@benz-ai-x/dsh-24pa 0.2.1-alpha.2.1 → 0.2.1-alpha.2.2

package/README.md

@@ -45,11 +45,9 @@ Pick the release matching your dsh runtime, then restart the Profile. The reconc
 # dsh 0.2.1-alpha.1 host (schedule service built in)
 dsh plugin --profile <name> add @benz-ai-x/dsh-24pa@0.2.1-alpha.1.6
 
-# dsh 0.2.1-alpha.2 host — the peer range already includes alpha.2; the first
-# alpha.2-baseline release (0.2.1-alpha.2.1) ships the preset synced to
-# standard.patch.yml of that host, so until it is published an alpha.2 host
-# cannot install the alpha.1 line (the peer check rejects cross-baseline installs)
-# dsh plugin --profile <name> add @benz-ai-x/dsh-24pa@0.2.1-alpha.2.1
+# dsh 0.2.1-alpha.2 host (preset synced to standard.patch.yml of that baseline;
+# the peer check rejects cross-baseline installs, so alpha.2 hosts need this line)
+dsh plugin --profile <name> add @benz-ai-x/dsh-24pa@0.2.1-alpha.2.2
 
 # dsh 0.2.0-rc.2 host — line frozen at 0.2.0-rc.2.3, no further releases (also add the two schedule companions for digests)
 dsh plugin --profile <name> add @benz-ai-x/dsh-24pa@0.2.0-rc.2.3
@@ -71,7 +69,7 @@ Secrets live only in the server environment; the workspace `AGENTS.md` holds one
 | `PA24_WORKSPACE` | Absolute workspace directory bound on first start (or pick one in the panel / dsh settings) |
 | `PA24_FEISHU_APP_ID` / `PA24_FEISHU_APP_SECRET` | Feishu custom-app credentials (feishu mode) |
 
-`AGENTS.md` fields: `mode` (demo/feishu), `larkProfile`, `ownerOpenId`, `folderToken`, `tasklistId`, `calendarId`, `calendarChannel`/`todoChannel`/`notifyChannel` (feishu|wecom, default feishu — WeCom as the second operation channel for calendar/todo plus one-way reminder push, never inbound), `timeZone`, `appIdEnv`/`appSecretEnv`/`pgDsnEnv`, `maxWorkers`, `enabledWorkers`, `workerModels`, `extraLocalTools` (closed enum). For Feishu access setup, tell the local session「帮我接通飞书」or call `pa24_connection` with `action=guide`; the bundled `feishu-setup.md` is the single authority.
+`AGENTS.md` fields: `mode` (demo/feishu), `storage` (sqlite/postgres, default sqlite — the ledger is the workspace `data/pa24.db` file; SQLite needs host Node ≥ 23.4; `postgres` requires `pgDsnEnv` and an external database), `larkProfile`, `ownerOpenId`, `folderToken`, `tasklistId`, `calendarId`, `calendarChannel`/`todoChannel`/`notifyChannel` (feishu|wecom, default feishu — WeCom as the second operation channel for calendar/todo plus one-way reminder push, never inbound), `timeZone`, `appIdEnv`/`appSecretEnv`/`pgDsnEnv`, `maxWorkers`, `enabledWorkers`, `workerModels`, `extraLocalTools` (closed enum). For Feishu access setup, tell the local session「帮我接通飞书」or call `pa24_connection` with `action=guide`; the bundled `feishu-setup.md` is the single authority.
 
 ### Exposing the tool
 

package/README.zh.md

@@ -45,10 +45,9 @@ kind: "package-bundle"
 # dsh 0.2.1-alpha.1 宿主（自带 schedule 服务）
 dsh plugin --profile <name> add @benz-ai-x/dsh-24pa@0.2.1-alpha.1.6
 
-# dsh 0.2.1-alpha.2 宿主——peer 范围已包含 alpha.2；首个 alpha.2 基线版本
-# （0.2.1-alpha.2.1）随该宿主同步后的预设发布，发布前 alpha.2 宿主无法安装
-# alpha.1 线（peer 检查拒绝跨基线安装）
-# dsh plugin --profile <name> add @benz-ai-x/dsh-24pa@0.2.1-alpha.2.1
+# dsh 0.2.1-alpha.2 宿主（预设已同步该基线的 standard.patch.yml；peer 检查拒绝
+# 跨基线安装，alpha.2 宿主须装此线）
+dsh plugin --profile <name> add @benz-ai-x/dsh-24pa@0.2.1-alpha.2.2
 
 # dsh 0.2.0-rc.2 宿主——该线已冻结于 0.2.0-rc.2.3、不再迭代（简报功能另需两个 schedule 伴随件）
 dsh plugin --profile <name> add @benz-ai-x/dsh-24pa@0.2.0-rc.2.3
@@ -70,7 +69,7 @@ dsh plugin --profile <name> remove @benz-ai-x/dsh-24pa
 | `PA24_WORKSPACE` | 首次启动绑定的绝对工作区目录（也可在面板或设置里选择） |
 | `PA24_FEISHU_APP_ID` / `PA24_FEISHU_APP_SECRET` | 飞书自建应用凭据（feishu 模式） |
 
-`AGENTS.md` 字段：`mode`（demo/feishu）、`larkProfile`、`ownerOpenId`、`folderToken`、`tasklistId`、`calendarId`、`calendarChannel`/`todoChannel`/`notifyChannel`（feishu|wecom，默认 feishu——企微作日程/待办第二操作渠道＋提醒单向推送，永不收信）、`timeZone`、`appIdEnv`/`appSecretEnv`/`pgDsnEnv`、`maxWorkers`、`enabledWorkers`、`workerModels`、`extraLocalTools`（封闭枚举）。配置飞书接入时，对本地会话说「帮我接通飞书」，或调用 `pa24_connection` 的 `action=guide`；内置 `feishu-setup.md` 是唯一权威。
+`AGENTS.md` 字段：`mode`（demo/feishu）、`storage`（sqlite/postgres，默认 sqlite——账本默认是工作区 `data/pa24.db`，SQLite 要求宿主 Node ≥ 23.4；显式 `postgres` 时才需要 `pgDsnEnv` 与外部数据库）、`larkProfile`、`ownerOpenId`、`folderToken`、`tasklistId`、`calendarId`、`calendarChannel`/`todoChannel`/`notifyChannel`（feishu|wecom，默认 feishu——企微作日程/待办第二操作渠道＋提醒单向推送，永不收信）、`timeZone`、`appIdEnv`/`appSecretEnv`/`pgDsnEnv`、`maxWorkers`、`enabledWorkers`、`workerModels`、`extraLocalTools`（封闭枚举）。配置飞书接入时，对本地会话说「帮我接通飞书」，或调用 `pa24_connection` 的 `action=guide`；内置 `feishu-setup.md` 是唯一权威。
 
 ### 暴露工具
 

package/lib/config.js

@@ -15,6 +15,7 @@ export class ConfigError extends Error {
 export const DEFAULT_CONFIG = {
     version: 1,
     mode: 'demo',
+    storage: 'sqlite',
     larkProfile: 'default',
     ownerOpenId: '',
     folderToken: '',
@@ -42,7 +43,6 @@ const STRING_FIELDS = [
     'timeZone',
     'appIdEnv',
     'appSecretEnv',
-    'pgDsnEnv',
 ];
 export function validateConfig(raw) {
     if (!raw || typeof raw !== 'object' || Array.isArray(raw))
@@ -67,10 +67,22 @@ export function validateConfig(raw) {
     }
     if (!input.larkProfile)
         throw new ConfigError('必须固定飞书 CLI profile（larkProfile）。');
-    for (const key of ['appIdEnv', 'appSecretEnv', 'pgDsnEnv']) {
+    // F25：账本后端缺省 sqlite；postgres 才要求 pgDsnEnv（存量 PG 工作区升级时显式声明）。
+    // `undefined` (older file without the field) takes the product default;
+    // an explicit `null` must fail loud, not silently become sqlite.
+    const storage = (input.storage === undefined ? 'sqlite' : input.storage);
+    if (storage !== 'sqlite' && storage !== 'postgres')
+        throw new ConfigError('storage 必须是 sqlite 或 postgres。');
+    const dsnEnvKeys = storage === 'postgres'
+        ? ['appIdEnv', 'appSecretEnv', 'pgDsnEnv']
+        : ['appIdEnv', 'appSecretEnv'];
+    for (const key of dsnEnvKeys) {
         if (!ENV_NAME.test(input[key]))
             throw new ConfigError(`${key} 应填写环境变量名称（大写字母、数字、下划线）。`);
     }
+    if (storage === 'sqlite' && input.pgDsnEnv !== undefined && !ENV_NAME.test(input.pgDsnEnv)) {
+        throw new ConfigError('pgDsnEnv 应填写环境变量名称（大写字母、数字、下划线）。');
+    }
     const maxWorkers = input.maxWorkers;
     if (!Number.isInteger(maxWorkers) || maxWorkers < 1 || maxWorkers > 8) {
         throw new ConfigError('maxWorkers 必须是 1–8 的整数。');
@@ -110,6 +122,7 @@ export function validateConfig(raw) {
     const config = {
         version: 1,
         mode: input.mode,
+        storage,
         larkProfile: input.larkProfile,
         ownerOpenId: input.ownerOpenId,
         folderToken: input.folderToken,
@@ -121,7 +134,7 @@ export function validateConfig(raw) {
         timeZone: input.timeZone,
         appIdEnv: input.appIdEnv,
         appSecretEnv: input.appSecretEnv,
-        pgDsnEnv: input.pgDsnEnv,
+        pgDsnEnv: (input.pgDsnEnv ?? 'PA24_PG_DSN'),
         maxWorkers: maxWorkers,
         enabledWorkers: enabledWorkers,
         workerModels: workerModels,

package/lib/db.js

@@ -0,0 +1,5 @@
+// Backend-agnostic database surface (F25): the business ledger runs on
+// SQLite by default or PostgreSQL by explicit workspace choice, and repos
+// program against this interface only. No silent fallback — whichever
+// backend the config names is the backend that runs, or startup fails loud.
+export {};

package/lib/pg.js

@@ -3,7 +3,7 @@ import pg from 'pg';
 // PostgreSQL instance. The DSN itself comes from the environment variable
 // named by AGENTS.md (`pgDsnEnv`); credentials never enter workspace files.
 export const SCHEMA_NAME = 'pa24';
-const MIGRATIONS = [
+export const MIGRATIONS = [
     {
         version: 1,
         statements: [
@@ -425,6 +425,7 @@ const MIGRATIONS = [
     },
 ];
 export class PaDatabase {
+    kind = 'postgres';
     pool;
     closed = false;
     constructor(dsn, options = {}) {
@@ -474,10 +475,15 @@ export class PaDatabase {
         const result = await this.pool.query(`select coalesce(max(version), 0) as version from ${SCHEMA_NAME}.schema_migrations`);
         return result.rows[0].version;
     }
-    query(text, values) {
+    async query(text, values) {
         if (this.closed)
-            return Promise.reject(new Error('数据库连接池已关闭。'));
-        return this.pool.query(text, values);
+            throw new Error('数据库连接池已关闭。');
+        const result = await this.pool.query(text, values);
+        // PaDb contract: rowCount is always a number (the driver leaves it null
+        // only in cases our repos never rely on).
+        if (result.rowCount == null)
+            return { ...result, rowCount: 0 };
+        return result;
     }
     async withTransaction(work) {
         const client = await this.pool.connect();
@@ -495,6 +501,10 @@ export class PaDatabase {
             client.release();
         }
     }
+    async nextNoteSeq() {
+        const result = await this.pool.query(`select nextval('pa24.note_seq') as next`);
+        return Number(result.rows[0].next);
+    }
     async close() {
         if (this.closed)
             return;

package/lib/prompts.js

@@ -7,7 +7,7 @@
 // 职责/完成标准/边界/输出要求, and every copy carries a version constant so a
 // prompt change is reviewable against a bump (PROMPTS_VERSION).
 /** Semantic version of the whole prompt set; bump on any copy change. */
-export const PROMPTS_VERSION = '1.4.0';
+export const PROMPTS_VERSION = '1.5.0';
 export const LEAD_SECTIONS = [
     {
         name: '24pa-identity-capability',
@@ -144,7 +144,7 @@ export const WORKER_PROMPTS = {
         ].join('\n'),
         brief: 'calendar_query/calendar_busy（同步水位/冲突/新鲜度）、calendar_create/update/cancel（staged 幂等）、meeting_schedule、plan_today/plan_preview/plan_adopt、meeting_prep_*、overview_today。',
         doneCriteria: '读操作带新鲜度说明；写操作取得平台回执（日程标识）后交回；规划建议按事实/建议/来源/缺失四栏给出。',
-        version: 1,
+        version: 2,
     },
     reminders: {
         persona: [
@@ -155,7 +155,7 @@ export const WORKER_PROMPTS = {
             '- 时间计算由宿主的 dsh-schedule 公开函数完成，不自行推算。',
             '- 只报告平台接受状态，不推断已读。',
             '## 边界',
-            '- 提醒由 PostgreSQL 发生实例和 Outbox 投递，模型离线也能发出。',
+            '- 提醒由业务账本触发实例并经 Outbox 投递，模型离线也能发出。',
             '- 完成/稍后/取消都绑定原规则与实例，重复请求不产生多份。',
             '- 不执行其他业务，不产生新授权。',
             '## 输出要求',
@@ -267,6 +267,6 @@ ${defaultConfigJson}
 - 需要个人偏好或项目事实时，先查询结构化记忆（随后续功能启用），保留来源和确认状态。
 - 配置与记忆维护通过 dsh 的24私助会话进行；飞书接入会话与 Worker 没有维护写入权限。
 - 飞书接入按内置指南分阶段配置：先 pa24_connection action=guide 通读，再按 action=check 返回的 nextSteps 逐项收敛；应用密钥与 CLI 凭据只由本人在本人终端/启动环境填写。
-- 业务账本使用 PostgreSQL；数据库不可用时停止接纳相关业务，不伪造成功。
+- 业务账本按工作区配置运行（默认 SQLite，可选 PostgreSQL）；账本不可用时停止接纳相关业务，不伪造成功。
 `;
 }

package/lib/repo.js

@@ -499,8 +499,7 @@ export class NoteRepo {
         this.db = db;
     }
     async nextNoteId() {
-        const result = await this.db.query(`select nextval('pa24.note_seq') as next`);
-        return `N-${Number(result.rows[0].next)}`;
+        return `N-${await this.db.nextNoteSeq()}`;
     }
     async insertNote(row) {
         const result = await this.db.query(`insert into pa24.note (id, title, status, origin, work_item_id) values ($1, $2, 'collecting', $3, $4) returning *`, [row.id, row.title, row.origin, row.workItemId ?? null]);

package/lib/runtime.js

@@ -1,8 +1,9 @@
 import { randomUUID, createHash } from 'node:crypto';
 import { createRequire } from 'node:module';
 import { mkdir, realpath, stat, readFile } from 'node:fs/promises';
-import { isAbsolute, join } from 'node:path';
+import { basename, isAbsolute, join } from 'node:path';
 import { PaDatabase, resolveDsn } from './pg.js';
+import { SqliteDb } from './sqlite.js';
 import { createRepos } from './repo.js';
 import { acquireHostLock } from './lock.js';
 import { parseAgentsMd, template, ConfigError } from './config.js';
@@ -195,7 +196,7 @@ export class PaRuntime {
                 occurred_on: new Date().toISOString().slice(0, 10),
             });
             await this.repos.workItems.update(item.id, { result_ref: { memoId: memo.id, operationId: `digest:${item.id}` } });
-            return { memoId: memo.id, topic, message: '资料摘要已保存入账本（PostgreSQL），可按主题检索。' };
+            return { memoId: memo.id, topic, message: '资料摘要已保存入业务账本，可按主题检索。' };
         },
     };
     registerBuiltInRoles() {
@@ -717,9 +718,18 @@ export class PaRuntime {
         await this.connectTransport();
     }
     async openDatabaseFor(workspacePath) {
-        const envName = await this.probeConfigDsn(workspacePath);
-        const dsn = resolveDsn(envName, this.env);
-        const db = new PaDatabase(dsn);
+        const probe = await this.probeStorageConfig(workspacePath);
+        // F25: default ledger is a SQLite file in the workspace; PostgreSQL runs
+        // only by explicit workspace choice. No silent fallback either way.
+        let db;
+        if (probe.storage === 'postgres') {
+            db = new PaDatabase(resolveDsn(probe.pgDsnEnv, this.env));
+        }
+        else {
+            const dataDir = join(workspacePath, 'data');
+            await mkdir(dataDir, { recursive: true });
+            db = new SqliteDb(join(dataDir, 'pa24.db'));
+        }
         try {
             await db.check();
             await db.migrate();
@@ -732,14 +742,21 @@ export class PaRuntime {
         this.db = db;
         this.repos = createRepos(db);
     }
-    /** Read the DSN env name from AGENTS.md before the full config is trusted. */
-    async probeConfigDsn(workspacePath) {
+    /** Read the storage choice from AGENTS.md before the full config is trusted. */
+    async probeStorageConfig(workspacePath) {
         try {
             const source = await readFile(join(workspacePath, 'AGENTS.md'), 'utf8');
-            return parseAgentsMd(source).config.pgDsnEnv;
+            const { config } = parseAgentsMd(source);
+            return { storage: config.storage, pgDsnEnv: config.pgDsnEnv };
         }
-        catch {
-            return 'PA24_PG_DSN';
+        catch (error) {
+            // An INVALID config block fails loud right here — before any ledger
+            // side effect (openDatabaseFor would otherwise migrate a file the
+            // broken workspace never asked for). A missing/unreadable AGENTS.md
+            // (fresh workspace) takes the zero-dependency product default.
+            if (error instanceof ConfigError)
+                throw error;
+            return { storage: 'sqlite', pgDsnEnv: 'PA24_PG_DSN' };
         }
     }
     async loadConfig() {
@@ -799,7 +816,7 @@ export class PaRuntime {
         if (!this.config)
             return;
         if (this.config.mode !== 'feishu') {
-            this.transportError = 'demo：未连接飞书；业务账本使用 PostgreSQL。';
+            this.transportError = 'demo：未连接飞书；业务账本按工作区配置运行。';
             return;
         }
         const appId = this.env[this.config.appIdEnv];
@@ -1065,7 +1082,7 @@ export class PaRuntime {
             await this.notifyOwner(`status:${event.eventId}`, [
                 '24私助已收到你的消息。',
                 `绑定：${this.config.ownerOpenId ? '已按配置绑定主人' : '尚未在配置中绑定主人'}`,
-                `业务账本（PostgreSQL）：${pg?.state === 'ok' ? '正常' : pg?.message ?? '未知'}`,
+                `业务账本（${this.db?.kind === 'sqlite' ? 'SQLite' : 'PostgreSQL'}）：${pg?.state === 'ok' ? '正常' : pg?.message ?? '未知'}`,
                 '直接告诉我需要办理什么；也可以说“查看正在处理的事”。配置与记忆维护请到 dsh 的24私助会话。',
             ].join('\n'));
             await this.repos.inbox.mark(row.event_id, { status: 'delivered', requestId: `status:${event.eventId}` });
@@ -2625,7 +2642,7 @@ export class PaRuntime {
                 operationId,
                 docUrl: external.url,
                 demo: !live,
-                message: live && external.docId ? '备忘已保存为飞书文档并回读确认。' : '演示模式：备忘已入账本（PostgreSQL），未创建飞书文档。',
+                message: live && external.docId ? '备忘已保存为飞书文档并回读确认。' : '演示模式：备忘已入业务账本，未创建飞书文档。',
             };
         }
         catch (error) {
@@ -4208,26 +4225,40 @@ export class PaRuntime {
             await wf(join(dir, name), bytes);
             parts.push({ id, path: name, bytes: bytes.length, sha256: sha256Hex(bytes) });
         };
-        // 1. PostgreSQL schema dump (structures + rows; credentials never involved).
-        const dsn = resolveDsn(this.config.pgDsnEnv, this.env);
-        const dump = await new Promise((resolve, reject) => {
-            // DSN via env keeps it out of the process argv; stderr is surfaced.
-            const child = spawn('pg_dump', ['--schema=pa24', '--no-owner', '--no-privileges', '--dbname', dsn], { stdio: ['ignore', 'pipe', 'pipe'] });
-            const chunks = [];
-            let stderr = '';
-            child.stdout.on('data', (c) => chunks.push(c));
-            child.stderr.on('data', (c) => { stderr += c; });
-            child.on('error', reject);
-            child.on('close', code => {
-                if (code === 0)
-                    resolve(Buffer.concat(chunks));
-                else {
-                    const detail = stderr.split(dsn).join('[已隐藏]').slice(0, 300) || '无诊断输出';
-                    reject(new Error(`pg_dump 退出码 ${code}：${detail}`));
-                }
+        // 1. Ledger backup: PG dump, or a checkpointed SQLite file copy (F25).
+        if (this.db.kind === 'sqlite') {
+            const sqlite = this.db;
+            const { busy } = sqlite.checkpoint();
+            await addPart('sqlite', 'pa24.db', await rf(sqlite.filePath));
+            // A busy checkpoint means frames stayed in the WAL — ship it too, or
+            // the backup would silently miss committed writes.
+            if (busy > 0) {
+                await addPart('sqlite-wal', 'pa24.db-wal', await rf(`${sqlite.filePath}-wal`)).catch(async () => {
+                    // -wal absent between checkpoints: nothing to append.
+                });
+            }
+        }
+        else {
+            const dsn = resolveDsn(this.config.pgDsnEnv, this.env);
+            const dump = await new Promise((resolve, reject) => {
+                // DSN via env keeps it out of the process argv; stderr is surfaced.
+                const child = spawn('pg_dump', ['--schema=pa24', '--no-owner', '--no-privileges', '--dbname', dsn], { stdio: ['ignore', 'pipe', 'pipe'] });
+                const chunks = [];
+                let stderr = '';
+                child.stdout.on('data', (c) => chunks.push(c));
+                child.stderr.on('data', (c) => { stderr += c; });
+                child.on('error', reject);
+                child.on('close', code => {
+                    if (code === 0)
+                        resolve(Buffer.concat(chunks));
+                    else {
+                        const detail = stderr.split(dsn).join('[已隐藏]').slice(0, 300) || '无诊断输出';
+                        reject(new Error(`pg_dump 退出码 ${code}：${detail}`));
+                    }
+                });
             });
-        });
-        await addPart('postgres', 'pa24.sql', dump);
+            await addPart('postgres', 'pa24.sql', dump);
+        }
         // 2. Workspace (AGENTS.md + .24pa memory/revisions/originals/crops) and
         // dsh state: real file CONTENTS are copied into the backup, not just
         // listings — restore copies them back verbatim (P38).
@@ -4316,7 +4347,7 @@ export class PaRuntime {
             complete: failures.length === 0,
             failures,
             message: failures.length === 0
-                ? '备份完整（PG 转储与全部文件内容逐个摘要匹配）。恢复顺序：先 PG（psql < pa24.sql），再按 workspace/dsh-state 清单把文件内容复制回原路径，重启 Host 后按启动对账处理；旧 Outbox 与飞书实际对象先对账再发送。'
+                ? `备份完整（账本${this.db?.kind === 'sqlite' ? ' SQLite 文件' : ' PG 转储'}与全部文件内容逐个摘要匹配）。恢复顺序：先把账本恢复到数据目录（SQLite＝复制 pa24.db 到工作区 data/，备份若含 pa24.db-wal 一并放回；PG＝psql < pa24.sql），再按 workspace/dsh-state 清单把文件内容复制回原路径，重启 Host 后按启动对账处理；旧 Outbox 与飞书实际对象先对账再发送。`
                 : `备份不完整（${failures.join('；')}）；对应部分恢复后不可视为就绪。`,
         };
     }
@@ -5499,7 +5530,9 @@ export class PaRuntime {
             id: 'postgres',
             state: this.db ? 'ok' : 'error',
             message: this.db
-                ? 'PostgreSQL 业务账本已连接'
+                ? this.db.kind === 'sqlite'
+                    ? `SQLite 业务账本已连接（${basename(this.db.filePath ?? '')}）`
+                    : 'PostgreSQL 业务账本已连接'
                 : (this.configError && this.configError.includes('数据库') ? this.configError : 'PostgreSQL 未连接'),
         });
         items.push({

package/lib/sqlite.js

@@ -0,0 +1,360 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { createRequire } from 'node:module';
+import { MIGRATIONS } from './pg.js';
+// F25: SQLite backend for the business ledger (default storage; PostgreSQL
+// stays available by explicit `storage: "postgres"`). The repos keep their
+// PG-dialect SQL untouched — this adapter translates it on the fly:
+//   pa24.<table>          -> pa24_<table>          (no schemas in SQLite)
+//   $1..$n                -> ?                     (positional, validated)
+//   = any($n)             -> in (?, ?, …)          (array param expansion)
+//   $n::type casts        -> $n                    (params are pre-encoded)
+//   now()                 -> strftime ISO UTC      (same shape pg hands back)
+//   now() + make_interval -> strftime + printf seconds
+//   ilike                 -> like                  (ASCII-insensitive both)
+//   for update skip locked-> (stripped; single serial writer, no locks needed)
+// Unknown leftovers fail loud at translate time — never silently misrun.
+// DDL comes from the SAME migration list as PostgreSQL (pg.ts), transformed
+// per backend type mapping, so the two schemas cannot drift apart.
+const ISO_NOW = `strftime('%Y-%m-%dT%H:%M:%fZ','now')`;
+// ---- DDL translation ---------------------------------------------------------
+function translateDdl(stmt) {
+    if (/^create sequence/i.test(stmt)) {
+        // PG sequence -> counter table + seed row (nextNoteSeq updates it).
+        return [
+            `create table if not exists pa24_note_seq (id integer primary key check (id = 1), next integer not null)`,
+            `insert or ignore into pa24_note_seq (id, next) values (1, 1)`,
+        ];
+    }
+    let sql = stmt
+        .replace(/\bpa24\./g, 'pa24_')
+        .replace(/\btimestamptz\b/g, 'text')
+        .replace(/'([^']*)'::jsonb/g, "'$1'")
+        .replace(/\bjsonb\b/g, 'text')
+        .replace(/\bboolean\b/g, 'integer')
+        .replace(/\bbigserial\b/g, 'integer')
+        .replace(/default now\(\)/g, `default (${ISO_NOW})`)
+        .replace(/\bdate\b(?=\s*,)/g, 'text')
+        .replace(/add column if not exists/g, 'add column');
+    // bigserial id becomes the autoincrement rowid alias.
+    if (/\bid integer primary key\b/.test(sql))
+        sql = sql.replace(/\bid integer primary key\b/, 'id integer primary key autoincrement');
+    sql = sql.replace(/default false/g, 'default 0').replace(/default true/g, 'default 1');
+    // Fail-loud symmetry with query translation: an untranslated PG type means
+    // the mapping rules drifted, never silently mis-typed columns.
+    const leftover = /timestamptz|jsonb|\bboolean\b|\bbigserial\b|\bsequence\b|nextval/i.exec(sql);
+    if (leftover) {
+        throw new Error(`SQLite DDL 翻译遇到未处理的 PostgreSQL 类型「${leftover[0]}」。语句：${stmt}`);
+    }
+    return [sql];
+}
+function splitTopLevel(body) {
+    const parts = [];
+    let depth = 0;
+    let current = '';
+    for (const ch of body) {
+        if (ch === '(')
+            depth += 1;
+        if (ch === ')')
+            depth -= 1;
+        if (ch === ',' && depth === 0) {
+            parts.push(current);
+            current = '';
+        }
+        else {
+            current += ch;
+        }
+    }
+    if (current.trim())
+        parts.push(current);
+    return parts.map(p => p.trim()).filter(Boolean);
+}
+function inferKinds() {
+    const kinds = {};
+    const learn = (table, name, type) => {
+        const kind = /jsonb/.test(type) ? 'json' : /boolean/.test(type) ? 'bool' : /timestamptz/.test(type) ? 'ts' : null;
+        if (!kind)
+            return;
+        (kinds[table] ??= {})[name] = kind;
+    };
+    for (const migration of MIGRATIONS) {
+        for (const stmt of migration.statements) {
+            let m = /^create table (?:if not exists )?pa24\.(\w+)\s*\(([\s\S]*)\)\s*$/.exec(stmt.trim());
+            if (m) {
+                // Trim the outer parens content carefully: the regex above is greedy —
+                // rebuild via first '(' to last ')'.
+                const open = stmt.indexOf('(');
+                const close = stmt.lastIndexOf(')');
+                const body = stmt.slice(open + 1, close);
+                const table = m[1];
+                let learned = 0;
+                for (const col of splitTopLevel(body)) {
+                    const cm = /^(\w+)\s+(.+)$/.exec(col);
+                    if (!cm || /^(primary|foreign|unique|check|constraint)\b/i.test(cm[1]))
+                        continue;
+                    learn(table, cm[1], cm[2]);
+                    learned += 1;
+                }
+                // Fail loud, symmetric with query translation: a matched CREATE TABLE
+                // that parsed to zero columns means the DDL shape drifted.
+                if (learned === 0)
+                    throw new Error(`SQLite 列类型推导失败：pa24.${table} 未解析出任何列。`);
+                continue;
+            }
+            m = /^alter table pa24\.(\w+) add column (?:if not exists )?(\w+)\s+(.+)$/.exec(stmt.trim());
+            if (m)
+                learn(m[1], m[2], m[3]);
+        }
+    }
+    return kinds;
+}
+const COLUMN_KINDS = inferKinds();
+const ANY_MARKER = (n, op) => `«ANY_${n}:${op}»`;
+export function translateQuery(inputSql, inputValues) {
+    let sql = inputSql;
+    // Row locks are meaningless under one serial writer.
+    sql = sql.replace(/for update skip locked/gi, '').replace(/for update/gi, '');
+    // Array membership FIRST — the optional cast suffix ($n::text[]) would be
+    // stripped by the cast rule below and orphan the marker pattern.
+    sql = sql.replace(/=\s*any\(\$(\d+)(?:::[a-z[\]]*)?\)/gi, (_all, n) => ANY_MARKER(Number(n), 'in'));
+    sql = sql.replace(/(?:<>|!=)\s*all\(\$(\d+)(?:::[a-z[\]]*)?\)/gi, (_all, n) => ANY_MARKER(Number(n), 'not in'));
+    // $n::type casts — params arrive pre-encoded; unknown cast types are left
+    // in place and rejected by the leftover validator below.
+    sql = sql.replace(/(\$\d+|\))::(?:jsonb|json|text|bool|date|int|integer|timestamptz)\b/gi, '$1');
+    // BASE + make_interval(secs => $n): BASE is now() or a $n timestamp —
+    // both become strftime with a printf'd seconds modifier so the result
+    // keeps the ISO shape stored in timestamptz columns (string comparison
+    // across formats would silently break window queries).
+    sql = sql.replace(/(now\(\)|\$\d+)\s*\+\s*make_interval\(secs\s*=>\s*\$(\d+)\)/gi, (_all, base, n) => `strftime('%Y-%m-%dT%H:%M:%fZ', ${base === 'now()' ? "'now'" : base}, printf('+%.0f seconds', $${n}))`);
+    sql = sql.replace(/\bnow\(\)/g, ISO_NOW);
+    sql = sql.replace(/\bilike\b/gi, 'like');
+    sql = sql.replace(/\bpa24\./g, 'pa24_');
+    // Mark array membership before the positional walk; the marker expands in
+    // place so the array's elements land in the right parameter positions.
+    // $n -> ? by appearance order; reusing a number (e.g. "a ilike $5 or b
+    // ilike $5") is legal PG and re-binds the same value. Params bind by the
+    // ORIGINAL numbering, so any() splices its elements where it appears.
+    const values = [];
+    sql = sql.replace(/\$(\d+)|«ANY_(\d+):(in|not in)»/g, (_all, num, anyNum, op) => {
+        if (anyNum !== undefined) {
+            const arr = inputValues[Number(anyNum) - 1];
+            if (!Array.isArray(arr))
+                throw new Error(`SQLite 适配：$${anyNum} 应为数组（any/all）。SQL：${inputSql}`);
+            const keyword = op === 'not in' ? 'not in' : 'in';
+            // PG semantics: <> ALL over an EMPTY array is true; IN over empty is false.
+            if (arr.length === 0)
+                return keyword === 'not in' ? '1 = 1' : 'in (select 1 where 0)';
+            values.push(...arr);
+            return `${keyword} (${arr.map(() => '?').join(', ')})`;
+        }
+        const n = Number(num);
+        if (n < 1 || n > inputValues.length) {
+            throw new Error(`SQLite 适配：占位符 $${n} 超出参数范围（${inputValues.length} 个）。SQL：${inputSql}`);
+        }
+        values.push(inputValues[n - 1]);
+        return '?';
+    });
+    const leftover = /\bilike\b|::|\bany\(|\ball\(|\bnow\(\)|nextval|for update|make_interval/i.exec(sql);
+    if (leftover) {
+        throw new Error(`SQLite 适配遇到未处理的 PostgreSQL 方言「${leftover[0]}」。SQL：${inputSql}`);
+    }
+    return { sql: sql.trim(), values };
+}
+function encodeParam(value) {
+    if (value === undefined)
+        return null;
+    if (value === null || typeof value === 'string' || typeof value === 'number')
+        return value;
+    if (typeof value === 'boolean')
+        return value ? 1 : 0;
+    if (value instanceof Date)
+        return value.toISOString();
+    if (typeof value === 'object')
+        return JSON.stringify(value);
+    return String(value);
+}
+function coerceRows(table, rows) {
+    const kinds = table ? COLUMN_KINDS[table] : null;
+    if (!kinds)
+        return rows;
+    for (const row of rows) {
+        for (const [column, kind] of Object.entries(kinds)) {
+            const value = row[column];
+            if (value === null || value === undefined)
+                continue;
+            if (kind === 'json' && typeof value === 'string') {
+                try {
+                    row[column] = JSON.parse(value);
+                }
+                catch {
+                    // Leave as-is: a malformed value surfaces where pg would have too.
+                }
+            }
+            else if (kind === 'bool') {
+                row[column] = value === 1 || value === true;
+            }
+            else if (kind === 'ts' && typeof value === 'string') {
+                row[column] = new Date(value);
+            }
+        }
+    }
+    return rows;
+}
+function tableOf(sql) {
+    const m = /\b(?:from|into|update)\s+pa24_(\w+)/i.exec(sql);
+    return m?.[1] ?? null;
+}
+export class SqliteDb {
+    kind = 'sqlite';
+    filePath;
+    db;
+    closed = false;
+    /** Serializes every statement; a transaction holds it until commit. */
+    lock = Promise.resolve();
+    txOwner = new AsyncLocalStorage();
+    constructor(filePath) {
+        this.filePath = filePath;
+        let DatabaseSync;
+        try {
+            ({ DatabaseSync } = createRequire(import.meta.url)('node:sqlite'));
+        }
+        catch {
+            throw new Error('SQLite 模式需要 Node 内建 node:sqlite（Node ≥ 23.4，或 22.x 加 --experimental-sqlite）；' +
+                '当前运行时不支持。可改用 storage: "postgres"，或升级宿主 Node。');
+        }
+        this.db = new DatabaseSync(filePath);
+        this.db.exec('pragma journal_mode = wal');
+        this.db.exec('pragma foreign_keys = on');
+        this.db.exec('pragma busy_timeout = 5000');
+    }
+    enqueue(job) {
+        const run = this.lock.then(job, job);
+        this.lock = run.catch(() => undefined);
+        return run;
+    }
+    runTranslated(text, values) {
+        const { sql, values: encoded } = translateQuery(text, values);
+        const stmt = this.db.prepare(sql);
+        const params = encoded.map(encodeParam);
+        const returnsRows = /^select\b/i.test(sql) || /\breturning\b/i.test(sql);
+        if (returnsRows) {
+            const rows = coerceRows(tableOf(sql), stmt.all(...params));
+            return { rows, rowCount: rows.length };
+        }
+        const { changes } = stmt.run(...params);
+        return { rows: [], rowCount: Number(changes ?? 0) };
+    }
+    query(text, values = []) {
+        if (this.closed)
+            return Promise.reject(new Error('SQLite 账本已关闭。'));
+        // Inside the owning transaction the statement must join it, not queue
+        // behind the lock the transaction itself holds.
+        if (this.txOwner.getStore()?.active) {
+            return Promise.resolve(this.runTranslated(text, values));
+        }
+        return this.enqueue(() => Promise.resolve(this.runTranslated(text, values)));
+    }
+    async check() {
+        await this.query('select 1 as ok');
+    }
+    async migrate() {
+        return this.enqueue(async () => {
+            this.db.exec(`create table if not exists pa24_schema_migrations (version integer primary key, applied_at text not null default (${ISO_NOW}))`);
+            const current = this.runTranslated('select coalesce(max(version), 0) as version from pa24.schema_migrations', []);
+            let applied = Number(current.rows[0].version);
+            for (const migration of MIGRATIONS) {
+                if (migration.version <= applied)
+                    continue;
+                this.db.exec('begin');
+                try {
+                    for (const statement of migration.statements) {
+                        for (const translated of translateDdl(statement))
+                            this.db.exec(translated);
+                    }
+                    this.db.exec(`insert into pa24_schema_migrations (version) values (${migration.version})`);
+                    this.db.exec('commit');
+                }
+                catch (error) {
+                    this.db.exec('rollback');
+                    throw error;
+                }
+                applied = migration.version;
+            }
+            return applied;
+        });
+    }
+    async schemaVersion() {
+        const result = await this.query('select coalesce(max(version), 0) as version from pa24.schema_migrations');
+        return Number(result.rows[0].version);
+    }
+    async nextNoteSeq() {
+        const result = await this.query(`update pa24.note_seq set next = next + 1 where id = 1 returning next - 1 as next`);
+        if (!result.rows[0])
+            throw new Error('SQLite 账本缺少 note_seq 计数行（迁移未完成）。');
+        return Number(result.rows[0].next);
+    }
+    withTransaction(work) {
+        if (this.closed)
+            return Promise.reject(new Error('SQLite 账本已关闭。'));
+        // Nested transaction inside the owning scope becomes a SAVEPOINT —
+        // queueing behind the outer lock would deadlock on one connection.
+        if (this.txOwner.getStore()?.active) {
+            return this.txOwner.run({ active: true }, async () => {
+                const sp = `sp_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`;
+                this.db.exec(`savepoint ${sp}`);
+                try {
+                    const result = await work(this);
+                    this.db.exec(`release savepoint ${sp}`);
+                    return result;
+                }
+                catch (error) {
+                    this.db.exec(`rollback to savepoint ${sp}`);
+                    this.db.exec(`release savepoint ${sp}`);
+                    throw error;
+                }
+            });
+        }
+        return this.enqueue(async () => {
+            this.db.exec('begin immediate');
+            try {
+                const result = await this.txOwner.run({ active: true }, () => work(this));
+                this.db.exec('commit');
+                return result;
+            }
+            catch (error) {
+                this.db.exec('rollback');
+                throw error;
+            }
+        });
+    }
+    /**
+     * Checkpoint WAL so a plain file copy is a consistent backup. Runs UNQUEUED
+     * (owning transactions may hold the serial lock; WAL checkpoints are safe
+     * to attempt concurrently) and reports the busy frame count — a nonzero
+     * value means frames stayed in the WAL and the caller must copy -wal too.
+     */
+    checkpoint() {
+        return this.runUnqueued(() => {
+            const rows = this.db.prepare('pragma wal_checkpoint(truncate)').all();
+            const busy = Number(rows[0]?.busy ?? 0);
+            return { busy };
+        });
+    }
+    /** Runs immediately without the serial queue; checkpoint busy-ness is
+     * reported to the caller instead of blocking on in-flight transactions. */
+    runUnqueued(job) {
+        return job();
+    }
+    close() {
+        if (this.closed)
+            return Promise.resolve();
+        this.closed = true;
+        try {
+            this.db.exec('pragma wal_checkpoint(truncate)');
+        }
+        catch {
+            // best effort; close still flushes
+        }
+        this.db.close();
+        return Promise.resolve();
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@benz-ai-x/dsh-24pa",
-  "version": "0.2.1-alpha.2.1",
+  "version": "0.2.1-alpha.2.2",
   "description": "24私助（24PA）: Feishu-backed personal assistant as a dsh workspace bundle.",
   "type": "module",
   "engines": {