@calliopelabs/cli 3.0.0 → 3.2.0

package/dist/brain/sqlite.js

@@ -0,0 +1,252 @@
+import { createRequire } from 'node:module';
+import { canonicalJson, digest } from '../approvals/index.js';
+import { throwIfCancelled } from '../cancellation.js';
+import { BrainError, BRAIN_LIMITS, ENTITY_KINDS, } from './types.js';
+const require = createRequire(import.meta.url);
+let engine;
+const load = () => (engine ??= (async () => {
+    const { default: init } = await import('sql.js');
+    return init({ locateFile: () => require.resolve('sql.js/dist/sql-wasm.wasm') });
+})());
+const SCHEMA = `PRAGMA user_version=1;
+CREATE TABLE meta(key TEXT PRIMARY KEY,value TEXT NOT NULL);
+CREATE TABLE entities(id TEXT PRIMARY KEY,kind TEXT NOT NULL,name TEXT NOT NULL,state TEXT NOT NULL,payload TEXT NOT NULL);
+CREATE INDEX entities_kind ON entities(kind,state,id);
+CREATE INDEX entities_name ON entities(name,id);
+CREATE TABLE edges(id TEXT PRIMARY KEY,from_id TEXT NOT NULL,to_id TEXT NOT NULL,type TEXT NOT NULL,state TEXT NOT NULL,payload TEXT NOT NULL);
+CREATE INDEX edges_from ON edges(from_id,state,id);
+CREATE INDEX edges_to ON edges(to_id,state,id);
+CREATE TABLE sources(id TEXT PRIMARY KEY,payload TEXT NOT NULL);
+CREATE TABLE provenance(entity_id TEXT NOT NULL,source_id TEXT NOT NULL,PRIMARY KEY(entity_id,source_id));
+CREATE INDEX provenance_source ON provenance(source_id,entity_id);
+CREATE VIRTUAL TABLE entity_search USING fts4(id,name,body,notindexed=id,tokenize=unicode61);
+CREATE VIRTUAL TABLE source_search USING fts4(id,name,body,notindexed=id,tokenize=unicode61);`;
+const compare = (a, b) => (a < b ? -1 : a > b ? 1 : 0);
+const rowHash = (values) => digest(values.map((row) => digest(canonicalJson(row))).join('\n'));
+const folded = (s) => s.normalize('NFKC').toLocaleLowerCase('en-US');
+function rows(db, sql, params = []) {
+    const stmt = db.prepare(sql);
+    try {
+        stmt.bind(params);
+        const result = [];
+        while (stmt.step()) {
+            if (result.length >= BRAIN_LIMITS.entities * 32 + BRAIN_LIMITS.edges + BRAIN_LIMITS.sources)
+                throw new BrainError('limit', 'SQLite query result exceeded its bound.');
+            result.push(stmt.get());
+        }
+        return result;
+    }
+    finally {
+        stmt.free();
+    }
+}
+const schema = (db) => canonicalJson(rows(db, 'SELECT type,name,sql FROM sqlite_master ORDER BY type,name'));
+const recordHash = (state) => digest(['sources', 'entities', 'edges']
+    .flatMap((kind) => Object.values(state[kind])
+    .sort((a, b) => compare(a.id, b.id))
+    .map((v) => kind + ':' + v.id + ':' + digest(canonicalJson(v))))
+    .join('\n'));
+let expectedSchema;
+async function build(state, signal) {
+    throwIfCancelled(signal);
+    const SQL = await load();
+    throwIfCancelled(signal);
+    const db = new SQL.Database();
+    try {
+        db.run(SCHEMA);
+        expectedSchema ??= schema(db);
+        db.run('BEGIN');
+        const insert = (sql, values) => {
+            const stmt = db.prepare(sql);
+            try {
+                for (const row of values) {
+                    throwIfCancelled(signal);
+                    stmt.run(row);
+                }
+            }
+            finally {
+                stmt.free();
+            }
+        };
+        insert('INSERT INTO meta VALUES(?,?)', [
+            ['revision', state.revision],
+            ['records', recordHash(state)],
+            ['brain', state.header.id],
+        ]);
+        for (const source of Object.values(state.sources)) {
+            throwIfCancelled(signal);
+            db.run('INSERT INTO sources VALUES(?,?)', [source.id, canonicalJson(source)]);
+            db.run('INSERT INTO source_search VALUES(?,?,?)', [source.id, source.name, source.content]);
+        }
+        for (const entity of Object.values(state.entities)) {
+            throwIfCancelled(signal);
+            db.run('INSERT INTO entities VALUES(?,?,?,?,?)', [
+                entity.id,
+                entity.kind,
+                folded(entity.name),
+                entity.state,
+                canonicalJson(entity),
+            ]);
+            db.run('INSERT INTO entity_search VALUES(?,?,?)', [
+                entity.id,
+                entity.name,
+                entity.summary + '\n' + canonicalJson(entity.attributes),
+            ]);
+            for (const sourceId of new Set(entity.provenance.map((p) => p.sourceId)))
+                db.run('INSERT INTO provenance VALUES(?,?)', [entity.id, sourceId]);
+        }
+        for (const edge of Object.values(state.edges)) {
+            throwIfCancelled(signal);
+            db.run('INSERT INTO edges VALUES(?,?,?,?,?,?)', [
+                edge.id,
+                edge.from,
+                edge.to,
+                edge.type,
+                edge.state,
+                canonicalJson(edge),
+            ]);
+        }
+        db.run('COMMIT');
+        return db;
+    }
+    catch (e) {
+        db.close();
+        throw e;
+    }
+}
+function verify(db, state) {
+    if (rows(db, 'PRAGMA user_version')[0]?.[0] !== 1 ||
+        schema(db) !== expectedSchema ||
+        rows(db, 'PRAGMA integrity_check').some((r) => r[0] !== 'ok'))
+        throw new Error('Index schema or integrity differs.');
+    const meta = Object.fromEntries(rows(db, 'SELECT key,value FROM meta').map((row) => [String(row[0]), row[1]]));
+    if (meta.revision !== state.revision ||
+        meta.brain !== state.header.id ||
+        meta.records !== recordHash(state) ||
+        Object.keys(meta).length !== 3)
+        throw new Error('Stale index.');
+    for (const table of ['sources', 'entities', 'edges']) {
+        const actual = rows(db, `SELECT id,payload FROM ${table} ORDER BY id`), expected = Object.values(state[table]).sort((a, b) => compare(a.id, b.id));
+        if (actual.length !== expected.length ||
+            actual.some(([id, payload], i) => id !== expected[i].id || payload !== canonicalJson(expected[i])))
+            throw new Error('Index differs from the journal.');
+    }
+    // Check both searchable content and its derived token index, not just record payloads.
+    for (const [table, values] of [
+        [
+            'entity_search',
+            Object.values(state.entities).map((e) => [
+                e.id,
+                e.name,
+                e.summary + '\n' + canonicalJson(e.attributes),
+            ]),
+        ],
+        ['source_search', Object.values(state.sources).map((s) => [s.id, s.name, s.content])],
+    ]) {
+        if (rowHash(rows(db, `SELECT id,name,body FROM ${table} ORDER BY id`)) !==
+            rowHash([...values].sort((a, b) => compare(a[0], b[0]))))
+            throw new Error('Search content differs from the journal.');
+        db.run(`INSERT INTO ${table}(${table}) VALUES('integrity-check')`);
+    }
+    const links = Object.values(state.entities)
+        .flatMap((e) => [...new Set(e.provenance.map((p) => p.sourceId))].map((id) => [e.id, id]))
+        .sort((a, b) => compare(a[0], b[0]) || compare(a[1], b[1]));
+    if (rowHash(rows(db, 'SELECT entity_id,source_id FROM provenance ORDER BY entity_id,source_id')) !==
+        rowHash(links))
+        throw new Error('Index provenance differs.');
+    // Indexed scalar columns must match the verified payload too.
+    for (const row of rows(db, 'SELECT id,kind,name,state FROM entities')) {
+        const e = state.entities[String(row[0])];
+        if (canonicalJson(row) !== canonicalJson([e.id, e.kind, folded(e.name), e.state]))
+            throw new Error('Entity index differs.');
+    }
+    for (const row of rows(db, 'SELECT id,from_id,to_id,type,state FROM edges')) {
+        const e = state.edges[String(row[0])];
+        if (canonicalJson(row) !== canonicalJson([e.id, e.from, e.to, e.type, e.state]))
+            throw new Error('Edge index differs.');
+    }
+}
+export class BrainIndex {
+    db;
+    state;
+    cache;
+    constructor(db, state, cache) {
+        this.db = db;
+        this.state = state;
+        this.cache = cache;
+    }
+    static async open(state, bytes, signal) {
+        throwIfCancelled(signal);
+        const SQL = await load();
+        throwIfCancelled(signal);
+        if (expectedSchema === undefined) {
+            const empty = new SQL.Database();
+            try {
+                empty.run(SCHEMA);
+                expectedSchema = schema(empty);
+            }
+            finally {
+                empty.close();
+            }
+        }
+        if (bytes && bytes.byteLength <= BRAIN_LIMITS.indexBytes) {
+            let db;
+            try {
+                db = new SQL.Database(bytes);
+                verify(db, state);
+                throwIfCancelled(signal);
+                db.run('PRAGMA query_only=ON');
+                return new BrainIndex(db, state, 'valid');
+            }
+            catch (e) {
+                db?.close();
+                throwIfCancelled(signal);
+            }
+        }
+        const db = await build(state, signal);
+        if (db.export().byteLength > BRAIN_LIMITS.indexBytes) {
+            db.close();
+            throw new BrainError('limit', 'Brain index exceeds 64 MiB; split or export this knowledge scope.');
+        }
+        db.run('PRAGMA query_only=ON');
+        return new BrainIndex(db, state, 'rebuilt');
+    }
+    close() {
+        this.db.close();
+    }
+    export() {
+        return this.db.export();
+    }
+    entity(selector) {
+        if (this.state.entities[selector])
+            return this.state.entities[selector];
+        const found = rows(this.db, 'SELECT id FROM entities WHERE name=? ORDER BY id LIMIT 2', [
+            folded(selector),
+        ]);
+        if (!found.length)
+            throw new BrainError('not-found', 'Knowledge entity was not found.');
+        if (found.length > 1)
+            throw new BrainError('conflict', 'Entity name is ambiguous; select its ID from search.');
+        return this.state.entities[String(found[0][0])];
+    }
+    search(query, options = {}) {
+        throwIfCancelled(options.signal);
+        if (options.kind !== undefined && !ENTITY_KINDS.includes(options.kind))
+            throw new BrainError('invalid', 'Unknown entity kind.');
+        if (Buffer.byteLength(query) > BRAIN_LIMITS.queryBytes)
+            throw new BrainError('limit', 'Brain search query is too large.');
+        const tokens = [...new Set(folded(query).match(/[\p{L}\p{N}_]+/gu) ?? [])];
+        if (!tokens.length || tokens.length > BRAIN_LIMITS.queryTokens)
+            throw new BrainError('invalid', 'Search requires one to sixteen words.');
+        const limit = options.limit ?? 20;
+        if (!Number.isSafeInteger(limit) || limit < 1 || limit > BRAIN_LIMITS.results)
+            throw new BrainError('limit', 'Search limit must be 1–100.');
+        const match = tokens.map((t) => '"' + t + '"').join(' AND '), found = rows(this.db, `SELECT DISTINCT e.id FROM entities e WHERE e.id IN (SELECT id FROM entity_search WHERE entity_search MATCH ? UNION SELECT p.entity_id FROM provenance p JOIN source_search s ON s.id=p.source_id WHERE source_search MATCH ?) ${options.includeRejected ? '' : "AND e.state!='rejected'"} ${options.kind ? 'AND e.kind=?' : ''} ORDER BY e.name,e.id LIMIT ?`, [match, match, ...(options.kind ? [options.kind] : []), limit]);
+        throwIfCancelled(options.signal);
+        return found.map((row) => this.state.entities[String(row[0])]);
+    }
+    neighbors(id, includeRejected = false) {
+        return rows(this.db, `SELECT id FROM edges WHERE (from_id=? OR to_id=?) ${includeRejected ? '' : "AND state!='rejected'"} ORDER BY id LIMIT ?`, [id, id, BRAIN_LIMITS.edges]).map((row) => this.state.edges[String(row[0])]);
+    }
+}
+//# sourceMappingURL=sqlite.js.map

package/dist/brain/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../src/brain/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,UAAU,EACV,YAAY,EACZ,YAAY,GAIb,MAAM,YAAY,CAAC;AAEpB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,IAAI,MAAwC,CAAC;AAC7C,MAAM,IAAI,GAAG,GAAG,EAAE,CAChB,CAAC,MAAM,KAAK,CAAC,KAAK,IAAI,EAAE;IACtB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC,CAAC,EAAE,CAAC,CAAC;AACR,MAAM,MAAM,GAAG;;;;;;;;;;;;8FAY+E,CAAC;AAC/F,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,MAAM,OAAO,GAAG,CAAC,MAAwC,EAAE,EAAE,CAC3D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrE,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC7E,SAAS,IAAI,CAAC,EAAY,EAAE,GAAW,EAAE,MAAM,GAAe,EAAE;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,IAAI,MAAM,CAAC,MAAM,IAAI,YAAY,CAAC,QAAQ,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,GAAG,YAAY,CAAC,OAAO;gBACzF,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,yCAAyC,CAAC,CAAC;YAC3E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AACD,MAAM,MAAM,GAAG,CAAC,EAAY,EAAE,EAAE,CAC9B,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,4DAA4D,CAAC,CAAC,CAAC;AACxF,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAE,EAAE,CACvC,MAAM,CACJ,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC;KAC7B,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAwC,CAAC,CAAC;KAC3D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAClE;KACA,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;AACJ,IAAI,cAAkC,CAAC;AACvC,KAAK,UAAU,KAAK,CAAC,KAAiB,EAAE,MAAoB;IAC1D,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;IACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACf,cAAc,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,MAAoB,EAAE,EAAE;YACnD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC;gBACH,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACF,MAAM,CAAC,8BAA8B,EAAE;YACrC,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC;YAC5B,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;SAC3B,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzB,EAAE,CAAC,GAAG,CAAC,iCAAiC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC9E,EAAE,CAAC,GAAG,CAAC,yCAAyC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzB,EAAE,CAAC,GAAG,CAAC,wCAAwC,EAAE;gBAC/C,MAAM,CAAC,EAAE;gBACT,MAAM,CAAC,IAAI;gBACX,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACnB,MAAM,CAAC,KAAK;gBACZ,aAAa,CAAC,MAAM,CAAC;aACtB,CAAC,CAAC;YACH,EAAE,CAAC,GAAG,CAAC,yCAAyC,EAAE;gBAChD,MAAM,CAAC,EAAE;gBACT,MAAM,CAAC,IAAI;gBACX,MAAM,CAAC,OAAO,GAAG,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC;aACzD,CAAC,CAAC;YACH,KAAK,MAAM,QAAQ,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACtE,EAAE,CAAC,GAAG,CAAC,oCAAoC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzB,EAAE,CAAC,GAAG,CAAC,uCAAuC,EAAE;gBAC9C,IAAI,CAAC,EAAE;gBACP,IAAI,CAAC,IAAI;gBACT,IAAI,CAAC,EAAE;gBACP,IAAI,CAAC,IAAI;gBACT,IAAI,CAAC,KAAK;gBACV,aAAa,CAAC,IAAI,CAAC;aACpB,CAAC,CAAC;QACL,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AACD,SAAS,MAAM,CAAC,EAAY,EAAE,KAAiB;IAC7C,IACE,IAAI,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,KAAK,cAAc;QAC7B,IAAI,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAE7D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAC7B,IAAI,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAC9E,CAAC;IACF,IACE,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAChC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE;QAC9B,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,KAAK,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAE9B,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAU,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,0BAA0B,KAAK,cAAc,CAAC,EACpE,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,IACE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACjC,MAAM,CAAC,IAAI,CACT,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,IAAI,OAAO,KAAK,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CACxF;YAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACvD,CAAC;IACD,uFAAuF;IACvF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI;QAC5B;YACE,eAAe;YACf,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACvC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;aAC/C,CAAC;SACH;QACD,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KAC7E,EAAE,CAAC;QACX,IACE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,4BAA4B,KAAK,cAAc,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;YAE1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,EAAE,CAAC,GAAG,CAAC,eAAe,KAAK,IAAI,KAAK,6BAA6B,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;SACxC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;SACzF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAClE,IACE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,yEAAyE,CAAC,CAAC;QAC5F,OAAO,CAAC,KAAK,CAAC;QAEd,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,8DAA8D;IAC9D,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,yCAAyC,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QAC1C,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,+CAA+C,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QACvC,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AACD,MAAM,OAAO,UAAU;IAEF,EAAE;IACV,KAAK;IACL,KAAK;IAHhB,YACmB,EAAY,EACpB,KAAiB,EACjB,KAA0B;kBAFlB,EAAE;qBACV,KAAK;qBACL,KAAK;IACb,CAAC;IACJ,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,KAAiB,EACjB,KAAkB,EAClB,MAAoB;QAEpB,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClB,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YACzD,IAAI,EAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,EAAE,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC7B,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAClB,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBACzB,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;gBAC/B,OAAO,IAAI,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,EAAE,EAAE,KAAK,EAAE,CAAC;gBACZ,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC;YACrD,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,UAAU,CAClB,OAAO,EACP,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAC/B,OAAO,IAAI,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IACD,MAAM;QACJ,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,CAAC,QAAgB;QACrB,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAE,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,0DAA0D,EAAE;YACtF,MAAM,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;QACxF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAClB,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,sDAAsD,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;IACpD,CAAC;IACD,MAAM,CACJ,KAAa,EACb,OAAO,GAKH,EAAE;QAEN,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YACpE,MAAM,IAAI,UAAU,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,UAAU;YACpD,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,kCAAkC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,WAAW;YAC5D,MAAM,IAAI,UAAU,CAAC,SAAS,EAAE,uCAAuC,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,YAAY,CAAC,OAAO;YAC3E,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAC1D,KAAK,GAAG,IAAI,CACV,IAAI,CAAC,EAAE,EACP,iOAAiO,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,+BAA+B,EAC9V,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAC/D,CAAC;QACJ,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAClE,CAAC;IACD,SAAS,CAAC,EAAU,EAAE,eAAe,GAAG,KAAK;QAC3C,OAAO,IAAI,CACT,IAAI,CAAC,EAAE,EACP,qDAAqD,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,sBAAsB,EACzH,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,CAC7B,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/brain/store.d.ts

@@ -0,0 +1,31 @@
+import { type BrainEvent, type BrainChange, type BrainInspection } from './types.js';
+import { BrainIndex } from './sqlite.js';
+export interface BrainWriteOptions {
+    signal?: AbortSignal;
+    expectedRevision?: string;
+    beforeCommit?: () => void;
+}
+/** Project/global namespaces are private and outside worker scope; source documents are never storage. */
+export declare class BrainStore {
+    readonly scope: 'project' | 'global';
+    readonly root: string;
+    readonly base: string;
+    readonly project: {
+        root: string;
+        key: string;
+    };
+    constructor(cwd: string, scope?: 'project' | 'global', base?: string);
+    private identity;
+    read(signal?: AbortSignal): BrainInspection;
+    private locked;
+    init(options?: BrainWriteOptions): Promise<BrainInspection>;
+    private save;
+    private cleanTemporary;
+    /** Reading a missing or damaged derived index never mutates the store. */
+    index(signal?: AbortSignal): Promise<BrainIndex>;
+    saveIndex(index: BrainIndex, options?: BrainWriteOptions): Promise<void>;
+    append(changes: BrainChange[], actor: BrainEvent['actor'], reason: string, options?: BrainWriteOptions): Promise<BrainInspection>;
+    reverse(eventId: string, reason: string, options?: BrainWriteOptions): Promise<BrainInspection>;
+    private commit;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/brain/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/brain/store.ts"],"names":[],"mappings":"AASA,OAAO,EAIL,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,eAAe,EAErB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AA2BD,0GAA0G;AAC1G,qBAAa,UAAU;IAMnB,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,QAAQ;IALtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,YACE,GAAG,EAAE,MAAM,EACF,KAAK,GAAE,SAAS,GAAG,QAAoB,EAChD,IAAI,SAA4C,EASjD;IACD,OAAO,CAAC,QAAQ;IAYhB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,eAAe,CAiC1C;YACa,MAAM;IAqDd,IAAI,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,eAAe,CAAC,CA8BpE;YACa,IAAI;IAwClB,OAAO,CAAC,cAAc;IAgBtB,0EAA0E;IACpE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAWrD;IACK,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBjF;IACK,MAAM,CACV,OAAO,EAAE,WAAW,EAAE,EACtB,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAC1B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,eAAe,CAAC,CAE1B;IACK,OAAO,CACX,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,eAAe,CAAC,CAqB1B;YACa,MAAM;CAsErB"}

package/dist/brain/store.js

@@ -0,0 +1,324 @@
+import * as fs from 'node:fs';
+import { join, resolve } from 'node:path';
+import { homedir } from 'node:os';
+import { randomUUID } from 'node:crypto';
+import { canonicalJson, canonicalPath, digest, projectIdentity } from '../approvals/index.js';
+import { throwIfCancelled, cancellableDelay } from '../cancellation.js';
+import { assertExecutionStoreOutsideProject } from '../execution/index.js';
+import { recoverDeadWriterLock } from '../execution/writer-recovery.js';
+import { privateDirectory, readArtifactBytes } from '../orchestration/execution-store.js';
+import { BrainError, BRAIN_LIMITS, } from './types.js';
+import { BrainIndex } from './sqlite.js';
+import { replayBrain, inverseChanges } from './journal.js';
+function exists(path) {
+    try {
+        fs.lstatSync(path);
+        return true;
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return false;
+        throw e;
+    }
+}
+function durable(file, bytes) {
+    const fd = fs.openSync(file, 'wx', 0o600);
+    try {
+        fs.writeFileSync(fd, bytes);
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+function sync(dir) {
+    const fd = fs.openSync(dir, 'r');
+    try {
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+/** Project/global namespaces are private and outside worker scope; source documents are never storage. */
+export class BrainStore {
+    scope;
+    root;
+    base;
+    project;
+    constructor(cwd, scope = 'project', base = join(homedir(), '.calliope-cli', 'brain')) {
+        this.scope = scope;
+        if (!['project', 'global'].includes(scope))
+            throw new BrainError('invalid', 'Unknown brain scope.');
+        const identity = projectIdentity(cwd);
+        this.project = { root: identity.project, key: identity.projectKey };
+        this.base = resolve(base);
+        this.root = join(this.base, scope === 'global' ? 'global' : identity.projectKey);
+        assertExecutionStoreOutsideProject(identity.project, this.base);
+    }
+    identity() {
+        const current = projectIdentity(this.project.root);
+        if (current.projectKey !== this.project.key)
+            throw new BrainError('conflict', 'Project identity changed; no brain operation is authorized.');
+        if (canonicalPath(this.base) !== this.base || canonicalPath(this.root) !== this.root)
+            throw new BrainError('conflict', 'Brain storage contains an alias.');
+        privateDirectory(this.base);
+        return privateDirectory(this.root);
+    }
+    read(signal) {
+        throwIfCancelled(signal);
+        if (!exists(this.root))
+            throw new BrainError('not-found', 'No brain exists in this scope; run brain init.');
+        this.identity();
+        const file = join(this.root, 'history.json');
+        if (!exists(file))
+            throw new BrainError('unavailable', 'Brain initialization is incomplete; retry init after its writer stops.');
+        const stat = fs.lstatSync(file);
+        if (stat.nlink !== 1)
+            throw new BrainError('unavailable', 'Brain history must not share a writable file identity.');
+        let value;
+        try {
+            value = JSON.parse(readArtifactBytes(file, BRAIN_LIMITS.journalBytes, true).toString());
+        }
+        catch {
+            throw new BrainError('unavailable', 'Brain history is unreadable; preserve it and restore a verified backup.');
+        }
+        const inspected = replayBrain(value, signal), header = inspected.journal.header;
+        if (header.scope !== this.scope ||
+            canonicalJson(header.project) !==
+                canonicalJson(this.scope === 'project' ? this.project : null))
+            throw new BrainError('conflict', 'Brain history belongs to another project or scope.');
+        throwIfCancelled(signal);
+        return inspected;
+    }
+    async locked(operation, signal) {
+        const before = this.identity(), lock = join(this.root, 'writer.lock');
+        let fd;
+        for (let n = 0; n < 50; n++) {
+            throwIfCancelled(signal);
+            try {
+                fd = fs.openSync(lock, 'wx', 0o600);
+                break;
+            }
+            catch (e) {
+                if (e.code !== 'EEXIST')
+                    throw e;
+                recoverDeadWriterLock(lock);
+                await cancellableDelay(10, signal);
+            }
+        }
+        if (fd === undefined)
+            throw new BrainError('conflict', 'Another brain writer is active; retry after it finishes.');
+        const captured = fs.fstatSync(fd);
+        const check = () => {
+            throwIfCancelled(signal);
+            const after = this.identity(), current = fs.lstatSync(lock);
+            if (after.dev !== before.dev ||
+                after.ino !== before.ino ||
+                current.dev !== captured.dev ||
+                current.ino !== captured.ino)
+                throw new BrainError('conflict', 'Brain storage ownership changed during the write.');
+        };
+        try {
+            fs.writeFileSync(fd, String(process.pid));
+            return await operation(check);
+        }
+        finally {
+            fs.closeSync(fd);
+            try {
+                const after = this.identity(), now = fs.lstatSync(lock);
+                if (after.dev === before.dev &&
+                    after.ino === before.ino &&
+                    now.ino === captured.ino &&
+                    now.dev === captured.dev)
+                    fs.unlinkSync(lock);
+            }
+            catch {
+                /* Preserve a foreign or interrupted writer's state. */
+            }
+        }
+    }
+    async init(options = {}) {
+        throwIfCancelled(options.signal);
+        if (canonicalPath(this.base) !== this.base)
+            throw new BrainError('conflict', 'Brain storage contains an alias.');
+        fs.mkdirSync(this.base, { recursive: true, mode: 0o700 });
+        privateDirectory(this.base);
+        if (!exists(this.root))
+            try {
+                fs.mkdirSync(this.root, { mode: 0o700 });
+            }
+            catch (e) {
+                if (e.code !== 'EEXIST')
+                    throw e;
+            }
+        return this.locked(async (check) => {
+            if (exists(join(this.root, 'history.json')))
+                return this.read(options.signal);
+            const header = {
+                version: 1,
+                id: randomUUID(),
+                scope: this.scope,
+                project: this.scope === 'project' ? this.project : null,
+                createdAt: new Date().toISOString(),
+            }, journal = {
+                version: 1,
+                header,
+                events: [],
+                hash: digest(canonicalJson(header)),
+            };
+            await this.save(journal, undefined, check, options);
+            return this.read(options.signal);
+        }, options.signal);
+    }
+    async save(journal, prior, check, options) {
+        const content = JSON.stringify(journal);
+        if (Buffer.byteLength(content) > BRAIN_LIMITS.journalBytes)
+            throw new BrainError('limit', 'Brain history reached its byte limit; preserve or export it before continuing.');
+        const file = join(this.root, 'history.json'), temp = join(this.root, randomUUID() + '.tmp'), root = this.identity();
+        let temporary;
+        try {
+            durable(temp, content);
+            temporary = fs.lstatSync(temp);
+            check();
+            if (prior
+                ? !readArtifactBytes(file, BRAIN_LIMITS.journalBytes, true).equals(prior)
+                : exists(file))
+                throw new BrainError('conflict', 'Brain history changed before commit.');
+            options.beforeCommit?.();
+            check();
+            if (prior
+                ? !readArtifactBytes(file, BRAIN_LIMITS.journalBytes, true).equals(prior)
+                : exists(file))
+                throw new BrainError('conflict', 'Brain history changed during final checks.');
+            fs.renameSync(temp, file);
+            sync(this.root);
+        }
+        finally {
+            this.cleanTemporary(temp, root, temporary);
+        }
+    }
+    cleanTemporary(file, root, temporary) {
+        try {
+            const current = this.identity(), stat = fs.lstatSync(file);
+            if (temporary &&
+                current.dev === root.dev &&
+                current.ino === root.ino &&
+                stat.dev === temporary.dev &&
+                stat.ino === temporary.ino)
+                fs.unlinkSync(file);
+        }
+        catch {
+            /* Preserve foreign state; interrupted private temporary files may be inspected. */
+        }
+    }
+    /** Reading a missing or damaged derived index never mutates the store. */
+    async index(signal) {
+        const view = this.read(signal), file = join(this.root, 'index.sqlite');
+        let bytes;
+        try {
+            if (fs.lstatSync(file).nlink === 1)
+                bytes = readArtifactBytes(file, BRAIN_LIMITS.indexBytes, true);
+        }
+        catch {
+            /* The validated journal rebuilds a missing or damaged cache. */
+        }
+        return BrainIndex.open(view.state, bytes, signal);
+    }
+    async saveIndex(index, options = {}) {
+        const bytes = index.export();
+        if (bytes.byteLength > BRAIN_LIMITS.indexBytes)
+            throw new BrainError('limit', 'Brain index exceeds its byte limit.');
+        await this.locked(async (check) => {
+            if (this.read(options.signal).state.revision !== index.state.revision)
+                throw new BrainError('conflict', 'Brain changed before index replacement.');
+            const file = join(this.root, 'index.sqlite'), temp = join(this.root, randomUUID() + '.tmp'), root = this.identity();
+            let temporary;
+            try {
+                durable(temp, bytes);
+                temporary = fs.lstatSync(temp);
+                options.beforeCommit?.();
+                check();
+                if (this.read(options.signal).state.revision !== index.state.revision)
+                    throw new BrainError('conflict', 'Brain changed during index replacement.');
+                fs.renameSync(temp, file);
+                sync(this.root);
+            }
+            finally {
+                this.cleanTemporary(temp, root, temporary);
+            }
+        }, options.signal);
+    }
+    async append(changes, actor, reason, options = {}) {
+        return this.commit(() => ({ changes, actor, reason, reverses: null }), options);
+    }
+    async reverse(eventId, reason, options = {}) {
+        return this.commit((prior) => {
+            const index = prior.journal.events.findIndex((e) => e.id === eventId);
+            if (index < 0)
+                throw new BrainError('not-found', 'Unknown brain event.');
+            const prefix = prior.journal.events.slice(0, index), before = replayBrain({
+                ...prior.journal,
+                events: prefix,
+                hash: prefix.at(-1)?.hash ?? digest(canonicalJson(prior.journal.header)),
+            }, options.signal).state;
+            const changes = inverseChanges(prior.journal.events[index], before);
+            if (!changes.length)
+                throw new BrainError('conflict', 'Source evidence is immutable; this event has no reversible knowledge changes.');
+            return { changes, actor: 'reversal', reason, reverses: eventId };
+        }, options);
+    }
+    async commit(make, options) {
+        throwIfCancelled(options.signal);
+        this.read(options.signal);
+        return this.locked(async (check) => {
+            const file = join(this.root, 'history.json'), raw = readArtifactBytes(file, BRAIN_LIMITS.journalBytes, true), prior = this.read(options.signal);
+            if (options.expectedRevision !== undefined &&
+                options.expectedRevision !== prior.state.revision)
+                throw new BrainError('conflict', 'Brain revision changed during review.');
+            if (prior.journal.events.length >= BRAIN_LIMITS.events)
+                throw new BrainError('limit', 'Brain event retention reached; preserve or export its history.');
+            const proposal = make(prior), chunks = [];
+            let chunk = [], bytes = 0;
+            if (!proposal.changes.length ||
+                proposal.changes.length > BRAIN_LIMITS.entities + BRAIN_LIMITS.edges + BRAIN_LIMITS.sources)
+                throw new BrainError('limit', 'Brain transaction record count is outside its bound.');
+            for (const change of proposal.changes) {
+                throwIfCancelled(options.signal);
+                const size = Buffer.byteLength(JSON.stringify(change));
+                if (chunk.length && (chunk.length === BRAIN_LIMITS.changes || bytes + size > 768 * 1024)) {
+                    chunks.push(chunk);
+                    chunk = [];
+                    bytes = 0;
+                }
+                chunk.push(change);
+                bytes += size;
+            }
+            chunks.push(chunk);
+            if (prior.journal.events.length + chunks.length > BRAIN_LIMITS.events)
+                throw new BrainError('limit', 'Brain event retention reached; preserve or export its history.');
+            if (proposal.actor === 'reversal' && chunks.length !== 1)
+                throw new BrainError('limit', 'A reversal must match one retained event.');
+            const journal = { ...prior.journal, events: [...prior.journal.events] };
+            for (const changes of chunks) {
+                const body = {
+                    version: 1,
+                    id: randomUUID(),
+                    sequence: journal.events.length + 1,
+                    at: [new Date().toISOString(), journal.events.at(-1)?.at ?? journal.header.createdAt]
+                        .sort()
+                        .at(-1),
+                    previous: journal.hash,
+                    ...proposal,
+                    changes,
+                }, event = { ...body, hash: digest(canonicalJson(body)) };
+                journal.events.push(event);
+                journal.hash = event.hash;
+            }
+            replayBrain(journal, options.signal);
+            await this.save(journal, raw, check, options);
+            return this.read(options.signal);
+        }, options.signal);
+    }
+}
+//# sourceMappingURL=store.js.map