@askdkc/kiokuko 0.1.0

package/dist/ledger/query.js

@@ -0,0 +1,321 @@
+import { KiokukoError } from '../errors.js';
+import { COVERAGE_LEVELS, LEDGER_EVENT_TYPES, RUN_STATUSES, } from './types.js';
+const DEFAULT_LIMIT = 100;
+const MAX_LIMIT = 100;
+const RUN_CURSOR_VERSION = 1;
+function validation(message) {
+    throw new KiokukoError('VALIDATION_ERROR', message);
+}
+function notFound() {
+    throw new KiokukoError('NOT_FOUND', 'Ledger run not found');
+}
+function integrity() {
+    throw new KiokukoError('INTEGRITY_ERROR', 'Stored ledger JSON is invalid');
+}
+function isPlainObject(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function inputObject(value, label) {
+    if (!isPlainObject(value))
+        validation(`${label} must be an object`);
+    return value;
+}
+function rejectUnknownFields(value, fields, label) {
+    const allowed = new Set(fields);
+    if (Object.keys(value).some((field) => !allowed.has(field)))
+        validation(`Unknown ${label} field`);
+}
+function requiredString(value, label) {
+    if (typeof value !== 'string' || value.trim().length === 0 || value.includes('\u0000'))
+        validation(`${label} must be a non-empty string`);
+    return value;
+}
+function optionalString(value, label) {
+    if (value === undefined)
+        return undefined;
+    return requiredString(value, label);
+}
+function parseLimit(value) {
+    if (value === undefined)
+        return DEFAULT_LIMIT;
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 1 || value > MAX_LIMIT) {
+        validation('limit must be an integer between 1 and 100');
+    }
+    return value;
+}
+function encodeRunCursor(cursor) {
+    return Buffer.from(JSON.stringify(cursor), 'utf8').toString('base64url');
+}
+function parseRunCursor(value) {
+    if (value === undefined)
+        return undefined;
+    if (!/^[A-Za-z0-9_-]+$/.test(value))
+        validation('Invalid run cursor');
+    let parsed;
+    try {
+        const decoded = Buffer.from(value, 'base64url');
+        if (decoded.toString('base64url') !== value)
+            validation('Invalid run cursor');
+        parsed = JSON.parse(decoded.toString('utf8'));
+    }
+    catch (error) {
+        if (error instanceof KiokukoError)
+            throw error;
+        if (error instanceof SyntaxError)
+            validation('Invalid run cursor');
+        throw error;
+    }
+    if (!isPlainObject(parsed) || Object.keys(parsed).length !== 3 || !Object.keys(parsed).every((key) => ['version', 'createdAt', 'runId'].includes(key))) {
+        validation('Invalid run cursor');
+    }
+    if (parsed.version !== RUN_CURSOR_VERSION)
+        validation('Unsupported run cursor version');
+    if (typeof parsed.createdAt !== 'string' || !isUtcTimestamp(parsed.createdAt) || typeof parsed.runId !== 'string' || parsed.runId.length === 0) {
+        validation('Invalid run cursor');
+    }
+    return { version: RUN_CURSOR_VERSION, createdAt: parsed.createdAt, runId: parsed.runId };
+}
+function isUtcTimestamp(value) {
+    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value))
+        return false;
+    const parsed = Date.parse(value);
+    return Number.isFinite(parsed) && new Date(parsed).toISOString() === value;
+}
+function parseStatus(value) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'string' || !RUN_STATUSES.includes(value))
+        validation('status has an invalid enum value');
+    return value;
+}
+function parseAfter(value) {
+    if (value === undefined)
+        return 0;
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0)
+        validation('after must be a non-negative safe integer');
+    return value;
+}
+function parseEventType(value) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'string' || !LEDGER_EVENT_TYPES.includes(value))
+        validation('type has an invalid event type');
+    return value;
+}
+const REDACTION_KINDS = [
+    'sensitive_key', 'secret_pattern', 'url', 'home_path', 'preview_truncated',
+    'environment_value', 'hidden_reasoning',
+];
+function parseRedactions(value) {
+    const parsed = parseStoredJson(value);
+    if (!Array.isArray(parsed))
+        integrity();
+    const redactions = [];
+    for (const item of parsed) {
+        if (!isPlainObject(item) || typeof item.path !== 'string' || typeof item.kind !== 'string' || !REDACTION_KINDS.includes(item.kind))
+            integrity();
+        redactions.push({ path: item.path, kind: item.kind });
+    }
+    return redactions;
+}
+function rowToEvent(row) {
+    return {
+        eventId: row.event_id,
+        runId: row.run_id,
+        sequence: row.sequence,
+        sourceEventId: row.source_event_id,
+        sourceSequence: row.source_sequence,
+        eventType: row.event_type,
+        sourceType: row.source_type,
+        actor: row.actor,
+        outcome: row.outcome,
+        occurredAt: row.occurred_at,
+        ingestedAt: row.ingested_at,
+        payload: parseStoredJson(row.payload_json),
+        redaction: parseRedactions(row.redaction_json),
+        previousHash: row.previous_hash,
+        eventHash: row.event_hash,
+        untrusted: true,
+    };
+}
+function parseStoredJson(value) {
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch (error) {
+        if (error instanceof SyntaxError)
+            integrity();
+        throw error;
+    }
+    if (!isJsonValue(parsed))
+        integrity();
+    return parsed;
+}
+function isJsonValue(value) {
+    if (value === null || typeof value === 'boolean' || typeof value === 'string')
+        return true;
+    if (typeof value === 'number')
+        return Number.isFinite(value);
+    if (Array.isArray(value))
+        return value.every((item) => isJsonValue(item));
+    if (isPlainObject(value))
+        return Object.values(value).every((item) => isJsonValue(item));
+    return false;
+}
+function parseJsonObject(value) {
+    const parsed = parseStoredJson(value);
+    if (!isPlainObject(parsed))
+        integrity();
+    return parsed;
+}
+function parseCoverage(value) {
+    const parsed = parseJsonObject(value);
+    const fields = ['run', 'tool', 'command', 'file', 'approval'];
+    const levels = fields.map((field) => parsed[field]);
+    if (levels.some((level) => typeof level !== 'string' || !COVERAGE_LEVELS.includes(level)))
+        integrity();
+    return {
+        run: parsed.run,
+        tool: parsed.tool,
+        command: parsed.command,
+        file: parsed.file,
+        approval: parsed.approval,
+    };
+}
+function rowToRun(row) {
+    return {
+        runId: row.run_id,
+        workspace: row.workspace,
+        client: {
+            kind: row.client_kind,
+            ...(row.client_version === null ? {} : { version: row.client_version }),
+            ...(row.source_session_id === null ? {} : { sessionId: row.source_session_id }),
+        },
+        protocolVersion: row.protocol_version,
+        captureProfile: row.capture_profile,
+        coverage: parseCoverage(row.coverage_json),
+        status: row.status,
+        title: row.title,
+        taskHash: row.task_hash,
+        metadata: parseJsonObject(row.metadata_json),
+        lastSequence: row.last_sequence,
+        lastSourceSequence: row.last_source_sequence,
+        startedAt: row.started_at,
+        endedAt: row.ended_at,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        untrusted: true,
+    };
+}
+function parseListRunsInput(value) {
+    const input = inputObject(value, 'run list input');
+    rejectUnknownFields(input, ['workspace', 'client', 'status', 'cursor', 'limit'], 'run list input');
+    const workspace = requiredString(input.workspace, 'workspace');
+    const client = optionalString(input.client, 'client');
+    const status = parseStatus(input.status);
+    const cursor = parseRunCursor(optionalString(input.cursor, 'cursor'));
+    return {
+        workspace,
+        limit: parseLimit(input.limit),
+        ...(client === undefined ? {} : { client }),
+        ...(status === undefined ? {} : { status }),
+        ...(cursor === undefined ? {} : { cursor }),
+    };
+}
+function parseReadRunInput(value) {
+    const input = inputObject(value, 'run read input');
+    rejectUnknownFields(input, ['workspace', 'runId'], 'run read input');
+    return {
+        workspace: requiredString(input.workspace, 'workspace'),
+        runId: requiredString(input.runId, 'runId'),
+    };
+}
+function parseListEventsInput(value) {
+    const input = inputObject(value, 'event list input');
+    rejectUnknownFields(input, ['workspace', 'runId', 'after', 'type', 'limit'], 'event list input');
+    const type = parseEventType(input.type);
+    return {
+        workspace: requiredString(input.workspace, 'workspace'),
+        runId: requiredString(input.runId, 'runId'),
+        after: parseAfter(input.after),
+        limit: parseLimit(input.limit),
+        ...(type === undefined ? {} : { type }),
+    };
+}
+export function listLedgerEvents(database, input) {
+    const parsed = parseListEventsInput(input);
+    const run = database.prepare('SELECT run_id FROM ledger_runs WHERE run_id = ? AND workspace = ?').get(parsed.runId, parsed.workspace);
+    if (!run)
+        notFound();
+    const clauses = ['run_id = ?', 'sequence > ?'];
+    const parameters = [parsed.runId, parsed.after];
+    if (parsed.type !== undefined) {
+        clauses.push('event_type = ?');
+        parameters.push(parsed.type);
+    }
+    parameters.push(parsed.limit + 1);
+    const rows = database.prepare(`
+    SELECT event_id, run_id, sequence, source_event_id, source_sequence, event_type,
+           source_type, actor, outcome, occurred_at, ingested_at, payload_json,
+           redaction_json, previous_hash, event_hash
+      FROM ledger_events
+     WHERE ${clauses.join(' AND ')}
+     ORDER BY sequence ASC
+     LIMIT ?
+  `).all(...parameters);
+    const pageRows = rows.slice(0, parsed.limit);
+    const nextCursor = rows.length > parsed.limit ? pageRows.at(-1)?.sequence ?? null : null;
+    return { items: pageRows.map(rowToEvent), nextCursor };
+}
+export function readLedgerRun(database, input) {
+    const parsed = parseReadRunInput(input);
+    const row = database.prepare(`
+    SELECT run_id, workspace, client_kind, client_version, source_session_id,
+           protocol_version, capture_profile, coverage_json, status, title, task_hash,
+           metadata_json, last_sequence, last_source_sequence, started_at, ended_at,
+           created_at, updated_at
+      FROM ledger_runs
+     WHERE run_id = ? AND workspace = ?
+  `).get(parsed.runId, parsed.workspace);
+    if (!row)
+        notFound();
+    return rowToRun(row);
+}
+export function listLedgerRuns(database, input) {
+    const parsed = parseListRunsInput(input);
+    const clauses = ['workspace = ?'];
+    const parameters = [parsed.workspace];
+    if (parsed.client !== undefined) {
+        clauses.push('client_kind = ?');
+        parameters.push(parsed.client);
+    }
+    if (parsed.status !== undefined) {
+        clauses.push('status = ?');
+        parameters.push(parsed.status);
+    }
+    if (parsed.cursor !== undefined) {
+        clauses.push('(created_at < ? OR (created_at = ? AND run_id > ?))');
+        parameters.push(parsed.cursor.createdAt, parsed.cursor.createdAt, parsed.cursor.runId);
+    }
+    parameters.push(parsed.limit + 1);
+    const rows = database.prepare(`
+    SELECT run_id, workspace, client_kind, client_version, source_session_id,
+           protocol_version, capture_profile, coverage_json, status, title, task_hash,
+           metadata_json, last_sequence, last_source_sequence, started_at, ended_at,
+           created_at, updated_at
+      FROM ledger_runs
+     WHERE ${clauses.join(' AND ')}
+     ORDER BY created_at DESC, run_id ASC
+     LIMIT ?
+  `).all(...parameters);
+    const pageRows = rows.slice(0, parsed.limit);
+    const nextCursor = rows.length > parsed.limit
+        ? encodeRunCursor({ version: RUN_CURSOR_VERSION, createdAt: pageRows.at(-1)?.created_at ?? '', runId: pageRows.at(-1)?.run_id ?? '' })
+        : null;
+    return { items: pageRows.map(rowToRun), nextCursor };
+}
+//# sourceMappingURL=query.js.map

package/dist/ledger/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../src/ledger/query.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,YAAY,GAQb,MAAM,YAAY,CAAC;AAEpB,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAuG7B,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA8B,EAAE,MAAyB,EAAE,KAAa;IACnG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,UAAU,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,UAAU,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IAC1I,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;QAChG,UAAU,CAAC,4CAA4C,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,MAAiB;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACtE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK;YAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAC9E,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,IAAI,KAAK,YAAY,WAAW;YAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACvJ,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,kBAAkB;QAAE,UAAU,CAAC,gCAAgC,CAAC,CAAC;IACxF,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/I,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AAC3F,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAkB,CAAC;QAAE,UAAU,CAAC,kCAAkC,CAAC,CAAC;IAC5H,OAAO,KAAkB,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,UAAU,CAAC,2CAA2C,CAAC,CAAC;IACpI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAwB,CAAC;QAAE,UAAU,CAAC,gCAAgC,CAAC,CAAC;IACtI,OAAO,KAAwB,CAAC;AAClC,CAAC;AAED,MAAM,eAAe,GAAiC;IACpD,eAAe,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,mBAAmB;IAC1E,mBAAmB,EAAE,kBAAkB;CACxC,CAAC;AAEF,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,SAAS,EAAE,CAAC;IACxC,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAyB,CAAC;YAAE,SAAS,EAAE,CAAC;QACrK,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAyB,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,GAAa;IAC/B,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC;QAC1C,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC;QAC9C,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,SAAS,EAAE,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAAE,SAAS,EAAE,CAAC;IACtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,SAAS,EAAE,CAAC;IACxC,OAAO,MAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAwB,CAAC,CAAC;QAAE,SAAS,EAAE,CAAC;IAC1H,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAsB;QAClC,IAAI,EAAE,MAAM,CAAC,IAAwB;QACrC,OAAO,EAAE,MAAM,CAAC,OAA8B;QAC9C,IAAI,EAAE,MAAM,CAAC,IAAwB;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAgC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE;YACN,IAAI,EAAE,GAAG,CAAC,WAAW;YACrB,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC;YACvE,GAAG,CAAC,GAAG,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC;SAChF;QACD,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC;QAC1C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,QAAQ,EAAE,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC;QAC5C,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;QAC5C,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAUD,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnD,mBAAmB,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnG,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtE,OAAO;QACL,SAAS;QACT,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnD,mBAAmB,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACrE,OAAO;QACL,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;QACvD,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACrD,mBAAmB,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO;QACL,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;QACvD,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;QAC3C,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAwB,EAAE,KAAc;IACvE,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC,GAAG,CAAqB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1J,IAAI,CAAC,GAAG;QAAE,QAAQ,EAAE,CAAC;IAErB,MAAM,OAAO,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,UAAU,GAA2B,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;aAKnB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;;;GAG/B,CAAC,CAAC,GAAG,CAAW,GAAG,UAAU,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAwB,EAAE,KAAc;IACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;;;GAO5B,CAAC,CAAC,GAAG,CAAS,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,GAAG;QAAE,QAAQ,EAAE,CAAC;IACrB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAwB,EAAE,KAAc;IACrE,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;IAClC,MAAM,UAAU,GAA2B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACpE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;;aAMnB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;;;GAG/B,CAAC,CAAC,GAAG,CAAS,GAAG,UAAU,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK;QAC3C,CAAC,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QACtI,CAAC,CAAC,IAAI,CAAC;IACT,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;AACvD,CAAC"}

package/dist/ledger/redaction.d.ts

@@ -0,0 +1,8 @@
+import { type AnswerInput, type LedgerEventInput, type ProfileHints, type SanitizationOptions, type Sanitized, type TaskInput } from './types.js';
+import type { JsonValue } from './types.js';
+export declare function sanitizeEvent(value: unknown, options?: SanitizationOptions): Sanitized<LedgerEventInput>;
+export declare function sanitizeTask(value: unknown, options?: SanitizationOptions): Sanitized<TaskInput>;
+export declare function sanitizeProfileHints(value: unknown, options?: SanitizationOptions): Sanitized<ProfileHints>;
+export declare function sanitizeAnswer(value: unknown, options?: SanitizationOptions): Sanitized<AnswerInput>;
+export declare function sanitizeRunMetadata(value: JsonValue, options?: SanitizationOptions): Sanitized<JsonValue>;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/ledger/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/ledger/redaction.ts"],"names":[],"mappings":"AAEA,OAAO,EAA2B,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAE,KAAK,mBAAmB,EAAE,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAE3K,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAkB5C,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,mBAAwB,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAM5G;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,mBAAwB,GAAG,SAAS,CAAC,SAAS,CAAC,CAEpG;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,mBAAwB,GAAG,SAAS,CAAC,YAAY,CAAC,CAE/G;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,mBAAwB,GAAG,SAAS,CAAC,WAAW,CAAC,CAExG;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,GAAE,mBAAwB,GAAG,SAAS,CAAC,SAAS,CAAC,CAI7G"}

package/dist/ledger/redaction.js

@@ -0,0 +1,40 @@
+import { canonicalJson } from './hash.js';
+import { validateAnswerInput, validateEventInput, validateProfileHints, validateTaskInput } from './validate.js';
+import { MAX_EVENT_PAYLOAD_BYTES } from './types.js';
+import { sanitizeJson } from '../security/sanitize.js';
+import { KiokukoError } from '../errors.js';
+function snapshotTooLarge(label) {
+    throw new KiokukoError('VALIDATION_ERROR', `sanitized ${label} exceeds ${MAX_EVENT_PAYLOAD_BYTES} bytes`);
+}
+function assertBounded(value, label) {
+    if (Buffer.byteLength(canonicalJson(value), 'utf8') > MAX_EVENT_PAYLOAD_BYTES)
+        snapshotTooLarge(label);
+}
+function withTypedValue(value, options, validator, label) {
+    const validated = validator(value);
+    const result = sanitizeJson(validated, options);
+    assertBounded(result.value, label);
+    return { value: result.value, redactions: result.redactions, truncated: result.truncated };
+}
+export function sanitizeEvent(value, options = {}) {
+    const validated = validateEventInput(value);
+    const result = sanitizeJson(validated, options);
+    const payload = result.value.payload;
+    assertBounded(payload, 'event payload');
+    return { value: result.value, redactions: result.redactions, truncated: result.truncated };
+}
+export function sanitizeTask(value, options = {}) {
+    return withTypedValue(value, options, validateTaskInput, 'task snapshot');
+}
+export function sanitizeProfileHints(value, options = {}) {
+    return withTypedValue(value, options, validateProfileHints, 'profile hints snapshot');
+}
+export function sanitizeAnswer(value, options = {}) {
+    return withTypedValue(value, options, validateAnswerInput, 'answer snapshot');
+}
+export function sanitizeRunMetadata(value, options = {}) {
+    const result = sanitizeJson(value, options);
+    assertBounded(result.value, 'run metadata');
+    return { value: result.value, redactions: result.redactions, truncated: result.truncated };
+}
+//# sourceMappingURL=redaction.js.map

package/dist/ledger/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/ledger/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjH,OAAO,EAAE,uBAAuB,EAAwH,MAAM,YAAY,CAAC;AAC3K,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,aAAa,KAAK,YAAY,uBAAuB,QAAQ,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,GAAG,uBAAuB;QAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,cAAc,CAAI,KAAc,EAAE,OAA4B,EAAE,SAAgC,EAAE,KAAa;IACtH,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChD,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAqB,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,UAA+B,EAAE;IAC7E,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAI,MAAM,CAAC,KAAgC,CAAC,OAAO,CAAC;IACjE,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACxC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAoC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AAC5H,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,UAA+B,EAAE;IAC5E,OAAO,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,UAA+B,EAAE;IACpF,OAAO,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,UAA+B,EAAE;IAC9E,OAAO,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAgB,EAAE,UAA+B,EAAE;IACrF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5C,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AAC7F,CAAC"}

package/dist/ledger/store.d.ts

@@ -0,0 +1,46 @@
+import type { SqliteDatabase, SqliteRow } from '../db/adapter.js';
+import { type AppendAck, type LedgerStoreOptions, type RunRecord, type RunStatus } from './types.js';
+interface EventRow extends SqliteRow {
+    event_id: string;
+    run_id: string;
+    sequence: number;
+    source_event_id: string | null;
+    source_sequence: number | null;
+    event_type: string;
+    source_type: string | null;
+    actor: string;
+    outcome: string | null;
+    occurred_at: string | null;
+    ingested_at: string;
+    payload_json: string;
+    redaction_json: string;
+    previous_hash: string;
+    event_hash: string;
+}
+export declare class LedgerStore {
+    private readonly database;
+    private readonly options;
+    constructor(database: SqliteDatabase, options?: LedgerStoreOptions);
+    /** Run a standalone operation in the store's top-level transaction. */
+    withTransaction<T>(operation: () => T): T;
+    createRun(input: unknown): RunRecord;
+    /** Caller-owned transaction primitive; it deliberately does not begin or commit a transaction. */
+    createRunInTransaction(input: unknown, now?: string): RunRecord;
+    readRun(runId: string, workspace?: string): RunRecord | undefined;
+    getRunStatus(runId: string, workspace?: string): RunStatus | undefined;
+    updateRunStatus(runId: string, status: RunStatus, endedAt?: string): RunRecord;
+    updateRunStatusInTransaction(runId: string, status: RunStatus, endedAt?: string): RunRecord;
+    appendBatch(runId: string, input: unknown): AppendAck;
+    /** Caller-owned transaction primitive; a savepoint isolates this batch without committing or rolling back the outer transaction. */
+    appendBatchInTransaction(runId: string, input: unknown): AppendAck;
+    readEvents(runId: string): EventRow[];
+    verifyChain(runId: string): boolean;
+    private now;
+    private prepareRun;
+    private insertPreparedRun;
+    private appendPreparedBatchInTransaction;
+    private ackFromRows;
+}
+export declare function withLedgerTransaction<T>(database: SqliteDatabase, operation: () => T): T;
+export {};
+//# sourceMappingURL=store.d.ts.map

package/dist/ledger/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/ledger/store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAOlE,OAAO,EAEL,KAAK,SAAS,EAKd,KAAK,kBAAkB,EAEvB,KAAK,SAAS,EACd,KAAK,SAAS,EAEf,MAAM,YAAY,CAAC;AAuBpB,UAAU,QAAS,SAAQ,SAAS;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAqHD,qBAAa,WAAW;IAGV,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAFrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAEhB,QAAQ,EAAE,cAAc,EAAE,OAAO,GAAE,kBAAuB;IAIvF,uEAAuE;IACvE,eAAe,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;IAIzC,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS;IAKpC,kGAAkG;IAClG,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,SAAa,GAAG,SAAS;IAKnE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAOjE,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAItE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS;IAM9E,4BAA4B,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,SAAa,GAAG,SAAS;IAiB/F,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS;IAKrD,oIAAoI;IACpI,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS;IAKlE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,EAAE;IAIrC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IA4BnC,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,iBAAiB;IAiCzB,OAAO,CAAC,gCAAgC;IAyFxC,OAAO,CAAC,WAAW;CAUpB;AAMD,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAExF"}