ysk-server-core 1.0.0

package/dist/db/document-store.js

@@ -0,0 +1,363 @@
+/**
+ * Document-store backends for control-plane state (D4).
+ *
+ * All backends subclass JsonStore so product code keeps db.snapshot + persist.
+ *
+ * - json     → atomic ysk.json (default)
+ * - sqlite   → sql.js via child process (pure JS, no native segfault risk)
+ * - postgres → optional `pg` via child process (experimental)
+ *
+ * Full relational schema remains in schema.ts for a future phase.
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { dirname } from 'node:path';
+import { createRequire } from 'node:module';
+import { ErrorCodes, YskError } from 'ysk-server-shared';
+import { JsonStore } from './store.js';
+const require = createRequire(import.meta.url);
+export function resolveStoreBackend(opts = {}) {
+    const envKind = (process.env.YSK_STORE ?? process.env.YSK_DB_BACKEND ?? '')
+        .trim()
+        .toLowerCase();
+    const envUrl = (process.env.YSK_DATABASE_URL ?? process.env.DATABASE_URL ?? '').trim();
+    const path = opts.path?.trim();
+    const url = (opts.url ?? envUrl).trim() || undefined;
+    if (opts.kind)
+        return { kind: opts.kind, path, url };
+    if (envKind === 'sqlite' || envKind === 'json' || envKind === 'postgres') {
+        return { kind: envKind, path, url };
+    }
+    if (url?.startsWith('postgres://') || url?.startsWith('postgresql://')) {
+        return { kind: 'postgres', path, url };
+    }
+    if (path?.endsWith('.sqlite') || path?.endsWith('.db')) {
+        return { kind: 'sqlite', path, url };
+    }
+    return { kind: 'json', path, url };
+}
+function ensureParent(filePath) {
+    mkdirSync(dirname(filePath), { recursive: true });
+}
+function runNodeScript(script, timeoutMs = 60_000) {
+    const { execFileSync } = require('node:child_process');
+    try {
+        return execFileSync(process.execPath, ['-e', script], {
+            encoding: 'utf8',
+            timeout: timeoutMs,
+            env: process.env,
+            maxBuffer: 32 * 1024 * 1024,
+        });
+    }
+    catch (e) {
+        const err = e;
+        const detail = (typeof err.stderr === 'string' ? err.stderr : err.stderr?.toString?.()) ||
+            err.message ||
+            String(e);
+        throw new YskError(ErrorCodes.CONFIG_INVALID, detail.slice(0, 400), {
+            httpStatus: 500,
+        });
+    }
+}
+/** JsonStore dual-write to SQLite file via sql.js (child process). */
+export class ShellSqliteJsonStore extends JsonStore {
+    backendKind = 'sqlite';
+    /**
+     * Set after super() — JsonStore ctor may call persist() before subclass fields init.
+     * Guard dual-write until ready, then persist again from openSqliteDocumentStore.
+     */
+    _sqlitePath;
+    get sqlitePath() {
+        return this._sqlitePath ?? '';
+    }
+    constructor(sqlitePath, mirrorJsonPath) {
+        super(mirrorJsonPath);
+        this._sqlitePath = sqlitePath;
+    }
+    persist() {
+        super.persist();
+        const sqlitePath = this._sqlitePath;
+        // super() may invoke persist before _sqlitePath is assigned
+        if (!sqlitePath)
+            return;
+        const body = JSON.stringify(this.snapshot, null, 2);
+        const at = new Date().toISOString();
+        let sqlAsmPath;
+        try {
+            sqlAsmPath = require.resolve('sql.js/dist/sql-asm.js');
+        }
+        catch {
+            throw new YskError(ErrorCodes.CONFIG_INVALID, 'sql.js not installed — cannot use SQLite store (YSK_STORE=json is default)', { httpStatus: 500 });
+        }
+        // Spool body to avoid huge -e argv / escape issues
+        const spoolPath = `${sqlitePath}.spool.${process.pid}.json`;
+        writeFileSync(spoolPath, body, 'utf8');
+        const script = `
+      const fs = require('fs');
+      const path = require('path');
+      const sqlitePath = ${JSON.stringify(sqlitePath)};
+      const spoolPath = ${JSON.stringify(spoolPath)};
+      const at = ${JSON.stringify(at)};
+      const body = fs.readFileSync(spoolPath, 'utf8');
+      (async () => {
+        try {
+          const initSqlJs = require(${JSON.stringify(sqlAsmPath)});
+          const SQL = await initSqlJs();
+          let db;
+          if (fs.existsSync(sqlitePath)) db = new SQL.Database(fs.readFileSync(sqlitePath));
+          else db = new SQL.Database();
+          db.run(\`CREATE TABLE IF NOT EXISTS ysk_document (
+            id TEXT PRIMARY KEY CHECK (id = 'main'),
+            body TEXT NOT NULL,
+            updated_at TEXT NOT NULL
+          )\`);
+          db.run('DELETE FROM ysk_document WHERE id = ?', ['main']);
+          db.run('INSERT INTO ysk_document (id, body, updated_at) VALUES (?,?,?)', ['main', body, at]);
+          const data = db.export();
+          const dir = path.dirname(sqlitePath);
+          if (dir && dir !== '.') fs.mkdirSync(dir, { recursive: true });
+          const tmp = sqlitePath + '.tmp';
+          fs.writeFileSync(tmp, Buffer.from(data));
+          fs.renameSync(tmp, sqlitePath);
+          db.close();
+          try { fs.unlinkSync(spoolPath); } catch {}
+        } catch (e) {
+          console.error(e);
+          process.exit(1);
+        }
+      })();
+    `;
+        try {
+            runNodeScript(script);
+        }
+        finally {
+            try {
+                if (existsSync(spoolPath))
+                    unlinkSync(spoolPath);
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    }
+}
+/** JsonStore dual-write to Postgres (experimental). */
+export class PostgresJsonStore extends JsonStore {
+    backendKind = 'postgres';
+    _connectionUrl;
+    get connectionUrl() {
+        return this._connectionUrl ?? '';
+    }
+    constructor(url, mirrorJsonPath) {
+        super(mirrorJsonPath);
+        this._connectionUrl = url;
+    }
+    persist() {
+        super.persist();
+        if (!this._connectionUrl)
+            return;
+        const body = JSON.stringify(this.snapshot, null, 2);
+        const at = new Date().toISOString();
+        const spoolPath = `/tmp/ysk-pg-spool-${process.pid}.json`;
+        writeFileSync(spoolPath, body, 'utf8');
+        const script = `
+      const { readFileSync } = require('fs');
+      let Client;
+      try { Client = require('pg').Client; } catch (e) {
+        console.error('pg package missing');
+        process.exit(2);
+      }
+      const body = readFileSync(${JSON.stringify(spoolPath)}, 'utf8');
+      const c = new Client({ connectionString: ${JSON.stringify(this._connectionUrl)} });
+      (async () => {
+        await c.connect();
+        await c.query(\`CREATE TABLE IF NOT EXISTS ysk_document (
+          id TEXT PRIMARY KEY CHECK (id = 'main'),
+          body TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        )\`);
+        await c.query(
+          \`INSERT INTO ysk_document (id, body, updated_at) VALUES ('main', $1, $2)
+           ON CONFLICT (id) DO UPDATE SET body = EXCLUDED.body, updated_at = EXCLUDED.updated_at\`,
+          [body, ${JSON.stringify(at)}]
+        );
+        await c.end();
+      })().catch((e) => { console.error(e); process.exit(1); });
+    `;
+        try {
+            runNodeScript(script, 30_000);
+        }
+        catch (e) {
+            throw new YskError(ErrorCodes.CONFIG_INVALID, 'Postgres persist failed (is `pg` installed and YSK_DATABASE_URL reachable?)', {
+                httpStatus: 500,
+                details: { cause: e instanceof Error ? e.message : String(e) },
+            });
+        }
+    }
+}
+export function openSqliteDocumentStore(sqlitePath) {
+    ensureParent(sqlitePath);
+    const mirrorPath = `${sqlitePath}.mirror.json`;
+    if (existsSync(sqlitePath)) {
+        try {
+            let sqlAsmPath;
+            try {
+                sqlAsmPath = require.resolve('sql.js/dist/sql-asm.js');
+            }
+            catch {
+                throw new YskError(ErrorCodes.CONFIG_INVALID, 'sql.js not installed — cannot use SQLite store', { httpStatus: 500 });
+            }
+            const script = `
+        const fs = require('fs');
+        const sqlitePath = ${JSON.stringify(sqlitePath)};
+        (async () => {
+          const initSqlJs = require(${JSON.stringify(sqlAsmPath)});
+          const SQL = await initSqlJs();
+          const db = new SQL.Database(fs.readFileSync(sqlitePath));
+          let body = '';
+          try {
+            const r = db.exec("SELECT body FROM ysk_document WHERE id = 'main'");
+            if (r[0] && r[0].values[0]) body = r[0].values[0][0] || '';
+          } catch {}
+          db.close();
+          process.stdout.write(typeof body === 'string' ? body : '');
+        })().catch((e) => { console.error(e); process.exit(1); });
+      `;
+            const body = runNodeScript(script);
+            if (body?.trim())
+                writeFileSync(mirrorPath, body, 'utf8');
+        }
+        catch {
+            /* empty */
+        }
+    }
+    if (!existsSync(mirrorPath)) {
+        const siblingJson = sqlitePath.replace(/\.sqlite$/, '.json').replace(/\.db$/, '.json');
+        if (existsSync(siblingJson)) {
+            writeFileSync(mirrorPath, readFileSync(siblingJson, 'utf8'), 'utf8');
+        }
+    }
+    const store = new ShellSqliteJsonStore(sqlitePath, mirrorPath);
+    // dual-write now that _sqlitePath is set (ctor super() may have skipped sqlite)
+    store.persist();
+    return store;
+}
+export function openPostgresDocumentStore(url) {
+    if (!url?.trim()) {
+        throw new YskError(ErrorCodes.CONFIG_INVALID, 'Postgres backend needs YSK_DATABASE_URL', {
+            httpStatus: 500,
+        });
+    }
+    try {
+        require.resolve('pg');
+    }
+    catch {
+        throw new YskError(ErrorCodes.CONFIG_INVALID, 'Postgres backend requires optional package `pg`. Install pg or use YSK_STORE=json|sqlite.', { httpStatus: 500 });
+    }
+    const mirrorPath = `/tmp/ysk-pg-mirror-${Buffer.from(url).toString('hex').slice(0, 16)}.json`;
+    try {
+        const script = `
+      const { Client } = require('pg');
+      const c = new Client({ connectionString: ${JSON.stringify(url)} });
+      (async () => {
+        await c.connect();
+        await c.query(\`CREATE TABLE IF NOT EXISTS ysk_document (
+          id TEXT PRIMARY KEY CHECK (id = 'main'),
+          body TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        )\`);
+        const r = await c.query("SELECT body FROM ysk_document WHERE id = 'main'");
+        process.stdout.write(r.rows[0] ? r.rows[0].body : '');
+        await c.end();
+      })().catch((e) => { console.error(e); process.exit(1); });
+    `;
+        const body = runNodeScript(script, 30_000);
+        if (body?.trim())
+            writeFileSync(mirrorPath, body, 'utf8');
+    }
+    catch {
+        /* empty start */
+    }
+    const store = new PostgresJsonStore(url, mirrorPath);
+    // dual-write now that connection url is set
+    store.persist();
+    return store;
+}
+export function openDocumentStoreSync(opts) {
+    const resolved = resolveStoreBackend(opts);
+    if (resolved.kind === 'postgres') {
+        return openPostgresDocumentStore(resolved.url ?? '');
+    }
+    if (resolved.kind === 'sqlite') {
+        const path = resolved.path ?? 'ysk.sqlite';
+        const sqlitePath = path.endsWith('.json')
+            ? path.replace(/\.json$/, '.sqlite')
+            : path.endsWith('.sqlite') || path.endsWith('.db')
+                ? path
+                : `${path}.sqlite`;
+        return openSqliteDocumentStore(sqlitePath);
+    }
+    let jsonPath = resolved.path ?? 'ysk.json';
+    if (jsonPath.endsWith('.sqlite'))
+        jsonPath = jsonPath.replace(/\.sqlite$/, '.json');
+    if (jsonPath.endsWith('.db'))
+        jsonPath = jsonPath.replace(/\.db$/, '.json');
+    return new JsonStore(jsonPath);
+}
+export async function openDocumentStore(opts) {
+    return openDocumentStoreSync(opts);
+}
+export function exportStoreDocument(db, outPath) {
+    ensureParent(outPath);
+    const body = JSON.stringify(db.snapshot, null, 2);
+    const tmp = `${outPath}.${process.pid}.tmp`;
+    writeFileSync(tmp, body, 'utf8');
+    renameSync(tmp, outPath);
+    return { ok: true, path: outPath, bytes: Buffer.byteLength(body) };
+}
+export function importStoreDocument(db, inPath) {
+    if (!existsSync(inPath)) {
+        throw new YskError(ErrorCodes.NOT_FOUND, `import file not found: ${inPath}`, {
+            httpStatus: 404,
+        });
+    }
+    const raw = JSON.parse(readFileSync(inPath, 'utf8'));
+    const snap = db.snapshot;
+    for (const k of Object.keys(snap)) {
+        delete snap[k];
+    }
+    Object.assign(snap, raw);
+    db.persist();
+    return {
+        ok: true,
+        users: Array.isArray(db.snapshot.users) ? db.snapshot.users.length : 0,
+        projects: Array.isArray(db.snapshot.projects) ? db.snapshot.projects.length : 0,
+    };
+}
+export function storeStatus(db, locationHint) {
+    let kind = 'json';
+    let location = locationHint ?? '(json)';
+    if (db instanceof ShellSqliteJsonStore) {
+        kind = 'sqlite';
+        location = db.sqlitePath;
+    }
+    else if (db instanceof PostgresJsonStore) {
+        kind = 'postgres';
+        location = db.connectionUrl.replace(/:[^:@/]+@/, ':***@');
+    }
+    return {
+        ok: true,
+        kind,
+        location,
+        users: db.snapshot.users?.length ?? 0,
+        projects: db.snapshot.projects?.length ?? 0,
+        notes: [
+            kind === 'json'
+                ? 'JSON atomic file store (default, no native deps)'
+                : kind === 'sqlite'
+                    ? 'SQLite document store via sql.js (pure JS, portable)'
+                    : 'Postgres document store (experimental, requires pg)',
+            'Document mode — not full per-table relational schema (schema.ts reserved)',
+        ],
+    };
+}
+//# sourceMappingURL=document-store.js.map

package/dist/db/document-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-store.js","sourceRoot":"","sources":["../../src/db/document-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAoC,MAAM,YAAY,CAAC;AAUzE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,MAAM,UAAU,mBAAmB,CAAC,OAAyB,EAAE;IAK7D,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;SACxE,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAErD,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,GAAG,EAAE,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,EAAE,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,SAAS,GAAG,MAAM;IACvD,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAwC,CAAC;IAC9F,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACpD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,SAAS;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAmD,CAAC;QAChE,MAAM,MAAM,GACV,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;YACxE,GAAG,CAAC,OAAO;YACX,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YAClE,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,OAAO,oBAAqB,SAAQ,SAAS;IACxC,WAAW,GAAqB,QAAQ,CAAC;IAClD;;;OAGG;IACK,WAAW,CAAqB;IAExC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,YAAY,UAAkB,EAAE,cAAsB;QACpD,KAAK,CAAC,cAAc,CAAC,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;IAChC,CAAC;IAEQ,OAAO;QACd,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,4DAA4D;QAC5D,IAAI,CAAC,UAAU;YAAE,OAAO;QAExB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,QAAQ,CAChB,UAAU,CAAC,cAAc,EACzB,4EAA4E,EAC5E,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;QACJ,CAAC;QACD,mDAAmD;QACnD,MAAM,SAAS,GAAG,GAAG,UAAU,UAAU,OAAO,CAAC,GAAG,OAAO,CAAC;QAC5D,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG;;;2BAGQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;0BAC3B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;mBAChC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;;;;sCAIC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;KAyB3D,CAAC;QACF,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,SAAS,CAAC;oBAAE,UAAU,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,uDAAuD;AACvD,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IACrC,WAAW,GAAqB,UAAU,CAAC;IAC5C,cAAc,CAAqB;IAE3C,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,YAAY,GAAW,EAAE,cAAsB;QAC7C,KAAK,CAAC,cAAc,CAAC,CAAC;QACtB,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC;IAC5B,CAAC;IAEQ,OAAO;QACd,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,qBAAqB,OAAO,CAAC,GAAG,OAAO,CAAC;QAC1D,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG;;;;;;;kCAOe,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;iDACV,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC;;;;;;;;;;;mBAWjE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;;;;KAIhC,CAAC;QACF,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,QAAQ,CAChB,UAAU,CAAC,cAAc,EACzB,6EAA6E,EAC7E;gBACE,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;aAC/D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,YAAY,CAAC,UAAU,CAAC,CAAC;IACzB,MAAM,UAAU,GAAG,GAAG,UAAU,cAAc,CAAC;IAE/C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,UAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,QAAQ,CAChB,UAAU,CAAC,cAAc,EACzB,gDAAgD,EAChD,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG;;6BAEQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;;sCAEjB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;;;;;;;;;;;OAWzD,CAAC;YACF,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,IAAI,EAAE,IAAI,EAAE;gBAAE,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvF,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC/D,gFAAgF;IAChF,KAAK,CAAC,OAAO,EAAE,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,yCAAyC,EAAE;YACvF,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,UAAU,CAAC,cAAc,EACzB,2FAA2F,EAC3F,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,sBAAsB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC;IAC9F,IAAI,CAAC;QACH,MAAM,MAAM,GAAG;;iDAE8B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;;;;;;;;;;;;KAY/D,CAAC;QACF,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,IAAI,EAAE,IAAI,EAAE;YAAE,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACrD,4CAA4C;IAC5C,KAAK,CAAC,OAAO,EAAE,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAsB;IAC1D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,yBAAyB,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,YAAY,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;YACpC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAChD,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC;QACvB,OAAO,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,QAAQ,GAAG,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC;IAC3C,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpF,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5E,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAsB;IAC5D,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,EAAe,EACf,OAAe;IAEf,YAAY,CAAC,OAAO,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC5C,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,EAAe,EACf,MAAc;IAEd,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,0BAA0B,MAAM,EAAE,EAAE;YAC3E,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAc,CAAC;IAClE,MAAM,IAAI,GAAG,EAAE,CAAC,QAA8C,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzB,EAAE,CAAC,OAAO,EAAE,CAAC;IACb,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACtE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,EAAe,EACf,YAAqB;IASrB,IAAI,IAAI,GAAqB,MAAM,CAAC;IACpC,IAAI,QAAQ,GAAG,YAAY,IAAI,QAAQ,CAAC;IACxC,IAAI,EAAE,YAAY,oBAAoB,EAAE,CAAC;QACvC,IAAI,GAAG,QAAQ,CAAC;QAChB,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC;IAC3B,CAAC;SAAM,IAAI,EAAE,YAAY,iBAAiB,EAAE,CAAC;QAC3C,IAAI,GAAG,UAAU,CAAC;QAClB,QAAQ,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI;QACJ,QAAQ;QACR,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;QACrC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC;QAC3C,KAAK,EAAE;YACL,IAAI,KAAK,MAAM;gBACb,CAAC,CAAC,kDAAkD;gBACpD,CAAC,CAAC,IAAI,KAAK,QAAQ;oBACjB,CAAC,CAAC,sDAAsD;oBACxD,CAAC,CAAC,qDAAqD;YAC3D,2EAA2E;SAC5E;KACF,CAAC;AACJ,CAAC"}

package/dist/db/index.d.ts

@@ -0,0 +1,4 @@
+export * from './database.js';
+export * from './store.js';
+export * from './document-store.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/db/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/db/index.js

@@ -0,0 +1,4 @@
+export * from './database.js';
+export * from './store.js';
+export * from './document-store.js';
+//# sourceMappingURL=index.js.map

package/dist/db/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/db/schema.d.ts

@@ -0,0 +1,8 @@
+/**
+ * SQLite schema migrations for YSK Server control plane.
+ */
+export declare const MIGRATIONS: Array<{
+    version: number;
+    sql: string;
+}>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/db/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,UAAU,EAAE,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAuH9D,CAAC"}

package/dist/db/schema.js

@@ -0,0 +1,124 @@
+/**
+ * SQLite schema migrations for YSK Server control plane.
+ */
+export const MIGRATIONS = [
+    {
+        version: 1,
+        sql: `
+CREATE TABLE IF NOT EXISTS schema_migrations (
+  version INTEGER PRIMARY KEY,
+  applied_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS users (
+  id TEXT PRIMARY KEY,
+  username TEXT NOT NULL UNIQUE,
+  password_hash TEXT NOT NULL,
+  password_salt TEXT NOT NULL,
+  roles TEXT NOT NULL,
+  locale TEXT NOT NULL DEFAULT 'zh-HK',
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS sessions (
+  token TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  expires_at TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS projects (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  domain TEXT,
+  linux_user TEXT NOT NULL,
+  linux_group TEXT NOT NULL,
+  home_dir TEXT NOT NULL,
+  runtime TEXT NOT NULL,
+  runtime_version TEXT,
+  env TEXT NOT NULL DEFAULT 'production',
+  status TEXT NOT NULL DEFAULT 'active',
+  nginx_config_path TEXT,
+  os_provisioned INTEGER NOT NULL DEFAULT 0,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS approvals (
+  id TEXT PRIMARY KEY,
+  action TEXT NOT NULL,
+  risk TEXT NOT NULL,
+  requested_by TEXT NOT NULL,
+  status TEXT NOT NULL,
+  payload TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  decided_at TEXT,
+  decided_by TEXT
+);
+
+CREATE TABLE IF NOT EXISTS audit_events (
+  id TEXT PRIMARY KEY,
+  actor TEXT NOT NULL,
+  action TEXT NOT NULL,
+  resource TEXT,
+  detail TEXT NOT NULL,
+  ok INTEGER NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS settings (
+  key TEXT PRIMARY KEY,
+  value TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS agent_sessions (
+  id TEXT PRIMARY KEY,
+  agent_id TEXT NOT NULL,
+  status TEXT NOT NULL,
+  connected_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS agent_messages (
+  id TEXT PRIMARY KEY,
+  session_id TEXT NOT NULL REFERENCES agent_sessions(id) ON DELETE CASCADE,
+  direction TEXT NOT NULL,
+  type TEXT NOT NULL,
+  payload TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS email_domains (
+  id TEXT PRIMARY KEY,
+  domain TEXT NOT NULL UNIQUE,
+  server_ip TEXT NOT NULL,
+  mail_hostname TEXT NOT NULL,
+  dkim_selector TEXT NOT NULL,
+  dkim_public_key TEXT NOT NULL,
+  dkim_private_key TEXT NOT NULL,
+  dns_applied INTEGER NOT NULL DEFAULT 0,
+  dmarc_present INTEGER NOT NULL DEFAULT 0,
+  ptr_ok INTEGER NOT NULL DEFAULT 0,
+  port25_open INTEGER,
+  health_score INTEGER NOT NULL DEFAULT 0,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_sessions_user ON sessions(user_id);
+CREATE INDEX IF NOT EXISTS idx_audit_created ON audit_events(created_at);
+CREATE INDEX IF NOT EXISTS idx_approvals_status ON approvals(status);
+`,
+    },
+    {
+        // Product locale SSOT is zh-HK (香港書面語). zh-TW was a legacy default / browser alias only.
+        version: 2,
+        sql: `
+UPDATE users SET locale = 'zh-HK' WHERE lower(replace(locale, '_', '-')) IN ('zh-tw', 'zh', 'zh-hant');
+UPDATE settings SET value = replace(value, '"zh-TW"', '"zh-HK"') WHERE key = 'config' AND value LIKE '%zh-TW%';
+`,
+    },
+];
+//# sourceMappingURL=schema.js.map

package/dist/db/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,CAAC,MAAM,UAAU,GAA4C;IACjE;QACE,OAAO,EAAE,CAAC;QACV,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0GR;KACE;IACD;QACE,yFAAyF;QACzF,OAAO,EAAE,CAAC;QACV,GAAG,EAAE;;;CAGR;KACE;CACF,CAAC"}