web-agent-bridge 3.4.0 → 3.9.0

package/server/migrations/019_unify_tier_constraints.sql

@@ -0,0 +1,133 @@
+-- ─────────────────────────────────────────────────────────────────────
+-- Migration 019: Unify tier CHECK constraints with canonical plans table
+--
+-- Background:
+--   plans table (008_plans.sql) seeds: free / pro / business / enterprise
+--   Legacy CHECK constraints accepted:  free / starter / pro / enterprise
+--   ⇒ Cannot purchase the canonical 'business' tier because the row would
+--     violate the CHECK constraint on sites.tier, subscriptions.tier,
+--     stripe_subscriptions.tier, free_grants.granted_tier and
+--     workspace_subscriptions.plan.
+--
+-- This migration accepts BOTH 'starter' (legacy / kept for back-compat
+-- with any existing rows or external scripts) AND 'business' (canonical
+-- new tier name).
+--
+-- SQLite-recommended pattern: create new table, copy rows, drop old,
+-- rename new, recreate indexes. defer_foreign_keys lets us do it inside
+-- a single transaction.
+-- ─────────────────────────────────────────────────────────────────────
+
+PRAGMA defer_foreign_keys = ON;
+
+-- ── 1) sites ─────────────────────────────────────────────────────────
+CREATE TABLE sites_new (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  domain TEXT NOT NULL,
+  name TEXT NOT NULL,
+  description TEXT,
+  tier TEXT DEFAULT 'free' CHECK(tier IN ('free','starter','pro','business','enterprise')),
+  license_key TEXT UNIQUE NOT NULL,
+  api_key TEXT UNIQUE,
+  config TEXT DEFAULT '{}',
+  active INTEGER DEFAULT 1,
+  created_at TEXT DEFAULT (datetime('now')),
+  updated_at TEXT DEFAULT (datetime('now')),
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+);
+INSERT INTO sites_new SELECT * FROM sites;
+DROP TABLE sites;
+ALTER TABLE sites_new RENAME TO sites;
+CREATE INDEX IF NOT EXISTS idx_sites_domain  ON sites(domain);
+CREATE INDEX IF NOT EXISTS idx_sites_license ON sites(license_key);
+
+-- ── 2) subscriptions ────────────────────────────────────────────────
+CREATE TABLE subscriptions_new (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  site_id TEXT NOT NULL,
+  tier TEXT NOT NULL CHECK(tier IN ('free','starter','pro','business','enterprise')),
+  status TEXT DEFAULT 'active' CHECK(status IN ('active','cancelled','expired','trial')),
+  started_at TEXT DEFAULT (datetime('now')),
+  expires_at TEXT,
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+  FOREIGN KEY (site_id) REFERENCES sites(id) ON DELETE CASCADE
+);
+INSERT INTO subscriptions_new SELECT * FROM subscriptions;
+DROP TABLE subscriptions;
+ALTER TABLE subscriptions_new RENAME TO subscriptions;
+
+-- ── 3) free_grants ──────────────────────────────────────────────────
+CREATE TABLE free_grants_new (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  site_id TEXT,
+  granted_tier TEXT NOT NULL CHECK(granted_tier IN ('starter','pro','business','enterprise')),
+  reason TEXT,
+  granted_by TEXT NOT NULL,
+  granted_at TEXT DEFAULT (datetime('now')),
+  expires_at TEXT,
+  active INTEGER DEFAULT 1,
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+  FOREIGN KEY (granted_by) REFERENCES admins(id)
+);
+INSERT INTO free_grants_new SELECT * FROM free_grants;
+DROP TABLE free_grants;
+ALTER TABLE free_grants_new RENAME TO free_grants;
+
+-- ── 4) stripe_subscriptions ─────────────────────────────────────────
+CREATE TABLE stripe_subscriptions_new (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  site_id TEXT NOT NULL,
+  stripe_subscription_id TEXT UNIQUE,
+  stripe_price_id TEXT,
+  tier TEXT NOT NULL CHECK(tier IN ('starter','pro','business','enterprise')),
+  status TEXT DEFAULT 'active' CHECK(status IN ('active','cancelled','past_due','trialing','incomplete')),
+  current_period_start TEXT,
+  current_period_end TEXT,
+  created_at TEXT DEFAULT (datetime('now')),
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+  FOREIGN KEY (site_id) REFERENCES sites(id) ON DELETE CASCADE
+);
+INSERT INTO stripe_subscriptions_new SELECT * FROM stripe_subscriptions;
+DROP TABLE stripe_subscriptions;
+ALTER TABLE stripe_subscriptions_new RENAME TO stripe_subscriptions;
+
+-- ── 5) workspace_subscriptions (agent-workspace.js dynamic table) ────
+-- Created on first import of routes/agent-workspace.js. May not exist
+-- in fresh installs that have not loaded that route yet; guard with
+-- a defensive recreate.
+CREATE TABLE IF NOT EXISTS workspace_subscriptions (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  plan TEXT NOT NULL DEFAULT 'free',
+  status TEXT NOT NULL DEFAULT 'active',
+  tasks_today INTEGER DEFAULT 0,
+  tasks_total INTEGER DEFAULT 0,
+  deals_completed INTEGER DEFAULT 0,
+  total_savings REAL DEFAULT 0,
+  last_task_date TEXT,
+  created_at TEXT DEFAULT (datetime('now')),
+  expires_at TEXT,
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+);
+
+CREATE TABLE workspace_subscriptions_new (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  plan TEXT NOT NULL DEFAULT 'free' CHECK(plan IN ('free','starter','pro','business','enterprise')),
+  status TEXT NOT NULL DEFAULT 'active' CHECK(status IN ('active','cancelled','expired','suspended')),
+  tasks_today INTEGER DEFAULT 0,
+  tasks_total INTEGER DEFAULT 0,
+  deals_completed INTEGER DEFAULT 0,
+  total_savings REAL DEFAULT 0,
+  last_task_date TEXT,
+  created_at TEXT DEFAULT (datetime('now')),
+  expires_at TEXT,
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+);
+INSERT INTO workspace_subscriptions_new SELECT * FROM workspace_subscriptions;
+DROP TABLE workspace_subscriptions;
+ALTER TABLE workspace_subscriptions_new RENAME TO workspace_subscriptions;

package/server/migrations/020_agent_transaction_primitive.sql

@@ -0,0 +1,119 @@
+-- ─────────────────────────────────────────────────────────────────────────────
+-- Migration 020 — Agent Transaction Primitive (ATP) — v3.9.0
+--
+-- Promotes WAB from "discover + execute" to "trust + transaction" by
+-- introducing intents, transactions, steps and signed receipts as
+-- first-class primitives.
+--
+--   * atp_intents       — signed human → agent authorization contracts
+--   * atp_transactions  — executions performed under an intent
+--   * atp_steps         — per-step ledger inside a transaction (retry/comp)
+--   * atp_receipts      — cryptographically signed proofs of outcome
+--   * atp_nonces        — single-use nonces to prevent replay
+--
+-- All state machines enforced by CHECK constraints so the DB itself
+-- refuses illegal transitions.
+-- ─────────────────────────────────────────────────────────────────────────────
+
+-- ── 1) Intents (the human → agent contract) ──────────────────────────────────
+CREATE TABLE IF NOT EXISTS atp_intents (
+  id              TEXT PRIMARY KEY,                     -- atp_int_<ulid>
+  user_id         TEXT NOT NULL,                        -- principal (the human)
+  site_id         TEXT,                                 -- optional binding
+  agent_id        TEXT,                                 -- optional binding (the delegate)
+  purpose         TEXT NOT NULL,                        -- short human-readable purpose
+  scope           TEXT NOT NULL,                        -- JSON: { actions:[], domains:[], constraints:{} }
+  spend_cap_cents INTEGER NOT NULL DEFAULT 0,           -- 0 = no cap (must be explicit)
+  spend_currency  TEXT NOT NULL DEFAULT 'EUR',
+  spent_cents     INTEGER NOT NULL DEFAULT 0,           -- running total against the cap
+  max_executions  INTEGER NOT NULL DEFAULT 1,           -- how many transactions allowed
+  used_executions INTEGER NOT NULL DEFAULT 0,
+  expires_at      TEXT NOT NULL,                        -- ISO-8601, hard cutoff
+  nonce           TEXT NOT NULL UNIQUE,                 -- prevents replay across intents
+  status          TEXT NOT NULL DEFAULT 'draft'
+                  CHECK (status IN ('draft','authorized','consumed','revoked','expired')),
+  authorized_at   TEXT,
+  authorized_by   TEXT,                                 -- user_id of the approver
+  user_signature  TEXT,                                 -- base64 Ed25519 sig of canonical body
+  revoked_at      TEXT,
+  revoked_reason  TEXT,
+  metadata        TEXT NOT NULL DEFAULT '{}',           -- JSON
+  created_at      TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at      TEXT NOT NULL DEFAULT (datetime('now')),
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_atp_intents_user   ON atp_intents(user_id, created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_atp_intents_status ON atp_intents(status, expires_at);
+CREATE INDEX IF NOT EXISTS idx_atp_intents_site   ON atp_intents(site_id);
+
+-- ── 2) Transactions (executions under an intent) ─────────────────────────────
+CREATE TABLE IF NOT EXISTS atp_transactions (
+  id               TEXT PRIMARY KEY,                    -- atp_tx_<ulid>
+  intent_id        TEXT NOT NULL,
+  site_id          TEXT,
+  agent_id         TEXT,
+  idempotency_key  TEXT NOT NULL,                       -- caller-supplied, unique per intent
+  status           TEXT NOT NULL DEFAULT 'pending'
+                   CHECK (status IN ('pending','executing','executed','settled','failed','compensated')),
+  amount_cents     INTEGER NOT NULL DEFAULT 0,          -- net effect against intent.spend_cap
+  currency         TEXT NOT NULL DEFAULT 'EUR',
+  summary          TEXT,                                -- one-line outcome summary
+  error            TEXT,                                -- failure reason if status='failed'
+  started_at       TEXT,
+  completed_at     TEXT,
+  settled_at       TEXT,
+  compensated_at   TEXT,
+  metadata         TEXT NOT NULL DEFAULT '{}',
+  created_at       TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at       TEXT NOT NULL DEFAULT (datetime('now')),
+  FOREIGN KEY (intent_id) REFERENCES atp_intents(id) ON DELETE CASCADE,
+  UNIQUE (intent_id, idempotency_key)                   -- the core safety guarantee
+);
+CREATE INDEX IF NOT EXISTS idx_atp_tx_intent ON atp_transactions(intent_id, created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_atp_tx_status ON atp_transactions(status, created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_atp_tx_site   ON atp_transactions(site_id, created_at DESC);
+
+-- ── 3) Steps (granular ledger for retry / compensation) ──────────────────────
+CREATE TABLE IF NOT EXISTS atp_steps (
+  id              INTEGER PRIMARY KEY AUTOINCREMENT,
+  transaction_id  TEXT NOT NULL,
+  seq             INTEGER NOT NULL,                     -- step order, 1..N
+  action          TEXT NOT NULL,                        -- WAB action name (e.g. "checkout.confirm")
+  state           TEXT NOT NULL DEFAULT 'pending'
+                  CHECK (state IN ('pending','running','succeeded','failed','skipped','compensated')),
+  before_snapshot TEXT,                                 -- JSON: site state before step (optional)
+  after_snapshot  TEXT,                                 -- JSON: site state after step
+  evidence        TEXT,                                 -- JSON: arbitrary proof (DOM hash, http trace, …)
+  compensation    TEXT,                                 -- JSON: rollback action descriptor
+  attempts        INTEGER NOT NULL DEFAULT 0,
+  last_error      TEXT,
+  started_at      TEXT,
+  ended_at        TEXT,
+  created_at      TEXT NOT NULL DEFAULT (datetime('now')),
+  FOREIGN KEY (transaction_id) REFERENCES atp_transactions(id) ON DELETE CASCADE,
+  UNIQUE (transaction_id, seq)
+);
+CREATE INDEX IF NOT EXISTS idx_atp_steps_tx ON atp_steps(transaction_id, seq);
+
+-- ── 4) Receipts (signed proofs of outcome) ───────────────────────────────────
+CREATE TABLE IF NOT EXISTS atp_receipts (
+  id              TEXT PRIMARY KEY,                     -- atp_rcpt_<ulid>
+  transaction_id  TEXT NOT NULL UNIQUE,
+  site_id         TEXT,                                 -- the signing party (if any)
+  algorithm       TEXT NOT NULL DEFAULT 'ed25519',
+  key_id          TEXT,                                 -- fingerprint of signing key
+  canonical_body  TEXT NOT NULL,                        -- the canonicalized JSON that was signed
+  signature       TEXT NOT NULL,                        -- base64 Ed25519 signature
+  public_key      TEXT,                                 -- embedded pub key for offline verification
+  issued_at       TEXT NOT NULL DEFAULT (datetime('now')),
+  FOREIGN KEY (transaction_id) REFERENCES atp_transactions(id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_atp_receipts_site ON atp_receipts(site_id, issued_at DESC);
+
+-- ── 5) Nonces (single-use, replay protection) ────────────────────────────────
+CREATE TABLE IF NOT EXISTS atp_nonces (
+  nonce       TEXT PRIMARY KEY,
+  user_id     TEXT NOT NULL,
+  consumed_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_atp_nonces_user ON atp_nonces(user_id, consumed_at DESC);

package/server/models/adapters/index.js

@@ -1,33 +1,33 @@
-/**
- * Database Adapter Interface
- *
- * WAB supports multiple database backends via adapters.
- * Set DB_ADAPTER environment variable to choose: sqlite (default), postgresql, mysql
- *
- * For PostgreSQL:
- *   npm install pg
- *   DB_ADAPTER=postgresql DATABASE_URL=postgres://user:pass@host:5432/wab
- *
- * For MySQL:
- *   npm install mysql2
- *   DB_ADAPTER=mysql DATABASE_URL=mysql://user:pass@host:3306/wab
- */
-
-const adapter = process.env.DB_ADAPTER || 'sqlite';
-
-let db;
-switch (adapter) {
-  case 'postgresql':
-  case 'postgres':
-    db = require('./postgresql');
-    break;
-  case 'mysql':
-    db = require('./mysql');
-    break;
-  case 'sqlite':
-  default:
-    db = require('./sqlite');
-    break;
-}
-
-module.exports = db;
+/**
+ * Database Adapter Interface
+ *
+ * WAB supports multiple database backends via adapters.
+ * Set DB_ADAPTER environment variable to choose: sqlite (default), postgresql, mysql
+ *
+ * For PostgreSQL:
+ *   npm install pg
+ *   DB_ADAPTER=postgresql DATABASE_URL=postgres://user:pass@host:5432/wab
+ *
+ * For MySQL:
+ *   npm install mysql2
+ *   DB_ADAPTER=mysql DATABASE_URL=mysql://user:pass@host:3306/wab
+ */
+
+const adapter = process.env.DB_ADAPTER || 'sqlite';
+
+let db;
+switch (adapter) {
+  case 'postgresql':
+  case 'postgres':
+    db = require('./postgresql');
+    break;
+  case 'mysql':
+    db = require('./mysql');
+    break;
+  case 'sqlite':
+  default:
+    db = require('./sqlite');
+    break;
+}
+
+module.exports = db;