admin

Parse the first word of the arguments as <subcommand>. Pass remaining words as <args>.

If no subcommand given, show:

Usage: /openltm:admin <subcommand>

  migrate [status|up|down|reset|--legacy]   — schema migrations + legacy DB detection
  scan    [--project X] [--dry-run]         — scan memories for secrets and redact
  server  [start|stop|status]               — LTM graph visualization server (port 7332)
  audit   [--memory-id N] [--op <op>] [--session <id>] [--since <iso>] [--limit N]
                                            — query the memory write audit log

---

migrate

Manage versioned LTM schema migrations and legacy DB path migration.

Arg	Action
status (default)	Show applied and pending migrations + check for legacy DB
up	Apply next pending migration
down	Rollback last applied migration
reset	Rollback ALL (requires confirmation)
--legacy	Trigger legacy ~/.claude/memory/openltm.db → plugin data migration

bun run "${CLAUDE_PLUGIN_ROOT}/src/migrations.ts" --<arg>

For reset: ask user to confirm with "yes" before running.

After schema migration check, also detect legacy DB:

[ -f "$HOME/.claude/memory/openltm.db" ] && [ ! -f "$CLAUDE_PLUGIN_DATA/openltm.db" ] && echo "⚠ Legacy DB found at ~/.claude/memory/openltm.db. Run /openltm:admin migrate --legacy to migrate it."

When --legacy is the argument:

bun "${CLAUDE_PLUGIN_ROOT}/scripts/migrate-db.ts"

---

scan

⚠ Note: new memories are auto-scrubbed on write (via db.ts). This scans existing memories only.

bun --eval "
import { Database } from 'bun:sqlite';
await (async () => {
  const { scrubSecrets } = await import(process.env.CLAUDE_PLUGIN_ROOT + '/src/secretsScrubber.ts');
  const args = process.argv.slice(2);
  const dryRun = args.includes('--dry-run');
  const project = args[args.indexOf('--project') + 1] ?? null;
  const db = new Database(process.env.LTM_DB_PATH);
  const where = project ? \"WHERE status='active' AND project_scope=?\" : \"WHERE status='active'\";
  const rows = db.query('SELECT id, content FROM memories ' + where).all(...(project ? [project] : []));
  let scanned = 0, redacted = 0;
  const typeCounts = {};
  for (const row of rows) {
    scanned++;
    const { scrubbed, redactions } = scrubSecrets(row.content);
    if (redactions.length) {
      redacted++;
      redactions.forEach(r => typeCounts[r] = (typeCounts[r] ?? 0) + 1);
      if (!dryRun) db.run('UPDATE memories SET content=? WHERE id=?', [scrubbed, row.id]);
      else console.log('[dry-run] Memory ' + row.id + ' would redact: ' + redactions.join(', '));
    }
  }
  const typeStr = Object.entries(typeCounts).map(([k,v]) => k+'('+v+')').join(', ');
  console.log('Scanned ' + scanned + ', redacted ' + redacted + (typeStr ? ' ('+typeStr+')' : '') + (dryRun ? ' [dry-run]' : ''));
})();
" -- $@