admin

Arguments: $ARGUMENTS

Parse the first word of the arguments as <subcommand>. Pass remaining words as <args>.

If no subcommand given, show:

Usage: /openltm:admin <subcommand>

  migrate [status|up|down|reset|--legacy]   — schema migrations + legacy DB detection
  scan    [--project X] [--dry-run]         — scan memories for secrets and redact
  audit   [--memory-id N] [--op <op>] [--session <id>] [--since <iso>] [--limit N]
                                            — query the memory write audit log

---

migrate

Manage versioned LTM schema migrations and legacy DB path migration.

Arg	Action
status (default)	Show applied and pending migrations + check for legacy DB
up	Apply next pending migration
down	Rollback last applied migration
reset	Rollback ALL (requires confirmation)
--legacy	Trigger legacy ~/.claude/memory/openltm.db → plugin data migration

bun run "${CLAUDE_PLUGIN_ROOT}/src/migrations.ts" --<arg>

For reset: ask user to confirm with "yes" before running.

After schema migration check, also detect legacy DB:

[ -f "$HOME/.claude/memory/openltm.db" ] && [ ! -f "${CLAUDE_PLUGIN_DATA}/openltm.db" ] && echo "⚠ Legacy DB found at ~/.claude/memory/openltm.db. Run /openltm:admin migrate --legacy to migrate it."

When --legacy is the argument:

bun "${CLAUDE_PLUGIN_ROOT}/scripts/migrate-db.ts"

---

scan

⚠ Note: new memories are auto-scrubbed on write (via db.ts). This scans existing memories only.

bun --eval "
import { Database } from 'bun:sqlite';
await (async () => {
  const { scrubSecrets } = await import('${CLAUDE_PLUGIN_ROOT}/packages/openltm-core/src/secretsScrubber.ts');
  // bun --eval: argv[0] is bun; the rest are this command's arguments.
  const args = process.argv.slice(1);
  const dryRun = args.includes('--dry-run');
  const p = args.indexOf('--project');
  const project = p >= 0 ? args[p + 1] ?? null : null;
  const dbPath = process.env.LTM_DB_PATH || '${CLAUDE_PLUGIN_DATA}/openltm.db';
  if (!(await import('fs')).existsSync(dbPath)) { console.log('No database at ' + dbPath); return; }
  const db = new Database(dbPath);
  const where = project ? \"WHERE status='active' AND project_scope=?\" : \"WHERE status='active'\";
  const rows = db.query('SELECT id, content FROM memories ' + where).all(...(project ? [project] : []));
  let scanned = 0, redacted = 0;
  const typeCounts = {};
  for (const row of rows) {
    scanned++;
    const { scrubbed, redactions } = scrubSecrets(row.content);
    if (redactions.length) {
      redacted++;
      redactions.forEach(r => typeCounts[r] = (typeCounts[r] ?? 0) + 1);
      if (!dryRun) db.run('UPDATE memories SET content=? WHERE id=?', [scrubbed, row.id]);
      else console.log('[dry-run] Memory ' + row.id + ' would redact: ' + redactions.join(', '));
    }
  }
  const typeStr = Object.entries(typeCounts).map(([k,v]) => k+'('+v+')').join(', ');
  console.log('Scanned ' + scanned + ', redacted ' + redacted + (typeStr ? ' ('+typeStr+')' : '') + (dryRun ? ' [dry-run]' : ''));
})();
" -- $ARGUMENTS