до 40 знаков.' }),
+    name: zod_1.z.string().max(60).nullish(),
+    role: zod_1.z.string().nullish(),
+    kind: zod_1.z.enum(['human', 'ai', 'host']).nullish(),
+    accent: zod_1.z.string().regex(/^#[0-9a-fA-F]{6}$/).nullish(),
+    reissue: (0, validation_1.flag)().optional(),
+});
+/** Первый запуск, вход и участники — то, что делали `chat:setup`, `chat:login`, `chat:participant`. */
+let SetupService = class SetupService {
+    db;
+    participants;
+    login;
+    constructor(db, participants, login) {
+        this.db = db;
+        this.participants = participants;
+        this.login = login;
+    }
+    /**
+     * Владелец, раннер и агенты под найденные движки. Повторный запуск ничего не ломает —
+     * заводит недостающее. Токен раннера отдаётся, только когда выпущен: у нас — один хеш.
+     */
+    async setup(input) {
+        const data = (0, validation_1.validate)(setupSchema, input);
+        const agents = (data.agents ?? []).map(spec => this.parseAgent(spec));
+        for (const agent of agents)
+            await this.requireRole(agent.role, agent.spec);
+        const owner = await this.owner() ?? await this.createOwner(data.name || 'Владелец', data.handle);
+        let hostToken = null;
+        const [host] = await this.db.select().from(schema_1.participants).where((0, drizzle_orm_1.eq)(schema_1.participants.kind, participants_service_1.KIND_HOST)).orderBy((0, drizzle_orm_1.asc)(schema_1.participants.id)).limit(1);
+        if (!host) {
+            const [created] = await this.db.insert(schema_1.participants).values({ name: 'Раннер', handle: 'host', kind: participants_service_1.KIND_HOST, role: participants_service_1.ROLE_HOST }).returning();
+            hostToken = await this.participants.issueToken(created.id);
+        }
+        else if (data.rotate_host) {
+            hostToken = await this.participants.issueToken(host.id);
+        }
+        const created = [];
+        for (const { handle, runtime, role } of agents) {
+            // Есть — не трогаем: роль и движок мог поменять владелец в интерфейсе.
+            if (await this.byHandle(handle))
+                continue;
+            await this.db.insert(schema_1.participants).values({ handle, name: handle[0].toUpperCase() + handle.slice(1), kind: 'ai', role, runtime });
+            created.push(handle);
+        }
+        return { owner: owner.handle, agents: created, login_url: await this.login.link(owner), host_token: hostToken };
+    }
+    /** Одноразовая ссылка входа — владельцу или названному человеку. */
+    async loginLink(input) {
+        const { handle } = (0, validation_1.validate)(zod_1.z.object({ handle: zod_1.z.string().nullish() }), input);
+        const who = handle ? await this.byHandle(handle.replace(/^@/, '')) : await this.owner();
+        if (!who || who.kind !== 'human') {
+            throw errors_1.ValidationFailed.field('handle', handle ? 'Такого человека среди участников нет.' : 'Владельца ещё нет — сначала team-chat start.');
+        }
+        return { url: await this.login.link(who) };
+    }
+    async list() {
+        const all = await this.db.select().from(schema_1.participants).orderBy((0, drizzle_orm_1.asc)(schema_1.participants.id));
+        return {
+            participants: all.map(p => ({
+                handle: p.handle, name: p.name, role: p.role, kind: p.kind, token: p.tokenHash !== null, last_seen_at: (0, format_1.iso)(p.lastSeenAt),
+            })),
+        };
+    }
+    /**
+     * Завести участника или обновить. Токен — новому, а существующему только по reissue:
+     * случайный повторный вызов не должен отключить работающего агента. Умолчания — только
+     * новому, иначе перевыпуск сбросил бы владельцу роль.
+     */
+    async upsert(input) {
+        const data = (0, validation_1.validate)(participantSchema, input);
+        const existing = await this.byHandle(data.handle);
+        const values = {
+            name: data.name || existing?.name || data.handle,
+            role: data.role || existing?.role || 'developer',
+            kind: data.kind || existing?.kind || 'ai',
+            accent: data.accent || existing?.accent || '#0057c2',
+        };
+        const [participant] = existing
+            ? await this.db.update(schema_1.participants).set(values).where((0, drizzle_orm_1.eq)(schema_1.participants.id, existing.id)).returning()
+            : await this.db.insert(schema_1.participants).values({ handle: data.handle, ...values }).returning();
+        const token = !existing || data.reissue ? await this.participants.issueToken(participant.id) : null;
+        return { handle: participant.handle, created: !existing, token };
+    }
+    async createOwner(name, wanted) {
+        let handle = wanted || (0, slug_1.slugify)(name) || 'owner';
+        if (!participants_service_1.HANDLE_PATTERN.test(handle) || await this.byHandle(handle))
+            handle = 'owner';
+        const [owner] = await this.db.insert(schema_1.participants).values({ name, handle, kind: 'human', role: participants_service_1.ROLE_OWNER, accent: '#0f766e' }).returning();
+        return owner;
+    }
+    async owner() {
+        const [owner] = await this.db.select().from(schema_1.participants).where((0, drizzle_orm_1.eq)(schema_1.participants.role, participants_service_1.ROLE_OWNER)).orderBy((0, drizzle_orm_1.asc)(schema_1.participants.id)).limit(1);
+        return owner ?? null;
+    }
+    async byHandle(handle) {
+        const [p] = await this.db.select().from(schema_1.participants).where((0, drizzle_orm_1.eq)(schema_1.participants.handle, handle));
+        return p ?? null;
+    }
+    parseAgent(spec) {
+        const [handle, runtime, role] = spec.split(':', 3);
+        if (!handle || !runtime || !role || !participants_service_1.HANDLE_PATTERN.test(handle))
+            throw this.badAgent(spec);
+        return { spec, handle, runtime, role };
+    }
+    async requireRole(slug, spec) {
+        const [role] = await this.db.select({ id: schema_1.roles.id }).from(schema_1.roles).where((0, drizzle_orm_1.eq)(schema_1.roles.slug, slug));
+        if (!role)
+            throw this.badAgent(spec);
+    }
+    badAgent(spec) {
+        return errors_1.ValidationFailed.field('agents', `Не понял агента «${spec}»: нужно имя:движок:роль, и роль должна существовать.`);
+    }
+};
+exports.SetupService = SetupService;
+exports.SetupService = SetupService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(database_module_1.DATABASE)),
+    __metadata("design:paramtypes", [Object, participants_service_1.ParticipantsService,
+        web_login_service_1.WebLoginService])
+], SetupService);

package/server/dist/src/local/transfer.service.js

@@ -0,0 +1,151 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TransferService = exports.TABLES = void 0;
+const common_1 = require("@nestjs/common");
+const drizzle_orm_1 = require("drizzle-orm");
+const clock_1 = require("../common/clock");
+const errors_1 = require("../common/errors");
+const format_1 = require("../common/format");
+const database_module_1 = require("../db/database.module");
+/**
+ * Что переносится, и в каком порядке: родители раньше ссылок на них. Тот же состав, что
+ * у `chat:dump` PHP-сервера, — дамп оттуда восстанавливается здесь как есть. Токены
+ * раннеров и браузеров не переносятся: раннер возьмёт свои, браузер войдёт заново.
+ */
+exports.TABLES = [
+    'roles', 'participants', 'chats', 'chat_agent_roles', 'messages', 'attachments', 'mentions',
+    'decisions', 'documents', 'document_versions', 'knowledge_cards',
+];
+/** Не переносятся, но после восстановления чистятся: они ссылаются на прежних участников. */
+const DERIVED = ['participant_tokens', 'login_codes'];
+/**
+ * Ссылки на свою же таблицу: строка может ссылаться на ту, что в дампе идёт позже (агент —
+ * на раннер, заведённый после него). Такие столбцы ставятся вторым проходом, когда все
+ * строки таблицы уже на месте. SQLite у PHP-сервера внешних ключей не проверял.
+ */
+const SELF_REFERENCES = {
+    participants: ['host_id'],
+    messages: ['reply_to_id'],
+    decisions: ['supersedes_id'],
+};
+/** Таблицы, где у строк есть чат: в дампе времён одного чата его нет. */
+const CHAT_SCOPED = new Set(['messages', 'decisions', 'documents']);
+/**
+ * Перенос состояния чата между машинами и между PHP- и Node-сервером. Это перенос,
+ * а не синхронизация: восстановление заменяет содержимое целиком.
+ */
+let TransferService = class TransferService {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async dump() {
+        const tables = {};
+        for (const table of exports.TABLES) {
+            const rows = await this.rows(`select * from "${table}" order by id`);
+            tables[table] = rows.map(row => Object.fromEntries(Object.entries(row).map(([k, v]) => [k, v instanceof Date ? (0, format_1.iso)(v) : v])));
+        }
+        return { exported_at: (0, format_1.iso)((0, clock_1.now)()), tables };
+    }
+    async restore(input) {
+        const tables = input?.tables;
+        if (!tables || typeof tables !== 'object')
+            throw errors_1.ValidationFailed.field('tables', 'Файл не похож на дамп чата.');
+        const unknown = Object.keys(tables).filter(t => !exports.TABLES.includes(t));
+        if (unknown.length)
+            throw errors_1.ValidationFailed.field('tables', `В дампе незнакомые таблицы: ${unknown.join(', ')}.`);
+        const counts = {};
+        await this.db.transaction(async (tx) => {
+            const run = (query) => tx.execute(drizzle_orm_1.sql.raw(query));
+            await run(`truncate ${[...exports.TABLES, ...DERIVED].map(t => `"${t}"`).join(', ')} restart identity cascade`);
+            const legacyChat = this.legacyChatId(tables);
+            for (const table of exports.TABLES) {
+                const rows = [...(table === 'chats' && legacyChat.create ? [legacyChat.create] : []), ...(tables[table] ?? [])];
+                const columns = await this.columns(tx, table);
+                const later = SELF_REFERENCES[table] ?? [];
+                for (const row of rows) {
+                    const values = CHAT_SCOPED.has(table) && row.chat_id == null ? { ...row, chat_id: legacyChat.id } : { ...row };
+                    for (const column of later)
+                        values[column] = null;
+                    await tx.execute(insert(table, columns, values));
+                }
+                for (const row of rows) {
+                    for (const column of later.filter(c => row[c] != null)) {
+                        await tx.execute((0, drizzle_orm_1.sql) `update ${drizzle_orm_1.sql.raw(`"${table}"`)} set ${drizzle_orm_1.sql.raw(`"${column}"`)} = ${row[column]} where id = ${row.id}`);
+                    }
+                }
+                counts[table] = rows.length;
+                if (rows.length)
+                    await run(`select setval(pg_get_serial_sequence('"${table}"', 'id'), (select max(id) from "${table}"))`);
+            }
+        });
+        return { restored: counts };
+    }
+    /**
+     * Дамп времён одного чата: у сообщений, решений и документов нет chat_id. Всё это —
+     * обсуждение QBazar: так же его разложила PHP-миграция, заводившая чат qbazar.
+     */
+    legacyChatId(tables) {
+        const chats = tables.chats ?? [];
+        const legacy = [...CHAT_SCOPED].some(t => (tables[t] ?? []).some(r => r.chat_id == null));
+        if (!legacy)
+            return { id: null };
+        if (chats.length)
+            return { id: Math.min(...chats.map(c => Number(c.id))) };
+        const id = 1;
+        return { id, create: { id, slug: 'qbazar', name: 'QBazar', description: null, workdir: null } };
+    }
+    async columns(tx, table) {
+        const rows = await rowsOf(tx, `select column_name as name, data_type as type from information_schema.columns
+      where table_schema = 'public' and table_name = '${table}'`);
+        return new Map(rows.map(r => [String(r.name), { name: String(r.name), type: String(r.type) }]));
+    }
+    rows(query) {
+        return rowsOf(this.db, query);
+    }
+};
+exports.TransferService = TransferService;
+exports.TransferService = TransferService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(database_module_1.DATABASE)),
+    __metadata("design:paramtypes", [Object])
+], TransferService);
+/** INSERT строки дампа: только известные столбцы, значения — в типах этой базы. */
+function insert(table, columns, row) {
+    const entries = Object.entries(row).filter(([name]) => columns.has(name));
+    const names = drizzle_orm_1.sql.raw(entries.map(([name]) => `"${name}"`).join(', '));
+    const values = drizzle_orm_1.sql.join(entries.map(([name, value]) => (0, drizzle_orm_1.sql) `${convert(value, columns.get(name).type)}`), (0, drizzle_orm_1.sql) `, `);
+    return (0, drizzle_orm_1.sql) `insert into ${drizzle_orm_1.sql.raw(`"${table}"`)} (${names}) values (${values})`;
+}
+function convert(value, type) {
+    if (value === null || value === undefined)
+        return null;
+    if (type === 'boolean')
+        return value === true || value === 1 || value === '1' || value === 'true';
+    if (type.startsWith('timestamp'))
+        return laravelTime(String(value));
+    if (type === 'jsonb' || type === 'json')
+        return typeof value === 'string' ? value : JSON.stringify(value);
+    return value;
+}
+/** Laravel хранил время без пояса — это UTC: «2026-09-13 11:21:36» → 2026-09-13T11:21:36Z. */
+function laravelTime(value) {
+    return /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}(\.\d+)?$/.test(value) ? value.replace(' ', 'T') + 'Z' : value;
+}
+async function rowsOf(db, query) {
+    // Оба драйвера (PGlite и pg) отдают строки в rows; общий тип drizzle этого не знает.
+    const result = await db.execute(drizzle_orm_1.sql.raw(query));
+    return result.rows;
+}

package/server/dist/src/main.js

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+"use strict";
+// Точка входа сервера чата. Настройки — переменные CHAT_* (config/config.ts).
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const app_1 = require("./app");
+const config_1 = require("./config/config");
+const database_1 = require("./db/database");
+async function main() {
+    let config;
+    try {
+        config = (0, config_1.serverConfig)();
+    }
+    catch (e) {
+        if (!(e instanceof config_1.ConfigError))
+            throw e;
+        console.error(e.message);
+        process.exit(1);
+    }
+    node_fs_1.default.mkdirSync(config.dataDir, { recursive: true, mode: 0o700 });
+    const database = await (0, database_1.openDatabase)(config.databaseUrl ? { url: config.databaseUrl } : { dataDir: node_path_1.default.join(config.dataDir, 'db') });
+    const app = await (0, app_1.createApp)({ config, database, logger: ['error', 'warn', 'log'] });
+    await app.listen(config.port, config.host);
+    console.log(`чат: ${config.url} (слушаю ${config.host}:${config.port}, данные — ${config.dataDir})`);
+}
+main().catch(e => {
+    console.error(e);
+    process.exit(1);
+});