@agent-native/core 0.87.0 → 0.90.1

package/dist/data-programs/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/data-programs/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzE;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,EAAE;IACjD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,oBAAoB;IACjD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAC/B,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,sBAAsB;IAC3D,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,sBAAsB;IAC7D,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,4CAA4C;IACnF,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,mBAAmB;IAC/E,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,gBAAgB;IACpF,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACtD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACtD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,GAAG,cAAc,EAAE;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;EAmBtC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;;;;;;;;;;;;;;;;EAmBzC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;EAQ5C,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG;;;;;;;;EAQ/C,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,+FAA+F,CAAC;AACjJ,MAAM,CAAC,MAAM,gCAAgC,GAAG,uFAAuF,CAAC;AACxI,MAAM,CAAC,MAAM,sCAAsC,GAAG,kGAAkG,CAAC;AAEzJ,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,0DAA0D;AAC1D,8EAA8E;AAC9E,4EAA4E;AAC5E,qDAAqD;AACrD,8EAA8E;AAE9E,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,OAAO;;;;;;;;;gBASO,WAAW;gBACX,WAAW;;;;;;iBAMV,WAAW;kBACV,WAAW;kBACX,WAAW;IACzB,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,sCAAsC,GAAG,6FAA6F,CAAC;AACpJ,MAAM,CAAC,MAAM,kCAAkC,GAAG,qHAAqH,CAAC","sourcesContent":["/**\n * Drizzle schema for the data-programs primitive.\n *\n * A \"data program\" is a named, stored, agent-authored JS script executed\n * server-side through the existing run-code sandbox (`executeSandboxCode`).\n * Its result (rows + schema) is cached in `data_program_runs` and rendered by\n * the analytics dashboard panel components via a `\"program\"` panel source.\n *\n * `dataPrograms` follows the standard ownable-resource shape (see\n * `../extensions/schema.ts`) so it can be registered with the framework\n * sharing registry. `data_program_runs` is a run-result CACHE, not a\n * shareable/ownable resource — it is created via raw portable DDL exactly\n * like `../provider-api/staged-datasets-store.ts` (JSON-as-TEXT, no\n * dialect-specific column types, so the schema stays Postgres/SQLite\n * portable).\n */\n\nimport { table, text, integer, now } from \"../db/schema.js\";\nimport { ownableColumns, createSharesTable } from \"../sharing/schema.js\";\n\n/**\n * `refreshMode`: `'manual'` (cached until an explicit refresh) or `'ttl'`\n * (re-run automatically once `refreshTtlMs` has elapsed). Validated in TS\n * (see `execute.ts` / `actions.ts`) — stored as plain text for portability.\n */\nexport const dataPrograms = table(\"data_programs\", {\n  id: text(\"id\").primaryKey(), // \"dp_\" + random id\n  appId: text(\"app_id\").notNull(),\n  // Slug, unique per (appId, ownerEmail) — enforced in store.ts, not the DB,\n  // to stay dialect-portable (no partial/expression unique indexes needed).\n  name: text(\"name\").notNull(),\n  title: text(\"title\").notNull(),\n  description: text(\"description\").notNull().default(\"\"),\n  code: text(\"code\").notNull(),\n  paramsSchema: text(\"params_schema\"), // JSON text, optional\n  defaultParams: text(\"default_params\"), // JSON text, optional\n  outputColumns: text(\"output_columns\"), // JSON text {name,type}[] from last dry-run\n  refreshMode: text(\"refresh_mode\").notNull().default(\"ttl\"), // 'manual' | 'ttl'\n  refreshTtlMs: integer(\"refresh_ttl_ms\").notNull().default(300_000), // 5 min default\n  background: integer(\"background\").notNull().default(0),\n  createdAt: text(\"created_at\").notNull().default(now()),\n  updatedAt: text(\"updated_at\").notNull().default(now()),\n  archivedAt: text(\"archived_at\"),\n  ...ownableColumns(),\n});\n\nexport const dataProgramShares = createSharesTable(\"data_program_shares\");\n\nexport const DATA_PROGRAMS_CREATE_SQL = `CREATE TABLE IF NOT EXISTS data_programs (\n  id TEXT PRIMARY KEY,\n  app_id TEXT NOT NULL,\n  name TEXT NOT NULL,\n  title TEXT NOT NULL,\n  description TEXT NOT NULL DEFAULT '',\n  code TEXT NOT NULL,\n  params_schema TEXT,\n  default_params TEXT,\n  output_columns TEXT,\n  refresh_mode TEXT NOT NULL DEFAULT 'ttl',\n  refresh_ttl_ms INTEGER NOT NULL DEFAULT 300000,\n  background INTEGER NOT NULL DEFAULT 0,\n  created_at TEXT NOT NULL DEFAULT (datetime('now')),\n  updated_at TEXT NOT NULL DEFAULT (datetime('now')),\n  archived_at TEXT,\n  owner_email TEXT NOT NULL DEFAULT 'local@localhost',\n  org_id TEXT,\n  visibility TEXT NOT NULL DEFAULT 'private'\n)`;\n\nexport const DATA_PROGRAMS_CREATE_SQL_PG = `CREATE TABLE IF NOT EXISTS data_programs (\n  id TEXT PRIMARY KEY,\n  app_id TEXT NOT NULL,\n  name TEXT NOT NULL,\n  title TEXT NOT NULL,\n  description TEXT NOT NULL DEFAULT '',\n  code TEXT NOT NULL,\n  params_schema TEXT,\n  default_params TEXT,\n  output_columns TEXT,\n  refresh_mode TEXT NOT NULL DEFAULT 'ttl',\n  refresh_ttl_ms INTEGER NOT NULL DEFAULT 300000,\n  background INTEGER NOT NULL DEFAULT 0,\n  created_at TEXT NOT NULL DEFAULT now(),\n  updated_at TEXT NOT NULL DEFAULT now(),\n  archived_at TEXT,\n  owner_email TEXT NOT NULL DEFAULT 'local@localhost',\n  org_id TEXT,\n  visibility TEXT NOT NULL DEFAULT 'private'\n)`;\n\nexport const DATA_PROGRAM_SHARES_CREATE_SQL = `CREATE TABLE IF NOT EXISTS data_program_shares (\n  id TEXT PRIMARY KEY,\n  resource_id TEXT NOT NULL,\n  principal_type TEXT NOT NULL,\n  principal_id TEXT NOT NULL,\n  role TEXT NOT NULL DEFAULT 'viewer',\n  created_by TEXT NOT NULL,\n  created_at TEXT NOT NULL DEFAULT (datetime('now'))\n)`;\n\nexport const DATA_PROGRAM_SHARES_CREATE_SQL_PG = `CREATE TABLE IF NOT EXISTS data_program_shares (\n  id TEXT PRIMARY KEY,\n  resource_id TEXT NOT NULL,\n  principal_type TEXT NOT NULL,\n  principal_id TEXT NOT NULL,\n  role TEXT NOT NULL DEFAULT 'viewer',\n  created_by TEXT NOT NULL,\n  created_at TEXT NOT NULL DEFAULT now()\n)`;\n\nexport const DATA_PROGRAMS_APP_OWNER_INDEX_SQL = `CREATE INDEX IF NOT EXISTS data_programs_app_owner_idx ON data_programs (app_id, owner_email)`;\nexport const DATA_PROGRAMS_APP_NAME_INDEX_SQL = `CREATE INDEX IF NOT EXISTS data_programs_app_name_idx ON data_programs (app_id, name)`;\nexport const DATA_PROGRAM_SHARES_RESOURCE_INDEX_SQL = `CREATE INDEX IF NOT EXISTS data_program_shares_resource_idx ON data_program_shares (resource_id)`;\n\n// ---------------------------------------------------------------------------\n// data_program_runs — run-result cache. Not shareable/ownable; scoped only by\n// program_id (access to the run cache is governed by access to the parent\n// program). Raw portable DDL (no Drizzle table) mirroring\n// ../provider-api/staged-datasets-store.ts — rows/schema stored as JSON TEXT,\n// row_count/byte_size/timestamps use `intType()` (INTEGER on SQLite, BIGINT\n// on Postgres) so the schema stays dialect-portable.\n// ---------------------------------------------------------------------------\n\nexport function dataProgramRunsCreateSql(integerType: string): string {\n  return `CREATE TABLE IF NOT EXISTS data_program_runs (\n    id TEXT PRIMARY KEY,\n    program_id TEXT NOT NULL,\n    params_hash TEXT NOT NULL,\n    params_json TEXT NOT NULL,\n    status TEXT NOT NULL,\n    rows_json TEXT,\n    schema_json TEXT,\n    truncated INTEGER NOT NULL DEFAULT 0,\n    row_count ${integerType} NOT NULL DEFAULT 0,\n    byte_size ${integerType} NOT NULL DEFAULT 0,\n    error_code TEXT,\n    error_message TEXT,\n    logs_tail TEXT,\n    execution_id TEXT,\n    triggered_by TEXT NOT NULL,\n    started_at ${integerType} NOT NULL,\n    finished_at ${integerType},\n    duration_ms ${integerType}\n  )`;\n}\n\nexport const DATA_PROGRAM_RUNS_TRUNCATED_COLUMN_SQL = `ALTER TABLE data_program_runs ADD COLUMN IF NOT EXISTS truncated INTEGER NOT NULL DEFAULT 0`;\nexport const DATA_PROGRAM_RUNS_LOOKUP_INDEX_SQL = `CREATE INDEX IF NOT EXISTS data_program_runs_lookup_idx ON data_program_runs (program_id, params_hash, finished_at)`;\n"]}

package/dist/data-programs/store.d.ts

@@ -0,0 +1,158 @@
+/**
+ * Store for the data-programs primitive: CRUD on the `dataPrograms` ownable
+ * resource (via Drizzle) plus a raw-DDL run-result cache
+ * (`data_program_runs`) mirroring `../provider-api/staged-datasets-store.ts`.
+ *
+ * Follows the boot-DDL pattern from `../extensions/store.ts`: a memoized
+ * init promise, Postgres probe-then-guarded-DDL via `ensureTableExists` /
+ * `ensureIndexExists`, and a plain create-then-catch on SQLite.
+ */
+import { type AccessContext } from "../sharing/access.js";
+export declare const MAX_PROGRAM_ROWS = 10000;
+export declare const MAX_PROGRAM_RESULT_BYTES: number;
+export declare const MAX_ACTIVE_PROGRAMS_PER_APP = 200;
+export declare const MIN_REFRESH_TTL_MS = 60000;
+export declare function ensureDataProgramTables(): Promise<void>;
+export declare function registerDataProgramsShareable(): void;
+/** Test-only: reset the memoized init promise. */
+export declare function _resetDataProgramInitPromiseForTests(): void;
+export type DataProgramRefreshMode = "manual" | "ttl";
+export interface DataProgramRow {
+    id: string;
+    appId: string;
+    name: string;
+    title: string;
+    description: string;
+    code: string;
+    paramsSchema: string | null;
+    defaultParams: string | null;
+    outputColumns: string | null;
+    refreshMode: DataProgramRefreshMode;
+    refreshTtlMs: number;
+    background: boolean;
+    createdAt: string;
+    updatedAt: string;
+    archivedAt: string | null;
+    ownerEmail: string;
+    orgId: string | null;
+    visibility: "private" | "org" | "public";
+}
+export interface UpsertDataProgramInput {
+    id?: string;
+    appId: string;
+    name: string;
+    title: string;
+    description?: string;
+    code: string;
+    paramsSchema?: string | null;
+    defaultParams?: string | null;
+    outputColumns?: string | null;
+    refreshMode?: DataProgramRefreshMode;
+    refreshTtlMs?: number;
+    background?: boolean;
+    ownerEmail: string;
+    orgId?: string | null;
+}
+/**
+ * Create or update a data program. When `id` is omitted, checks for an
+ * existing program with the same (appId, ownerEmail, name) slug and updates
+ * it in place (upsert-by-slug); otherwise creates a new row. Enforces
+ * MAX_ACTIVE_PROGRAMS_PER_APP on create.
+ */
+export declare function upsertDataProgram(input: UpsertDataProgramInput): Promise<DataProgramRow>;
+/**
+ * Look up a program by id. Pass `appId` to scope the lookup to the calling
+ * app — in a shared-database multi-app deployment, a program created in one
+ * app must not be readable/runnable from another app's agent chat just
+ * because the caller otherwise has row-level (owner/org/share) access to it.
+ * `appId` is optional only because a handful of internal call sites
+ * (`upsertDataProgram`'s existing-row lookup, tests) look up a program they
+ * already know is scoped correctly by construction.
+ */
+export declare function getDataProgram(id: string, appId?: string): Promise<DataProgramRow | null>;
+export declare function getDataProgramByName(appId: string, name: string, ownerEmail: string): Promise<DataProgramRow | null>;
+export interface ListDataProgramsOptions {
+    includeArchived?: boolean;
+}
+/** List programs scoped to `appId`, filtered through the sharing access rules. */
+export declare function listDataPrograms(appId: string, ctx: AccessContext, options?: ListDataProgramsOptions): Promise<DataProgramRow[]>;
+/** Soft-archive: sets `archivedAt`. NEVER hard-deletes — panels/history may still reference the id. */
+export declare function archiveDataProgram(id: string, appId?: string): Promise<boolean>;
+export type DataProgramRunStatus = "queued" | "running" | "succeeded" | "failed" | "timed_out";
+export interface DataProgramRunRow {
+    id: string;
+    programId: string;
+    paramsHash: string;
+    paramsJson: string;
+    status: DataProgramRunStatus;
+    rowsJson: string | null;
+    schemaJson: string | null;
+    truncated: boolean;
+    rowCount: number;
+    byteSize: number;
+    errorCode: string | null;
+    errorMessage: string | null;
+    logsTail: string | null;
+    executionId: string | null;
+    triggeredBy: string;
+    startedAt: number;
+    finishedAt: number | null;
+    durationMs: number | null;
+}
+export interface RecordDataProgramRunInput {
+    programId: string;
+    paramsHash: string;
+    paramsJson: string;
+    status: DataProgramRunStatus;
+    rowsJson?: string | null;
+    schemaJson?: string | null;
+    truncated?: boolean;
+    rowCount?: number;
+    byteSize?: number;
+    errorCode?: string | null;
+    errorMessage?: string | null;
+    logsTail?: string | null;
+    executionId?: string | null;
+    triggeredBy: string;
+    startedAt?: number;
+    finishedAt?: number | null;
+    durationMs?: number | null;
+    /** How many run rows to keep per (programId, paramsHash) after this write. */
+    keep?: number;
+}
+/** Insert a new run row (typically `status: "running"` or `"queued"` first, finalized via `updateDataProgramRun`). */
+export declare function recordDataProgramRun(input: RecordDataProgramRunInput): Promise<DataProgramRunRow>;
+export interface UpdateDataProgramRunInput {
+    status?: DataProgramRunStatus;
+    rowsJson?: string | null;
+    schemaJson?: string | null;
+    truncated?: boolean;
+    rowCount?: number;
+    byteSize?: number;
+    errorCode?: string | null;
+    errorMessage?: string | null;
+    logsTail?: string | null;
+    executionId?: string | null;
+    finishedAt?: number | null;
+    durationMs?: number | null;
+    /** How many run rows to keep per (programId, paramsHash) after this write. */
+    keep?: number;
+}
+/** Finalize an existing run row (e.g. a background execution completing). */
+export declare function updateDataProgramRun(runId: string, updates: UpdateDataProgramRunInput): Promise<void>;
+export declare function getLatestSuccessfulRun(programId: string, paramsHash: string): Promise<DataProgramRunRow | null>;
+export declare function getLatestRun(programId: string, paramsHash: string): Promise<DataProgramRunRow | null>;
+/**
+ * Return the latest queued/running run row for (programId, paramsHash), if
+ * any, so callers can dedupe concurrent executions instead of racing.
+ */
+export declare function getActiveRun(programId: string, paramsHash: string): Promise<DataProgramRunRow | null>;
+/**
+ * Delete all but the `keep` most-recent run rows for (programId, paramsHash).
+ * Called on every write (prune-on-write, no sweep job). Fetches all ids
+ * ordered newest-first and slices in TypeScript rather than `LIMIT ... OFFSET`
+ * so the query stays byte-identical across SQLite and Postgres (SQLite's
+ * `LIMIT -1 OFFSET n` idiom has no direct Postgres equivalent).
+ */
+export declare function pruneDataProgramRuns(programId: string, paramsHash: string, keep?: number): Promise<void>;
+//# sourceMappingURL=store.d.ts.map

package/dist/data-programs/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/data-programs/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAqBxE,eAAO,MAAM,gBAAgB,QAAS,CAAC;AACvC,eAAO,MAAM,wBAAwB,QAAkB,CAAC;AACxD,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAoCzC,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAgE7D;AAED,wBAAgB,6BAA6B,IAAI,IAAI,CAgBpD;AAED,kDAAkD;AAClD,wBAAgB,oCAAoC,IAAI,IAAI,CAE3D;AAMD,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,sBAAsB,CAAC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;CAC1C;AAqDD,MAAM,WAAW,sBAAsB;IACrC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAMD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,cAAc,CAAC,CAqEzB;AAWD;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAShC;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAehC;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,kFAAkF;AAClF,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,aAAa,EAClB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,cAAc,EAAE,CAAC,CAY3B;AAED,uGAAuG;AACvG,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAMD,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,GACR,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAuCD,sHAAsH;AACtH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAyD5B;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,6EAA6E;AAC7E,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,IAAI,CAAC,CA+Cf;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAYnC;AAED,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAYnC;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAYnC;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,SAAmB,GACtB,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/data-programs/store.js

@@ -0,0 +1,493 @@
+/**
+ * Store for the data-programs primitive: CRUD on the `dataPrograms` ownable
+ * resource (via Drizzle) plus a raw-DDL run-result cache
+ * (`data_program_runs`) mirroring `../provider-api/staged-datasets-store.ts`.
+ *
+ * Follows the boot-DDL pattern from `../extensions/store.ts`: a memoized
+ * init promise, Postgres probe-then-guarded-DDL via `ensureTableExists` /
+ * `ensureIndexExists`, and a plain create-then-catch on SQLite.
+ */
+import { randomUUID } from "node:crypto";
+import { and, eq, isNull } from "drizzle-orm";
+import { getDbExec, intType, isPostgres } from "../db/client.js";
+import { createGetDb } from "../db/create-get-db.js";
+import { ensureTableExists, ensureIndexExists, ensureColumnExists, } from "../db/ddl-guard.js";
+import { accessFilter } from "../sharing/access.js";
+import { registerShareableResource } from "../sharing/registry.js";
+import { dataPrograms, dataProgramShares, DATA_PROGRAMS_CREATE_SQL, DATA_PROGRAMS_CREATE_SQL_PG, DATA_PROGRAM_SHARES_CREATE_SQL, DATA_PROGRAM_SHARES_CREATE_SQL_PG, DATA_PROGRAMS_APP_OWNER_INDEX_SQL, DATA_PROGRAMS_APP_NAME_INDEX_SQL, DATA_PROGRAM_SHARES_RESOURCE_INDEX_SQL, dataProgramRunsCreateSql, DATA_PROGRAM_RUNS_TRUNCATED_COLUMN_SQL, DATA_PROGRAM_RUNS_LOOKUP_INDEX_SQL, } from "./schema.js";
+// ---------------------------------------------------------------------------
+// Caps
+// ---------------------------------------------------------------------------
+export const MAX_PROGRAM_ROWS = 10_000;
+export const MAX_PROGRAM_RESULT_BYTES = 4 * 1024 * 1024;
+export const MAX_ACTIVE_PROGRAMS_PER_APP = 200;
+export const MIN_REFRESH_TTL_MS = 60_000;
+/** How many run rows to retain per (programId, paramsHash) after each write. */
+const DEFAULT_RUN_KEEP = 5;
+const getDb = createGetDb({ dataPrograms, dataProgramShares });
+// ---------------------------------------------------------------------------
+// Boot DDL
+// ---------------------------------------------------------------------------
+let _initPromise;
+function isDuplicateColumnError(err) {
+    const code = String(err?.code ?? "");
+    const message = String(err?.message ?? err)
+        .toLowerCase()
+        .trim();
+    return (code === "42701" ||
+        message.includes("duplicate column") ||
+        message.includes("already exists"));
+}
+async function ensureSqliteDataProgramRunsColumns() {
+    const client = getDbExec();
+    try {
+        await client.execute(`ALTER TABLE data_program_runs ADD COLUMN truncated INTEGER NOT NULL DEFAULT 0`);
+    }
+    catch (err) {
+        if (!isDuplicateColumnError(err))
+            throw err;
+    }
+}
+export async function ensureDataProgramTables() {
+    if (!_initPromise) {
+        _initPromise = (async () => {
+            const client = getDbExec();
+            const pg = isPostgres();
+            const integerType = intType();
+            const runsCreateSql = dataProgramRunsCreateSql(integerType);
+            if (pg) {
+                // PG guard: probe via information_schema, only issue DDL if missing,
+                // bounded lock_timeout — see ../db/ddl-guard.js.
+                await ensureTableExists("data_programs", DATA_PROGRAMS_CREATE_SQL_PG);
+                await ensureTableExists("data_program_shares", DATA_PROGRAM_SHARES_CREATE_SQL_PG);
+                await ensureTableExists("data_program_runs", runsCreateSql);
+                await ensureColumnExists("data_program_runs", "truncated", DATA_PROGRAM_RUNS_TRUNCATED_COLUMN_SQL);
+                await ensureIndexExists("data_programs_app_owner_idx", DATA_PROGRAMS_APP_OWNER_INDEX_SQL);
+                await ensureIndexExists("data_programs_app_name_idx", DATA_PROGRAMS_APP_NAME_INDEX_SQL);
+                await ensureIndexExists("data_program_shares_resource_idx", DATA_PROGRAM_SHARES_RESOURCE_INDEX_SQL);
+                await ensureIndexExists("data_program_runs_lookup_idx", DATA_PROGRAM_RUNS_LOOKUP_INDEX_SQL);
+                return;
+            }
+            // SQLite (local dev): plain create-then-catch, matching staged-datasets-store.ts.
+            await client.execute(DATA_PROGRAMS_CREATE_SQL);
+            await client.execute(DATA_PROGRAM_SHARES_CREATE_SQL);
+            await client.execute(runsCreateSql);
+            await ensureSqliteDataProgramRunsColumns();
+            for (const ddl of [
+                DATA_PROGRAMS_APP_OWNER_INDEX_SQL,
+                DATA_PROGRAMS_APP_NAME_INDEX_SQL,
+                DATA_PROGRAM_SHARES_RESOURCE_INDEX_SQL,
+                DATA_PROGRAM_RUNS_LOOKUP_INDEX_SQL,
+            ]) {
+                try {
+                    await client.execute(ddl);
+                }
+                catch {
+                    // Index already exists — harmless.
+                }
+            }
+        })().catch((err) => {
+            _initPromise = undefined;
+            throw err;
+        });
+    }
+    return _initPromise;
+}
+export function registerDataProgramsShareable() {
+    registerShareableResource({
+        type: "data_program",
+        resourceTable: dataPrograms,
+        sharesTable: dataProgramShares,
+        displayName: "Data program",
+        titleColumn: "title",
+        getDb: () => getDb(),
+        // MANDATORY security invariant: a data program executes its author's
+        // stored code with the VIEWER's credentials (providerFetch resolves the
+        // caller's own auth). A public program would let any authenticated user
+        // run arbitrary stored code under their own token — same threat model as
+        // extensions (../extensions/store.ts registerExtensionsShareable).
+        allowPublic: false,
+        requireOrgMemberForUserShares: true,
+    });
+}
+/** Test-only: reset the memoized init promise. */
+export function _resetDataProgramInitPromiseForTests() {
+    _initPromise = undefined;
+}
+function normalizeRefreshMode(value) {
+    return value === "manual" ? "manual" : "ttl";
+}
+function rowFromRaw(row) {
+    return {
+        id: row.id,
+        appId: row.appId,
+        name: row.name,
+        title: row.title,
+        description: row.description ?? "",
+        code: row.code,
+        paramsSchema: row.paramsSchema ?? null,
+        defaultParams: row.defaultParams ?? null,
+        outputColumns: row.outputColumns ?? null,
+        refreshMode: normalizeRefreshMode(row.refreshMode),
+        refreshTtlMs: Number(row.refreshTtlMs) || 300_000,
+        background: Boolean(row.background),
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+        archivedAt: row.archivedAt ?? null,
+        ownerEmail: row.ownerEmail,
+        orgId: row.orgId ?? null,
+        visibility: row.visibility === "org" || row.visibility === "public"
+            ? row.visibility
+            : "private",
+    };
+}
+function generateProgramId() {
+    return `dp_${randomUUID().replace(/-/g, "")}`;
+}
+/**
+ * Create or update a data program. When `id` is omitted, checks for an
+ * existing program with the same (appId, ownerEmail, name) slug and updates
+ * it in place (upsert-by-slug); otherwise creates a new row. Enforces
+ * MAX_ACTIVE_PROGRAMS_PER_APP on create.
+ */
+export async function upsertDataProgram(input) {
+    await ensureDataProgramTables();
+    const db = getDb();
+    const now = new Date().toISOString();
+    const existing = input.id
+        ? await getDataProgram(input.id)
+        : await getDataProgramByName(input.appId, input.name, input.ownerEmail);
+    const refreshTtlMs = Math.max(input.refreshTtlMs ?? existing?.refreshTtlMs ?? 300_000, MIN_REFRESH_TTL_MS);
+    const refreshMode = input.refreshMode ?? existing?.refreshMode ?? "ttl";
+    if (existing) {
+        await db
+            .update(dataPrograms)
+            .set({
+            title: input.title,
+            description: input.description ?? existing.description,
+            code: input.code,
+            paramsSchema: input.paramsSchema ?? null,
+            defaultParams: input.defaultParams ?? null,
+            outputColumns: input.outputColumns ?? existing.outputColumns,
+            refreshMode,
+            refreshTtlMs,
+            background: input.background ? 1 : 0,
+            updatedAt: now,
+            archivedAt: null,
+        })
+            .where(eq(dataPrograms.id, existing.id));
+        const row = await getDataProgram(existing.id);
+        if (!row)
+            throw new Error("data program disappeared during update");
+        return row;
+    }
+    const activeCount = await countActiveDataPrograms(input.appId);
+    if (activeCount >= MAX_ACTIVE_PROGRAMS_PER_APP) {
+        throw new Error(`This app already has ${activeCount} active data programs (limit ${MAX_ACTIVE_PROGRAMS_PER_APP}). ` +
+            `Archive unused programs before creating more.`);
+    }
+    const id = input.id || generateProgramId();
+    await db.insert(dataPrograms).values({
+        id,
+        appId: input.appId,
+        name: input.name,
+        title: input.title,
+        description: input.description ?? "",
+        code: input.code,
+        paramsSchema: input.paramsSchema ?? null,
+        defaultParams: input.defaultParams ?? null,
+        outputColumns: input.outputColumns ?? null,
+        refreshMode,
+        refreshTtlMs,
+        background: input.background ? 1 : 0,
+        createdAt: now,
+        updatedAt: now,
+        archivedAt: null,
+        ownerEmail: input.ownerEmail,
+        orgId: input.orgId ?? null,
+        visibility: "private",
+    });
+    const row = await getDataProgram(id);
+    if (!row)
+        throw new Error("data program failed to persist");
+    return row;
+}
+async function countActiveDataPrograms(appId) {
+    const client = getDbExec();
+    const { rows } = await client.execute({
+        sql: `SELECT COUNT(*) as total FROM data_programs WHERE app_id = ? AND archived_at IS NULL`,
+        args: [appId],
+    });
+    return Number(rows[0]?.total ?? 0);
+}
+/**
+ * Look up a program by id. Pass `appId` to scope the lookup to the calling
+ * app — in a shared-database multi-app deployment, a program created in one
+ * app must not be readable/runnable from another app's agent chat just
+ * because the caller otherwise has row-level (owner/org/share) access to it.
+ * `appId` is optional only because a handful of internal call sites
+ * (`upsertDataProgram`'s existing-row lookup, tests) look up a program they
+ * already know is scoped correctly by construction.
+ */
+export async function getDataProgram(id, appId) {
+    await ensureDataProgramTables();
+    const db = getDb();
+    const where = appId
+        ? and(eq(dataPrograms.id, id), eq(dataPrograms.appId, appId))
+        : eq(dataPrograms.id, id);
+    const rows = await db.select().from(dataPrograms).where(where);
+    const row = rows[0];
+    return row ? rowFromRaw(row) : null;
+}
+export async function getDataProgramByName(appId, name, ownerEmail) {
+    await ensureDataProgramTables();
+    const db = getDb();
+    const rows = await db
+        .select()
+        .from(dataPrograms)
+        .where(and(eq(dataPrograms.appId, appId), eq(dataPrograms.name, name), eq(dataPrograms.ownerEmail, ownerEmail)));
+    const row = rows[0];
+    return row ? rowFromRaw(row) : null;
+}
+/** List programs scoped to `appId`, filtered through the sharing access rules. */
+export async function listDataPrograms(appId, ctx, options = {}) {
+    await ensureDataProgramTables();
+    const db = getDb();
+    const base = accessFilter(dataPrograms, dataProgramShares, ctx);
+    const where = options.includeArchived
+        ? and(eq(dataPrograms.appId, appId), base)
+        : and(eq(dataPrograms.appId, appId), base, isNull(dataPrograms.archivedAt));
+    const rows = (await db
+        .select()
+        .from(dataPrograms)
+        .where(where));
+    return rows.map(rowFromRaw);
+}
+/** Soft-archive: sets `archivedAt`. NEVER hard-deletes — panels/history may still reference the id. */
+export async function archiveDataProgram(id, appId) {
+    await ensureDataProgramTables();
+    const db = getDb();
+    const existing = await getDataProgram(id, appId);
+    if (!existing)
+        return false;
+    const where = appId
+        ? and(eq(dataPrograms.id, id), eq(dataPrograms.appId, appId))
+        : eq(dataPrograms.id, id);
+    const now = new Date().toISOString();
+    await db
+        .update(dataPrograms)
+        .set({
+        archivedAt: now,
+        updatedAt: now,
+    })
+        .where(where);
+    return true;
+}
+function booleanFromDb(value) {
+    return value === true || value === 1 || value === "1";
+}
+function runRowFromDb(row) {
+    return {
+        id: row.id,
+        programId: row.program_id,
+        paramsHash: row.params_hash,
+        paramsJson: row.params_json,
+        status: row.status,
+        rowsJson: row.rows_json ?? null,
+        schemaJson: row.schema_json ?? null,
+        truncated: booleanFromDb(row.truncated),
+        rowCount: Number(row.row_count ?? 0),
+        byteSize: Number(row.byte_size ?? 0),
+        errorCode: row.error_code ?? null,
+        errorMessage: row.error_message ?? null,
+        logsTail: row.logs_tail ?? null,
+        executionId: row.execution_id ?? null,
+        triggeredBy: row.triggered_by,
+        startedAt: Number(row.started_at ?? 0),
+        finishedAt: row.finished_at === null || row.finished_at === undefined
+            ? null
+            : Number(row.finished_at),
+        durationMs: row.duration_ms === null || row.duration_ms === undefined
+            ? null
+            : Number(row.duration_ms),
+    };
+}
+function generateRunId() {
+    return `dpr_${randomUUID().replace(/-/g, "")}`;
+}
+/** Insert a new run row (typically `status: "running"` or `"queued"` first, finalized via `updateDataProgramRun`). */
+export async function recordDataProgramRun(input) {
+    await ensureDataProgramTables();
+    const client = getDbExec();
+    const id = generateRunId();
+    const startedAt = input.startedAt ?? Date.now();
+    await client.execute({
+        sql: `INSERT INTO data_program_runs (
+      id, program_id, params_hash, params_json, status, rows_json, schema_json,
+      truncated, row_count, byte_size, error_code, error_message, logs_tail,
+      execution_id, triggered_by, started_at, finished_at, duration_ms
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+        args: [
+            id,
+            input.programId,
+            input.paramsHash,
+            input.paramsJson,
+            input.status,
+            input.rowsJson ?? null,
+            input.schemaJson ?? null,
+            input.truncated ? 1 : 0,
+            input.rowCount ?? 0,
+            input.byteSize ?? 0,
+            input.errorCode ?? null,
+            input.errorMessage ?? null,
+            input.logsTail ?? null,
+            input.executionId ?? null,
+            input.triggeredBy,
+            startedAt,
+            input.finishedAt ?? null,
+            input.durationMs ?? null,
+        ],
+    });
+    await pruneDataProgramRuns(input.programId, input.paramsHash, input.keep ?? DEFAULT_RUN_KEEP);
+    return {
+        id,
+        programId: input.programId,
+        paramsHash: input.paramsHash,
+        paramsJson: input.paramsJson,
+        status: input.status,
+        rowsJson: input.rowsJson ?? null,
+        schemaJson: input.schemaJson ?? null,
+        truncated: Boolean(input.truncated),
+        rowCount: input.rowCount ?? 0,
+        byteSize: input.byteSize ?? 0,
+        errorCode: input.errorCode ?? null,
+        errorMessage: input.errorMessage ?? null,
+        logsTail: input.logsTail ?? null,
+        executionId: input.executionId ?? null,
+        triggeredBy: input.triggeredBy,
+        startedAt,
+        finishedAt: input.finishedAt ?? null,
+        durationMs: input.durationMs ?? null,
+    };
+}
+/** Finalize an existing run row (e.g. a background execution completing). */
+export async function updateDataProgramRun(runId, updates) {
+    await ensureDataProgramTables();
+    const client = getDbExec();
+    const sets = [];
+    const args = [];
+    const push = (col, value) => {
+        sets.push(`${col} = ?`);
+        args.push(value);
+    };
+    if (updates.status !== undefined)
+        push("status", updates.status);
+    if (updates.rowsJson !== undefined)
+        push("rows_json", updates.rowsJson);
+    if (updates.schemaJson !== undefined)
+        push("schema_json", updates.schemaJson);
+    if (updates.truncated !== undefined)
+        push("truncated", updates.truncated ? 1 : 0);
+    if (updates.rowCount !== undefined)
+        push("row_count", updates.rowCount);
+    if (updates.byteSize !== undefined)
+        push("byte_size", updates.byteSize);
+    if (updates.errorCode !== undefined)
+        push("error_code", updates.errorCode);
+    if (updates.errorMessage !== undefined)
+        push("error_message", updates.errorMessage);
+    if (updates.logsTail !== undefined)
+        push("logs_tail", updates.logsTail);
+    if (updates.executionId !== undefined)
+        push("execution_id", updates.executionId);
+    if (updates.finishedAt !== undefined)
+        push("finished_at", updates.finishedAt);
+    if (updates.durationMs !== undefined)
+        push("duration_ms", updates.durationMs);
+    if (sets.length === 0)
+        return;
+    args.push(runId);
+    await client.execute({
+        sql: `UPDATE data_program_runs SET ${sets.join(", ")} WHERE id = ?`,
+        args,
+    });
+    // Look up (programId, paramsHash) to prune — cheap point read.
+    const { rows } = await client.execute({
+        sql: `SELECT program_id, params_hash FROM data_program_runs WHERE id = ?`,
+        args: [runId],
+    });
+    const row = rows[0];
+    if (row?.program_id && row?.params_hash) {
+        await pruneDataProgramRuns(row.program_id, row.params_hash, updates.keep ?? DEFAULT_RUN_KEEP);
+    }
+}
+export async function getLatestSuccessfulRun(programId, paramsHash) {
+    await ensureDataProgramTables();
+    const client = getDbExec();
+    const { rows } = await client.execute({
+        sql: `SELECT * FROM data_program_runs
+      WHERE program_id = ? AND params_hash = ? AND status = 'succeeded'
+      ORDER BY COALESCE(finished_at, started_at) DESC
+      LIMIT 1`,
+        args: [programId, paramsHash],
+    });
+    const row = rows[0];
+    return row ? runRowFromDb(row) : null;
+}
+export async function getLatestRun(programId, paramsHash) {
+    await ensureDataProgramTables();
+    const client = getDbExec();
+    const { rows } = await client.execute({
+        sql: `SELECT * FROM data_program_runs
+      WHERE program_id = ? AND params_hash = ?
+      ORDER BY COALESCE(finished_at, started_at) DESC
+      LIMIT 1`,
+        args: [programId, paramsHash],
+    });
+    const row = rows[0];
+    return row ? runRowFromDb(row) : null;
+}
+/**
+ * Return the latest queued/running run row for (programId, paramsHash), if
+ * any, so callers can dedupe concurrent executions instead of racing.
+ */
+export async function getActiveRun(programId, paramsHash) {
+    await ensureDataProgramTables();
+    const client = getDbExec();
+    const { rows } = await client.execute({
+        sql: `SELECT * FROM data_program_runs
+      WHERE program_id = ? AND params_hash = ? AND status IN ('queued', 'running')
+      ORDER BY started_at DESC
+      LIMIT 1`,
+        args: [programId, paramsHash],
+    });
+    const row = rows[0];
+    return row ? runRowFromDb(row) : null;
+}
+/**
+ * Delete all but the `keep` most-recent run rows for (programId, paramsHash).
+ * Called on every write (prune-on-write, no sweep job). Fetches all ids
+ * ordered newest-first and slices in TypeScript rather than `LIMIT ... OFFSET`
+ * so the query stays byte-identical across SQLite and Postgres (SQLite's
+ * `LIMIT -1 OFFSET n` idiom has no direct Postgres equivalent).
+ */
+export async function pruneDataProgramRuns(programId, paramsHash, keep = DEFAULT_RUN_KEEP) {
+    await ensureDataProgramTables();
+    const client = getDbExec();
+    const { rows } = await client.execute({
+        sql: `SELECT id FROM data_program_runs
+      WHERE program_id = ? AND params_hash = ?
+      ORDER BY COALESCE(finished_at, started_at) DESC`,
+        args: [programId, paramsHash],
+    });
+    const staleIds = rows.slice(keep).map((r) => r.id);
+    if (staleIds.length === 0)
+        return;
+    for (const id of staleIds) {
+        await client.execute({
+            sql: `DELETE FROM data_program_runs WHERE id = ?`,
+            args: [id],
+        });
+    }
+}
+//# sourceMappingURL=store.js.map