@4fu/arbor-journal-sqlite 2026.1106.0 → 2026.1106.1

package/README.md

@@ -27,9 +27,11 @@ everything that takes judgment, such as git, merges and conflicts, to the agent.
   guarantees what an agent cannot guarantee for itself - the record, isolation,
   exactly-once effects, the checks, dispatch. Everything that takes judgment,
   such as git, merges and conflicts, is the agent's.
-- **A directory per window.** Each window gets its own directory, and a
-  continuation keeps working in its predecessor's directory in place. It is not
-  bound to a repository; the agent clones and pushes what it needs.
+- **A shared workspace with per-window checkouts.** The default workspace is
+  ovnfs: one shared folder every window reads, and a window opens its own
+  copy-on-write checkout of the project it needs, works there and merges back
+  with `apply`. It falls back to a plain directory per window when ovnfs is not
+  installed. It is not a sandbox: ovnfs isolates files, not processes.
 - **A self-changing environment.** The model adds and changes skills, MCP
   servers and resident services itself; a `reload` validates the change and
   broadcasts it to every live window as a delta of names and descriptions.
@@ -118,7 +120,8 @@ window gets, and how a continuation keeps working in it, are in
 | [`@4fu/arbor-journal-sqlite`](packages/journal-sqlite) | the default `Journal` and `BlobStore` on SQLite |
 | [`@4fu/arbor-notes-sqlite`](packages/notes-sqlite) | the default `NoteStore` on SQLite, beside the journal |
 | [`@4fu/arbor-segmenter-jieba`](packages/segmenter-jieba) | the default `Segmenter`: jieba's dictionary segmentation for the word index, optional |
-| [`@4fu/arbor-workspace-dir`](packages/workspace-dir) | the default `Workspace`: one directory per window, with a continuation working in its predecessor's directory in place |
+| [`@4fu/arbor-workspace-dir`](packages/workspace-dir) | the fallback `Workspace`: one directory per window, with a continuation working in its predecessor's directory in place |
+| [`@4fu/arbor-workspace-ovnfs`](packages/workspace-ovnfs) | the default `Workspace` when ovnfs is installed: one shared folder, per-window copy-on-write checkouts the model opens and applies back |
 | [`@4fu/arbor-environment-dir`](packages/environment-dir) | the default `Environment`: one `/env` directory, a revision per item, validation and deltas |
 | [`@4fu/arbor-supervisor-process`](packages/supervisor-process) | the default `Supervisor`: one host process per service, restart with backoff, logs |
 | [`@4fu/arbor-judge-jev`](packages/judge-jev) | the default `Judge`: Jev, TypeSafe AI's System One classifier, answering the dispatch decisions |
@@ -151,7 +154,7 @@ deployment can see what it would be taking on before it adopts one.
 | [docs/coordination.md](docs/coordination.md) | the board, expectations, deliveries and broadcasts, staying current, effects |
 | [docs/environment.md](docs/environment.md) | skills, MCP servers and services: using, changing, reload, built-in skills, deltas |
 | [docs/memory.md](docs/memory.md) | notes, the active set, anchors, links |
-| [docs/workspaces.md](docs/workspaces.md) | per-window directories: isolation, continuity, what the agent does |
+| [docs/workspaces.md](docs/workspaces.md) | the shared folder and per-window checkouts: isolation, continuity, what the agent does |
 | [docs/tools.md](docs/tools.md) | direct tools and code mode modules |
 | [docs/prompting.md](docs/prompting.md) | how every model-facing text is written: layers, notes, deliveries, errors, judge questions, terms |
 | [docs/release.md](docs/release.md) | calendar versioning, the manual release steps, how a package is published |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@4fu/arbor-journal-sqlite",
-  "version": "2026.1106.0",
+  "version": "2026.1106.1",
   "type": "module",
   "description": "The default Journal: append-only events with a global sequence, targets, native ids, refs, blobs and lexical search on SQLite.",
   "exports": {
@@ -40,11 +40,11 @@
     "access": "public"
   },
   "dependencies": {
-    "@4fu/arbor-errors": "2026.1106.0",
-    "@4fu/arbor-interfaces": "2026.1106.0"
+    "@4fu/arbor-errors": "2026.1106.1",
+    "@4fu/arbor-interfaces": "2026.1106.1"
   },
   "peerDependencies": {
-    "@4fu/arbor-segmenter-jieba": "2026.1106.0"
+    "@4fu/arbor-segmenter-jieba": "2026.1106.1"
   },
   "peerDependenciesMeta": {
     "@4fu/arbor-segmenter-jieba": {

package/sqlite-journal.d.ts

@@ -64,7 +64,13 @@ export declare class SqliteJournal implements Journal {
     /** One column of one table, for the child rows of an event. */
     private strings;
     private countEvents;
+    /**
+     * The newest event on a target that another window wrote after one window
+     * opened: what that window can still be behind on.
+     */
     private latestOn;
+    /** The sequence of one window's own `window_start`, or 0 before it opened. */
+    private openedAt;
     /** Where a ref came from: the links that go out of it, strongest first. */
     private sourcesOf;
     private resolveRelated;

package/sqlite-journal.js

@@ -359,15 +359,21 @@ export class SqliteJournal {
          WHERE e.window = ?
          GROUP BY et.target`)
             .all(window);
+        const openedAt = await this.openedAt(window);
         const gaps = [];
         for (const row of touched) {
-            const latest = this.latestOn(row.target);
+            // What a window is behind on is what arrived after it opened and what
+            // another window wrote: the task and the outside events it was opened
+            // for, and the window's own `window_start`, are not open work
+            // (docs/windows.md#ending-and-continuing).
+            const latest = this.latestOn(row.target, window, openedAt);
             const watermark = (await this.watermark(window, row.target)) ?? 0;
             if (latest <= watermark)
                 continue;
             const behind = this.db
-                .prepare("SELECT count(*) AS n FROM event_targets WHERE target = ? AND seq > ?")
-                .get(row.target, watermark);
+                .prepare(`SELECT count(*) AS n FROM event_targets et JOIN events e ON e.seq = et.seq
+           WHERE et.target = ? AND et.seq > ? AND et.seq > ? AND e.window IS NOT ?`)
+                .get(row.target, watermark, openedAt, window);
             gaps.push({
                 target: row.target,
                 latest,
@@ -527,12 +533,25 @@ export class SqliteJournal {
             .get(...built.params);
         return toNumber(row.n);
     }
-    latestOn(target) {
+    /**
+     * The newest event on a target that another window wrote after one window
+     * opened: what that window can still be behind on.
+     */
+    latestOn(target, window, after) {
         const row = this.db
-            .prepare("SELECT MAX(seq) AS latest FROM event_targets WHERE target = ?")
-            .get(target);
+            .prepare(`SELECT MAX(et.seq) AS latest FROM event_targets et
+         JOIN events e ON e.seq = et.seq
+         WHERE et.target = ? AND et.seq > ? AND e.window IS NOT ?`)
+            .get(target, after, window);
         return row?.latest == null ? 0 : toNumber(row.latest);
     }
+    /** The sequence of one window's own `window_start`, or 0 before it opened. */
+    async openedAt(window) {
+        const row = this.db
+            .prepare("SELECT MIN(seq) AS seq FROM events WHERE window = ? AND kind = 'window_start'")
+            .get(window);
+        return row?.seq == null ? 0 : toNumber(row.seq);
+    }
     /** Where a ref came from: the links that go out of it, strongest first. */
     sourcesOf(ref) {
         const rows = this.db