@agimon-ai/doompi-core 0.0.1-alpha.100

package/dist/sqliteHistoryImport.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqliteHistoryImport.cjs","names":["fs","importV3WithPinnedUpstream","contentHash","SqliteSessionRepo","path","createNodeSqliteFactory","BACKGROUND_CONTEXT","value","DatabaseSync","SqliteStorage","branchTip"],"sources":["../src/services/sqliteHistoryImport/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { DatabaseSync } from 'node:sqlite';\n\nimport { BACKGROUND_CONTEXT } from '@earendil-works/pi-agent-core/harness/context';\nimport { branchTip, value, type Write } from '@earendil-works/pi-agent-core/harness/session';\nimport {\n  SqliteSessionRepo,\n  SqliteStorage,\n  createNodeSqliteFactory,\n} from '@earendil-works/pi-session-backend-sqlite-node';\n\nimport type { HistoryImportVerification, HistoryStagingImportInput } from '../historyImport';\nimport { contentHash, importV3WithPinnedUpstream } from '../jsonlSessionRepo';\n\ntype RecordValue = Record<string, unknown>;\n\nfunction record(input: unknown): RecordValue {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) throw new Error('Invalid history record');\n  return input as RecordValue;\n}\n\n/** Replays a protected, offline journal through Pi's public SQLite session writer. */\nexport async function importSqliteHistory(input: HistoryStagingImportInput): Promise<HistoryImportVerification> {\n  let content = fs.readFileSync(input.stagingPath, 'utf8');\n  const sourceHeader = record(JSON.parse(content.split('\\n', 1)[0]!));\n  let verification: HistoryImportVerification | undefined;\n  if (sourceHeader.type === 'session' && sourceHeader.version === 3) {\n    verification = await importV3WithPinnedUpstream(input);\n    content = fs.readFileSync(input.stagingPath, 'utf8');\n  }\n  if (!content.endsWith('\\n')) throw new Error('Cannot import truncated history');\n  const lines = content.trimEnd().split('\\n');\n  const header = record(JSON.parse(lines.shift()!));\n  if (header.kind !== 'header' || header.v !== 4 || typeof header.id !== 'string')\n    throw new Error('Expected v3 or v4 history');\n  const transactions = lines.map((line) => {\n    const parsed: unknown = JSON.parse(line);\n    return (Array.isArray(parsed) ? parsed : [parsed]).map(record);\n  });\n  const entries = transactions.flat().filter((item) => item.kind === 'entry');\n  const values = new Map<string, RecordValue>();\n  for (const item of transactions.flat())\n    if (item.kind === 'value') {\n      const key = JSON.stringify([item.namespace, item.key]);\n      if (item.op === 'delete') values.delete(key);\n      else values.set(key, item);\n    }\n  for (const item of values.values())\n    if (item.namespace === 'pi.lane.state') {\n      const state = record(item.value);\n      if (state.currentOperationId != null || (Array.isArray(state.inbox) && state.inbox.length > 0))\n        throw new Error('SQLite import requires settled sessions with empty queues');\n    }\n  verification ??= {\n    entries: entries.map((entry) => ({\n      sourceId: String(entry.id),\n      importedId: String(entry.id),\n      sourceParentId: entry.parentId as string | null,\n      importedParentId: entry.parentId as string | null,\n      sourceContentHash: contentHash(entry),\n      importedContentHash: contentHash(entry),\n    })),\n    branches: [...values.values()]\n      .filter((item) => item.namespace === 'pi.branch.tip')\n      .map((item) => ({\n        branch: String(item.key),\n        sourceTipId: item.value as string | null,\n        importedTipId: item.value as string | null,\n      })),\n  };\n  fs.unlinkSync(input.stagingPath);\n  let timestamp = Number(header.createdAt);\n  if (!Number.isFinite(timestamp)) throw new Error('Invalid history creation timestamp');\n  const repository = new SqliteSessionRepo({\n    directory: path.dirname(input.stagingPath),\n    databasePath: input.stagingPath,\n    databaseFactory: createNodeSqliteFactory(),\n    now: () => timestamp,\n  });\n  try {\n    const session = await repository.create(\n      {\n        id: header.id,\n        ...(typeof header.parentSessionId === 'string' ? { parentSessionId: header.parentSessionId } : {}),\n      },\n      BACKGROUND_CONTEXT,\n    );\n    for (const transaction of transactions) {\n      const entryTime = transaction.find((item) => item.kind === 'entry')?.timestamp;\n      if (typeof entryTime === 'number') timestamp = entryTime;\n      const writes = transaction.map((item): Write => {\n        const { kind, seq: _seq, timestamp: _timestamp, ...rest } = item;\n        if (kind === 'entry') return { kind, entry: rest } as unknown as Write;\n        if (kind === 'usage') return { kind, row: { ...rest, timestamp: item.timestamp } } as unknown as Write;\n        if (kind === 'value' || kind === 'list') return { kind, ...rest } as unknown as Write;\n        throw new Error(`Unsupported history record kind: ${String(kind)}`);\n      });\n      await session.mutate(\n        (mutation, context) => mutation.commit(writes, context).then(() => undefined),\n        BACKGROUND_CONTEXT,\n      );\n    }\n    for (const item of values.values()) {\n      const stored = await session.getValue(value(String(item.namespace), String(item.key)), BACKGROUND_CONTEXT);\n      if (JSON.stringify(stored?.value) !== JSON.stringify(item.value))\n        throw new Error('Imported session state differs from the source');\n    }\n    const copied = await session.findEntries({ order: 'asc' }, BACKGROUND_CONTEXT);\n    if (\n      copied.length !== entries.length ||\n      copied.some((entry, index) => entry.id !== entries[index]?.id || entry.timestamp !== entries[index]?.timestamp)\n    )\n      throw new Error('Imported entry identity or timestamp differs from the source');\n    await session.close(BACKGROUND_CONTEXT);\n  } finally {\n    await repository.close(BACKGROUND_CONTEXT);\n  }\n  const database = new DatabaseSync(input.stagingPath);\n  try {\n    database.exec('PRAGMA wal_checkpoint(TRUNCATE)');\n  } finally {\n    database.close();\n  }\n  fs.chmodSync(input.stagingPath, 0o600);\n  return verifySqliteHistory(input.stagingPath, verification);\n}\n\n/** Reopens the staged database read-only before protected publication. */\nexport async function verifySqliteHistory(\n  stagingPath: string,\n  proof: HistoryImportVerification,\n): Promise<HistoryImportVerification> {\n  const factory = createNodeSqliteFactory();\n  const repository = new SqliteSessionRepo({\n    directory: path.dirname(stagingPath),\n    databasePath: stagingPath,\n    databaseFactory: factory,\n  });\n  const sessions = await repository.list(undefined, BACKGROUND_CONTEXT);\n  await repository.close(BACKGROUND_CONTEXT);\n  if (sessions.length !== 1) throw new Error('Invalid imported SQLite session');\n  const database = await factory.openReadOnly(stagingPath);\n  const storage = new SqliteStorage(database, { sessionId: sessions[0]!.id });\n  try {\n    const entries = await storage.scanEntries({}, BACKGROUND_CONTEXT);\n    if (entries.length !== proof.entries.length) throw new Error('SQLite import entry count differs');\n    const byId = new Map(entries.map((entry) => [entry.id, entry]));\n    for (const expected of proof.entries) {\n      const entry = byId.get(expected.importedId);\n      if (\n        !entry ||\n        entry.parentId !== expected.importedParentId ||\n        contentHash(entry as unknown as RecordValue) !== expected.importedContentHash\n      )\n        throw new Error(`SQLite import verification failed for ${expected.importedId}`);\n    }\n    for (const branch of proof.branches)\n      if (branch.branch !== undefined) {\n        const tip = await storage.getValue(branchTip(branch.branch), BACKGROUND_CONTEXT);\n        if (tip?.value !== branch.importedTipId) throw new Error('SQLite import branch differs');\n      }\n    return proof;\n  } finally {\n    await storage.close(BACKGROUND_CONTEXT);\n    database.close();\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,SAAS,OAAO,OAA6B;CAC3C,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,wBAAwB;CACzG,OAAO;AACT;;AAGA,eAAsB,oBAAoB,OAAsE;CAC9G,IAAI,UAAUA,QAAAA,QAAG,aAAa,MAAM,aAAa,MAAM;CACvD,MAAM,eAAe,OAAO,KAAK,MAAM,QAAQ,MAAM,MAAM,CAAC,CAAC,CAAC,EAAG,CAAC;CAClE,IAAI;CACJ,IAAI,aAAa,SAAS,aAAa,aAAa,YAAY,GAAG;EACjE,eAAe,MAAMC,yBAAAA,2BAA2B,KAAK;EACrD,UAAUD,QAAAA,QAAG,aAAa,MAAM,aAAa,MAAM;CACrD;CACA,IAAI,CAAC,QAAQ,SAAS,IAAI,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC9E,MAAM,QAAQ,QAAQ,QAAQ,CAAC,CAAC,MAAM,IAAI;CAC1C,MAAM,SAAS,OAAO,KAAK,MAAM,MAAM,MAAM,CAAE,CAAC;CAChD,IAAI,OAAO,SAAS,YAAY,OAAO,MAAM,KAAK,OAAO,OAAO,OAAO,UACrE,MAAM,IAAI,MAAM,2BAA2B;CAC7C,MAAM,eAAe,MAAM,KAAK,SAAS;EACvC,MAAM,SAAkB,KAAK,MAAM,IAAI;EACvC,QAAQ,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM,EAAA,CAAG,IAAI,MAAM;CAC/D,CAAC;CACD,MAAM,UAAU,aAAa,KAAK,CAAC,CAAC,QAAQ,SAAS,KAAK,SAAS,OAAO;CAC1E,MAAM,yBAAS,IAAI,IAAyB;CAC5C,KAAK,MAAM,QAAQ,aAAa,KAAK,GACnC,IAAI,KAAK,SAAS,SAAS;EACzB,MAAM,MAAM,KAAK,UAAU,CAAC,KAAK,WAAW,KAAK,GAAG,CAAC;EACrD,IAAI,KAAK,OAAO,UAAU,OAAO,OAAO,GAAG;OACtC,OAAO,IAAI,KAAK,IAAI;CAC3B;CACF,KAAK,MAAM,QAAQ,OAAO,OAAO,GAC/B,IAAI,KAAK,cAAc,iBAAiB;EACtC,MAAM,QAAQ,OAAO,KAAK,KAAK;EAC/B,IAAI,MAAM,sBAAsB,QAAS,MAAM,QAAQ,MAAM,KAAK,KAAK,MAAM,MAAM,SAAS,GAC1F,MAAM,IAAI,MAAM,2DAA2D;CAC/E;CACF,iBAAiB;EACf,SAAS,QAAQ,KAAK,WAAW;GAC/B,UAAU,OAAO,MAAM,EAAE;GACzB,YAAY,OAAO,MAAM,EAAE;GAC3B,gBAAgB,MAAM;GACtB,kBAAkB,MAAM;GACxB,mBAAmBE,yBAAAA,YAAY,KAAK;GACpC,qBAAqBA,yBAAAA,YAAY,KAAK;EACxC,EAAE;EACF,UAAU,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC,CAC3B,QAAQ,SAAS,KAAK,cAAc,eAAe,CAAC,CACpD,KAAK,UAAU;GACd,QAAQ,OAAO,KAAK,GAAG;GACvB,aAAa,KAAK;GAClB,eAAe,KAAK;EACtB,EAAE;CACN;CACA,QAAA,QAAG,WAAW,MAAM,WAAW;CAC/B,IAAI,YAAY,OAAO,OAAO,SAAS;CACvC,IAAI,CAAC,OAAO,SAAS,SAAS,GAAG,MAAM,IAAI,MAAM,oCAAoC;CACrF,MAAM,aAAa,IAAIC,+CAAAA,kBAAkB;EACvC,WAAWC,UAAAA,QAAK,QAAQ,MAAM,WAAW;EACzC,cAAc,MAAM;EACpB,kBAAA,GAAiBC,+CAAAA,wBAAAA,CAAwB;EACzC,WAAW;CACb,CAAC;CACD,IAAI;EACF,MAAM,UAAU,MAAM,WAAW,OAC/B;GACE,IAAI,OAAO;GACX,GAAI,OAAO,OAAO,oBAAoB,WAAW,EAAE,iBAAiB,OAAO,gBAAgB,IAAI,CAAC;EAClG,GACAC,8CAAAA,kBACF;EACA,KAAK,MAAM,eAAe,cAAc;GACtC,MAAM,YAAY,YAAY,MAAM,SAAS,KAAK,SAAS,OAAO,CAAC,EAAE;GACrE,IAAI,OAAO,cAAc,UAAU,YAAY;GAC/C,MAAM,SAAS,YAAY,KAAK,SAAgB;IAC9C,MAAM,EAAE,MAAM,KAAK,MAAM,WAAW,YAAY,GAAG,SAAS;IAC5D,IAAI,SAAS,SAAS,OAAO;KAAE;KAAM,OAAO;IAAK;IACjD,IAAI,SAAS,SAAS,OAAO;KAAE;KAAM,KAAK;MAAE,GAAG;MAAM,WAAW,KAAK;KAAU;IAAE;IACjF,IAAI,SAAS,WAAW,SAAS,QAAQ,OAAO;KAAE;KAAM,GAAG;IAAK;IAChE,MAAM,IAAI,MAAM,oCAAoC,OAAO,IAAI,GAAG;GACpE,CAAC;GACD,MAAM,QAAQ,QACX,UAAU,YAAY,SAAS,OAAO,QAAQ,OAAO,CAAC,CAAC,WAAW,KAAA,CAAS,GAC5EA,8CAAAA,kBACF;EACF;EACA,KAAK,MAAM,QAAQ,OAAO,OAAO,GAAG;GAClC,MAAM,SAAS,MAAM,QAAQ,UAAA,GAASC,8CAAAA,MAAAA,CAAM,OAAO,KAAK,SAAS,GAAG,OAAO,KAAK,GAAG,CAAC,GAAGD,8CAAAA,kBAAkB;GACzG,IAAI,KAAK,UAAU,QAAQ,KAAK,MAAM,KAAK,UAAU,KAAK,KAAK,GAC7D,MAAM,IAAI,MAAM,gDAAgD;EACpE;EACA,MAAM,SAAS,MAAM,QAAQ,YAAY,EAAE,OAAO,MAAM,GAAGA,8CAAAA,kBAAkB;EAC7E,IACE,OAAO,WAAW,QAAQ,UAC1B,OAAO,MAAM,OAAO,UAAU,MAAM,OAAO,QAAQ,MAAM,EAAE,MAAM,MAAM,cAAc,QAAQ,MAAM,EAAE,SAAS,GAE9G,MAAM,IAAI,MAAM,8DAA8D;EAChF,MAAM,QAAQ,MAAMA,8CAAAA,kBAAkB;CACxC,UAAU;EACR,MAAM,WAAW,MAAMA,8CAAAA,kBAAkB;CAC3C;CACA,MAAM,WAAW,IAAIE,YAAAA,aAAa,MAAM,WAAW;CACnD,IAAI;EACF,SAAS,KAAK,iCAAiC;CACjD,UAAU;EACR,SAAS,MAAM;CACjB;CACA,QAAA,QAAG,UAAU,MAAM,aAAa,GAAK;CACrC,OAAO,oBAAoB,MAAM,aAAa,YAAY;AAC5D;;AAGA,eAAsB,oBACpB,aACA,OACoC;CACpC,MAAM,WAAA,GAAUH,+CAAAA,wBAAAA,CAAwB;CACxC,MAAM,aAAa,IAAIF,+CAAAA,kBAAkB;EACvC,WAAWC,UAAAA,QAAK,QAAQ,WAAW;EACnC,cAAc;EACd,iBAAiB;CACnB,CAAC;CACD,MAAM,WAAW,MAAM,WAAW,KAAK,KAAA,GAAWE,8CAAAA,kBAAkB;CACpE,MAAM,WAAW,MAAMA,8CAAAA,kBAAkB;CACzC,IAAI,SAAS,WAAW,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC5E,MAAM,WAAW,MAAM,QAAQ,aAAa,WAAW;CACvD,MAAM,UAAU,IAAIG,+CAAAA,cAAc,UAAU,EAAE,WAAW,SAAS,EAAE,CAAE,GAAG,CAAC;CAC1E,IAAI;EACF,MAAM,UAAU,MAAM,QAAQ,YAAY,CAAC,GAAGH,8CAAAA,kBAAkB;EAChE,IAAI,QAAQ,WAAW,MAAM,QAAQ,QAAQ,MAAM,IAAI,MAAM,mCAAmC;EAChG,MAAM,OAAO,IAAI,IAAI,QAAQ,KAAK,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;EAC9D,KAAK,MAAM,YAAY,MAAM,SAAS;GACpC,MAAM,QAAQ,KAAK,IAAI,SAAS,UAAU;GAC1C,IACE,CAAC,SACD,MAAM,aAAa,SAAS,oBAC5BJ,yBAAAA,YAAY,KAA+B,MAAM,SAAS,qBAE1D,MAAM,IAAI,MAAM,yCAAyC,SAAS,YAAY;EAClF;EACA,KAAK,MAAM,UAAU,MAAM,UACzB,IAAI,OAAO,WAAW,KAAA,GAEhB;QAAA,MADc,QAAQ,UAAA,GAASQ,8CAAAA,UAAAA,CAAU,OAAO,MAAM,GAAGJ,8CAAAA,kBAAkB,EAAA,EACtE,UAAU,OAAO,eAAe,MAAM,IAAI,MAAM,8BAA8B;EAAA;EAE3F,OAAO;CACT,UAAU;EACR,MAAM,QAAQ,MAAMA,8CAAAA,kBAAkB;EACtC,SAAS,MAAM;CACjB;AACF"}

package/dist/sqliteHistoryImport.d.mts

@@ -0,0 +1,8 @@
+import { HistoryImportVerification, HistoryStagingImportInput } from "./historyImport.mjs";
+//#region src/services/sqliteHistoryImport/index.d.ts
+/** Replays a protected, offline journal through Pi's public SQLite session writer. */
+export declare function importSqliteHistory(input: HistoryStagingImportInput): Promise<HistoryImportVerification>;
+/** Reopens the staged database read-only before protected publication. */
+export declare function verifySqliteHistory(stagingPath: string, proof: HistoryImportVerification): Promise<HistoryImportVerification>;
+//#endregion
+//# sourceMappingURL=sqliteHistoryImport.d.mts.map

package/dist/sqliteHistoryImport.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqliteHistoryImport.d.mts","names":[],"sources":["../src/services/sqliteHistoryImport/index.ts"],"mappings":";;;wBAuBsB,oBAAoB,OAAO,4BAA4B,QAAQ;;wBA0G/D,oBACpB,qBACA,OAAO,4BACN,QAAQ"}

package/dist/sqliteHistoryImport.mjs

@@ -0,0 +1,146 @@
+import { contentHash, importV3WithPinnedUpstream } from "./jsonlSessionRepo.mjs";
+import fs from "node:fs";
+import path from "node:path";
+import { DatabaseSync } from "node:sqlite";
+import { BACKGROUND_CONTEXT } from "@earendil-works/pi-agent-core/harness/context";
+import { branchTip, value } from "@earendil-works/pi-agent-core/harness/session";
+import { SqliteSessionRepo, SqliteStorage, createNodeSqliteFactory } from "@earendil-works/pi-session-backend-sqlite-node";
+//#region src/services/sqliteHistoryImport/index.ts
+function record(input) {
+	if (!input || typeof input !== "object" || Array.isArray(input)) throw new Error("Invalid history record");
+	return input;
+}
+/** Replays a protected, offline journal through Pi's public SQLite session writer. */
+async function importSqliteHistory(input) {
+	let content = fs.readFileSync(input.stagingPath, "utf8");
+	const sourceHeader = record(JSON.parse(content.split("\n", 1)[0]));
+	let verification;
+	if (sourceHeader.type === "session" && sourceHeader.version === 3) {
+		verification = await importV3WithPinnedUpstream(input);
+		content = fs.readFileSync(input.stagingPath, "utf8");
+	}
+	if (!content.endsWith("\n")) throw new Error("Cannot import truncated history");
+	const lines = content.trimEnd().split("\n");
+	const header = record(JSON.parse(lines.shift()));
+	if (header.kind !== "header" || header.v !== 4 || typeof header.id !== "string") throw new Error("Expected v3 or v4 history");
+	const transactions = lines.map((line) => {
+		const parsed = JSON.parse(line);
+		return (Array.isArray(parsed) ? parsed : [parsed]).map(record);
+	});
+	const entries = transactions.flat().filter((item) => item.kind === "entry");
+	const values = /* @__PURE__ */ new Map();
+	for (const item of transactions.flat()) if (item.kind === "value") {
+		const key = JSON.stringify([item.namespace, item.key]);
+		if (item.op === "delete") values.delete(key);
+		else values.set(key, item);
+	}
+	for (const item of values.values()) if (item.namespace === "pi.lane.state") {
+		const state = record(item.value);
+		if (state.currentOperationId != null || Array.isArray(state.inbox) && state.inbox.length > 0) throw new Error("SQLite import requires settled sessions with empty queues");
+	}
+	verification ??= {
+		entries: entries.map((entry) => ({
+			sourceId: String(entry.id),
+			importedId: String(entry.id),
+			sourceParentId: entry.parentId,
+			importedParentId: entry.parentId,
+			sourceContentHash: contentHash(entry),
+			importedContentHash: contentHash(entry)
+		})),
+		branches: [...values.values()].filter((item) => item.namespace === "pi.branch.tip").map((item) => ({
+			branch: String(item.key),
+			sourceTipId: item.value,
+			importedTipId: item.value
+		}))
+	};
+	fs.unlinkSync(input.stagingPath);
+	let timestamp = Number(header.createdAt);
+	if (!Number.isFinite(timestamp)) throw new Error("Invalid history creation timestamp");
+	const repository = new SqliteSessionRepo({
+		directory: path.dirname(input.stagingPath),
+		databasePath: input.stagingPath,
+		databaseFactory: createNodeSqliteFactory(),
+		now: () => timestamp
+	});
+	try {
+		const session = await repository.create({
+			id: header.id,
+			...typeof header.parentSessionId === "string" ? { parentSessionId: header.parentSessionId } : {}
+		}, BACKGROUND_CONTEXT);
+		for (const transaction of transactions) {
+			const entryTime = transaction.find((item) => item.kind === "entry")?.timestamp;
+			if (typeof entryTime === "number") timestamp = entryTime;
+			const writes = transaction.map((item) => {
+				const { kind, seq: _seq, timestamp: _timestamp, ...rest } = item;
+				if (kind === "entry") return {
+					kind,
+					entry: rest
+				};
+				if (kind === "usage") return {
+					kind,
+					row: {
+						...rest,
+						timestamp: item.timestamp
+					}
+				};
+				if (kind === "value" || kind === "list") return {
+					kind,
+					...rest
+				};
+				throw new Error(`Unsupported history record kind: ${String(kind)}`);
+			});
+			await session.mutate((mutation, context) => mutation.commit(writes, context).then(() => void 0), BACKGROUND_CONTEXT);
+		}
+		for (const item of values.values()) {
+			const stored = await session.getValue(value(String(item.namespace), String(item.key)), BACKGROUND_CONTEXT);
+			if (JSON.stringify(stored?.value) !== JSON.stringify(item.value)) throw new Error("Imported session state differs from the source");
+		}
+		const copied = await session.findEntries({ order: "asc" }, BACKGROUND_CONTEXT);
+		if (copied.length !== entries.length || copied.some((entry, index) => entry.id !== entries[index]?.id || entry.timestamp !== entries[index]?.timestamp)) throw new Error("Imported entry identity or timestamp differs from the source");
+		await session.close(BACKGROUND_CONTEXT);
+	} finally {
+		await repository.close(BACKGROUND_CONTEXT);
+	}
+	const database = new DatabaseSync(input.stagingPath);
+	try {
+		database.exec("PRAGMA wal_checkpoint(TRUNCATE)");
+	} finally {
+		database.close();
+	}
+	fs.chmodSync(input.stagingPath, 384);
+	return verifySqliteHistory(input.stagingPath, verification);
+}
+/** Reopens the staged database read-only before protected publication. */
+async function verifySqliteHistory(stagingPath, proof) {
+	const factory = createNodeSqliteFactory();
+	const repository = new SqliteSessionRepo({
+		directory: path.dirname(stagingPath),
+		databasePath: stagingPath,
+		databaseFactory: factory
+	});
+	const sessions = await repository.list(void 0, BACKGROUND_CONTEXT);
+	await repository.close(BACKGROUND_CONTEXT);
+	if (sessions.length !== 1) throw new Error("Invalid imported SQLite session");
+	const database = await factory.openReadOnly(stagingPath);
+	const storage = new SqliteStorage(database, { sessionId: sessions[0].id });
+	try {
+		const entries = await storage.scanEntries({}, BACKGROUND_CONTEXT);
+		if (entries.length !== proof.entries.length) throw new Error("SQLite import entry count differs");
+		const byId = new Map(entries.map((entry) => [entry.id, entry]));
+		for (const expected of proof.entries) {
+			const entry = byId.get(expected.importedId);
+			if (!entry || entry.parentId !== expected.importedParentId || contentHash(entry) !== expected.importedContentHash) throw new Error(`SQLite import verification failed for ${expected.importedId}`);
+		}
+		for (const branch of proof.branches) if (branch.branch !== void 0) {
+			if ((await storage.getValue(branchTip(branch.branch), BACKGROUND_CONTEXT))?.value !== branch.importedTipId) throw new Error("SQLite import branch differs");
+		}
+		return proof;
+	} finally {
+		await storage.close(BACKGROUND_CONTEXT);
+		database.close();
+	}
+}
+//#endregion
+export { importSqliteHistory, verifySqliteHistory };
+
+//# sourceMappingURL=sqliteHistoryImport.mjs.map

package/dist/sqliteHistoryImport.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqliteHistoryImport.mjs","names":[],"sources":["../src/services/sqliteHistoryImport/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { DatabaseSync } from 'node:sqlite';\n\nimport { BACKGROUND_CONTEXT } from '@earendil-works/pi-agent-core/harness/context';\nimport { branchTip, value, type Write } from '@earendil-works/pi-agent-core/harness/session';\nimport {\n  SqliteSessionRepo,\n  SqliteStorage,\n  createNodeSqliteFactory,\n} from '@earendil-works/pi-session-backend-sqlite-node';\n\nimport type { HistoryImportVerification, HistoryStagingImportInput } from '../historyImport';\nimport { contentHash, importV3WithPinnedUpstream } from '../jsonlSessionRepo';\n\ntype RecordValue = Record<string, unknown>;\n\nfunction record(input: unknown): RecordValue {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) throw new Error('Invalid history record');\n  return input as RecordValue;\n}\n\n/** Replays a protected, offline journal through Pi's public SQLite session writer. */\nexport async function importSqliteHistory(input: HistoryStagingImportInput): Promise<HistoryImportVerification> {\n  let content = fs.readFileSync(input.stagingPath, 'utf8');\n  const sourceHeader = record(JSON.parse(content.split('\\n', 1)[0]!));\n  let verification: HistoryImportVerification | undefined;\n  if (sourceHeader.type === 'session' && sourceHeader.version === 3) {\n    verification = await importV3WithPinnedUpstream(input);\n    content = fs.readFileSync(input.stagingPath, 'utf8');\n  }\n  if (!content.endsWith('\\n')) throw new Error('Cannot import truncated history');\n  const lines = content.trimEnd().split('\\n');\n  const header = record(JSON.parse(lines.shift()!));\n  if (header.kind !== 'header' || header.v !== 4 || typeof header.id !== 'string')\n    throw new Error('Expected v3 or v4 history');\n  const transactions = lines.map((line) => {\n    const parsed: unknown = JSON.parse(line);\n    return (Array.isArray(parsed) ? parsed : [parsed]).map(record);\n  });\n  const entries = transactions.flat().filter((item) => item.kind === 'entry');\n  const values = new Map<string, RecordValue>();\n  for (const item of transactions.flat())\n    if (item.kind === 'value') {\n      const key = JSON.stringify([item.namespace, item.key]);\n      if (item.op === 'delete') values.delete(key);\n      else values.set(key, item);\n    }\n  for (const item of values.values())\n    if (item.namespace === 'pi.lane.state') {\n      const state = record(item.value);\n      if (state.currentOperationId != null || (Array.isArray(state.inbox) && state.inbox.length > 0))\n        throw new Error('SQLite import requires settled sessions with empty queues');\n    }\n  verification ??= {\n    entries: entries.map((entry) => ({\n      sourceId: String(entry.id),\n      importedId: String(entry.id),\n      sourceParentId: entry.parentId as string | null,\n      importedParentId: entry.parentId as string | null,\n      sourceContentHash: contentHash(entry),\n      importedContentHash: contentHash(entry),\n    })),\n    branches: [...values.values()]\n      .filter((item) => item.namespace === 'pi.branch.tip')\n      .map((item) => ({\n        branch: String(item.key),\n        sourceTipId: item.value as string | null,\n        importedTipId: item.value as string | null,\n      })),\n  };\n  fs.unlinkSync(input.stagingPath);\n  let timestamp = Number(header.createdAt);\n  if (!Number.isFinite(timestamp)) throw new Error('Invalid history creation timestamp');\n  const repository = new SqliteSessionRepo({\n    directory: path.dirname(input.stagingPath),\n    databasePath: input.stagingPath,\n    databaseFactory: createNodeSqliteFactory(),\n    now: () => timestamp,\n  });\n  try {\n    const session = await repository.create(\n      {\n        id: header.id,\n        ...(typeof header.parentSessionId === 'string' ? { parentSessionId: header.parentSessionId } : {}),\n      },\n      BACKGROUND_CONTEXT,\n    );\n    for (const transaction of transactions) {\n      const entryTime = transaction.find((item) => item.kind === 'entry')?.timestamp;\n      if (typeof entryTime === 'number') timestamp = entryTime;\n      const writes = transaction.map((item): Write => {\n        const { kind, seq: _seq, timestamp: _timestamp, ...rest } = item;\n        if (kind === 'entry') return { kind, entry: rest } as unknown as Write;\n        if (kind === 'usage') return { kind, row: { ...rest, timestamp: item.timestamp } } as unknown as Write;\n        if (kind === 'value' || kind === 'list') return { kind, ...rest } as unknown as Write;\n        throw new Error(`Unsupported history record kind: ${String(kind)}`);\n      });\n      await session.mutate(\n        (mutation, context) => mutation.commit(writes, context).then(() => undefined),\n        BACKGROUND_CONTEXT,\n      );\n    }\n    for (const item of values.values()) {\n      const stored = await session.getValue(value(String(item.namespace), String(item.key)), BACKGROUND_CONTEXT);\n      if (JSON.stringify(stored?.value) !== JSON.stringify(item.value))\n        throw new Error('Imported session state differs from the source');\n    }\n    const copied = await session.findEntries({ order: 'asc' }, BACKGROUND_CONTEXT);\n    if (\n      copied.length !== entries.length ||\n      copied.some((entry, index) => entry.id !== entries[index]?.id || entry.timestamp !== entries[index]?.timestamp)\n    )\n      throw new Error('Imported entry identity or timestamp differs from the source');\n    await session.close(BACKGROUND_CONTEXT);\n  } finally {\n    await repository.close(BACKGROUND_CONTEXT);\n  }\n  const database = new DatabaseSync(input.stagingPath);\n  try {\n    database.exec('PRAGMA wal_checkpoint(TRUNCATE)');\n  } finally {\n    database.close();\n  }\n  fs.chmodSync(input.stagingPath, 0o600);\n  return verifySqliteHistory(input.stagingPath, verification);\n}\n\n/** Reopens the staged database read-only before protected publication. */\nexport async function verifySqliteHistory(\n  stagingPath: string,\n  proof: HistoryImportVerification,\n): Promise<HistoryImportVerification> {\n  const factory = createNodeSqliteFactory();\n  const repository = new SqliteSessionRepo({\n    directory: path.dirname(stagingPath),\n    databasePath: stagingPath,\n    databaseFactory: factory,\n  });\n  const sessions = await repository.list(undefined, BACKGROUND_CONTEXT);\n  await repository.close(BACKGROUND_CONTEXT);\n  if (sessions.length !== 1) throw new Error('Invalid imported SQLite session');\n  const database = await factory.openReadOnly(stagingPath);\n  const storage = new SqliteStorage(database, { sessionId: sessions[0]!.id });\n  try {\n    const entries = await storage.scanEntries({}, BACKGROUND_CONTEXT);\n    if (entries.length !== proof.entries.length) throw new Error('SQLite import entry count differs');\n    const byId = new Map(entries.map((entry) => [entry.id, entry]));\n    for (const expected of proof.entries) {\n      const entry = byId.get(expected.importedId);\n      if (\n        !entry ||\n        entry.parentId !== expected.importedParentId ||\n        contentHash(entry as unknown as RecordValue) !== expected.importedContentHash\n      )\n        throw new Error(`SQLite import verification failed for ${expected.importedId}`);\n    }\n    for (const branch of proof.branches)\n      if (branch.branch !== undefined) {\n        const tip = await storage.getValue(branchTip(branch.branch), BACKGROUND_CONTEXT);\n        if (tip?.value !== branch.importedTipId) throw new Error('SQLite import branch differs');\n      }\n    return proof;\n  } finally {\n    await storage.close(BACKGROUND_CONTEXT);\n    database.close();\n  }\n}\n"],"mappings":";;;;;;;;AAiBA,SAAS,OAAO,OAA6B;CAC3C,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,wBAAwB;CACzG,OAAO;AACT;;AAGA,eAAsB,oBAAoB,OAAsE;CAC9G,IAAI,UAAU,GAAG,aAAa,MAAM,aAAa,MAAM;CACvD,MAAM,eAAe,OAAO,KAAK,MAAM,QAAQ,MAAM,MAAM,CAAC,CAAC,CAAC,EAAG,CAAC;CAClE,IAAI;CACJ,IAAI,aAAa,SAAS,aAAa,aAAa,YAAY,GAAG;EACjE,eAAe,MAAM,2BAA2B,KAAK;EACrD,UAAU,GAAG,aAAa,MAAM,aAAa,MAAM;CACrD;CACA,IAAI,CAAC,QAAQ,SAAS,IAAI,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC9E,MAAM,QAAQ,QAAQ,QAAQ,CAAC,CAAC,MAAM,IAAI;CAC1C,MAAM,SAAS,OAAO,KAAK,MAAM,MAAM,MAAM,CAAE,CAAC;CAChD,IAAI,OAAO,SAAS,YAAY,OAAO,MAAM,KAAK,OAAO,OAAO,OAAO,UACrE,MAAM,IAAI,MAAM,2BAA2B;CAC7C,MAAM,eAAe,MAAM,KAAK,SAAS;EACvC,MAAM,SAAkB,KAAK,MAAM,IAAI;EACvC,QAAQ,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM,EAAA,CAAG,IAAI,MAAM;CAC/D,CAAC;CACD,MAAM,UAAU,aAAa,KAAK,CAAC,CAAC,QAAQ,SAAS,KAAK,SAAS,OAAO;CAC1E,MAAM,yBAAS,IAAI,IAAyB;CAC5C,KAAK,MAAM,QAAQ,aAAa,KAAK,GACnC,IAAI,KAAK,SAAS,SAAS;EACzB,MAAM,MAAM,KAAK,UAAU,CAAC,KAAK,WAAW,KAAK,GAAG,CAAC;EACrD,IAAI,KAAK,OAAO,UAAU,OAAO,OAAO,GAAG;OACtC,OAAO,IAAI,KAAK,IAAI;CAC3B;CACF,KAAK,MAAM,QAAQ,OAAO,OAAO,GAC/B,IAAI,KAAK,cAAc,iBAAiB;EACtC,MAAM,QAAQ,OAAO,KAAK,KAAK;EAC/B,IAAI,MAAM,sBAAsB,QAAS,MAAM,QAAQ,MAAM,KAAK,KAAK,MAAM,MAAM,SAAS,GAC1F,MAAM,IAAI,MAAM,2DAA2D;CAC/E;CACF,iBAAiB;EACf,SAAS,QAAQ,KAAK,WAAW;GAC/B,UAAU,OAAO,MAAM,EAAE;GACzB,YAAY,OAAO,MAAM,EAAE;GAC3B,gBAAgB,MAAM;GACtB,kBAAkB,MAAM;GACxB,mBAAmB,YAAY,KAAK;GACpC,qBAAqB,YAAY,KAAK;EACxC,EAAE;EACF,UAAU,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC,CAC3B,QAAQ,SAAS,KAAK,cAAc,eAAe,CAAC,CACpD,KAAK,UAAU;GACd,QAAQ,OAAO,KAAK,GAAG;GACvB,aAAa,KAAK;GAClB,eAAe,KAAK;EACtB,EAAE;CACN;CACA,GAAG,WAAW,MAAM,WAAW;CAC/B,IAAI,YAAY,OAAO,OAAO,SAAS;CACvC,IAAI,CAAC,OAAO,SAAS,SAAS,GAAG,MAAM,IAAI,MAAM,oCAAoC;CACrF,MAAM,aAAa,IAAI,kBAAkB;EACvC,WAAW,KAAK,QAAQ,MAAM,WAAW;EACzC,cAAc,MAAM;EACpB,iBAAiB,wBAAwB;EACzC,WAAW;CACb,CAAC;CACD,IAAI;EACF,MAAM,UAAU,MAAM,WAAW,OAC/B;GACE,IAAI,OAAO;GACX,GAAI,OAAO,OAAO,oBAAoB,WAAW,EAAE,iBAAiB,OAAO,gBAAgB,IAAI,CAAC;EAClG,GACA,kBACF;EACA,KAAK,MAAM,eAAe,cAAc;GACtC,MAAM,YAAY,YAAY,MAAM,SAAS,KAAK,SAAS,OAAO,CAAC,EAAE;GACrE,IAAI,OAAO,cAAc,UAAU,YAAY;GAC/C,MAAM,SAAS,YAAY,KAAK,SAAgB;IAC9C,MAAM,EAAE,MAAM,KAAK,MAAM,WAAW,YAAY,GAAG,SAAS;IAC5D,IAAI,SAAS,SAAS,OAAO;KAAE;KAAM,OAAO;IAAK;IACjD,IAAI,SAAS,SAAS,OAAO;KAAE;KAAM,KAAK;MAAE,GAAG;MAAM,WAAW,KAAK;KAAU;IAAE;IACjF,IAAI,SAAS,WAAW,SAAS,QAAQ,OAAO;KAAE;KAAM,GAAG;IAAK;IAChE,MAAM,IAAI,MAAM,oCAAoC,OAAO,IAAI,GAAG;GACpE,CAAC;GACD,MAAM,QAAQ,QACX,UAAU,YAAY,SAAS,OAAO,QAAQ,OAAO,CAAC,CAAC,WAAW,KAAA,CAAS,GAC5E,kBACF;EACF;EACA,KAAK,MAAM,QAAQ,OAAO,OAAO,GAAG;GAClC,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,OAAO,KAAK,SAAS,GAAG,OAAO,KAAK,GAAG,CAAC,GAAG,kBAAkB;GACzG,IAAI,KAAK,UAAU,QAAQ,KAAK,MAAM,KAAK,UAAU,KAAK,KAAK,GAC7D,MAAM,IAAI,MAAM,gDAAgD;EACpE;EACA,MAAM,SAAS,MAAM,QAAQ,YAAY,EAAE,OAAO,MAAM,GAAG,kBAAkB;EAC7E,IACE,OAAO,WAAW,QAAQ,UAC1B,OAAO,MAAM,OAAO,UAAU,MAAM,OAAO,QAAQ,MAAM,EAAE,MAAM,MAAM,cAAc,QAAQ,MAAM,EAAE,SAAS,GAE9G,MAAM,IAAI,MAAM,8DAA8D;EAChF,MAAM,QAAQ,MAAM,kBAAkB;CACxC,UAAU;EACR,MAAM,WAAW,MAAM,kBAAkB;CAC3C;CACA,MAAM,WAAW,IAAI,aAAa,MAAM,WAAW;CACnD,IAAI;EACF,SAAS,KAAK,iCAAiC;CACjD,UAAU;EACR,SAAS,MAAM;CACjB;CACA,GAAG,UAAU,MAAM,aAAa,GAAK;CACrC,OAAO,oBAAoB,MAAM,aAAa,YAAY;AAC5D;;AAGA,eAAsB,oBACpB,aACA,OACoC;CACpC,MAAM,UAAU,wBAAwB;CACxC,MAAM,aAAa,IAAI,kBAAkB;EACvC,WAAW,KAAK,QAAQ,WAAW;EACnC,cAAc;EACd,iBAAiB;CACnB,CAAC;CACD,MAAM,WAAW,MAAM,WAAW,KAAK,KAAA,GAAW,kBAAkB;CACpE,MAAM,WAAW,MAAM,kBAAkB;CACzC,IAAI,SAAS,WAAW,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC5E,MAAM,WAAW,MAAM,QAAQ,aAAa,WAAW;CACvD,MAAM,UAAU,IAAI,cAAc,UAAU,EAAE,WAAW,SAAS,EAAE,CAAE,GAAG,CAAC;CAC1E,IAAI;EACF,MAAM,UAAU,MAAM,QAAQ,YAAY,CAAC,GAAG,kBAAkB;EAChE,IAAI,QAAQ,WAAW,MAAM,QAAQ,QAAQ,MAAM,IAAI,MAAM,mCAAmC;EAChG,MAAM,OAAO,IAAI,IAAI,QAAQ,KAAK,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;EAC9D,KAAK,MAAM,YAAY,MAAM,SAAS;GACpC,MAAM,QAAQ,KAAK,IAAI,SAAS,UAAU;GAC1C,IACE,CAAC,SACD,MAAM,aAAa,SAAS,oBAC5B,YAAY,KAA+B,MAAM,SAAS,qBAE1D,MAAM,IAAI,MAAM,yCAAyC,SAAS,YAAY;EAClF;EACA,KAAK,MAAM,UAAU,MAAM,UACzB,IAAI,OAAO,WAAW,KAAA,GAEhB;QAAA,MADc,QAAQ,SAAS,UAAU,OAAO,MAAM,GAAG,kBAAkB,EAAA,EACtE,UAAU,OAAO,eAAe,MAAM,IAAI,MAAM,8BAA8B;EAAA;EAE3F,OAAO;CACT,UAAU;EACR,MAAM,QAAQ,MAAM,kBAAkB;EACtC,SAAS,MAAM;CACjB;AACF"}

package/dist/sqliteSessionStorage.cjs

@@ -0,0 +1,53 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_runtime = require("./_virtual/_rolldown/runtime.cjs");
+let node_crypto = require("node:crypto");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let _earendil_works_pi_session_backend_sqlite_node = require("@earendil-works/pi-session-backend-sqlite-node");
+//#region src/services/sqliteSessionStorage/index.ts
+/** Opens the one SQLite container owned by a server session. */
+async function openSqliteSessionStorage(options, context) {
+	if (!options.historyOwnership) throw new Error("SQLite sessions require explicit HistoryOwnership");
+	if (!options.sessionsRoot && !options.sessionPath) throw new Error("SQLite sessions require a server data directory");
+	const id = options.sessionId ?? (0, node_crypto.randomUUID)();
+	if (!/^[a-zA-Z0-9_-]+$/u.test(id)) throw new Error("Invalid SQLite session id");
+	const sessionFile = node_path.default.resolve(options.sessionPath ?? node_path.default.join(options.sessionsRoot, `${id}.sqlite`));
+	const historyLease = await options.historyOwnership.acquire(sessionFile);
+	const repository = new _earendil_works_pi_session_backend_sqlite_node.SqliteSessionRepo({
+		directory: node_path.default.dirname(sessionFile),
+		databasePath: sessionFile,
+		databaseFactory: (0, _earendil_works_pi_session_backend_sqlite_node.createNodeSqliteFactory)()
+	});
+	try {
+		await historyLease.assertQuiescent();
+		const existing = node_fs.default.existsSync(sessionFile);
+		if (options.sessionPath && !existing) throw new Error(`SQLite session not found: ${sessionFile}`);
+		const metadata = existing ? await repository.list(void 0, context) : [];
+		if (existing && metadata.length !== 1) throw new Error("Expected exactly one session in the SQLite container");
+		if (existing && options.sessionId && metadata[0].id !== options.sessionId) throw new Error("SQLite session id does not match the requested session");
+		const session = existing ? await repository.open(metadata[0], context) : await repository.create({
+			id,
+			...options.parentSessionId ? { parentSessionId: options.parentSessionId } : {}
+		}, context);
+		if (!existing) node_fs.default.chmodSync(sessionFile, 384);
+		return {
+			session,
+			sessionFile,
+			repository,
+			historyLease
+		};
+	} catch (error) {
+		try {
+			await repository.close(context);
+		} finally {
+			await historyLease.release();
+		}
+		throw error;
+	}
+}
+//#endregion
+exports.openSqliteSessionStorage = openSqliteSessionStorage;
+
+//# sourceMappingURL=sqliteSessionStorage.cjs.map

package/dist/sqliteSessionStorage.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqliteSessionStorage.cjs","names":["randomUUID","path","SqliteSessionRepo","createNodeSqliteFactory","fs"],"sources":["../src/services/sqliteSessionStorage/index.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport type { Context } from '@earendil-works/pi-agent-core/harness/context';\nimport { SqliteSessionRepo, createNodeSqliteFactory } from '@earendil-works/pi-session-backend-sqlite-node';\n\nimport type { DirectHarnessRuntimeOptions, SqliteSessionStorage } from '../../types/server/directHarnessRuntime';\n\n/** Opens the one SQLite container owned by a server session. */\nexport async function openSqliteSessionStorage(\n  options: Pick<\n    DirectHarnessRuntimeOptions,\n    'historyOwnership' | 'sessionsRoot' | 'sessionPath' | 'sessionId' | 'parentSessionId'\n  >,\n  context: Context,\n): Promise<SqliteSessionStorage> {\n  if (!options.historyOwnership) throw new Error('SQLite sessions require explicit HistoryOwnership');\n  if (!options.sessionsRoot && !options.sessionPath) throw new Error('SQLite sessions require a server data directory');\n  const id = options.sessionId ?? randomUUID();\n  if (!/^[a-zA-Z0-9_-]+$/u.test(id)) throw new Error('Invalid SQLite session id');\n  const sessionFile = path.resolve(options.sessionPath ?? path.join(options.sessionsRoot!, `${id}.sqlite`));\n  const historyLease = await options.historyOwnership.acquire(sessionFile);\n  const repository = new SqliteSessionRepo({\n    directory: path.dirname(sessionFile),\n    databasePath: sessionFile,\n    databaseFactory: createNodeSqliteFactory(),\n  });\n  try {\n    await historyLease.assertQuiescent();\n    const existing = fs.existsSync(sessionFile);\n    if (options.sessionPath && !existing) throw new Error(`SQLite session not found: ${sessionFile}`);\n    const metadata = existing ? await repository.list(undefined, context) : [];\n    if (existing && metadata.length !== 1) throw new Error('Expected exactly one session in the SQLite container');\n    if (existing && options.sessionId && metadata[0]!.id !== options.sessionId)\n      throw new Error('SQLite session id does not match the requested session');\n    const session = existing\n      ? await repository.open(metadata[0]!, context)\n      : await repository.create(\n          { id, ...(options.parentSessionId ? { parentSessionId: options.parentSessionId } : {}) },\n          context,\n        );\n    if (!existing) fs.chmodSync(sessionFile, 0o600);\n    return { session, sessionFile, repository, historyLease };\n  } catch (error) {\n    try {\n      await repository.close(context);\n    } finally {\n      await historyLease.release();\n    }\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;AAUA,eAAsB,yBACpB,SAIA,SAC+B;CAC/B,IAAI,CAAC,QAAQ,kBAAkB,MAAM,IAAI,MAAM,mDAAmD;CAClG,IAAI,CAAC,QAAQ,gBAAgB,CAAC,QAAQ,aAAa,MAAM,IAAI,MAAM,iDAAiD;CACpH,MAAM,KAAK,QAAQ,cAAA,GAAaA,YAAAA,WAAAA,CAAW;CAC3C,IAAI,CAAC,oBAAoB,KAAK,EAAE,GAAG,MAAM,IAAI,MAAM,2BAA2B;CAC9E,MAAM,cAAcC,UAAAA,QAAK,QAAQ,QAAQ,eAAeA,UAAAA,QAAK,KAAK,QAAQ,cAAe,GAAG,GAAG,QAAQ,CAAC;CACxG,MAAM,eAAe,MAAM,QAAQ,iBAAiB,QAAQ,WAAW;CACvE,MAAM,aAAa,IAAIC,+CAAAA,kBAAkB;EACvC,WAAWD,UAAAA,QAAK,QAAQ,WAAW;EACnC,cAAc;EACd,kBAAA,GAAiBE,+CAAAA,wBAAAA,CAAwB;CAC3C,CAAC;CACD,IAAI;EACF,MAAM,aAAa,gBAAgB;EACnC,MAAM,WAAWC,QAAAA,QAAG,WAAW,WAAW;EAC1C,IAAI,QAAQ,eAAe,CAAC,UAAU,MAAM,IAAI,MAAM,6BAA6B,aAAa;EAChG,MAAM,WAAW,WAAW,MAAM,WAAW,KAAK,KAAA,GAAW,OAAO,IAAI,CAAC;EACzE,IAAI,YAAY,SAAS,WAAW,GAAG,MAAM,IAAI,MAAM,sDAAsD;EAC7G,IAAI,YAAY,QAAQ,aAAa,SAAS,EAAE,CAAE,OAAO,QAAQ,WAC/D,MAAM,IAAI,MAAM,wDAAwD;EAC1E,MAAM,UAAU,WACZ,MAAM,WAAW,KAAK,SAAS,IAAK,OAAO,IAC3C,MAAM,WAAW,OACf;GAAE;GAAI,GAAI,QAAQ,kBAAkB,EAAE,iBAAiB,QAAQ,gBAAgB,IAAI,CAAC;EAAG,GACvF,OACF;EACJ,IAAI,CAAC,UAAU,QAAA,QAAG,UAAU,aAAa,GAAK;EAC9C,OAAO;GAAE;GAAS;GAAa;GAAY;EAAa;CAC1D,SAAS,OAAO;EACd,IAAI;GACF,MAAM,WAAW,MAAM,OAAO;EAChC,UAAU;GACR,MAAM,aAAa,QAAQ;EAC7B;EACA,MAAM;CACR;AACF"}

package/dist/sqliteSessionStorage.d.mts

@@ -0,0 +1,7 @@
+import { DirectHarnessRuntimeOptions, SqliteSessionStorage } from "./src/types/server/directHarnessRuntime.mjs";
+import { Context } from "@earendil-works/pi-agent-core/harness/context";
+//#region src/services/sqliteSessionStorage/index.d.ts
+/** Opens the one SQLite container owned by a server session. */
+export declare function openSqliteSessionStorage(options: Pick<DirectHarnessRuntimeOptions, 'historyOwnership' | 'sessionsRoot' | 'sessionPath' | 'sessionId' | 'parentSessionId'>, context: Context): Promise<SqliteSessionStorage>;
+//#endregion
+//# sourceMappingURL=sqliteSessionStorage.d.mts.map

package/dist/sqliteSessionStorage.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqliteSessionStorage.d.mts","names":[],"sources":["../src/services/sqliteSessionStorage/index.ts"],"mappings":";;;;wBAUsB,yBACpB,SAAS,KACP,qHAGF,SAAS,UACR,QAAQ"}

package/dist/sqliteSessionStorage.mjs

@@ -0,0 +1,49 @@
+import { randomUUID } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { SqliteSessionRepo, createNodeSqliteFactory } from "@earendil-works/pi-session-backend-sqlite-node";
+//#region src/services/sqliteSessionStorage/index.ts
+/** Opens the one SQLite container owned by a server session. */
+async function openSqliteSessionStorage(options, context) {
+	if (!options.historyOwnership) throw new Error("SQLite sessions require explicit HistoryOwnership");
+	if (!options.sessionsRoot && !options.sessionPath) throw new Error("SQLite sessions require a server data directory");
+	const id = options.sessionId ?? randomUUID();
+	if (!/^[a-zA-Z0-9_-]+$/u.test(id)) throw new Error("Invalid SQLite session id");
+	const sessionFile = path.resolve(options.sessionPath ?? path.join(options.sessionsRoot, `${id}.sqlite`));
+	const historyLease = await options.historyOwnership.acquire(sessionFile);
+	const repository = new SqliteSessionRepo({
+		directory: path.dirname(sessionFile),
+		databasePath: sessionFile,
+		databaseFactory: createNodeSqliteFactory()
+	});
+	try {
+		await historyLease.assertQuiescent();
+		const existing = fs.existsSync(sessionFile);
+		if (options.sessionPath && !existing) throw new Error(`SQLite session not found: ${sessionFile}`);
+		const metadata = existing ? await repository.list(void 0, context) : [];
+		if (existing && metadata.length !== 1) throw new Error("Expected exactly one session in the SQLite container");
+		if (existing && options.sessionId && metadata[0].id !== options.sessionId) throw new Error("SQLite session id does not match the requested session");
+		const session = existing ? await repository.open(metadata[0], context) : await repository.create({
+			id,
+			...options.parentSessionId ? { parentSessionId: options.parentSessionId } : {}
+		}, context);
+		if (!existing) fs.chmodSync(sessionFile, 384);
+		return {
+			session,
+			sessionFile,
+			repository,
+			historyLease
+		};
+	} catch (error) {
+		try {
+			await repository.close(context);
+		} finally {
+			await historyLease.release();
+		}
+		throw error;
+	}
+}
+//#endregion
+export { openSqliteSessionStorage };
+
+//# sourceMappingURL=sqliteSessionStorage.mjs.map

package/dist/sqliteSessionStorage.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqliteSessionStorage.mjs","names":[],"sources":["../src/services/sqliteSessionStorage/index.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport type { Context } from '@earendil-works/pi-agent-core/harness/context';\nimport { SqliteSessionRepo, createNodeSqliteFactory } from '@earendil-works/pi-session-backend-sqlite-node';\n\nimport type { DirectHarnessRuntimeOptions, SqliteSessionStorage } from '../../types/server/directHarnessRuntime';\n\n/** Opens the one SQLite container owned by a server session. */\nexport async function openSqliteSessionStorage(\n  options: Pick<\n    DirectHarnessRuntimeOptions,\n    'historyOwnership' | 'sessionsRoot' | 'sessionPath' | 'sessionId' | 'parentSessionId'\n  >,\n  context: Context,\n): Promise<SqliteSessionStorage> {\n  if (!options.historyOwnership) throw new Error('SQLite sessions require explicit HistoryOwnership');\n  if (!options.sessionsRoot && !options.sessionPath) throw new Error('SQLite sessions require a server data directory');\n  const id = options.sessionId ?? randomUUID();\n  if (!/^[a-zA-Z0-9_-]+$/u.test(id)) throw new Error('Invalid SQLite session id');\n  const sessionFile = path.resolve(options.sessionPath ?? path.join(options.sessionsRoot!, `${id}.sqlite`));\n  const historyLease = await options.historyOwnership.acquire(sessionFile);\n  const repository = new SqliteSessionRepo({\n    directory: path.dirname(sessionFile),\n    databasePath: sessionFile,\n    databaseFactory: createNodeSqliteFactory(),\n  });\n  try {\n    await historyLease.assertQuiescent();\n    const existing = fs.existsSync(sessionFile);\n    if (options.sessionPath && !existing) throw new Error(`SQLite session not found: ${sessionFile}`);\n    const metadata = existing ? await repository.list(undefined, context) : [];\n    if (existing && metadata.length !== 1) throw new Error('Expected exactly one session in the SQLite container');\n    if (existing && options.sessionId && metadata[0]!.id !== options.sessionId)\n      throw new Error('SQLite session id does not match the requested session');\n    const session = existing\n      ? await repository.open(metadata[0]!, context)\n      : await repository.create(\n          { id, ...(options.parentSessionId ? { parentSessionId: options.parentSessionId } : {}) },\n          context,\n        );\n    if (!existing) fs.chmodSync(sessionFile, 0o600);\n    return { session, sessionFile, repository, historyLease };\n  } catch (error) {\n    try {\n      await repository.close(context);\n    } finally {\n      await historyLease.release();\n    }\n    throw error;\n  }\n}\n"],"mappings":";;;;;;AAUA,eAAsB,yBACpB,SAIA,SAC+B;CAC/B,IAAI,CAAC,QAAQ,kBAAkB,MAAM,IAAI,MAAM,mDAAmD;CAClG,IAAI,CAAC,QAAQ,gBAAgB,CAAC,QAAQ,aAAa,MAAM,IAAI,MAAM,iDAAiD;CACpH,MAAM,KAAK,QAAQ,aAAa,WAAW;CAC3C,IAAI,CAAC,oBAAoB,KAAK,EAAE,GAAG,MAAM,IAAI,MAAM,2BAA2B;CAC9E,MAAM,cAAc,KAAK,QAAQ,QAAQ,eAAe,KAAK,KAAK,QAAQ,cAAe,GAAG,GAAG,QAAQ,CAAC;CACxG,MAAM,eAAe,MAAM,QAAQ,iBAAiB,QAAQ,WAAW;CACvE,MAAM,aAAa,IAAI,kBAAkB;EACvC,WAAW,KAAK,QAAQ,WAAW;EACnC,cAAc;EACd,iBAAiB,wBAAwB;CAC3C,CAAC;CACD,IAAI;EACF,MAAM,aAAa,gBAAgB;EACnC,MAAM,WAAW,GAAG,WAAW,WAAW;EAC1C,IAAI,QAAQ,eAAe,CAAC,UAAU,MAAM,IAAI,MAAM,6BAA6B,aAAa;EAChG,MAAM,WAAW,WAAW,MAAM,WAAW,KAAK,KAAA,GAAW,OAAO,IAAI,CAAC;EACzE,IAAI,YAAY,SAAS,WAAW,GAAG,MAAM,IAAI,MAAM,sDAAsD;EAC7G,IAAI,YAAY,QAAQ,aAAa,SAAS,EAAE,CAAE,OAAO,QAAQ,WAC/D,MAAM,IAAI,MAAM,wDAAwD;EAC1E,MAAM,UAAU,WACZ,MAAM,WAAW,KAAK,SAAS,IAAK,OAAO,IAC3C,MAAM,WAAW,OACf;GAAE;GAAI,GAAI,QAAQ,kBAAkB,EAAE,iBAAiB,QAAQ,gBAAgB,IAAI,CAAC;EAAG,GACvF,OACF;EACJ,IAAI,CAAC,UAAU,GAAG,UAAU,aAAa,GAAK;EAC9C,OAAO;GAAE;GAAS;GAAa;GAAY;EAAa;CAC1D,SAAS,OAAO;EACd,IAAI;GACF,MAAM,WAAW,MAAM,OAAO;EAChC,UAAU;GACR,MAAM,aAAa,QAAQ;EAC7B;EACA,MAAM;CACR;AACF"}

package/dist/src/constants/authorTools.cjs

@@ -0,0 +1,10 @@
+//#region src/constants/authorTools.ts
+const AUTHOR_DESCRIBE_TOOL_NAME = "describe_author_tools";
+const AUTHOR_USE_TOOL_NAME = "use_author_tools";
+const AUTHOR_FACADE_TOOL_NAMES = [AUTHOR_DESCRIBE_TOOL_NAME, AUTHOR_USE_TOOL_NAME];
+//#endregion
+exports.AUTHOR_DESCRIBE_TOOL_NAME = AUTHOR_DESCRIBE_TOOL_NAME;
+exports.AUTHOR_FACADE_TOOL_NAMES = AUTHOR_FACADE_TOOL_NAMES;
+exports.AUTHOR_USE_TOOL_NAME = AUTHOR_USE_TOOL_NAME;
+
+//# sourceMappingURL=authorTools.cjs.map

package/dist/src/constants/authorTools.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorTools.cjs","names":[],"sources":["../../../src/constants/authorTools.ts"],"sourcesContent":["export const AUTHOR_DESCRIBE_TOOL_NAME = 'describe_author_tools' as const;\nexport const AUTHOR_USE_TOOL_NAME = 'use_author_tools' as const;\nexport const AUTHOR_FACADE_TOOL_NAMES = [AUTHOR_DESCRIBE_TOOL_NAME, AUTHOR_USE_TOOL_NAME] as const;\n"],"mappings":";AAAA,MAAa,4BAA4B;AACzC,MAAa,uBAAuB;AACpC,MAAa,2BAA2B,CAAC,2BAA2B,oBAAoB"}

package/dist/src/constants/authorTools.d.mts

@@ -0,0 +1,6 @@
+//#region src/constants/authorTools.d.ts
+export declare const AUTHOR_DESCRIBE_TOOL_NAME: 'describe_author_tools';
+export declare const AUTHOR_USE_TOOL_NAME: 'use_author_tools';
+export declare const AUTHOR_FACADE_TOOL_NAMES: readonly ["describe_author_tools", "use_author_tools"];
+//#endregion
+//# sourceMappingURL=authorTools.d.mts.map

package/dist/src/constants/authorTools.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorTools.d.mts","names":[],"sources":["../../../src/constants/authorTools.ts"],"mappings":";qBAAa;qBACA;qBACA"}

package/dist/src/constants/authorTools.mjs

@@ -0,0 +1,8 @@
+//#region src/constants/authorTools.ts
+const AUTHOR_DESCRIBE_TOOL_NAME = "describe_author_tools";
+const AUTHOR_USE_TOOL_NAME = "use_author_tools";
+const AUTHOR_FACADE_TOOL_NAMES = [AUTHOR_DESCRIBE_TOOL_NAME, AUTHOR_USE_TOOL_NAME];
+//#endregion
+export { AUTHOR_DESCRIBE_TOOL_NAME, AUTHOR_FACADE_TOOL_NAMES, AUTHOR_USE_TOOL_NAME };
+
+//# sourceMappingURL=authorTools.mjs.map

package/dist/src/constants/authorTools.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorTools.mjs","names":[],"sources":["../../../src/constants/authorTools.ts"],"sourcesContent":["export const AUTHOR_DESCRIBE_TOOL_NAME = 'describe_author_tools' as const;\nexport const AUTHOR_USE_TOOL_NAME = 'use_author_tools' as const;\nexport const AUTHOR_FACADE_TOOL_NAMES = [AUTHOR_DESCRIBE_TOOL_NAME, AUTHOR_USE_TOOL_NAME] as const;\n"],"mappings":";AAAA,MAAa,4BAA4B;AACzC,MAAa,uBAAuB;AACpC,MAAa,2BAA2B,CAAC,2BAA2B,oBAAoB"}

package/dist/src/constants/contextApi.cjs

@@ -0,0 +1,28 @@
+//#region src/constants/contextApi.ts
+/**
+* What one entry in the composition actually is, for a reader who clicked it.
+*
+* The projection prices the composition and stops there: names, owners, and
+* integer counts, small enough to republish whenever the composition changes.
+* The prose and the schema behind a figure are an order of magnitude larger and
+* are wanted one row at a time, so they travel on request instead. This module
+* is the contract both ends of that request share, and it is deliberately free
+* of Node imports so a browser can hold it too.
+*/
+/** Where a host mounts this package's API; the segment after /api/plugins/. */
+const API_BASE_PATH = "context";
+/** The session a proxied request belongs to; the hub strips it before forwarding. */
+const SESSION_QUERY_PARAM = "session";
+const ITEM_ROUTE = "/item";
+const NAME_QUERY_PARAM = "name";
+const KIND_QUERY_PARAM = "kind";
+const CONTEXT_DETAIL_VERSION = 1;
+//#endregion
+exports.API_BASE_PATH = API_BASE_PATH;
+exports.CONTEXT_DETAIL_VERSION = CONTEXT_DETAIL_VERSION;
+exports.ITEM_ROUTE = ITEM_ROUTE;
+exports.KIND_QUERY_PARAM = KIND_QUERY_PARAM;
+exports.NAME_QUERY_PARAM = NAME_QUERY_PARAM;
+exports.SESSION_QUERY_PARAM = SESSION_QUERY_PARAM;
+
+//# sourceMappingURL=contextApi.cjs.map

package/dist/src/constants/contextApi.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextApi.cjs","names":[],"sources":["../../../src/constants/contextApi.ts"],"sourcesContent":["/**\n * What one entry in the composition actually is, for a reader who clicked it.\n *\n * The projection prices the composition and stops there: names, owners, and\n * integer counts, small enough to republish whenever the composition changes.\n * The prose and the schema behind a figure are an order of magnitude larger and\n * are wanted one row at a time, so they travel on request instead. This module\n * is the contract both ends of that request share, and it is deliberately free\n * of Node imports so a browser can hold it too.\n */\n\n/** Where a host mounts this package's API; the segment after /api/plugins/. */\nexport const API_BASE_PATH = 'context';\n\n/** The session a proxied request belongs to; the hub strips it before forwarding. */\nexport const SESSION_QUERY_PARAM = 'session';\n\nexport const ITEM_ROUTE = '/item';\n\nexport const NAME_QUERY_PARAM = 'name';\n\nexport const KIND_QUERY_PARAM = 'kind';\n\nexport const CONTEXT_DETAIL_VERSION = 1;\n"],"mappings":";;;;;;;;;;;;AAYA,MAAa,gBAAgB;;AAG7B,MAAa,sBAAsB;AAEnC,MAAa,aAAa;AAE1B,MAAa,mBAAmB;AAEhC,MAAa,mBAAmB;AAEhC,MAAa,yBAAyB"}

package/dist/src/constants/contextApi.d.mts

@@ -0,0 +1,21 @@
+//#region src/constants/contextApi.d.ts
+/**
+ * What one entry in the composition actually is, for a reader who clicked it.
+ *
+ * The projection prices the composition and stops there: names, owners, and
+ * integer counts, small enough to republish whenever the composition changes.
+ * The prose and the schema behind a figure are an order of magnitude larger and
+ * are wanted one row at a time, so they travel on request instead. This module
+ * is the contract both ends of that request share, and it is deliberately free
+ * of Node imports so a browser can hold it too.
+ */
+/** Where a host mounts this package's API; the segment after /api/plugins/. */
+export declare const API_BASE_PATH = "context";
+/** The session a proxied request belongs to; the hub strips it before forwarding. */
+export declare const SESSION_QUERY_PARAM = "session";
+export declare const ITEM_ROUTE = "/item";
+export declare const NAME_QUERY_PARAM = "name";
+export declare const KIND_QUERY_PARAM = "kind";
+export declare const CONTEXT_DETAIL_VERSION = 1;
+//#endregion
+//# sourceMappingURL=contextApi.d.mts.map

package/dist/src/constants/contextApi.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextApi.d.mts","names":[],"sources":["../../../src/constants/contextApi.ts"],"mappings":";;;;;;;;;;;;qBAYa;;qBAGA;qBAEA;qBAEA;qBAEA;qBAEA"}

package/dist/src/constants/contextApi.mjs

@@ -0,0 +1,23 @@
+//#region src/constants/contextApi.ts
+/**
+* What one entry in the composition actually is, for a reader who clicked it.
+*
+* The projection prices the composition and stops there: names, owners, and
+* integer counts, small enough to republish whenever the composition changes.
+* The prose and the schema behind a figure are an order of magnitude larger and
+* are wanted one row at a time, so they travel on request instead. This module
+* is the contract both ends of that request share, and it is deliberately free
+* of Node imports so a browser can hold it too.
+*/
+/** Where a host mounts this package's API; the segment after /api/plugins/. */
+const API_BASE_PATH = "context";
+/** The session a proxied request belongs to; the hub strips it before forwarding. */
+const SESSION_QUERY_PARAM = "session";
+const ITEM_ROUTE = "/item";
+const NAME_QUERY_PARAM = "name";
+const KIND_QUERY_PARAM = "kind";
+const CONTEXT_DETAIL_VERSION = 1;
+//#endregion
+export { API_BASE_PATH, CONTEXT_DETAIL_VERSION, ITEM_ROUTE, KIND_QUERY_PARAM, NAME_QUERY_PARAM, SESSION_QUERY_PARAM };
+
+//# sourceMappingURL=contextApi.mjs.map

package/dist/src/constants/contextApi.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextApi.mjs","names":[],"sources":["../../../src/constants/contextApi.ts"],"sourcesContent":["/**\n * What one entry in the composition actually is, for a reader who clicked it.\n *\n * The projection prices the composition and stops there: names, owners, and\n * integer counts, small enough to republish whenever the composition changes.\n * The prose and the schema behind a figure are an order of magnitude larger and\n * are wanted one row at a time, so they travel on request instead. This module\n * is the contract both ends of that request share, and it is deliberately free\n * of Node imports so a browser can hold it too.\n */\n\n/** Where a host mounts this package's API; the segment after /api/plugins/. */\nexport const API_BASE_PATH = 'context';\n\n/** The session a proxied request belongs to; the hub strips it before forwarding. */\nexport const SESSION_QUERY_PARAM = 'session';\n\nexport const ITEM_ROUTE = '/item';\n\nexport const NAME_QUERY_PARAM = 'name';\n\nexport const KIND_QUERY_PARAM = 'kind';\n\nexport const CONTEXT_DETAIL_VERSION = 1;\n"],"mappings":";;;;;;;;;;;;AAYA,MAAa,gBAAgB;;AAG7B,MAAa,sBAAsB;AAEnC,MAAa,aAAa;AAE1B,MAAa,mBAAmB;AAEhC,MAAa,mBAAmB;AAEhC,MAAa,yBAAyB"}

package/dist/src/constants/remote.cjs

@@ -0,0 +1,90 @@
+//#region src/constants/remote.ts
+/**
+* Wire vocabulary for remote access, shared by the hub routes and the cockpit.
+*
+* Remote access binds a second loopback listener that a tunnel points at, and
+* everything arriving there must prove it holds a paired session. The
+* discriminator is the listening socket, not a header: a tunnel connects from
+* 127.0.0.1 like every local client, and there is no header a remote caller
+* cannot forge.
+*/
+/** REST surface for the remote-access control plane; local callers only, except turn-off and revoke. */
+const REMOTE_API_ROUTE = "/api/remote";
+/** Dev proxy control plane: list targets anywhere, register or remove them only on the host. */
+const DEV_PROXY_TARGETS_ROUTE = `${REMOTE_API_ROUTE}/dev-proxy/targets`;
+/**
+* The path every proxied dev-server request lives under. Both slashes matter: the leading one
+* anchors it at the root, and the trailing one keeps `/devproxyevil` from matching.
+*/
+const DEV_PROXY_PREFIX = "/devproxy/";
+/** Direct endpoint that establishes one scoped end-to-end channel. */
+const REMOTE_CHANNEL_ROUTE = `${REMOTE_API_ROUTE}/channel`;
+/** The only authenticated HTTP gateway exposed on the tunnel listener. */
+const REMOTE_HTTP_ROUTE = `${REMOTE_API_ROUTE}/request`;
+/** Device-bound, sealed routes for ephemeral live Web Push registration. */
+const REMOTE_PUSH_ROUTE = `${REMOTE_API_ROUTE}/push`;
+`${REMOTE_PUSH_ROUTE}`;
+/** The pairing page a scanned QR opens. Unauthenticated on the tunnel listener. */
+const PAIRING_PAGE_ROUTE = "/pair";
+/** Where the pairing page posts the scanned code. Unauthenticated on the tunnel listener. */
+const PAIRING_CLAIM_ROUTE = "/api/remote/pair";
+/** Polled until the host approves or denies. Unauthenticated on the tunnel listener. */
+const PAIRING_STATUS_ROUTE = "/api/remote/pair/status";
+/** Query parameter naming the pairing request; a path parameter would force a wildcard into the allowlist. */
+const PAIRING_STATUS_QUERY = "request";
+/**
+* Session cookie base name. Rendered `__Host-doompi_device` by hono's `host`
+* prefix, which refuses the cookie unless it is Secure, Path=/, and
+* Domain-less, so a sibling subdomain can neither read nor overwrite it.
+*/
+const DEVICE_COOKIE = "doompi_device";
+/**
+* Passkey ceremonies exposed directly on the pairing surface.
+*
+* Sign-in is unauthenticated because it creates a session. Registration requires
+* the paired device cookie issued after host approval, but remains direct so the
+* self-contained pairing page can offer enrolment before loading the cockpit.
+*/
+const PASSKEY_AUTH_BEGIN_ROUTE = "/api/remote/passkeys/authenticate/begin";
+const PASSKEY_AUTH_FINISH_ROUTE = "/api/remote/passkeys/authenticate/finish";
+const PASSKEY_REGISTER_BEGIN_ROUTE = "/api/remote/passkeys/register/begin";
+const PASSKEY_REGISTER_FINISH_ROUTE = "/api/remote/passkeys/register/finish";
+/** Header carrying a step-up assertion for an action that needs more than a live session. */
+const STEP_UP_HEADER = "x-doompi-assertion";
+/** The vite dev server port; the origin allowlist and vite.config.ts share this. */
+const WEB_DEV_SERVER_PORT = 7434;
+/** How long a scanned pairing code stays claimable. */
+const PAIRING_CODE_TTL_MS = 12e4;
+/** How long the host has to approve or deny a claimed request. */
+const PAIRING_REQUEST_TTL_MS = 18e4;
+/** Cookie lifetime when session expiry is switched off; a session cookie can outlive the laptop. */
+const COOKIE_CEILING_SECONDS = 2592e3;
+/** Hub frame announcing remote-access state; sent to local and remote pages. */
+const REMOTE_STATE_TYPE = "remote_state";
+/** Hub frame announcing a device waiting for approval; sent to local pages only. */
+const REMOTE_PAIRING_REQUEST_TYPE = "remote_pairing_request";
+//#endregion
+exports.COOKIE_CEILING_SECONDS = COOKIE_CEILING_SECONDS;
+exports.DEVICE_COOKIE = DEVICE_COOKIE;
+exports.DEV_PROXY_PREFIX = DEV_PROXY_PREFIX;
+exports.DEV_PROXY_TARGETS_ROUTE = DEV_PROXY_TARGETS_ROUTE;
+exports.PAIRING_CLAIM_ROUTE = PAIRING_CLAIM_ROUTE;
+exports.PAIRING_CODE_TTL_MS = PAIRING_CODE_TTL_MS;
+exports.PAIRING_PAGE_ROUTE = PAIRING_PAGE_ROUTE;
+exports.PAIRING_REQUEST_TTL_MS = PAIRING_REQUEST_TTL_MS;
+exports.PAIRING_STATUS_QUERY = PAIRING_STATUS_QUERY;
+exports.PAIRING_STATUS_ROUTE = PAIRING_STATUS_ROUTE;
+exports.PASSKEY_AUTH_BEGIN_ROUTE = PASSKEY_AUTH_BEGIN_ROUTE;
+exports.PASSKEY_AUTH_FINISH_ROUTE = PASSKEY_AUTH_FINISH_ROUTE;
+exports.PASSKEY_REGISTER_BEGIN_ROUTE = PASSKEY_REGISTER_BEGIN_ROUTE;
+exports.PASSKEY_REGISTER_FINISH_ROUTE = PASSKEY_REGISTER_FINISH_ROUTE;
+exports.REMOTE_API_ROUTE = REMOTE_API_ROUTE;
+exports.REMOTE_CHANNEL_ROUTE = REMOTE_CHANNEL_ROUTE;
+exports.REMOTE_HTTP_ROUTE = REMOTE_HTTP_ROUTE;
+exports.REMOTE_PAIRING_REQUEST_TYPE = REMOTE_PAIRING_REQUEST_TYPE;
+exports.REMOTE_PUSH_ROUTE = REMOTE_PUSH_ROUTE;
+exports.REMOTE_STATE_TYPE = REMOTE_STATE_TYPE;
+exports.STEP_UP_HEADER = STEP_UP_HEADER;
+exports.WEB_DEV_SERVER_PORT = WEB_DEV_SERVER_PORT;
+
+//# sourceMappingURL=remote.cjs.map

package/dist/src/constants/remote.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.cjs","names":[],"sources":["../../../src/constants/remote.ts"],"sourcesContent":["/**\n * Wire vocabulary for remote access, shared by the hub routes and the cockpit.\n *\n * Remote access binds a second loopback listener that a tunnel points at, and\n * everything arriving there must prove it holds a paired session. The\n * discriminator is the listening socket, not a header: a tunnel connects from\n * 127.0.0.1 like every local client, and there is no header a remote caller\n * cannot forge.\n */\n\n/** REST surface for the remote-access control plane; local callers only, except turn-off and revoke. */\nexport const REMOTE_API_ROUTE = '/api/remote';\n\n/** Dev proxy control plane: list targets anywhere, register or remove them only on the host. */\nexport const DEV_PROXY_TARGETS_ROUTE = `${REMOTE_API_ROUTE}/dev-proxy/targets`;\n\n/**\n * The path every proxied dev-server request lives under. Both slashes matter: the leading one\n * anchors it at the root, and the trailing one keeps `/devproxyevil` from matching.\n */\nexport const DEV_PROXY_PREFIX = '/devproxy/';\n\n/** Direct endpoint that establishes one scoped end-to-end channel. */\nexport const REMOTE_CHANNEL_ROUTE = `${REMOTE_API_ROUTE}/channel`;\n\n/** The only authenticated HTTP gateway exposed on the tunnel listener. */\nexport const REMOTE_HTTP_ROUTE = `${REMOTE_API_ROUTE}/request`;\n\n/** Device-bound, sealed routes for ephemeral live Web Push registration. */\nexport const REMOTE_PUSH_ROUTE = `${REMOTE_API_ROUTE}/push`;\n\nexport const REMOTE_PUSH_KEY_ROUTE = `${REMOTE_PUSH_ROUTE}/key`;\n\nexport const PROTOCOL_SOCKET_ROUTE = '/api/ws';\n\n/** The pairing page a scanned QR opens. Unauthenticated on the tunnel listener. */\nexport const PAIRING_PAGE_ROUTE = '/pair';\n\n/** Where the pairing page posts the scanned code. Unauthenticated on the tunnel listener. */\nexport const PAIRING_CLAIM_ROUTE = '/api/remote/pair';\n\n/** Polled until the host approves or denies. Unauthenticated on the tunnel listener. */\nexport const PAIRING_STATUS_ROUTE = '/api/remote/pair/status';\n\n/** Query parameter naming the pairing request; a path parameter would force a wildcard into the allowlist. */\nexport const PAIRING_STATUS_QUERY = 'request';\n\n/** URL-fragment fields authenticated by seeing the host's physical QR. */\nexport const BUNDLE_SIGNING_KEY_PARAM = 's';\n\nexport const BUNDLE_MINIMUM_REVISION_PARAM = 'r';\n\n/**\n * Session cookie base name. Rendered `__Host-doompi_device` by hono's `host`\n * prefix, which refuses the cookie unless it is Secure, Path=/, and\n * Domain-less, so a sibling subdomain can neither read nor overwrite it.\n */\nexport const DEVICE_COOKIE = 'doompi_device';\n\n/**\n * Passkey ceremonies exposed directly on the pairing surface.\n *\n * Sign-in is unauthenticated because it creates a session. Registration requires\n * the paired device cookie issued after host approval, but remains direct so the\n * self-contained pairing page can offer enrolment before loading the cockpit.\n */\nexport const PASSKEY_AUTH_BEGIN_ROUTE = '/api/remote/passkeys/authenticate/begin';\n\nexport const PASSKEY_AUTH_FINISH_ROUTE = '/api/remote/passkeys/authenticate/finish';\n\nexport const PASSKEY_REGISTER_BEGIN_ROUTE = '/api/remote/passkeys/register/begin';\n\nexport const PASSKEY_REGISTER_FINISH_ROUTE = '/api/remote/passkeys/register/finish';\n\n/** Header carrying a step-up assertion for an action that needs more than a live session. */\nexport const STEP_UP_HEADER = 'x-doompi-assertion';\n\n/** The vite dev server port; the origin allowlist and vite.config.ts share this. */\nexport const WEB_DEV_SERVER_PORT = 7434;\n\n/** How long a scanned pairing code stays claimable. */\nexport const PAIRING_CODE_TTL_MS = 120_000;\n\n/** How long the host has to approve or deny a claimed request. */\nexport const PAIRING_REQUEST_TTL_MS = 180_000;\n\n/** Cookie lifetime when session expiry is switched off; a session cookie can outlive the laptop. */\nexport const COOKIE_CEILING_SECONDS = 2_592_000;\n\n/** Hub frame announcing remote-access state; sent to local and remote pages. */\nexport const REMOTE_STATE_TYPE = 'remote_state';\n\n/** Hub frame announcing a device waiting for approval; sent to local pages only. */\nexport const REMOTE_PAIRING_REQUEST_TYPE = 'remote_pairing_request';\n"],"mappings":";;;;;;;;;;;AAWA,MAAa,mBAAmB;;AAGhC,MAAa,0BAA0B,GAAG,iBAAiB;;;;;AAM3D,MAAa,mBAAmB;;AAGhC,MAAa,uBAAuB,GAAG,iBAAiB;;AAGxD,MAAa,oBAAoB,GAAG,iBAAiB;;AAGrD,MAAa,oBAAoB,GAAG,iBAAiB;AAEhB,GAAG,kBAAH;;AAKrC,MAAa,qBAAqB;;AAGlC,MAAa,sBAAsB;;AAGnC,MAAa,uBAAuB;;AAGpC,MAAa,uBAAuB;;;;;;AAYpC,MAAa,gBAAgB;;;;;;;;AAS7B,MAAa,2BAA2B;AAExC,MAAa,4BAA4B;AAEzC,MAAa,+BAA+B;AAE5C,MAAa,gCAAgC;;AAG7C,MAAa,iBAAiB;;AAG9B,MAAa,sBAAsB;;AAGnC,MAAa,sBAAsB;;AAGnC,MAAa,yBAAyB;;AAGtC,MAAa,yBAAyB;;AAGtC,MAAa,oBAAoB;;AAGjC,MAAa,8BAA8B"}