@agentcomms/events-daemon 0.24.0 → 0.26.0

package/dist/{records-DsUxYBwb.mjs → records-D15LoVeb.mjs}

@@ -1,4 +1,4 @@
-import { t as canonicalSecretWebhookUrl } from "./webhook-target-DyDTwWhV.mjs";
+import { a as LAYA_MODEL_FAILURE_CODES, m as JUDGE_KINDS, t as canonicalSecretWebhookUrl } from "./webhook-target-EzLIFpIY.mjs";
 import { createCipheriv, createDecipheriv, hkdfSync, randomBytes } from "node:crypto";
 import "node:fs/promises";
 import { FileSecretStore, KeychainSecretStore, canonicalJson, keychainNamespace, loadKeyringModule, sha256Hex, withFileLock } from "@agentcomms/core";
@@ -354,7 +354,7 @@ var EventSecretStore = class {
 			this.assertSelectedBackend();
 			const row = this.#database.prepare("SELECT secret_ref, retired_at FROM event_secret_masters WHERE key_id = ?").get(input.keyId);
 			if (row === void 0 || row.retired_at === null) throw new EventSecretError("EVENT_MASTER_UNKNOWN", "only a known retired event master may be destroyed");
-			const { RECORD_LAYOUTS } = await import("./records-DjE5a4_H.mjs");
+			const { RECORD_LAYOUTS } = await import("./records-qtNEBi7g.mjs");
 			for (const layout of RECORD_LAYOUTS) {
 				const records = this.#database.prepare(`SELECT ${layout.sqlColumn} AS record FROM ${layout.table} WHERE ${layout.sqlColumn} IS NOT NULL`).all();
 				for (const record of records) {
@@ -887,6 +887,103 @@ function unreadableRecordReason(error) {
 	}
 	return null;
 }
+function layaModelText(value, name) {
+	if (typeof value !== "string" || value.length === 0) throw new Error(`${name} is a non-empty string`);
+	return value;
+}
+function layaModelInteger(value, name) {
+	if (!Number.isSafeInteger(value) || value < 0) throw new Error(`${name} is a non-negative safe integer`);
+	return value;
+}
+function layaModelState(value) {
+	if (value === "installing" || value === "downloading" || value === "ready" || value === "failed" || value === "removed") return value;
+	throw new Error("the model state is closed");
+}
+function layaModelFailureCode(value, name) {
+	if (value === null || value === void 0) return null;
+	if (LAYA_MODEL_FAILURE_CODES.includes(value)) return value;
+	throw new Error(`${name} is closed`);
+}
+/**
+* The model-state repository is intentionally not an enablement mechanism.  Callers hold an immediate transaction;
+* the pointer is re-read in that same transaction directly before the write so a pre-claim or disabled lifecycle
+* cannot leave a model row behind.
+*/
+var LayaModelRepository = class {
+	#database;
+	constructor(database) {
+		this.#database = database;
+	}
+	write(input) {
+		if (this.#database.prepare("SELECT version FROM active_versions WHERE kind = 'judge-kind' AND object_id = ?").get(JUDGE_KINDS[1]) === void 0) throw new Error("the active Laya judge-kind pointer is required before model state changes");
+		const record = {
+			manifestId: layaModelText(input.manifestId, "the model manifest id"),
+			state: layaModelState(input.state),
+			bytesVerified: layaModelInteger(input.bytesVerified, "the verified model bytes"),
+			verifiedAt: input.verifiedAt === void 0 || input.verifiedAt === null ? null : layaModelInteger(input.verifiedAt, "the model verification time"),
+			failureCode: layaModelFailureCode(input.failureCode, "the model failure code"),
+			updatedAt: layaModelInteger(input.now, "the model update time")
+		};
+		const enabled = this.#database.prepare(`SELECT versions.document
+         FROM active_versions AS active
+         JOIN judge_kind_versions AS versions
+           ON versions.kind = active.object_id AND versions.version = active.version
+         WHERE active.kind = 'judge-kind' AND active.object_id = ? AND versions.revoked_at IS NULL`).get(JUDGE_KINDS[1]);
+		let enabledManifestId;
+		try {
+			const manifestId = JSON.parse(enabled?.document ?? "null").manifest?.manifestId;
+			if (typeof manifestId === "string" && manifestId.length > 0) enabledManifestId = manifestId;
+		} catch {}
+		if (enabledManifestId === void 0) throw new Error("the active Laya judge-kind pointer has no reviewed manifest");
+		if (record.manifestId !== enabledManifestId) throw new Error("the model manifest must match the active Laya judge-kind pointer");
+		this.#database.prepare(`INSERT INTO laya_models
+          (manifest_id, state, bytes_verified, verified_at, failure_code, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?)
+         ON CONFLICT(manifest_id) DO UPDATE SET
+           state = excluded.state,
+           bytes_verified = excluded.bytes_verified,
+           verified_at = excluded.verified_at,
+           failure_code = excluded.failure_code,
+           updated_at = excluded.updated_at`).run(record.manifestId, record.state, record.bytesVerified, record.verifiedAt, record.failureCode, record.updatedAt);
+		return record;
+	}
+	/**
+	* `judge model remove` is the one model-state change made while Laya is disabled, so it carries the opposite fence:
+	* the same transaction re-reads the pointer and refuses if a later enablement claimed it. It records only the
+	* reviewed manifest id and the closed `removed` state.
+	*/
+	markRemovedWhileDisabled(input) {
+		if (this.#database.prepare("SELECT version FROM active_versions WHERE kind = 'judge-kind' AND object_id = ?").get(JUDGE_KINDS[1]) !== void 0) throw new Error("a Laya model is removed only while its judge kind is disabled");
+		const record = {
+			manifestId: layaModelText(input.manifestId, "the model manifest id"),
+			state: "removed",
+			bytesVerified: 0,
+			verifiedAt: null,
+			failureCode: null,
+			updatedAt: layaModelInteger(input.now, "the model update time")
+		};
+		this.#database.prepare(`INSERT INTO laya_models
+          (manifest_id, state, bytes_verified, verified_at, failure_code, updated_at)
+         VALUES (?, 'removed', 0, NULL, NULL, ?)
+         ON CONFLICT(manifest_id) DO UPDATE SET
+           state = 'removed', bytes_verified = 0, verified_at = NULL, failure_code = NULL,
+           updated_at = excluded.updated_at`).run(record.manifestId, record.updatedAt);
+		return record;
+	}
+	get(manifestId) {
+		const row = this.#database.prepare(`SELECT manifest_id, state, bytes_verified, verified_at, failure_code, updated_at
+         FROM laya_models WHERE manifest_id = ?`).get(layaModelText(manifestId, "the model manifest id"));
+		if (row === void 0) return null;
+		return {
+			manifestId: layaModelText(row.manifest_id, "stored model manifest id"),
+			state: layaModelState(row.state),
+			bytesVerified: layaModelInteger(row.bytes_verified, "stored verified model bytes"),
+			verifiedAt: row.verified_at === null ? null : layaModelInteger(row.verified_at, "stored verification time"),
+			failureCode: layaModelFailureCode(row.failure_code, "stored model failure code"),
+			updatedAt: layaModelInteger(row.updated_at, "stored model update time")
+		};
+	}
+};
 /** Each encrypted column, with its table's primary key in the order the v1 migration declares it — the AAD order. */
 const RECORD_LAYOUTS = [
 	{
@@ -1140,4 +1237,4 @@ var EventRecordCipher = class {
 	}
 };
 //#endregion
-export { WriterQuiescer as a, openEventSecretStore as c, unreadableRecordReason as i, RECORD_LAYOUTS as n, withEventWriterLease as o, RecordStorageError as r, migrateEventSecrets as s, EventRecordCipher as t };
+export { unreadableRecordReason as a, migrateEventSecrets as c, RecordStorageError as i, openEventSecretStore as l, LayaModelRepository as n, WriterQuiescer as o, RECORD_LAYOUTS as r, withEventWriterLease as s, EventRecordCipher as t };

package/dist/records-qtNEBi7g.mjs

@@ -0,0 +1,2 @@
+import { r as RECORD_LAYOUTS } from "./records-D15LoVeb.mjs";
+export { RECORD_LAYOUTS };