@claudexor/daemon 3.25.1 → 4.0.0

package/dist/store/schema.d.ts

@@ -0,0 +1,33 @@
+import type { DatabaseSync } from "node:sqlite";
+/** `PRAGMA application_id` of every engine store ("CXEN"). */
+export declare const ENGINE_APPLICATION_ID = 1129858382;
+/** `PRAGMA user_version`: the one schema this engine creates and serves. */
+export declare const ENGINE_SCHEMA_VERSION = 1;
+/**
+ * SYNTHESIS_R5 §5 with R5_AMENDMENTS A1 (`command.kind`/`live` replace
+ * `retention_exempt`; obligation `state`/`materialized_g`). STRICT everywhere; WITHOUT ROWID where the
+ * primary key is the access path; partial indexes carry the retention and
+ * listing predicates so a query over the current generation never visits
+ * history. `pid` is the surrogate of one partition generation and the only
+ * partition key a row carries.
+ */
+export declare const ENGINE_SCHEMA_SQL = "\nCREATE TABLE meta(key TEXT PRIMARY KEY, value TEXT NOT NULL) STRICT;\nCREATE TABLE partition(id INTEGER PRIMARY KEY, name TEXT NOT NULL, epoch TEXT NOT NULL, status TEXT NOT NULL,\n  next_seq INTEGER NOT NULL, project_id TEXT, created_at TEXT NOT NULL, UNIQUE(name, epoch)) STRICT;\nCREATE TABLE event(pid INTEGER NOT NULL, seq INTEGER NOT NULL, time TEXT NOT NULL, type TEXT NOT NULL,\n  payload BLOB NOT NULL, payload_sha TEXT, slot_key TEXT, group_key TEXT, PRIMARY KEY(pid, seq)) WITHOUT ROWID, STRICT;\nCREATE INDEX event_type    ON event(pid, type, seq);\nCREATE INDEX event_slot    ON event(pid, slot_key)  WHERE slot_key  IS NOT NULL;\nCREATE INDEX event_group   ON event(pid, group_key) WHERE group_key IS NOT NULL;\nCREATE INDEX event_payload ON event(payload_sha)    WHERE payload_sha IS NOT NULL;\nCREATE INDEX event_command_age ON event(time,pid,seq) WHERE type IN ('command.accepted','command.updated');\nCREATE TABLE blob(sha256 TEXT PRIMARY KEY, size INTEGER NOT NULL, inline BLOB) STRICT;\nCREATE TABLE command(id TEXT PRIMARY KEY, pid INTEGER NOT NULL, operation TEXT NOT NULL, state TEXT NOT NULL, client_id TEXT,\n  run_id TEXT, task_id TEXT, run_dir TEXT, thread_id TEXT, turn_id TEXT, delegated_from TEXT, continue_from TEXT, scope_root TEXT,\n  created_at TEXT NOT NULL, started_at TEXT, finished_at TEXT, summary BLOB NOT NULL, params_sha TEXT NOT NULL, result_sha TEXT,\n  error BLOB, last_event_seq INTEGER, response_state TEXT, response_expires_at TEXT, request_resource_id TEXT, response_resource_id TEXT,\n  kind TEXT NOT NULL, live INTEGER NOT NULL DEFAULT 1, needs_decision INTEGER NOT NULL DEFAULT 0) STRICT;\nCREATE INDEX command_run       ON command(run_id);\nCREATE INDEX command_partition ON command(pid);\nCREATE INDEX command_active    ON command(state, pid) WHERE live = 1 AND state IN ('queued','running');\nCREATE INDEX command_thread    ON command(thread_id, state);\nCREATE INDEX command_turn      ON command(turn_id, created_at);\nCREATE INDEX command_request_resource ON command(request_resource_id) WHERE request_resource_id IS NOT NULL;\nCREATE INDEX command_response_resource ON command(response_resource_id) WHERE response_resource_id IS NOT NULL;\nCREATE INDEX command_parent    ON command(delegated_from);\nCREATE INDEX command_continue  ON command(continue_from);\nCREATE INDEX command_list      ON command(created_at DESC, id DESC)        WHERE live = 1 AND kind = 'product';\nCREATE INDEX command_list_state ON command(state, created_at DESC, id DESC) WHERE live = 1 AND kind = 'product';\nCREATE INDEX command_terminal  ON command(created_at, id)\n  WHERE live = 1 AND kind IN ('product','delivery','maintenance') AND finished_at IS NOT NULL;\nCREATE INDEX command_prunable  ON command(created_at, id)\n  WHERE live = 1 AND kind IN ('product','delivery','maintenance') AND finished_at IS NOT NULL AND needs_decision = 0;\nCREATE INDEX command_expiry    ON command(response_state, response_expires_at) WHERE kind = 'model';\nCREATE INDEX command_maintenance_harness ON command(json_extract(CAST(summary AS TEXT),'$.params.harness'),created_at)\n  WHERE live=1 AND kind='maintenance';\nCREATE INDEX command_params    ON command(params_sha);\nCREATE INDEX command_result    ON command(result_sha) WHERE result_sha IS NOT NULL;\nCREATE TABLE run_terminal(run_id TEXT PRIMARY KEY, pid INTEGER NOT NULL, event BLOB NOT NULL) STRICT;\nCREATE TABLE effect_obligation(kind TEXT NOT NULL, key TEXT NOT NULL, pid INTEGER NOT NULL, created_at TEXT NOT NULL, payload BLOB NOT NULL,\n  state TEXT NOT NULL DEFAULT 'pending', materialized_g INTEGER, PRIMARY KEY(kind, key)) WITHOUT ROWID, STRICT;\nCREATE TABLE idempotency(owner TEXT NOT NULL, pid INTEGER NOT NULL, key_digest TEXT NOT NULL, operation TEXT NOT NULL,\n  request_digest TEXT NOT NULL, target_id TEXT NOT NULL, result BLOB, created_at TEXT NOT NULL,\n  PRIMARY KEY(owner, pid, key_digest)) WITHOUT ROWID, STRICT;\nCREATE INDEX idempotency_target ON idempotency(target_id);\nCREATE TABLE thread(id TEXT PRIMARY KEY, pid INTEGER NOT NULL, state TEXT NOT NULL, updated_at TEXT NOT NULL,\n  head_revision INTEGER NOT NULL DEFAULT 0, body BLOB NOT NULL) STRICT;\nCREATE INDEX thread_list ON thread(pid, state, updated_at DESC);\nCREATE TABLE turn(id TEXT PRIMARY KEY, pid INTEGER NOT NULL, thread_id TEXT NOT NULL, ordinal INTEGER NOT NULL, run_id TEXT,\n  created_at TEXT NOT NULL, prompt_sha TEXT NOT NULL, body BLOB NOT NULL) STRICT;\nCREATE UNIQUE INDEX turn_thread ON turn(thread_id, ordinal);\nCREATE UNIQUE INDEX turn_run    ON turn(run_id) WHERE run_id IS NOT NULL;\nCREATE INDEX turn_prompt        ON turn(prompt_sha);\nCREATE TABLE session(id TEXT PRIMARY KEY, thread_id TEXT NOT NULL, harness_id TEXT NOT NULL, profile_id TEXT NOT NULL DEFAULT '', pid INTEGER NOT NULL,\n  insertion_ordinal INTEGER NOT NULL DEFAULT 0, body BLOB NOT NULL) WITHOUT ROWID, STRICT;\nCREATE INDEX session_lane ON session(thread_id, harness_id, profile_id);\nCREATE INDEX session_order ON session(thread_id, insertion_ordinal);\nCREATE INDEX session_partition ON session(pid, insertion_ordinal);\nCREATE TABLE lane_checkpoint(thread_id TEXT NOT NULL, harness_id TEXT NOT NULL, profile_id TEXT NOT NULL DEFAULT '', pid INTEGER NOT NULL,\n  insertion_ordinal INTEGER NOT NULL DEFAULT 0, turn_id TEXT NOT NULL, body BLOB NOT NULL, PRIMARY KEY(thread_id, harness_id, profile_id)) WITHOUT ROWID, STRICT;\nCREATE INDEX lane_checkpoint_order ON lane_checkpoint(thread_id, insertion_ordinal);\nCREATE INDEX lane_checkpoint_partition ON lane_checkpoint(pid, insertion_ordinal);\nCREATE TABLE interaction(id TEXT PRIMARY KEY, pid INTEGER NOT NULL, run_id TEXT NOT NULL, state TEXT NOT NULL,\n  request BLOB NOT NULL, resolution BLOB) STRICT;\nCREATE INDEX interaction_pending ON interaction(run_id) WHERE state = 'pending';\nCREATE INDEX interaction_run ON interaction(run_id);\nCREATE INDEX interaction_partition_pending ON interaction(pid,run_id) WHERE state = 'pending';\nCREATE TABLE operator_decision(run_id TEXT PRIMARY KEY, pid INTEGER NOT NULL, body BLOB NOT NULL) STRICT;\nCREATE TABLE project(id TEXT PRIMARY KEY, pid INTEGER NOT NULL, root TEXT NOT NULL, status TEXT NOT NULL,\n  current_pid INTEGER, creation_key_digest TEXT, created_at TEXT NOT NULL, updated_at TEXT NOT NULL, body BLOB NOT NULL) STRICT;\nCREATE UNIQUE INDEX project_root_active ON project(pid, root) WHERE status = 'active';\nCREATE INDEX project_current_pid ON project(current_pid) WHERE status = 'active';\nCREATE TABLE pruned_root(root TEXT PRIMARY KEY) STRICT;\nCREATE TABLE resource(id TEXT PRIMARY KEY, purpose TEXT, kind TEXT NOT NULL, sha256 TEXT NOT NULL, size_bytes INTEGER NOT NULL,\n  state TEXT NOT NULL, created_at TEXT NOT NULL, expires_at TEXT, released_at TEXT, body BLOB NOT NULL) STRICT;\nCREATE INDEX resource_sha    ON resource(sha256);\nCREATE INDEX resource_expiry ON resource(state, expires_at);\nCREATE TABLE upload(id TEXT PRIMARY KEY, state TEXT NOT NULL, received_bytes INTEGER NOT NULL, expected_bytes INTEGER,\n  finalize_sha TEXT, body BLOB NOT NULL) STRICT;\nCREATE INDEX upload_finalize ON upload(finalize_sha) WHERE finalize_sha IS NOT NULL;\nCREATE TABLE import_partition(name TEXT PRIMARY KEY, status TEXT NOT NULL, pid INTEGER, epoch TEXT, next_seq INTEGER,\n  previous_frame_hash TEXT, source_size INTEGER, source_mtime TEXT, fingerprint TEXT, records INTEGER, digest TEXT, problem TEXT) STRICT;\nCREATE TABLE unclassified(pid INTEGER NOT NULL, seq INTEGER NOT NULL, type TEXT NOT NULL, reason TEXT NOT NULL, payload BLOB NOT NULL,\n  PRIMARY KEY(pid, seq)) WITHOUT ROWID, STRICT;\n";
+/** Every table the DDL creates, in creation order (for tests and the importer seam). */
+export declare const ENGINE_TABLES: readonly string[];
+export interface SchemaIdentity {
+    applicationId: number;
+    userVersion: number;
+    pageCount: number;
+    /** Rows in `sqlite_master`: a header-only file (journal mode set, no schema yet) is still fresh. */
+    objectCount: number;
+}
+export declare function readSchemaIdentity(db: DatabaseSync): SchemaIdentity;
+/**
+ * Refuse a foreign or unknown database BEFORE any write. A database with
+ * pages must carry this engine's application id and a schema version this
+ * engine can serve or migrate; an empty file is fresh and gets created.
+ */
+export declare function assertSchemaServable(identity: SchemaIdentity): "fresh" | "current" | "migrate";
+/** Create a fresh schema or apply the migration path; never touches a refused file. */
+export declare function ensureSchema(db: DatabaseSync, now?: () => Date): void;
+//# sourceMappingURL=schema.d.ts.map

package/dist/store/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/store/schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAChD,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,k6OAmF7B,CAAC;AAEF,wFAAwF;AACxF,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAE1C,CAAC;AASF,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,oGAAoG;IACpG,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,GAAG,cAAc,CAYnE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAqB9F;AAED,uFAAuF;AACvF,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,GAAE,MAAM,IAAuB,GAAG,IAAI,CAkCvF"}

package/dist/store/schema.js

@@ -0,0 +1,187 @@
+import { randomUUID } from "node:crypto";
+import { StoreSchemaUnsupportedError } from "./errors.js";
+/** `PRAGMA application_id` of every engine store ("CXEN"). */
+export const ENGINE_APPLICATION_ID = 0x4358454e;
+/** `PRAGMA user_version`: the one schema this engine creates and serves. */
+export const ENGINE_SCHEMA_VERSION = 1;
+/**
+ * SYNTHESIS_R5 §5 with R5_AMENDMENTS A1 (`command.kind`/`live` replace
+ * `retention_exempt`; obligation `state`/`materialized_g`). STRICT everywhere; WITHOUT ROWID where the
+ * primary key is the access path; partial indexes carry the retention and
+ * listing predicates so a query over the current generation never visits
+ * history. `pid` is the surrogate of one partition generation and the only
+ * partition key a row carries.
+ */
+export const ENGINE_SCHEMA_SQL = `
+CREATE TABLE meta(key TEXT PRIMARY KEY, value TEXT NOT NULL) STRICT;
+CREATE TABLE partition(id INTEGER PRIMARY KEY, name TEXT NOT NULL, epoch TEXT NOT NULL, status TEXT NOT NULL,
+  next_seq INTEGER NOT NULL, project_id TEXT, created_at TEXT NOT NULL, UNIQUE(name, epoch)) STRICT;
+CREATE TABLE event(pid INTEGER NOT NULL, seq INTEGER NOT NULL, time TEXT NOT NULL, type TEXT NOT NULL,
+  payload BLOB NOT NULL, payload_sha TEXT, slot_key TEXT, group_key TEXT, PRIMARY KEY(pid, seq)) WITHOUT ROWID, STRICT;
+CREATE INDEX event_type    ON event(pid, type, seq);
+CREATE INDEX event_slot    ON event(pid, slot_key)  WHERE slot_key  IS NOT NULL;
+CREATE INDEX event_group   ON event(pid, group_key) WHERE group_key IS NOT NULL;
+CREATE INDEX event_payload ON event(payload_sha)    WHERE payload_sha IS NOT NULL;
+CREATE INDEX event_command_age ON event(time,pid,seq) WHERE type IN ('command.accepted','command.updated');
+CREATE TABLE blob(sha256 TEXT PRIMARY KEY, size INTEGER NOT NULL, inline BLOB) STRICT;
+CREATE TABLE command(id TEXT PRIMARY KEY, pid INTEGER NOT NULL, operation TEXT NOT NULL, state TEXT NOT NULL, client_id TEXT,
+  run_id TEXT, task_id TEXT, run_dir TEXT, thread_id TEXT, turn_id TEXT, delegated_from TEXT, continue_from TEXT, scope_root TEXT,
+  created_at TEXT NOT NULL, started_at TEXT, finished_at TEXT, summary BLOB NOT NULL, params_sha TEXT NOT NULL, result_sha TEXT,
+  error BLOB, last_event_seq INTEGER, response_state TEXT, response_expires_at TEXT, request_resource_id TEXT, response_resource_id TEXT,
+  kind TEXT NOT NULL, live INTEGER NOT NULL DEFAULT 1, needs_decision INTEGER NOT NULL DEFAULT 0) STRICT;
+CREATE INDEX command_run       ON command(run_id);
+CREATE INDEX command_partition ON command(pid);
+CREATE INDEX command_active    ON command(state, pid) WHERE live = 1 AND state IN ('queued','running');
+CREATE INDEX command_thread    ON command(thread_id, state);
+CREATE INDEX command_turn      ON command(turn_id, created_at);
+CREATE INDEX command_request_resource ON command(request_resource_id) WHERE request_resource_id IS NOT NULL;
+CREATE INDEX command_response_resource ON command(response_resource_id) WHERE response_resource_id IS NOT NULL;
+CREATE INDEX command_parent    ON command(delegated_from);
+CREATE INDEX command_continue  ON command(continue_from);
+CREATE INDEX command_list      ON command(created_at DESC, id DESC)        WHERE live = 1 AND kind = 'product';
+CREATE INDEX command_list_state ON command(state, created_at DESC, id DESC) WHERE live = 1 AND kind = 'product';
+CREATE INDEX command_terminal  ON command(created_at, id)
+  WHERE live = 1 AND kind IN ('product','delivery','maintenance') AND finished_at IS NOT NULL;
+CREATE INDEX command_prunable  ON command(created_at, id)
+  WHERE live = 1 AND kind IN ('product','delivery','maintenance') AND finished_at IS NOT NULL AND needs_decision = 0;
+CREATE INDEX command_expiry    ON command(response_state, response_expires_at) WHERE kind = 'model';
+CREATE INDEX command_maintenance_harness ON command(json_extract(CAST(summary AS TEXT),'$.params.harness'),created_at)
+  WHERE live=1 AND kind='maintenance';
+CREATE INDEX command_params    ON command(params_sha);
+CREATE INDEX command_result    ON command(result_sha) WHERE result_sha IS NOT NULL;
+CREATE TABLE run_terminal(run_id TEXT PRIMARY KEY, pid INTEGER NOT NULL, event BLOB NOT NULL) STRICT;
+CREATE TABLE effect_obligation(kind TEXT NOT NULL, key TEXT NOT NULL, pid INTEGER NOT NULL, created_at TEXT NOT NULL, payload BLOB NOT NULL,
+  state TEXT NOT NULL DEFAULT 'pending', materialized_g INTEGER, PRIMARY KEY(kind, key)) WITHOUT ROWID, STRICT;
+CREATE TABLE idempotency(owner TEXT NOT NULL, pid INTEGER NOT NULL, key_digest TEXT NOT NULL, operation TEXT NOT NULL,
+  request_digest TEXT NOT NULL, target_id TEXT NOT NULL, result BLOB, created_at TEXT NOT NULL,
+  PRIMARY KEY(owner, pid, key_digest)) WITHOUT ROWID, STRICT;
+CREATE INDEX idempotency_target ON idempotency(target_id);
+CREATE TABLE thread(id TEXT PRIMARY KEY, pid INTEGER NOT NULL, state TEXT NOT NULL, updated_at TEXT NOT NULL,
+  head_revision INTEGER NOT NULL DEFAULT 0, body BLOB NOT NULL) STRICT;
+CREATE INDEX thread_list ON thread(pid, state, updated_at DESC);
+CREATE TABLE turn(id TEXT PRIMARY KEY, pid INTEGER NOT NULL, thread_id TEXT NOT NULL, ordinal INTEGER NOT NULL, run_id TEXT,
+  created_at TEXT NOT NULL, prompt_sha TEXT NOT NULL, body BLOB NOT NULL) STRICT;
+CREATE UNIQUE INDEX turn_thread ON turn(thread_id, ordinal);
+CREATE UNIQUE INDEX turn_run    ON turn(run_id) WHERE run_id IS NOT NULL;
+CREATE INDEX turn_prompt        ON turn(prompt_sha);
+CREATE TABLE session(id TEXT PRIMARY KEY, thread_id TEXT NOT NULL, harness_id TEXT NOT NULL, profile_id TEXT NOT NULL DEFAULT '', pid INTEGER NOT NULL,
+  insertion_ordinal INTEGER NOT NULL DEFAULT 0, body BLOB NOT NULL) WITHOUT ROWID, STRICT;
+CREATE INDEX session_lane ON session(thread_id, harness_id, profile_id);
+CREATE INDEX session_order ON session(thread_id, insertion_ordinal);
+CREATE INDEX session_partition ON session(pid, insertion_ordinal);
+CREATE TABLE lane_checkpoint(thread_id TEXT NOT NULL, harness_id TEXT NOT NULL, profile_id TEXT NOT NULL DEFAULT '', pid INTEGER NOT NULL,
+  insertion_ordinal INTEGER NOT NULL DEFAULT 0, turn_id TEXT NOT NULL, body BLOB NOT NULL, PRIMARY KEY(thread_id, harness_id, profile_id)) WITHOUT ROWID, STRICT;
+CREATE INDEX lane_checkpoint_order ON lane_checkpoint(thread_id, insertion_ordinal);
+CREATE INDEX lane_checkpoint_partition ON lane_checkpoint(pid, insertion_ordinal);
+CREATE TABLE interaction(id TEXT PRIMARY KEY, pid INTEGER NOT NULL, run_id TEXT NOT NULL, state TEXT NOT NULL,
+  request BLOB NOT NULL, resolution BLOB) STRICT;
+CREATE INDEX interaction_pending ON interaction(run_id) WHERE state = 'pending';
+CREATE INDEX interaction_run ON interaction(run_id);
+CREATE INDEX interaction_partition_pending ON interaction(pid,run_id) WHERE state = 'pending';
+CREATE TABLE operator_decision(run_id TEXT PRIMARY KEY, pid INTEGER NOT NULL, body BLOB NOT NULL) STRICT;
+CREATE TABLE project(id TEXT PRIMARY KEY, pid INTEGER NOT NULL, root TEXT NOT NULL, status TEXT NOT NULL,
+  current_pid INTEGER, creation_key_digest TEXT, created_at TEXT NOT NULL, updated_at TEXT NOT NULL, body BLOB NOT NULL) STRICT;
+CREATE UNIQUE INDEX project_root_active ON project(pid, root) WHERE status = 'active';
+CREATE INDEX project_current_pid ON project(current_pid) WHERE status = 'active';
+CREATE TABLE pruned_root(root TEXT PRIMARY KEY) STRICT;
+CREATE TABLE resource(id TEXT PRIMARY KEY, purpose TEXT, kind TEXT NOT NULL, sha256 TEXT NOT NULL, size_bytes INTEGER NOT NULL,
+  state TEXT NOT NULL, created_at TEXT NOT NULL, expires_at TEXT, released_at TEXT, body BLOB NOT NULL) STRICT;
+CREATE INDEX resource_sha    ON resource(sha256);
+CREATE INDEX resource_expiry ON resource(state, expires_at);
+CREATE TABLE upload(id TEXT PRIMARY KEY, state TEXT NOT NULL, received_bytes INTEGER NOT NULL, expected_bytes INTEGER,
+  finalize_sha TEXT, body BLOB NOT NULL) STRICT;
+CREATE INDEX upload_finalize ON upload(finalize_sha) WHERE finalize_sha IS NOT NULL;
+CREATE TABLE import_partition(name TEXT PRIMARY KEY, status TEXT NOT NULL, pid INTEGER, epoch TEXT, next_seq INTEGER,
+  previous_frame_hash TEXT, source_size INTEGER, source_mtime TEXT, fingerprint TEXT, records INTEGER, digest TEXT, problem TEXT) STRICT;
+CREATE TABLE unclassified(pid INTEGER NOT NULL, seq INTEGER NOT NULL, type TEXT NOT NULL, reason TEXT NOT NULL, payload BLOB NOT NULL,
+  PRIMARY KEY(pid, seq)) WITHOUT ROWID, STRICT;
+`;
+/** Every table the DDL creates, in creation order (for tests and the importer seam). */
+export const ENGINE_TABLES = Object.freeze([...ENGINE_SCHEMA_SQL.matchAll(/CREATE TABLE (\w+)\(/g)].map((match) => match[1]));
+/**
+ * Migrations from an older `user_version` to the current one, keyed by the
+ * version they start from. Empty for version 1; a stored version with no
+ * entry here (older without a path, or newer than this engine) is refused.
+ */
+const SCHEMA_MIGRATIONS = new Map();
+export function readSchemaIdentity(db) {
+    const scalar = (sql) => {
+        const row = db.prepare(sql).get();
+        const value = Object.values(row)[0];
+        return typeof value === "bigint" ? Number(value) : Number(value);
+    };
+    return {
+        applicationId: scalar("PRAGMA application_id"),
+        userVersion: scalar("PRAGMA user_version"),
+        pageCount: scalar("PRAGMA page_count"),
+        objectCount: scalar("SELECT count(*) FROM sqlite_master"),
+    };
+}
+/**
+ * Refuse a foreign or unknown database BEFORE any write. A database with
+ * pages must carry this engine's application id and a schema version this
+ * engine can serve or migrate; an empty file is fresh and gets created.
+ */
+export function assertSchemaServable(identity) {
+    const untouched = identity.applicationId === 0 && identity.userVersion === 0;
+    if (identity.pageCount === 0 || (identity.objectCount === 0 && untouched))
+        return "fresh";
+    if (identity.applicationId !== ENGINE_APPLICATION_ID) {
+        throw new StoreSchemaUnsupportedError({
+            applicationId: identity.applicationId,
+            userVersion: identity.userVersion,
+            detail: "the database file does not belong to the Claudexor engine store",
+        });
+    }
+    if (identity.userVersion === ENGINE_SCHEMA_VERSION)
+        return "current";
+    if (identity.userVersion < ENGINE_SCHEMA_VERSION && SCHEMA_MIGRATIONS.has(identity.userVersion))
+        return "migrate";
+    throw new StoreSchemaUnsupportedError({
+        applicationId: identity.applicationId,
+        userVersion: identity.userVersion,
+        detail: identity.userVersion > ENGINE_SCHEMA_VERSION
+            ? "the database was written by a newer engine"
+            : "no migration path exists from this schema version",
+    });
+}
+/** Create a fresh schema or apply the migration path; never touches a refused file. */
+export function ensureSchema(db, now = () => new Date()) {
+    const disposition = assertSchemaServable(readSchemaIdentity(db));
+    if (disposition === "current")
+        return;
+    db.exec("BEGIN IMMEDIATE");
+    try {
+        if (disposition === "fresh") {
+            db.exec(ENGINE_SCHEMA_SQL);
+            db.exec(`PRAGMA application_id=${ENGINE_APPLICATION_ID}`);
+            const meta = db.prepare("INSERT INTO meta(key, value) VALUES(?, ?)");
+            meta.run("schema_version", String(ENGINE_SCHEMA_VERSION));
+            meta.run("store_id", randomUUID());
+            meta.run("created_at", now().toISOString());
+        }
+        else {
+            let version = readSchemaIdentity(db).userVersion;
+            while (version < ENGINE_SCHEMA_VERSION) {
+                const step = SCHEMA_MIGRATIONS.get(version);
+                if (!step)
+                    throw new Error(`schema migration from version ${version} is missing`);
+                step(db);
+                version += 1;
+            }
+            db.prepare("UPDATE meta SET value = ? WHERE key = 'schema_version'").run(String(ENGINE_SCHEMA_VERSION));
+        }
+        db.exec(`PRAGMA user_version=${ENGINE_SCHEMA_VERSION}`);
+        db.exec("COMMIT");
+    }
+    catch (error) {
+        try {
+            db.exec("ROLLBACK");
+        }
+        catch {
+            /* the original failure is the report */
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=schema.js.map

package/dist/store/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/store/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE1D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAChD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmFhC,CAAC;AAEF,wFAAwF;AACxF,MAAM,CAAC,MAAM,aAAa,GAAsB,MAAM,CAAC,MAAM,CAC3D,CAAC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CACnF,CAAC;AAEF;;;;GAIG;AACH,MAAM,iBAAiB,GAAoD,IAAI,GAAG,EAAE,CAAC;AAUrF,MAAM,UAAU,kBAAkB,CAAC,EAAgB;IACjD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAU,EAAE;QACrC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAA6B,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,uBAAuB,CAAC;QAC9C,WAAW,EAAE,MAAM,CAAC,qBAAqB,CAAC;QAC1C,SAAS,EAAE,MAAM,CAAC,mBAAmB,CAAC;QACtC,WAAW,EAAE,MAAM,CAAC,oCAAoC,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAwB;IAC3D,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,QAAQ,CAAC,WAAW,KAAK,CAAC,CAAC;IAC7E,IAAI,QAAQ,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,CAAC,IAAI,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC;IAC1F,IAAI,QAAQ,CAAC,aAAa,KAAK,qBAAqB,EAAE,CAAC;QACrD,MAAM,IAAI,2BAA2B,CAAC;YACpC,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,iEAAiE;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,KAAK,qBAAqB;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,QAAQ,CAAC,WAAW,GAAG,qBAAqB,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7F,OAAO,SAAS,CAAC;IACnB,MAAM,IAAI,2BAA2B,CAAC;QACpC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,MAAM,EACJ,QAAQ,CAAC,WAAW,GAAG,qBAAqB;YAC1C,CAAC,CAAC,4CAA4C;YAC9C,CAAC,CAAC,mDAAmD;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,YAAY,CAAC,EAAgB,EAAE,GAAG,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;IAC/E,MAAM,WAAW,GAAG,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO;IACtC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YAC5B,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC3B,EAAE,CAAC,IAAI,CAAC,yBAAyB,qBAAqB,EAAE,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC;YACjD,OAAO,OAAO,GAAG,qBAAqB,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,aAAa,CAAC,CAAC;gBAClF,IAAI,CAAC,EAAE,CAAC,CAAC;gBACT,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;YACD,EAAE,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC,GAAG,CACtE,MAAM,CAAC,qBAAqB,CAAC,CAC9B,CAAC;QACJ,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,uBAAuB,qBAAqB,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/store/setup-bindings.d.ts

@@ -0,0 +1,20 @@
+import type { StoreEvent } from "../store-contracts.js";
+import type { SqlWriteContext } from "./mutation.js";
+/** Legacy setup binding bytes are shared by create and extension events. */
+export interface SetupCreateBinding {
+    keyDigest: string;
+    requestDigest: string;
+    jobId: string;
+}
+type SetupJournalPayload = {
+    job?: unknown;
+    binding?: unknown;
+};
+export declare function parseSetupBinding(value: unknown): SetupCreateBinding | null;
+export declare function setupIdempotencyConflict(): Error;
+export declare function bindSetupInTx(sql: SqlWriteContext, pid: number, binding: SetupCreateBinding, operation: string, createdAt: string): void;
+/** Pure PR-D import seam. Legacy payloads contain no operation discriminator;
+ * that absence stays explicit metadata and never affects opaque-digest replay. */
+export declare function importSetupBindingInTx(sql: SqlWriteContext, pid: number, record: Pick<StoreEvent<SetupJournalPayload>, "type" | "time" | "payload">): void;
+export {};
+//# sourceMappingURL=setup-bindings.d.ts.map

package/dist/store/setup-bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-bindings.d.ts","sourceRoot":"","sources":["../../src/store/setup-bindings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,KAAK,mBAAmB,GAAG;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEhE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAiB3E;AAED,wBAAgB,wBAAwB,IAAI,KAAK,CAKhD;AAED,wBAAgB,aAAa,CAC3B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,kBAAkB,EAC3B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,IAAI,CAWN;AAED;kFACkF;AAClF,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GACzE,IAAI,CAWN"}

package/dist/store/setup-bindings.js

@@ -0,0 +1,52 @@
+import { bindIdempotencyInTx } from "./idempotency.js";
+export function parseSetupBinding(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return null;
+    const row = value;
+    if (typeof row["keyDigest"] !== "string" ||
+        !/^sha256:[a-f0-9]{64}$/.test(row["keyDigest"]) ||
+        typeof row["requestDigest"] !== "string" ||
+        !/^sha256:[a-f0-9]{64}$/.test(row["requestDigest"]) ||
+        typeof row["jobId"] !== "string" ||
+        !/^setup-[A-Za-z0-9-]+$/.test(row["jobId"]))
+        return null;
+    return {
+        keyDigest: row["keyDigest"],
+        requestDigest: row["requestDigest"],
+        jobId: row["jobId"],
+    };
+}
+export function setupIdempotencyConflict() {
+    return Object.assign(new Error("Idempotency-Key was already used with a different request"), {
+        code: "idempotency_conflict",
+        status: 409,
+    });
+}
+export function bindSetupInTx(sql, pid, binding, operation, createdAt) {
+    const stored = bindIdempotencyInTx(sql, {
+        owner: "setup",
+        pid,
+        keyDigest: binding.keyDigest,
+        operation,
+        requestDigest: binding.requestDigest,
+        targetId: binding.jobId,
+        createdAt,
+    });
+    if (stored.targetId !== binding.jobId)
+        throw setupIdempotencyConflict();
+}
+/** Pure PR-D import seam. Legacy payloads contain no operation discriminator;
+ * that absence stays explicit metadata and never affects opaque-digest replay. */
+export function importSetupBindingInTx(sql, pid, record) {
+    if (record.type !== "setup.job.saved" && record.type !== "setup.job.create_bound")
+        return;
+    if (record.type === "setup.job.saved" && record.payload?.binding === undefined)
+        return;
+    const binding = parseSetupBinding(record.payload?.binding);
+    if (!binding ||
+        (record.type === "setup.job.saved" &&
+            record.payload.job?.jobId !== binding.jobId))
+        throw new Error("invalid imported setup binding");
+    bindSetupInTx(sql, pid, binding, "setup.legacy_unknown", record.time);
+}
+//# sourceMappingURL=setup-bindings.js.map

package/dist/store/setup-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-bindings.js","sourceRoot":"","sources":["../../src/store/setup-bindings.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAUvD,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IACE,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ;QACpC,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC,eAAe,CAAC,KAAK,QAAQ;QACxC,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;QAChC,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE3C,OAAO,IAAI,CAAC;IACd,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC;QAC3B,aAAa,EAAE,GAAG,CAAC,eAAe,CAAC;QACnC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC;KACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2DAA2D,CAAC,EAAE;QAC3F,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAoB,EACpB,GAAW,EACX,OAA2B,EAC3B,SAAiB,EACjB,SAAiB;IAEjB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,OAAO;QACd,GAAG;QACH,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS;QACT,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,QAAQ,EAAE,OAAO,CAAC,KAAK;QACvB,SAAS;KACV,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK;QAAE,MAAM,wBAAwB,EAAE,CAAC;AAC1E,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,sBAAsB,CACpC,GAAoB,EACpB,GAAW,EACX,MAA0E;IAE1E,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,MAAM,CAAC,IAAI,KAAK,wBAAwB;QAAE,OAAO;IAC1F,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS;QAAE,OAAO;IACvF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,IACE,CAAC,OAAO;QACR,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB;YAC/B,MAAM,CAAC,OAAO,CAAC,GAAuC,EAAE,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC;QAEnF,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC"}

package/dist/store/sql-command-router.d.ts

@@ -0,0 +1,79 @@
+import type { RunEvent, RunTelemetry } from "@claudexor/schema";
+import type { CommandBackend } from "../command-authority.js";
+import type { OperatorDecisionRecord } from "../operator-decisions.js";
+import type { ProjectThreadPort } from "../store-contracts.js";
+import { SqlCommandQueries } from "./command-queries.js";
+import { SqlCommandPruner } from "./command-prune.js";
+import { SqlCommandStore } from "./commands.js";
+import { SqlEventLedger } from "./event-store.js";
+import { SqlInteractionStore } from "./interactions.js";
+import type { Obligations } from "./obligations.js";
+import { type PartitionGeneration } from "./partitions.js";
+import { SqlProjectRouter } from "./project-router.js";
+import type { SqlProjectStore } from "./projects.js";
+import type { SqlTerminalFiles } from "./terminal-files.js";
+/** One addressed router over current generations. These lightweight writers
+ * carry no restored history or separate partition cache. */
+export declare class SqlCommandRouter extends SqlProjectRouter implements CommandBackend, ProjectThreadPort {
+    private readonly persistence;
+    readonly queries: SqlCommandQueries;
+    constructor(projects: SqlProjectStore, persistence: {
+        obligations: Obligations;
+        terminalFiles: SqlTerminalFiles;
+        pruner: SqlCommandPruner;
+    });
+    commandStore(generation: PartitionGeneration): SqlCommandStore;
+    current(): SqlCommandStore;
+    forRequest(params: unknown): SqlCommandStore;
+    findById(id: string): SqlCommandStore | undefined;
+    pruneHistory(cap: number, retentionMs: number, now: number): string[];
+    ledger(generation: Pick<PartitionGeneration, "pid" | "name" | "epoch">): SqlEventLedger;
+    interactionsForRequest(params: unknown): SqlInteractionStore;
+    interactionsForRun(runId: string): SqlInteractionStore | undefined;
+    private decisions;
+    operatorDecision(params: unknown, runId: string): OperatorDecisionRecord | null;
+    findOperatorDecisionByIdempotency(params: unknown, runId: string, input: {
+        key: string;
+        client: string;
+        request: unknown;
+    }): OperatorDecisionRecord | null;
+    recordOperatorDecision(params: unknown, decision: OperatorDecisionRecord, input?: {
+        key: string;
+        client: string;
+        request: unknown;
+    }): import("../operator-decisions.js").RecordedOperatorDecision;
+    recordRunEvent(params: unknown, event: RunEvent): RunEvent;
+    persistTerminal(jobId: string, event: RunEvent, telemetry: RunTelemetry | null): {
+        state: "materialized";
+    } | {
+        state: "pending";
+        error: unknown;
+    };
+    beginDelivery(params: unknown, input: {
+        key: string;
+        client: string;
+        operation: string;
+        request: unknown;
+    }): {
+        id: string;
+        state: import("../job-record.js").JobState;
+        params: unknown;
+        result?: unknown;
+        error?: string;
+        errorCode?: string;
+        errorStatus?: number;
+        errorRetryable?: boolean;
+        errorRequiredActions?: string[];
+        errorContext?: Record<string, unknown>;
+        createdAt: string;
+        runId?: string;
+        taskId?: string;
+        runDir?: string;
+        startedAt?: string;
+        finishedAt?: string;
+        reused: boolean;
+    };
+    completeDelivery(id: string, result: unknown): void;
+    failDelivery(id: string, error: unknown): void;
+}
+//# sourceMappingURL=sql-command-router.d.ts.map

package/dist/store/sql-command-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-command-router.d.ts","sourceRoot":"","sources":["../../src/store/sql-command-router.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAM9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAiB,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;4DAC4D;AAC5D,qBAAa,gBACX,SAAQ,gBACR,YAAW,cAAc,EAAE,iBAAiB;IAK1C,OAAO,CAAC,QAAQ,CAAC,WAAW;IAH9B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,YACE,QAAQ,EAAE,eAAe,EACR,WAAW,EAAE;QAC5B,WAAW,EAAE,WAAW,CAAC;QACzB,aAAa,EAAE,gBAAgB,CAAC;QAChC,MAAM,EAAE,gBAAgB,CAAC;KAC1B,EAIF;IAED,YAAY,CAAC,UAAU,EAAE,mBAAmB,GAAG,eAAe,CAK7D;IACD,OAAO,IAAI,eAAe,CAEzB;IACD,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,CAE3C;IACD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAGhD;IACD,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpE;IACD,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,cAAc,CAEtF;IACD,sBAAsB,CAAC,MAAM,EAAE,OAAO,GAAG,mBAAmB,CAE3D;IACD,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CASjE;IACD,OAAO,CAAC,SAAS;IAGjB,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,iCAE9C;IACD,iCAAiC,CAC/B,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,iCAGzD;IACD,sBAAsB,CACpB,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,sBAAsB,EAChC,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,+DAG1D;IACD,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAMzD;IACD,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,GAAG,IAAI;;;;;MAI7E;IACD,aAAa,CACX,MAAM,EAAE,OAAO,EACf,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE;;;;;;;;;;;;;;;;;;MAG5E;IACD,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAElD;IACD,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAE7C;CACF"}

package/dist/store/sql-command-router.js

@@ -0,0 +1,92 @@
+import { isJournaledRunEvent } from "../journaled-run-events.js";
+import { beginDeliveryCommand, completeDeliveryCommand, failDeliveryCommand, } from "../delivery-command.js";
+import { SqlCommandQueries } from "./command-queries.js";
+import { SqlCommandStore } from "./commands.js";
+import { SqlEventLedger } from "./event-store.js";
+import { isServedPid } from "./generations.js";
+import { SqlInteractionStore } from "./interactions.js";
+import { SqlOperatorDecisionStore } from "./operator-decisions.js";
+import { partitionById } from "./partitions.js";
+import { SqlProjectRouter } from "./project-router.js";
+import { SqlRunEventStore } from "./run-events.js";
+/** One addressed router over current generations. These lightweight writers
+ * carry no restored history or separate partition cache. */
+export class SqlCommandRouter extends SqlProjectRouter {
+    persistence;
+    queries;
+    constructor(projects, persistence) {
+        super(projects);
+        this.persistence = persistence;
+        this.queries = new SqlCommandQueries(this.store, projects.blobs);
+    }
+    commandStore(generation) {
+        return new SqlCommandStore(this.store, this.projects.blobs, generation, {
+            ...this.persistence,
+            isLive: () => isServedPid(this.store, generation.pid),
+        });
+    }
+    current() {
+        return this.commandStore(this.projects.global());
+    }
+    forRequest(params) {
+        return this.commandStore(this.generationForRequest(params));
+    }
+    findById(id) {
+        const generation = this.generationForCommand(id);
+        return generation ? this.commandStore(generation) : undefined;
+    }
+    pruneHistory(cap, retentionMs, now) {
+        return this.persistence.pruner.pruneHistory(cap, retentionMs, now);
+    }
+    ledger(generation) {
+        return new SqlEventLedger(this.store, this.projects.blobs, generation);
+    }
+    interactionsForRequest(params) {
+        return new SqlInteractionStore(this.store, this.ledger(this.generationForRequest(params)));
+    }
+    interactionsForRun(runId) {
+        // The interaction index also addresses a retained imported interaction
+        // whose command is absent, matching the former store lookup semantics.
+        const rows = this.store
+            .prepare("SELECT DISTINCT pid FROM interaction WHERE run_id=?")
+            .all(runId);
+        const row = rows.find(({ pid }) => isServedPid(this.store, pid));
+        const generation = row ? partitionById(this.store, row.pid) : null;
+        return generation ? new SqlInteractionStore(this.store, this.ledger(generation)) : undefined;
+    }
+    decisions(params) {
+        return new SqlOperatorDecisionStore(this.store, this.ledger(this.generationForRequest(params)));
+    }
+    operatorDecision(params, runId) {
+        return this.decisions(params).get(runId);
+    }
+    findOperatorDecisionByIdempotency(params, runId, input) {
+        return this.decisions(params).findByIdempotency(runId, input);
+    }
+    recordOperatorDecision(params, decision, input) {
+        return this.decisions(params).record(decision, input);
+    }
+    recordRunEvent(params, event) {
+        if (isJournaledRunEvent(event))
+            new SqlRunEventStore(this.ledger(this.generationForRequest(params))).record(event);
+        // The producer owns the original event for its file and live bus. A
+        // filtered event cannot fail merely because its old project is unavailable.
+        return event;
+    }
+    persistTerminal(jobId, event, telemetry) {
+        const owner = this.findById(jobId);
+        if (!owner)
+            throw new Error(`terminal authority lost command ${jobId}`);
+        return owner.persistTerminal(jobId, event, telemetry);
+    }
+    beginDelivery(params, input) {
+        return beginDeliveryCommand(this.forRequest(params), params, input);
+    }
+    completeDelivery(id, result) {
+        completeDeliveryCommand(this.findById(id), id, result);
+    }
+    failDelivery(id, error) {
+        failDeliveryCommand(this.findById(id), id, error);
+    }
+}
+//# sourceMappingURL=sql-command-router.js.map

package/dist/store/sql-command-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-command-router.js","sourceRoot":"","sources":["../../src/store/sql-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGjE,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,aAAa,EAA4B,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD;4DAC4D;AAC5D,MAAM,OAAO,gBACX,SAAQ,gBAAgB;IAML,WAAW;IAHrB,OAAO,CAAoB;IACpC,YACE,QAAyB,EACR,WAIhB;QAED,KAAK,CAAC,QAAQ,CAAC,CAAC;2BANC,WAAW;QAO5B,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,YAAY,CAAC,UAA+B;QAC1C,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE;YACtE,GAAG,IAAI,CAAC,WAAW;YACnB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,UAAU,CAAC,MAAe;QACxB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,QAAQ,CAAC,EAAU;QACjB,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC;IACD,YAAY,CAAC,GAAW,EAAE,WAAmB,EAAE,GAAW;QACxD,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,CAAC,UAA+D;QACpE,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACzE,CAAC;IACD,sBAAsB,CAAC,MAAe;QACpC,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,kBAAkB,CAAC,KAAa;QAC9B,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK;aACpB,OAAO,CAAC,qDAAqD,CAAC;aAC9D,GAAG,CAAC,KAAK,CAA2B,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,CAAC;IACO,SAAS,CAAC,MAAe;QAC/B,OAAO,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,gBAAgB,CAAC,MAAe,EAAE,KAAa;QAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,iCAAiC,CAC/B,MAAe,EACf,KAAa,EACb,KAAwD;QAExD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,sBAAsB,CACpB,MAAe,EACf,QAAgC,EAChC,KAAyD;QAEzD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,cAAc,CAAC,MAAe,EAAE,KAAe;QAC7C,IAAI,mBAAmB,CAAC,KAAK,CAAC;YAC5B,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrF,oEAAoE;QACpE,4EAA4E;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,eAAe,CAAC,KAAa,EAAE,KAAe,EAAE,SAA8B;QAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IACD,aAAa,CACX,MAAe,EACf,KAA2E;QAE3E,OAAO,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,gBAAgB,CAAC,EAAU,EAAE,MAAe;QAC1C,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,YAAY,CAAC,EAAU,EAAE,KAAc;QACrC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/store/sql-daemon-services.d.ts

@@ -0,0 +1,61 @@
+import { InteractionRegistry } from "../interactions.js";
+import { LiveInputRegistry } from "../live-input.js";
+import { QuotaRegistry } from "../quota-registry.js";
+import type { QuotaPacerStateStore } from "../quota-poll-pacer.js";
+import type { QuotaRefresher, QuotaVendorRefresher } from "../quota-poll-lanes.js";
+import type { QuotaSubjectUniverse } from "../quota-registry.js";
+import { BlobFiles } from "./blob-files.js";
+import { SqlCommandPruner } from "./command-prune.js";
+import type { SqlEventLedger } from "./event-store.js";
+import { MaintenanceController, type MaintenanceControllerOptions } from "./maintenance.js";
+import { Obligations } from "./obligations.js";
+import { SqlProjectStore } from "./projects.js";
+import { SqlPurgeFiles, type PurgeFilesEffect } from "./purge-files.js";
+import { SqlResourceStore } from "./resources.js";
+import { SqlCommandRouter } from "./sql-command-router.js";
+import type { EngineStore } from "./store.js";
+import { SqlTerminalFiles } from "./terminal-files.js";
+export interface SqlDaemonServicesOptions {
+    purgeFiles: PurgeFilesEffect;
+    log?: (line: string) => void;
+    refreshers?: readonly (QuotaRefresher | QuotaVendorRefresher)[];
+    subjects?: QuotaSubjectUniverse;
+    pacerStore?: QuotaPacerStateStore;
+    maintenance?: Omit<MaintenanceControllerOptions, "blobs">;
+}
+/** Builds one storage graph over an opened store. Global projections validate
+ * lazily, so a recovery-required registry cannot hide the recovery owners.
+ * Startup owns admission; this factory discovers no roots or second backend. */
+export declare function createSqlDaemonServices(store: EngineStore, options: SqlDaemonServicesOptions): {
+    store: EngineStore;
+    blobs: BlobFiles;
+    obligations: Obligations;
+    terminalFiles: SqlTerminalFiles;
+    pruner: SqlCommandPruner;
+    projects: SqlProjectStore;
+    threads: SqlCommandRouter;
+    commands: SqlCommandRouter;
+    readonly globalEvents: SqlEventLedger;
+    resources: SqlResourceStore;
+    purgeFiles: SqlPurgeFiles;
+    maintenance: MaintenanceController;
+    readonly quota: QuotaRegistry;
+    interactions: InteractionRegistry;
+    liveInputs: LiveInputRegistry;
+    /** Called by the existing global recovery replacement owner after it
+     * drains setup and changes the registry generation. Publish both owners
+     * together only after the new quota projection validates. */
+    rebindGlobal: () => void;
+    journalEvents: (partition: string, afterCursor?: string) => {
+        schemaVersion: 1;
+        cursor: string;
+        partition: string;
+        type: string;
+        observedAt: string;
+        payload?: unknown;
+    }[];
+    recoverAfterStartup(): Promise<import("./obligations.js").ObligationCompletionReceipt>;
+    /** Caller closes transports/runners first, then this graph, then its store. */
+    close(): Promise<void>;
+};
+//# sourceMappingURL=sql-daemon-services.d.ts.map

package/dist/store/sql-daemon-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-daemon-services.d.ts","sourceRoot":"","sources":["../../src/store/sql-daemon-services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIvD,OAAO,EAAE,qBAAqB,EAAE,KAAK,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAyB,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,UAAU,CAAC,EAAE,SAAS,CAAC,cAAc,GAAG,oBAAoB,CAAC,EAAE,CAAC;IAChE,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC,WAAW,CAAC,EAAE,IAAI,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;CAC3D;AAED;;gFAEgF;AAChF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;IA8DzF;;iEAE6D;;+BAElC,MAAM,gBAAgB,MAAM;;;;;;;;;IAuBvD,+EAA+E;;EAclF"}