@agentplat/audit-postgres 0.3.0-beta.2 → 0.3.0-beta.5

package/README.md

@@ -4,26 +4,64 @@ PostgreSQL sinks for applications that need durable audit or Session events
 without installing the Agent Room schema.
 
 ```ts
-import { createPostgresPool } from '@agentplat/postgres';
+import { createPostgresPool } from "@agentplat/postgres";
 import {
   PostgresAuditSink,
+  PostgresCollectiveTelemetryMonotonicAnchorV1,
+  PostgresCollectiveTelemetryStoreV1,
   PostgresSessionEventSink,
   runAuditMigrations,
-} from '@agentplat/audit-postgres';
+} from "@agentplat/audit-postgres";
 
 const pool = createPostgresPool();
-await runAuditMigrations(pool, { schema: 'agentplat_orders' });
+await runAuditMigrations(pool, { schema: "agentplat_orders" });
+const protectedWitnessPool = createPostgresPool({
+  connectionString: process.env.TELEMETRY_WITNESS_DATABASE_URL,
+});
+await runAuditMigrations(protectedWitnessPool, {
+  schema: "agentplat_witness",
+});
 
-const audit = new PostgresAuditSink(pool, { schema: 'agentplat_orders' });
+const audit = new PostgresAuditSink(pool, { schema: "agentplat_orders" });
 const sessionEvents = new PostgresSessionEventSink(pool, {
-  schema: 'agentplat_orders',
+  schema: "agentplat_orders",
+});
+
+const telemetryStore = new PostgresCollectiveTelemetryStoreV1(pool, {
+  schema: "agentplat_orders",
+  tenantId: "tenant-a",
 });
+const telemetryAnchor = new PostgresCollectiveTelemetryMonotonicAnchorV1(
+  protectedWitnessPool,
+  { schema: "agentplat_witness", tenantId: "tenant-a" },
+);
 ```
 
 Both tables are append-only and all writes include `tenant_id`. Sinks redact
 secret-like keys recursively before persistence. Deterministic IDs make event
 retries idempotent.
 
+`PostgresCollectiveTelemetryStoreV1` adds revision-and-state-digest CAS for the
+signed telemetry chain and an append-only event table. Event identity conflicts
+roll the state transaction back instead of accepting an ambiguous replay. The
+runtime also requires an independently protected monotonic anchor. Migration
+004 and `PostgresCollectiveTelemetryMonotonicAnchorV1` provide one bounded CAS
+head per stream. PostgreSQL permits only an exact monotonic successor and
+forbids deletion, so storage is bounded by stream count rather than event
+count. For rollback separation, construct that adapter with a pool and schema
+protected independently from the replaceable application-state pool;
+using the same database preserves restart continuity but not backup-domain
+separation.
+
+Migration 003 adds bounded, short-lived delivery receipts. A scope lock makes
+the receipt-capacity check, telemetry state CAS, append-only event insert and
+receipt insert one transaction. The nominal runtime handoff is therefore
+idempotent by delivery digest independently of event retention. Runtime and
+adapter consumers receive no independent record/release primitives: the
+module-owned handoff privately removes the exact receipt only after the source
+persists its recorded state, then ACKs that source envelope.
+`maximumPendingDeliveryReceipts` defaults to 4096 and exhaustion fails closed.
+
 The package uses the shared version/checksum ledger from
 `@agentplat/postgres`. `migrate:down` is blocked unless the expected version,
 exact confirmation string, and explicit data-loss flag are all supplied. It is

package/dist/index.d.ts

@@ -1,11 +1,60 @@
-import type { AuditRecord, AuditSink } from '@agentplat/audit';
-import type { SessionEventRecord, SessionEventSink } from '@agentplat/sessions';
-import type { Pool } from 'pg';
-export { auditMigrationDirectory, auditRollbackConfirmation, getAuditMigrationStatus, rollbackAuditMigrations, runAuditMigrations, } from './migrations.js';
-export type { AuditPostgresMigrationOptions } from './migrations.js';
+import type { AuditRecord, AuditSink } from "@agentplat/audit";
+import type { CollectiveTelemetryAnchorV1, CollectiveTelemetryDeliveryCommitResultV1, CollectiveTelemetryDeliveryReceiptV1, CollectiveTelemetryMonotonicAnchorPortV1, CollectiveTelemetryStateV1, CollectiveTelemetryStoreV1 } from "@agentplat/audit/collective-telemetry";
+import type { SessionEventRecord, SessionEventSink } from "@agentplat/sessions";
+import type { Pool } from "pg";
+export { auditMigrationDirectory, auditRollbackConfirmation, getAuditMigrationStatus, rollbackAuditMigrations, runAuditMigrations, } from "./migrations.js";
+export type { AuditPostgresMigrationOptions } from "./migrations.js";
 export interface PostgresSinkOptions {
     schema?: string;
 }
+export interface PostgresCollectiveTelemetryStoreOptions extends PostgresSinkOptions {
+    tenantId: string;
+    maximumPendingDeliveryReceipts?: number;
+}
+export interface PostgresCollectiveTelemetryAnchorOptions extends PostgresSinkOptions {
+    tenantId: string;
+}
+/** CAS state plus append-only signed events for collective telemetry. */
+export declare class PostgresCollectiveTelemetryStoreV1 implements CollectiveTelemetryStoreV1 {
+    private readonly stateTable;
+    private readonly eventTable;
+    private readonly deliveryReceiptTable;
+    private readonly maximumPendingDeliveryReceipts;
+    private readonly tenantId;
+    private readonly poolQuery;
+    private readonly poolConnect;
+    constructor(pool: Pool, options: PostgresCollectiveTelemetryStoreOptions);
+    load(streamId: string): Promise<CollectiveTelemetryStateV1 | null>;
+    save(state: CollectiveTelemetryStateV1, expectedRevision: number | null, expectedStateDigest: string | null): Promise<boolean>;
+    loadDelivery(streamId: string, deliveryDigest: string): Promise<CollectiveTelemetryDeliveryReceiptV1 | null>;
+    commitDelivery(input: {
+        readonly state: CollectiveTelemetryStateV1;
+        readonly expectedRevision: number;
+        readonly expectedStateDigest: string;
+        readonly receipt: CollectiveTelemetryDeliveryReceiptV1;
+    }): Promise<CollectiveTelemetryDeliveryCommitResultV1>;
+    releaseDelivery(streamId: string, deliveryDigest: string): Promise<boolean>;
+}
+/**
+ * Bounded monotonic witness for telemetry stream heads. It can be placed
+ * on a separately protected PostgreSQL pool/schema from the mutable stream
+ * state so an application-state rollback cannot silently roll the witness
+ * back with it.
+ */
+export declare class PostgresCollectiveTelemetryMonotonicAnchorV1 implements CollectiveTelemetryMonotonicAnchorPortV1 {
+    private readonly table;
+    private readonly tenantId;
+    private readonly poolQuery;
+    private readonly poolConnect;
+    constructor(pool: Pool, options: PostgresCollectiveTelemetryAnchorOptions);
+    load(anchorKey: string): Promise<CollectiveTelemetryAnchorV1 | null>;
+    save(input: {
+        readonly anchorKey: string;
+        readonly anchor: CollectiveTelemetryAnchorV1;
+        readonly expectedRevision: number | null;
+        readonly expectedStateDigest: string | null;
+    }): Promise<boolean>;
+}
 /** Append-only, redacting PostgreSQL AuditSink. */
 export declare class PostgresAuditSink implements AuditSink {
     private readonly pool;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAM/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAErE,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,mDAAmD;AACnD,qBAAa,iBAAkB,YAAW,SAAS;IAI/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAGZ,IAAI,EAAE,IAAI,EAC3B,OAAO,GAAE,mBAAwB;IAQ7B,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAuBhD;AAED,4EAA4E;AAC5E,qBAAa,wBAAyB,YAAW,gBAAgB;IAI7D,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAGZ,IAAI,EAAE,IAAI,EAC3B,OAAO,GAAE,mBAAwB;IAQ7B,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBxD;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,mBAAmB,GAC5B,iBAAiB,CAEnB;AAED,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,mBAAmB,GAC5B,wBAAwB,CAE1B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,KAAK,EACV,2BAA2B,EAC3B,yCAAyC,EACzC,oCAAoC,EACpC,wCAAwC,EACxC,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,uCAAuC,CAAC;AAM/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAErE,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uCAAwC,SAAQ,mBAAmB;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,8BAA8B,CAAC,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,wCAAyC,SAAQ,mBAAmB;IACnF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,yEAAyE;AACzE,qBAAa,kCAAmC,YAAW,0BAA0B;IACnF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAS;IACxD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkB;gBAElC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,uCAAuC;IA8BlE,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IA8BlE,IAAI,CACR,KAAK,EAAE,0BAA0B,EACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,EAC/B,mBAAmB,EAAE,MAAM,GAAG,IAAI,GACjC,OAAO,CAAC,OAAO,CAAC;IAoFb,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,oCAAoC,GAAG,IAAI,CAAC;IAwBjD,cAAc,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;QAC3C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,oCAAoC,CAAC;KACxD,GAAG,OAAO,CAAC,yCAAyC,CAAC;IAiHhD,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC;CAQpB;AAED;;;;;GAKG;AACH,qBAAa,4CAA6C,YAAW,wCAAwC;IAC3G,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkB;gBAElC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,wCAAwC;IAWnE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAgBpE,IAAI,CAAC,KAAK,EAAE;QAChB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;QAC7C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QACzC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7C,GAAG,OAAO,CAAC,OAAO,CAAC;CAmGrB;AAsCD,mDAAmD;AACnD,qBAAa,iBAAkB,YAAW,SAAS;IAI/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAGZ,IAAI,EAAE,IAAI,EAC3B,OAAO,GAAE,mBAAwB;IAQ7B,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAuBhD;AAED,4EAA4E;AAC5E,qBAAa,wBAAyB,YAAW,gBAAgB;IAI7D,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAGZ,IAAI,EAAE,IAAI,EAC3B,OAAO,GAAE,mBAAwB;IAQ7B,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBxD;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,mBAAmB,GAC5B,iBAAiB,CAEnB;AAED,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,mBAAmB,GAC5B,wBAAwB,CAE1B"}

package/dist/index.js

@@ -1,13 +1,363 @@
-import { redactAuditDetails } from '@agentplat/audit';
-import { defaultPostgresSchema, qualifyPostgresName, } from '@agentplat/postgres';
-export { auditMigrationDirectory, auditRollbackConfirmation, getAuditMigrationStatus, rollbackAuditMigrations, runAuditMigrations, } from './migrations.js';
+import { redactAuditDetails } from "@agentplat/audit";
+import { defaultPostgresSchema, qualifyPostgresName, } from "@agentplat/postgres";
+export { auditMigrationDirectory, auditRollbackConfirmation, getAuditMigrationStatus, rollbackAuditMigrations, runAuditMigrations, } from "./migrations.js";
+/** CAS state plus append-only signed events for collective telemetry. */
+export class PostgresCollectiveTelemetryStoreV1 {
+    stateTable;
+    eventTable;
+    deliveryReceiptTable;
+    maximumPendingDeliveryReceipts;
+    tenantId;
+    poolQuery;
+    poolConnect;
+    constructor(pool, options) {
+        if (!options.tenantId)
+            throw new TypeError("collective telemetry tenant is required");
+        const maximumPendingDeliveryReceipts = options.maximumPendingDeliveryReceipts ?? 4_096;
+        if (!Number.isSafeInteger(maximumPendingDeliveryReceipts) ||
+            maximumPendingDeliveryReceipts < 1 ||
+            maximumPendingDeliveryReceipts > 100_000)
+            throw new TypeError("maximumPendingDeliveryReceipts is invalid");
+        const schema = options.schema ?? defaultPostgresSchema;
+        this.stateTable = qualifyPostgresName(schema, "collective_telemetry_states");
+        this.eventTable = qualifyPostgresName(schema, "collective_telemetry_events");
+        this.deliveryReceiptTable = qualifyPostgresName(schema, "collective_telemetry_delivery_receipts");
+        this.tenantId = options.tenantId;
+        this.poolQuery = pool.query.bind(pool);
+        this.poolConnect = pool.connect.bind(pool);
+        this.maximumPendingDeliveryReceipts = maximumPendingDeliveryReceipts;
+    }
+    async load(streamId) {
+        const result = await this.poolQuery(`SELECT revision, sequence, logical_time_high_water_ms, state_digest, state
+         FROM ${this.stateTable}
+        WHERE tenant_id = $1 AND stream_id = $2`, [this.tenantId, streamId]);
+        const row = result.rows[0];
+        if (!row)
+            return null;
+        if (row.state.tenantId !== this.tenantId ||
+            row.state.streamId !== streamId ||
+            row.state.revision !== Number(row.revision) ||
+            row.state.sequence !== Number(row.sequence) ||
+            row.state.logicalTimeHighWaterMs !==
+                Number(row.logical_time_high_water_ms) ||
+            row.state.stateDigest !== row.state_digest)
+            throw new Error("collective telemetry PostgreSQL columns diverge from state");
+        return row.state;
+    }
+    async save(state, expectedRevision, expectedStateDigest) {
+        state = structuredClone(state);
+        if (state.tenantId !== this.tenantId ||
+            state.revision !==
+                (expectedRevision === null ? 0 : expectedRevision + 1) ||
+            (expectedRevision === null) !== (expectedStateDigest === null))
+            return false;
+        const client = await this.poolConnect();
+        try {
+            await client.query("BEGIN");
+            const result = expectedRevision === null
+                ? await client.query(`INSERT INTO ${this.stateTable}
+              (tenant_id, stream_id, revision, sequence, logical_time_high_water_ms, state_digest, state)
+             VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb) ON CONFLICT DO NOTHING`, [
+                    state.tenantId,
+                    state.streamId,
+                    state.revision,
+                    state.sequence,
+                    state.logicalTimeHighWaterMs,
+                    state.stateDigest,
+                    JSON.stringify(state),
+                ])
+                : await client.query(`UPDATE ${this.stateTable}
+                SET revision = $4, sequence = $5, logical_time_high_water_ms = $6,
+                    state_digest = $7, state = $8::jsonb, updated_at = transaction_timestamp()
+              WHERE tenant_id = $1 AND stream_id = $2 AND revision = $3
+                AND state_digest = $9
+                AND sequence < $5 AND logical_time_high_water_ms <= $6`, [
+                    state.tenantId,
+                    state.streamId,
+                    expectedRevision,
+                    state.revision,
+                    state.sequence,
+                    state.logicalTimeHighWaterMs,
+                    state.stateDigest,
+                    JSON.stringify(state),
+                    expectedStateDigest,
+                ]);
+            if ((result.rowCount ?? 0) !== 1) {
+                await client.query("ROLLBACK");
+                return false;
+            }
+            const event = state.events.at(-1);
+            if (event && event.sequence === state.sequence) {
+                await client.query(`INSERT INTO ${this.eventTable}
+            (tenant_id, stream_id, sequence, event_id, event_digest, event)
+           VALUES ($1,$2,$3,$4,$5,$6::jsonb) ON CONFLICT DO NOTHING`, [
+                    state.tenantId,
+                    state.streamId,
+                    event.sequence,
+                    event.eventId,
+                    event.eventDigest,
+                    JSON.stringify(event),
+                ]);
+                const retained = await client.query(`SELECT event_digest FROM ${this.eventTable}
+            WHERE tenant_id = $1 AND event_id = $2`, [state.tenantId, event.eventId]);
+                if (retained.rows[0]?.event_digest !== event.eventDigest)
+                    throw new Error("collective telemetry event identity conflict");
+            }
+            await client.query("COMMIT");
+            return true;
+        }
+        catch (error) {
+            await client.query("ROLLBACK");
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+    async loadDelivery(streamId, deliveryDigest) {
+        const result = await this.poolQuery(`SELECT record_input_digest, event_digest, sequence
+         FROM ${this.deliveryReceiptTable}
+        WHERE tenant_id = $1 AND stream_id = $2 AND delivery_digest = $3`, [this.tenantId, streamId, deliveryDigest]);
+        const row = result.rows[0];
+        return row
+            ? {
+                schemaVersion: 1,
+                streamId,
+                deliveryDigest,
+                recordInputDigest: row.record_input_digest,
+                eventDigest: row.event_digest,
+                sequence: Number(row.sequence),
+            }
+            : null;
+    }
+    async commitDelivery(input) {
+        input = structuredClone(input);
+        if (input.state.tenantId !== this.tenantId ||
+            input.state.streamId !== input.receipt.streamId ||
+            input.state.revision !== input.expectedRevision + 1)
+            return "conflict";
+        const event = input.state.events.at(-1);
+        if (!event ||
+            event.sequence !== input.state.sequence ||
+            event.eventDigest !== input.receipt.eventDigest ||
+            event.sequence !== input.receipt.sequence)
+            throw new TypeError("collective telemetry delivery receipt/event binding is invalid");
+        const client = await this.poolConnect();
+        try {
+            await client.query("BEGIN");
+            await client.query("SELECT pg_advisory_xact_lock(hashtextextended($1, 0))", [`${this.tenantId}:collective-telemetry-deliveries`]);
+            const existing = await client.query(`SELECT record_input_digest
+           FROM ${this.deliveryReceiptTable}
+          WHERE tenant_id = $1 AND stream_id = $2 AND delivery_digest = $3`, [this.tenantId, input.receipt.streamId, input.receipt.deliveryDigest]);
+            if (existing.rows[0]) {
+                if (existing.rows[0].record_input_digest !==
+                    input.receipt.recordInputDigest)
+                    throw new Error("collective telemetry delivery digest collision");
+                await client.query("COMMIT");
+                return "already_recorded";
+            }
+            const count = await client.query(`SELECT count(*) AS pending FROM ${this.deliveryReceiptTable}
+          WHERE tenant_id = $1`, [this.tenantId]);
+            if (Number(count.rows[0]?.pending ?? 0) >=
+                this.maximumPendingDeliveryReceipts)
+                throw new Error("collective telemetry delivery receipt capacity exhausted");
+            const saved = await client.query(`UPDATE ${this.stateTable}
+            SET revision = $4, sequence = $5,
+                logical_time_high_water_ms = $6, state_digest = $7,
+                state = $8::jsonb, updated_at = transaction_timestamp()
+          WHERE tenant_id = $1 AND stream_id = $2 AND revision = $3
+            AND state_digest = $9 AND sequence < $5
+            AND logical_time_high_water_ms <= $6`, [
+                input.state.tenantId,
+                input.state.streamId,
+                input.expectedRevision,
+                input.state.revision,
+                input.state.sequence,
+                input.state.logicalTimeHighWaterMs,
+                input.state.stateDigest,
+                JSON.stringify(input.state),
+                input.expectedStateDigest,
+            ]);
+            if ((saved.rowCount ?? 0) !== 1) {
+                await client.query("ROLLBACK");
+                return "conflict";
+            }
+            await client.query(`INSERT INTO ${this.eventTable}
+          (tenant_id, stream_id, sequence, event_id, event_digest, event)
+         VALUES ($1,$2,$3,$4,$5,$6::jsonb)`, [
+                input.state.tenantId,
+                input.state.streamId,
+                event.sequence,
+                event.eventId,
+                event.eventDigest,
+                JSON.stringify(event),
+            ]);
+            await client.query(`INSERT INTO ${this.deliveryReceiptTable}
+          (tenant_id, stream_id, delivery_digest, record_input_digest,
+           event_digest, sequence)
+         VALUES ($1,$2,$3,$4,$5,$6)`, [
+                input.state.tenantId,
+                input.state.streamId,
+                input.receipt.deliveryDigest,
+                input.receipt.recordInputDigest,
+                input.receipt.eventDigest,
+                input.receipt.sequence,
+            ]);
+            await client.query("COMMIT");
+            return "committed";
+        }
+        catch (error) {
+            await client.query("ROLLBACK").catch(() => undefined);
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+    async releaseDelivery(streamId, deliveryDigest) {
+        await this.poolQuery(`DELETE FROM ${this.deliveryReceiptTable}
+        WHERE tenant_id = $1 AND stream_id = $2 AND delivery_digest = $3`, [this.tenantId, streamId, deliveryDigest]);
+        return true;
+    }
+}
+/**
+ * Bounded monotonic witness for telemetry stream heads. It can be placed
+ * on a separately protected PostgreSQL pool/schema from the mutable stream
+ * state so an application-state rollback cannot silently roll the witness
+ * back with it.
+ */
+export class PostgresCollectiveTelemetryMonotonicAnchorV1 {
+    table;
+    tenantId;
+    poolQuery;
+    poolConnect;
+    constructor(pool, options) {
+        validateTelemetryIdentifier(options.tenantId, "tenantId");
+        this.tenantId = options.tenantId;
+        this.table = qualifyPostgresName(options.schema ?? defaultPostgresSchema, "collective_telemetry_monotonic_anchors");
+        this.poolQuery = pool.query.bind(pool);
+        this.poolConnect = pool.connect.bind(pool);
+    }
+    async load(anchorKey) {
+        validateTelemetryIdentifier(anchorKey, "anchorKey");
+        const result = await this.poolQuery(`SELECT revision, sequence, state_digest, logical_time_high_water_ms
+         FROM ${this.table}
+        WHERE tenant_id = $1 AND anchor_key = $2`, [this.tenantId, anchorKey]);
+        return result.rows[0] ? telemetryAnchorFromRow(result.rows[0]) : null;
+    }
+    async save(input) {
+        const request = {
+            anchorKey: input.anchorKey,
+            anchor: Object.freeze({ ...input.anchor }),
+            expectedRevision: input.expectedRevision,
+            expectedStateDigest: input.expectedStateDigest,
+        };
+        validateTelemetryIdentifier(request.anchorKey, "anchorKey");
+        validateTelemetryAnchor(request.anchor);
+        if ((request.expectedRevision === null) !==
+            (request.expectedStateDigest === null) ||
+            (request.expectedRevision !== null &&
+                (!Number.isSafeInteger(request.expectedRevision) ||
+                    request.expectedRevision < 0)) ||
+            (request.expectedStateDigest !== null &&
+                !/^sha256:[0-9a-f]{64}$/.test(request.expectedStateDigest)) ||
+            request.anchor.revision !== (request.expectedRevision ?? -1) + 1)
+            return false;
+        const client = await this.poolConnect();
+        try {
+            await client.query("BEGIN");
+            await client.query("SELECT pg_advisory_xact_lock(hashtextextended($1, 0))", [`${this.tenantId}:collective-telemetry-anchor:${request.anchorKey}`]);
+            const retained = await client.query(`SELECT revision, sequence, state_digest, logical_time_high_water_ms
+           FROM ${this.table}
+          WHERE tenant_id = $1 AND anchor_key = $2`, [this.tenantId, request.anchorKey]);
+            const current = retained.rows[0]
+                ? telemetryAnchorFromRow(retained.rows[0])
+                : null;
+            if ((current?.revision ?? null) !== request.expectedRevision ||
+                (current?.stateDigest ?? null) !== request.expectedStateDigest ||
+                request.anchor.sequence < (current?.sequence ?? -1) ||
+                request.anchor.logicalTimeHighWaterMs <
+                    (current?.logicalTimeHighWaterMs ?? -1)) {
+                await client.query("ROLLBACK");
+                return false;
+            }
+            const advanced = current === null
+                ? await client.query(`INSERT INTO ${this.table}
+              (tenant_id, anchor_key, revision, sequence, state_digest,
+               logical_time_high_water_ms, previous_state_digest)
+             VALUES ($1,$2,$3,$4,$5,$6,NULL)
+             ON CONFLICT DO NOTHING`, [
+                    this.tenantId,
+                    request.anchorKey,
+                    request.anchor.revision,
+                    request.anchor.sequence,
+                    request.anchor.stateDigest,
+                    request.anchor.logicalTimeHighWaterMs,
+                ])
+                : await client.query(`UPDATE ${this.table}
+                SET revision = $4, sequence = $5, state_digest = $6,
+                    logical_time_high_water_ms = $7,
+                    previous_state_digest = $8
+              WHERE tenant_id = $1 AND anchor_key = $2
+                AND revision = $3 AND state_digest = $8`, [
+                    this.tenantId,
+                    request.anchorKey,
+                    request.expectedRevision,
+                    request.anchor.revision,
+                    request.anchor.sequence,
+                    request.anchor.stateDigest,
+                    request.anchor.logicalTimeHighWaterMs,
+                    request.expectedStateDigest,
+                ]);
+            if ((advanced.rowCount ?? 0) !== 1) {
+                await client.query("ROLLBACK");
+                return false;
+            }
+            await client.query("COMMIT");
+            return true;
+        }
+        catch (error) {
+            await client.query("ROLLBACK").catch(() => undefined);
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+}
+function telemetryAnchorFromRow(row) {
+    const anchor = Object.freeze({
+        revision: Number(row.revision),
+        sequence: Number(row.sequence),
+        stateDigest: row.state_digest,
+        logicalTimeHighWaterMs: Number(row.logical_time_high_water_ms),
+    });
+    validateTelemetryAnchor(anchor);
+    return anchor;
+}
+function validateTelemetryAnchor(anchor) {
+    if (!anchor ||
+        !Number.isSafeInteger(anchor.revision) ||
+        anchor.revision < 0 ||
+        !Number.isSafeInteger(anchor.sequence) ||
+        anchor.sequence < 0 ||
+        anchor.sequence !== anchor.revision ||
+        !Number.isSafeInteger(anchor.logicalTimeHighWaterMs) ||
+        anchor.logicalTimeHighWaterMs < 0 ||
+        !/^sha256:[0-9a-f]{64}$/.test(anchor.stateDigest))
+        throw new TypeError("collective telemetry anchor is invalid");
+}
+function validateTelemetryIdentifier(value, label) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._:@/+-=]{0,255}$/.test(value))
+        throw new TypeError(`collective telemetry ${label} is invalid`);
+}
 /** Append-only, redacting PostgreSQL AuditSink. */
 export class PostgresAuditSink {
     pool;
     table;
     constructor(pool, options = {}) {
         this.pool = pool;
-        this.table = qualifyPostgresName(options.schema ?? defaultPostgresSchema, 'audit_records');
+        this.table = qualifyPostgresName(options.schema ?? defaultPostgresSchema, "audit_records");
     }
     async write(record) {
         await this.pool.query(`INSERT INTO ${this.table} (
@@ -34,7 +384,7 @@ export class PostgresSessionEventSink {
     table;
     constructor(pool, options = {}) {
         this.pool = pool;
-        this.table = qualifyPostgresName(options.schema ?? defaultPostgresSchema, 'session_events');
+        this.table = qualifyPostgresName(options.schema ?? defaultPostgresSchema, "session_events");
     }
     async append(record) {
         const event = redactAuditDetails(record.event);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAOzB,mDAAmD;AACnD,MAAM,OAAO,iBAAiB;IAIT;IAHF,KAAK,CAAS;IAE/B,YACmB,IAAU,EAC3B,UAA+B,EAAE;QADhB,SAAI,GAAJ,IAAI,CAAM;QAG3B,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAC9B,OAAO,CAAC,MAAM,IAAI,qBAAqB,EACvC,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAmB;QAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,eAAe,IAAI,CAAC,KAAK;;;;8CAIe,EACxC;YACE,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,EAAE;YACT,MAAM,CAAC,OAAO,IAAI,IAAI;YACtB,MAAM,CAAC,SAAS,IAAI,IAAI;YACxB,MAAM,CAAC,MAAM;YACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC/B,IAAI,CAAC,SAAS,CACZ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CACzD;YACD,MAAM,CAAC,SAAS,IAAI,IAAI;YACxB,MAAM,CAAC,SAAS,IAAI,IAAI;YACxB,MAAM,CAAC,SAAS;SACjB,CACF,CAAC;IACJ,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,OAAO,wBAAwB;IAIhB;IAHF,KAAK,CAAS;IAE/B,YACmB,IAAU,EAC3B,UAA+B,EAAE;QADhB,SAAI,GAAJ,IAAI,CAAM;QAG3B,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAC9B,OAAO,CAAC,MAAM,IAAI,qBAAqB,EACvC,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0B;QACrC,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAA8B,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,eAAe,IAAI,CAAC,KAAK;;;oDAGqB,EAC9C;YACE,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,UAAU;YACjB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SACtB,CACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAU,EACV,OAA6B;IAE7B,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,IAAU,EACV,OAA6B;IAE7B,OAAO,IAAI,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAWtD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAgBzB,yEAAyE;AACzE,MAAM,OAAO,kCAAkC;IAC5B,UAAU,CAAS;IACnB,UAAU,CAAS;IACnB,oBAAoB,CAAS;IAC7B,8BAA8B,CAAS;IACvC,QAAQ,CAAS;IACjB,SAAS,CAAgB;IACzB,WAAW,CAAkB;IAE9C,YAAY,IAAU,EAAE,OAAgD;QACtE,IAAI,CAAC,OAAO,CAAC,QAAQ;YACnB,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACjE,MAAM,8BAA8B,GAClC,OAAO,CAAC,8BAA8B,IAAI,KAAK,CAAC;QAClD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,8BAA8B,CAAC;YACrD,8BAA8B,GAAG,CAAC;YAClC,8BAA8B,GAAG,OAAO;YAExC,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,qBAAqB,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,mBAAmB,CACnC,MAAM,EACN,6BAA6B,CAC9B,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,mBAAmB,CACnC,MAAM,EACN,6BAA6B,CAC9B,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,mBAAmB,CAC7C,MAAM,EACN,wCAAwC,CACzC,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAoB,CAAC;QAC9D,IAAI,CAAC,8BAA8B,GAAG,8BAA8B,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAOjC;gBACU,IAAI,CAAC,UAAU;gDACiB,EAC1C,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAC1B,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IACE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YACpC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAC/B,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,sBAAsB;gBAC9B,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,GAAG,CAAC,YAAY;YAE1C,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;QACJ,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAAiC,EACjC,gBAA+B,EAC/B,mBAAkC;QAElC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/B,IACE,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAChC,KAAK,CAAC,QAAQ;gBACZ,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC;YACxD,CAAC,gBAAgB,KAAK,IAAI,CAAC,KAAK,CAAC,mBAAmB,KAAK,IAAI,CAAC;YAE9D,OAAO,KAAK,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,GACV,gBAAgB,KAAK,IAAI;gBACvB,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAChB,eAAe,IAAI,CAAC,UAAU;;yEAE6B,EAC3D;oBACE,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,sBAAsB;oBAC5B,KAAK,CAAC,WAAW;oBACjB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBACtB,CACF;gBACH,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAChB,UAAU,IAAI,CAAC,UAAU;;;;;uEAKgC,EACzD;oBACE,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,QAAQ;oBACd,gBAAgB;oBAChB,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,sBAAsB;oBAC5B,KAAK,CAAC,WAAW;oBACjB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBACrB,mBAAmB;iBACpB,CACF,CAAC;YACR,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC/C,MAAM,MAAM,CAAC,KAAK,CAChB,eAAe,IAAI,CAAC,UAAU;;oEAE4B,EAC1D;oBACE,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,OAAO;oBACb,KAAK,CAAC,WAAW;oBACjB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBACtB,CACF,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,4BAA4B,IAAI,CAAC,UAAU;mDACF,EACzC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAChC,CAAC;gBACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,KAAK,CAAC,WAAW;oBACtD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,cAAsB;QAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAKjC;gBACU,IAAI,CAAC,oBAAoB;yEACgC,EACnE,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,CAC1C,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,OAAO,GAAG;YACR,CAAC,CAAC;gBACE,aAAa,EAAE,CAAC;gBAChB,QAAQ;gBACR,cAAc;gBACd,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;gBAC1C,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;aAC/B;YACH,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAKpB;QACC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/B,IACE,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YACtC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,CAAC,QAAQ;YAC/C,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB,GAAG,CAAC;YAEnD,OAAO,UAAU,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IACE,CAAC,KAAK;YACN,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ;YACvC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW;YAC/C,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,CAAC,QAAQ;YAEzC,MAAM,IAAI,SAAS,CACjB,gEAAgE,CACjE,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,CAChB,uDAAuD,EACvD,CAAC,GAAG,IAAI,CAAC,QAAQ,kCAAkC,CAAC,CACrD,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;kBACU,IAAI,CAAC,oBAAoB;2EACgC,EACnE,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CACtE,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,IACE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB;oBACpC,KAAK,CAAC,OAAO,CAAC,iBAAiB;oBAE/B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBACpE,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,kBAAkB,CAAC;YAC5B,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAC9B,mCAAmC,IAAI,CAAC,oBAAoB;+BACrC,EACvB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAChB,CAAC;YACF,IACE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC;gBACnC,IAAI,CAAC,8BAA8B;gBAEnC,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAC9B,UAAU,IAAI,CAAC,UAAU;;;;;;iDAMgB,EACzC;gBACE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBACpB,KAAK,CAAC,KAAK,CAAC,QAAQ;gBACpB,KAAK,CAAC,gBAAgB;gBACtB,KAAK,CAAC,KAAK,CAAC,QAAQ;gBACpB,KAAK,CAAC,KAAK,CAAC,QAAQ;gBACpB,KAAK,CAAC,KAAK,CAAC,sBAAsB;gBAClC,KAAK,CAAC,KAAK,CAAC,WAAW;gBACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC3B,KAAK,CAAC,mBAAmB;aAC1B,CACF,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,OAAO,UAAU,CAAC;YACpB,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAChB,eAAe,IAAI,CAAC,UAAU;;2CAEK,EACnC;gBACE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBACpB,KAAK,CAAC,KAAK,CAAC,QAAQ;gBACpB,KAAK,CAAC,QAAQ;gBACd,KAAK,CAAC,OAAO;gBACb,KAAK,CAAC,WAAW;gBACjB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;aACtB,CACF,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAChB,eAAe,IAAI,CAAC,oBAAoB;;;oCAGZ,EAC5B;gBACE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBACpB,KAAK,CAAC,KAAK,CAAC,QAAQ;gBACpB,KAAK,CAAC,OAAO,CAAC,cAAc;gBAC5B,KAAK,CAAC,OAAO,CAAC,iBAAiB;gBAC/B,KAAK,CAAC,OAAO,CAAC,WAAW;gBACzB,KAAK,CAAC,OAAO,CAAC,QAAQ;aACvB,CACF,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,QAAgB,EAChB,cAAsB;QAEtB,MAAM,IAAI,CAAC,SAAS,CAClB,eAAe,IAAI,CAAC,oBAAoB;yEAC2B,EACnE,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,CAC1C,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,4CAA4C;IACtC,KAAK,CAAS;IACd,QAAQ,CAAS;IACjB,SAAS,CAAgB;IACzB,WAAW,CAAkB;IAE9C,YAAY,IAAU,EAAE,OAAiD;QACvE,2BAA2B,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAC9B,OAAO,CAAC,MAAM,IAAI,qBAAqB,EACvC,wCAAwC,CACzC,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAoB,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,2BAA2B,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAMjC;gBACU,IAAI,CAAC,KAAK;iDACuB,EAC3C,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAC3B,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAKV;QACC,MAAM,OAAO,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C,CAAC;QACF,2BAA2B,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5D,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxC,IACE,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAAC;YACjC,CAAC,OAAO,CAAC,mBAAmB,KAAK,IAAI,CAAC;YACxC,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI;gBAChC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,gBAAgB,CAAC;oBAC9C,OAAO,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC;YAClC,CAAC,OAAO,CAAC,mBAAmB,KAAK,IAAI;gBACnC,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAC7D,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YAEhE,OAAO,KAAK,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,CAChB,uDAAuD,EACvD,CAAC,GAAG,IAAI,CAAC,QAAQ,gCAAgC,OAAO,CAAC,SAAS,EAAE,CAAC,CACtE,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAMjC;kBACU,IAAI,CAAC,KAAK;mDACuB,EAC3C,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CACnC,CAAC;YACF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9B,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC1C,CAAC,CAAC,IAAI,CAAC;YACT,IACE,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,KAAK,OAAO,CAAC,gBAAgB;gBACxD,CAAC,OAAO,EAAE,WAAW,IAAI,IAAI,CAAC,KAAK,OAAO,CAAC,mBAAmB;gBAC9D,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;gBACnD,OAAO,CAAC,MAAM,CAAC,sBAAsB;oBACnC,CAAC,OAAO,EAAE,sBAAsB,IAAI,CAAC,CAAC,CAAC,EACzC,CAAC;gBACD,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,QAAQ,GACZ,OAAO,KAAK,IAAI;gBACd,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAChB,eAAe,IAAI,CAAC,KAAK;;;;oCAIH,EACtB;oBACE,IAAI,CAAC,QAAQ;oBACb,OAAO,CAAC,SAAS;oBACjB,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACvB,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACvB,OAAO,CAAC,MAAM,CAAC,WAAW;oBAC1B,OAAO,CAAC,MAAM,CAAC,sBAAsB;iBACtC,CACF;gBACH,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAChB,UAAU,IAAI,CAAC,KAAK;;;;;wDAKsB,EAC1C;oBACE,IAAI,CAAC,QAAQ;oBACb,OAAO,CAAC,SAAS;oBACjB,OAAO,CAAC,gBAAgB;oBACxB,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACvB,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACvB,OAAO,CAAC,MAAM,CAAC,WAAW;oBAC1B,OAAO,CAAC,MAAM,CAAC,sBAAsB;oBACrC,OAAO,CAAC,mBAAmB;iBAC5B,CACF,CAAC;YACR,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED,SAAS,sBAAsB,CAAC,GAK/B;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,sBAAsB,EAAE,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC;KAC/D,CAAC,CAAC;IACH,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAmC;IAClE,IACE,CAAC,MAAM;QACP,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,MAAM,CAAC,QAAQ,GAAG,CAAC;QACnB,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,MAAM,CAAC,QAAQ,GAAG,CAAC;QACnB,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QACnC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,sBAAsB,CAAC;QACpD,MAAM,CAAC,sBAAsB,GAAG,CAAC;QACjC,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAEjD,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAE,KAAa;IAC/D,IAAI,CAAC,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,wBAAwB,KAAK,aAAa,CAAC,CAAC;AACpE,CAAC;AAED,mDAAmD;AACnD,MAAM,OAAO,iBAAiB;IAIT;IAHF,KAAK,CAAS;IAE/B,YACmB,IAAU,EAC3B,UAA+B,EAAE;QADhB,SAAI,GAAJ,IAAI,CAAM;QAG3B,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAC9B,OAAO,CAAC,MAAM,IAAI,qBAAqB,EACvC,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAmB;QAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,eAAe,IAAI,CAAC,KAAK;;;;8CAIe,EACxC;YACE,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,EAAE;YACT,MAAM,CAAC,OAAO,IAAI,IAAI;YACtB,MAAM,CAAC,SAAS,IAAI,IAAI;YACxB,MAAM,CAAC,MAAM;YACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC/B,IAAI,CAAC,SAAS,CACZ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CACzD;YACD,MAAM,CAAC,SAAS,IAAI,IAAI;YACxB,MAAM,CAAC,SAAS,IAAI,IAAI;YACxB,MAAM,CAAC,SAAS;SACjB,CACF,CAAC;IACJ,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,OAAO,wBAAwB;IAIhB;IAHF,KAAK,CAAS;IAE/B,YACmB,IAAU,EAC3B,UAA+B,EAAE;QADhB,SAAI,GAAJ,IAAI,CAAM;QAG3B,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAC9B,OAAO,CAAC,MAAM,IAAI,qBAAqB,EACvC,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0B;QACrC,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAA8B,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,eAAe,IAAI,CAAC,KAAK;;;oDAGqB,EAC9C;YACE,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,UAAU;YACjB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SACtB,CACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAU,EACV,OAA6B;IAE7B,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,IAAU,EACV,OAA6B;IAE7B,OAAO,IAAI,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC"}

package/dist/migrations.d.ts

@@ -1,5 +1,5 @@
-import type { PostgresMigrationStatus } from '@agentplat/postgres';
-import type { Pool } from 'pg';
+import type { PostgresMigrationStatus } from "@agentplat/postgres";
+import type { Pool } from "pg";
 export declare const auditMigrationDirectory: string;
 export interface AuditPostgresMigrationOptions {
     schema?: string;

package/dist/migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAEV,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAK/B,eAAO,MAAM,uBAAuB,QAEnC,CAAC;AAEF,MAAM,WAAW,6BAA6B;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAwBD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,EACV,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,uBAAuB,CAAC,CAOlC;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,uBAAuB,CAAC,CAMlC;AAED,wBAAgB,yBAAyB,CACvC,MAAM,SAAwB,EAC9B,OAAO,SAAI,GACV,MAAM,CAER;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,6BAA6B,GAAG;IACvC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GACA,OAAO,CAAC,uBAAuB,CAAC,CAUlC"}
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAEV,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAU/B,eAAO,MAAM,uBAAuB,QAEnC,CAAC;AAEF,MAAM,WAAW,6BAA6B;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAoBD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,EACV,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,uBAAuB,CAAC,CAOlC;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,uBAAuB,CAAC,CAMlC;AAED,wBAAgB,yBAAyB,CACvC,MAAM,SAAwB,EAC9B,OAAO,SAAI,GACV,MAAM,CAER;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,6BAA6B,GAAG;IACvC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GACA,OAAO,CAAC,uBAAuB,CAAC,CAUlC"}

package/dist/migrations.js

@@ -1,23 +1,22 @@
-import { readFile } from 'node:fs/promises';
-import { fileURLToPath } from 'node:url';
-import { defaultPostgresSchema, getPostgresMigrationStatus, postgresRollbackConfirmation, rollbackPostgresMigration, runPostgresMigrations, } from '@agentplat/postgres';
-const applicationId = '@agentplat/audit-postgres';
-const migrationName = '001_audit_and_session_events';
-export const auditMigrationDirectory = fileURLToPath(new URL('../migrations/', import.meta.url));
+import { readFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import { defaultPostgresSchema, getPostgresMigrationStatus, postgresRollbackConfirmation, rollbackPostgresMigration, runPostgresMigrations, } from "@agentplat/postgres";
+const applicationId = "@agentplat/audit-postgres";
+const migrationNames = [
+    "001_audit_and_session_events",
+    "002_collective_telemetry",
+    "003_collective_telemetry_delivery_receipts",
+    "004_collective_telemetry_monotonic_anchors",
+];
+export const auditMigrationDirectory = fileURLToPath(new URL("../migrations/", import.meta.url));
 async function migrations() {
-    const [up, down] = await Promise.all([
-        readFile(new URL(`../migrations/${migrationName}.up.sql`, import.meta.url), 'utf8'),
-        readFile(new URL(`../migrations/${migrationName}.down.sql`, import.meta.url), 'utf8'),
-    ]);
-    return [
-        {
-            version: 1,
-            name: migrationName,
-            up,
-            down,
-            destructiveDown: true,
-        },
-    ];
+    return Promise.all(migrationNames.map(async (name, index) => {
+        const [up, down] = await Promise.all([
+            readFile(new URL(`../migrations/${name}.up.sql`, import.meta.url), "utf8"),
+            readFile(new URL(`../migrations/${name}.down.sql`, import.meta.url), "utf8"),
+        ]);
+        return { version: index + 1, name, up, down, destructiveDown: true };
+    }));
 }
 export async function runAuditMigrations(pool, options = {}) {
     return runPostgresMigrations(pool, {
@@ -34,7 +33,7 @@ export async function getAuditMigrationStatus(pool, options = {}) {
         migrations: await migrations(),
     });
 }
-export function auditRollbackConfirmation(schema = defaultPostgresSchema, version = 1) {
+export function auditRollbackConfirmation(schema = defaultPostgresSchema, version = 4) {
     return postgresRollbackConfirmation(applicationId, schema, version);
 }
 export async function rollbackAuditMigrations(pool, options) {

package/dist/migrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAO7B,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAClD,MAAM,aAAa,GAAG,8BAA8B,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAClD,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAC3C,CAAC;AAOF,KAAK,UAAU,UAAU;IACvB,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnC,QAAQ,CACN,IAAI,GAAG,CAAC,iBAAiB,aAAa,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EACjE,MAAM,CACP;QACD,QAAQ,CACN,IAAI,GAAG,CAAC,iBAAiB,aAAa,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EACnE,MAAM,CACP;KACF,CAAC,CAAC;IACH,OAAO;QACL;YACE,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,aAAa;YACnB,EAAE;YACF,IAAI;YACJ,eAAe,EAAE,IAAI;SACtB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAU,EACV,UAAyC,EAAE;IAE3C,OAAO,qBAAqB,CAAC,IAAI,EAAE;QACjC,aAAa;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,MAAM,UAAU,EAAE;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,UAAyC,EAAE;IAE3C,OAAO,0BAA0B,CAAC,IAAI,EAAE;QACtC,aAAa;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,MAAM,UAAU,EAAE;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAM,GAAG,qBAAqB,EAC9B,OAAO,GAAG,CAAC;IAEX,OAAO,4BAA4B,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,OAIC;IAED,OAAO,yBAAyB,CAAC,IAAI,EAAE;QACrC,aAAa;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,MAAM,UAAU,EAAE;QAC9B,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;QACtD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAO7B,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAClD,MAAM,cAAc,GAAG;IACrB,8BAA8B;IAC9B,0BAA0B;IAC1B,4CAA4C;IAC5C,4CAA4C;CACpC,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAClD,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAC3C,CAAC;AAOF,KAAK,UAAU,UAAU;IACvB,OAAO,OAAO,CAAC,GAAG,CAChB,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACvC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnC,QAAQ,CACN,IAAI,GAAG,CAAC,iBAAiB,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EACxD,MAAM,CACP;YACD,QAAQ,CACN,IAAI,GAAG,CAAC,iBAAiB,IAAI,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAC1D,MAAM,CACP;SACF,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAU,EACV,UAAyC,EAAE;IAE3C,OAAO,qBAAqB,CAAC,IAAI,EAAE;QACjC,aAAa;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,MAAM,UAAU,EAAE;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,UAAyC,EAAE;IAE3C,OAAO,0BAA0B,CAAC,IAAI,EAAE;QACtC,aAAa;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,MAAM,UAAU,EAAE;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAM,GAAG,qBAAqB,EAC9B,OAAO,GAAG,CAAC;IAEX,OAAO,4BAA4B,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,OAIC;IAED,OAAO,yBAAyB,CAAC,IAAI,EAAE;QACrC,aAAa;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,MAAM,UAAU,EAAE;QAC9B,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;QACtD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC"}

package/migrations/002_collective_telemetry.down.sql

@@ -0,0 +1,4 @@
+DROP TRIGGER IF EXISTS collective_telemetry_events_append_only_delete ON __AGENTPLAT_SCHEMA__.collective_telemetry_events;
+DROP TRIGGER IF EXISTS collective_telemetry_events_append_only_update ON __AGENTPLAT_SCHEMA__.collective_telemetry_events;
+DROP TABLE IF EXISTS __AGENTPLAT_SCHEMA__.collective_telemetry_events;
+DROP TABLE IF EXISTS __AGENTPLAT_SCHEMA__.collective_telemetry_states;

package/migrations/002_collective_telemetry.up.sql

@@ -0,0 +1,34 @@
+CREATE TABLE __AGENTPLAT_SCHEMA__.collective_telemetry_states (
+  tenant_id text NOT NULL,
+  stream_id text NOT NULL,
+  revision bigint NOT NULL CHECK (revision >= 0),
+  sequence bigint NOT NULL CHECK (sequence >= 0),
+  logical_time_high_water_ms bigint NOT NULL CHECK (logical_time_high_water_ms >= 0),
+  state_digest text NOT NULL CHECK (state_digest ~ '^sha256:[0-9a-f]{64}$'),
+  state jsonb NOT NULL CHECK (jsonb_typeof(state) = 'object'),
+  updated_at timestamptz NOT NULL DEFAULT transaction_timestamp(),
+  PRIMARY KEY (tenant_id, stream_id)
+);
+
+CREATE TABLE __AGENTPLAT_SCHEMA__.collective_telemetry_events (
+  tenant_id text NOT NULL,
+  stream_id text NOT NULL,
+  sequence bigint NOT NULL CHECK (sequence > 0),
+  event_id text NOT NULL,
+  event_digest text NOT NULL CHECK (event_digest ~ '^sha256:[0-9a-f]{64}$'),
+  event jsonb NOT NULL CHECK (jsonb_typeof(event) = 'object'),
+  PRIMARY KEY (tenant_id, event_id),
+  UNIQUE (tenant_id, stream_id, sequence)
+);
+
+CREATE INDEX collective_telemetry_states_updated_idx
+  ON __AGENTPLAT_SCHEMA__.collective_telemetry_states (tenant_id, updated_at DESC);
+CREATE INDEX collective_telemetry_events_stream_idx
+  ON __AGENTPLAT_SCHEMA__.collective_telemetry_events (tenant_id, stream_id, sequence);
+
+CREATE TRIGGER collective_telemetry_events_append_only_update
+  BEFORE UPDATE ON __AGENTPLAT_SCHEMA__.collective_telemetry_events
+  FOR EACH ROW EXECUTE FUNCTION __AGENTPLAT_SCHEMA__.agentplat_prevent_audit_mutation();
+CREATE TRIGGER collective_telemetry_events_append_only_delete
+  BEFORE DELETE ON __AGENTPLAT_SCHEMA__.collective_telemetry_events
+  FOR EACH ROW EXECUTE FUNCTION __AGENTPLAT_SCHEMA__.agentplat_prevent_audit_mutation();

package/migrations/003_collective_telemetry_delivery_receipts.down.sql

@@ -0,0 +1 @@
+DROP TABLE IF EXISTS __AGENTPLAT_SCHEMA__.collective_telemetry_delivery_receipts;

package/migrations/003_collective_telemetry_delivery_receipts.up.sql

@@ -0,0 +1,21 @@
+CREATE TABLE __AGENTPLAT_SCHEMA__.collective_telemetry_delivery_receipts (
+  tenant_id text NOT NULL,
+  stream_id text NOT NULL,
+  delivery_digest text NOT NULL CHECK (delivery_digest ~ '^sha256:[0-9a-f]{64}$'),
+  record_input_digest text NOT NULL CHECK (record_input_digest ~ '^sha256:[0-9a-f]{64}$'),
+  event_digest text NOT NULL CHECK (event_digest ~ '^sha256:[0-9a-f]{64}$'),
+  sequence bigint NOT NULL CHECK (sequence > 0),
+  created_at timestamptz NOT NULL DEFAULT transaction_timestamp(),
+  PRIMARY KEY (tenant_id, stream_id, delivery_digest),
+  FOREIGN KEY (tenant_id, stream_id)
+    REFERENCES __AGENTPLAT_SCHEMA__.collective_telemetry_states (tenant_id, stream_id)
+    ON DELETE RESTRICT,
+  FOREIGN KEY (tenant_id, stream_id, sequence)
+    REFERENCES __AGENTPLAT_SCHEMA__.collective_telemetry_events
+      (tenant_id, stream_id, sequence)
+    ON DELETE RESTRICT
+);
+
+CREATE INDEX collective_telemetry_delivery_receipts_capacity_idx
+  ON __AGENTPLAT_SCHEMA__.collective_telemetry_delivery_receipts
+    (tenant_id, created_at ASC);

package/migrations/004_collective_telemetry_monotonic_anchors.down.sql

@@ -0,0 +1,2 @@
+DROP TABLE IF EXISTS __AGENTPLAT_SCHEMA__.collective_telemetry_monotonic_anchors;
+DROP FUNCTION IF EXISTS __AGENTPLAT_SCHEMA__.agentplat_enforce_telemetry_anchor_advance();

package/migrations/004_collective_telemetry_monotonic_anchors.up.sql

@@ -0,0 +1,43 @@
+CREATE TABLE __AGENTPLAT_SCHEMA__.collective_telemetry_monotonic_anchors (
+  tenant_id text NOT NULL,
+  anchor_key text NOT NULL,
+  revision bigint NOT NULL CHECK (revision >= 0),
+  sequence bigint NOT NULL CHECK (sequence >= 0),
+  state_digest text NOT NULL CHECK (state_digest ~ '^sha256:[0-9a-f]{64}$'),
+  logical_time_high_water_ms bigint NOT NULL CHECK (logical_time_high_water_ms >= 0),
+  previous_state_digest text NULL CHECK (
+    previous_state_digest IS NULL OR
+    previous_state_digest ~ '^sha256:[0-9a-f]{64}$'
+  ),
+  created_at timestamptz NOT NULL DEFAULT transaction_timestamp(),
+  updated_at timestamptz NOT NULL DEFAULT transaction_timestamp(),
+  PRIMARY KEY (tenant_id, anchor_key),
+  CHECK ((revision = 0) = (previous_state_digest IS NULL)),
+  CHECK (revision = sequence)
+);
+
+CREATE FUNCTION __AGENTPLAT_SCHEMA__.agentplat_enforce_telemetry_anchor_advance()
+RETURNS trigger
+LANGUAGE plpgsql
+AS $agentplat$
+BEGIN
+  IF NEW.tenant_id <> OLD.tenant_id OR
+     NEW.anchor_key <> OLD.anchor_key OR
+     NEW.revision <> OLD.revision + 1 OR
+     NEW.sequence <> OLD.sequence + 1 OR
+     NEW.previous_state_digest <> OLD.state_digest OR
+     NEW.created_at <> OLD.created_at OR
+     NEW.logical_time_high_water_ms < OLD.logical_time_high_water_ms THEN
+    RAISE EXCEPTION 'collective telemetry monotonic anchor must advance exactly once';
+  END IF;
+  NEW.updated_at := transaction_timestamp();
+  RETURN NEW;
+END
+$agentplat$;
+
+CREATE TRIGGER collective_telemetry_monotonic_anchors_monotonic_update
+  BEFORE UPDATE ON __AGENTPLAT_SCHEMA__.collective_telemetry_monotonic_anchors
+  FOR EACH ROW EXECUTE FUNCTION __AGENTPLAT_SCHEMA__.agentplat_enforce_telemetry_anchor_advance();
+CREATE TRIGGER collective_telemetry_monotonic_anchors_append_only_delete
+  BEFORE DELETE ON __AGENTPLAT_SCHEMA__.collective_telemetry_monotonic_anchors
+  FOR EACH ROW EXECUTE FUNCTION __AGENTPLAT_SCHEMA__.agentplat_prevent_audit_mutation();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentplat/audit-postgres",
-  "version": "0.3.0-beta.2",
+  "version": "0.3.0-beta.5",
   "description": "PostgreSQL audit and session event sinks for AgentPlat without Agent Rooms.",
   "type": "module",
   "license": "Apache-2.0",
@@ -21,10 +21,10 @@
   "dependencies": {
     "@types/pg": "^8.11.10",
     "pg": "^8.13.1",
-    "@agentplat/audit": "^0.3.0-beta.2",
-    "@agentplat/sessions": "^0.3.0-beta.2",
-    "@agentplat/postgres": "^0.3.0-beta.2",
-    "@agentplat/core": "^0.3.0-beta.2"
+    "@agentplat/audit": "^0.3.0-beta.5",
+    "@agentplat/core": "^0.3.0-beta.5",
+    "@agentplat/postgres": "^0.3.0-beta.5",
+    "@agentplat/sessions": "^0.3.0-beta.5"
   },
   "devDependencies": {
     "@types/node": "^20.10.0"