@claudexor/daemon 3.25.1 → 4.0.1

package/dist/store/errors.d.ts

@@ -0,0 +1,80 @@
+import type { ControlJournalInspection } from "@claudexor/schema";
+export type JournalRecoveryState = ControlJournalInspection["recovery"];
+export declare class JournalRecoveryRequiredError extends Error {
+    readonly code: string;
+    readonly status = 503;
+    readonly retryable = false;
+    readonly requiredActions: string[];
+    readonly evidenceRefs: string[];
+    readonly recovery: Extract<JournalRecoveryState, {
+        status: "recovery_required";
+    }>;
+    constructor(recovery: Extract<JournalRecoveryState, {
+        status: "recovery_required";
+    }>);
+}
+/**
+ * Typed failures of the engine store. Every error carries the `code` /
+ * `status` / `retryable` triple the daemon's problem projection already
+ * understands (`rpc-problem.ts`, control-api problem mapping), so no consumer
+ * needs a new enum value: a dispatch that cannot be flushed stays
+ * `not_started` with this problem attached, an account reset becomes
+ * `completed/unavailable` with `detail: store_flush_unavailable`.
+ */
+export declare class StoreError extends Error {
+    readonly code: string;
+    readonly status: number;
+    readonly retryable: boolean;
+    constructor(code: string, status: number, retryable: boolean, message: string, options?: ErrorOptions);
+}
+/** The running Node lacks `node:sqlite` or bundles a SQLite older than the
+ * WAL-reset corruption fix (3.51.3). Raised before any root is touched. */
+export declare class EngineRuntimeUnsupportedError extends StoreError {
+    readonly nodeVersion: string;
+    readonly sqliteVersion: string | null;
+    readonly requiredSqlite: string;
+    constructor(input: {
+        nodeVersion: string;
+        sqliteVersion: string | null;
+        requiredSqlite: string;
+        detail: string;
+        cause?: unknown;
+    });
+}
+/** The database file carries another application's id or a schema version
+ * this engine cannot serve. Raised before any write. */
+export declare class StoreSchemaUnsupportedError extends StoreError {
+    readonly applicationId: number;
+    readonly userVersion: number;
+    constructor(input: {
+        applicationId: number;
+        userVersion: number;
+        detail: string;
+    });
+}
+/** The flusher died before the requested generation was proven durable. The
+ * commit itself is intact (crash-class); only the power-loss barrier is
+ * unproven. A false refusal after an already completed barrier is safe. */
+export declare class StoreFlushUnavailableError extends StoreError {
+    readonly generation: number;
+    constructor(generation: number, detail: string);
+}
+/** ENOSPC / SQLITE_FULL on the database or an external file. */
+export declare class StoreFullError extends StoreError {
+    constructor(detail: string, cause?: unknown);
+}
+/** SQLITE_CORRUPT / SQLITE_NOTADB surfaced by a statement. */
+export declare class StoreCorruptError extends StoreError {
+    constructor(detail: string, cause?: unknown);
+}
+/** The busy fuse blew: a statement waited the whole busy timeout. */
+export declare class StoreBusyError extends StoreError {
+    constructor(detail: string, cause?: unknown);
+}
+/** Primary SQLite result code of a `node:sqlite` error, or null for any other error. */
+export declare function sqlitePrimaryCode(error: unknown): number | null;
+/** Map a statement failure to the store's typed classes; anything else is returned as is. */
+export declare function mapStoreError(error: unknown, context: string): unknown;
+/** Whether a mapped error means the busy fuse blew (counted as `busy_waits`). */
+export declare function isBusyFailure(error: unknown): boolean;
+//# sourceMappingURL=errors.d.ts.map

package/dist/store/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/store/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAElE,MAAM,MAAM,oBAAoB,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;AAExE,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAA+B;IACpD,QAAQ,CAAC,MAAM,OAAO;IACtB,QAAQ,CAAC,SAAS,SAAS;IAC3B,QAAQ,CAAC,eAAe,WAAmE;IAC3F,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAM;IACrC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,oBAAoB,EAAE;QAAE,MAAM,EAAE,mBAAmB,CAAA;KAAE,CAAC,CAAC;IAElF,YAAY,QAAQ,EAAE,OAAO,CAAC,oBAAoB,EAAE;QAAE,MAAM,EAAE,mBAAmB,CAAA;KAAE,CAAC,EASnF;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAE5B,YACE,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,YAAY,EAOvB;CACF;AAED;2EAC2E;AAC3E,qBAAa,6BAA8B,SAAQ,UAAU;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,YAAY,KAAK,EAAE;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,EAYA;CACF;AAED;wDACwD;AACxD,qBAAa,2BAA4B,SAAQ,UAAU;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,YAAY,KAAK,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAUhF;CACF;AAED;;2EAE2E;AAC3E,qBAAa,0BAA2B,SAAQ,UAAU;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,YAAY,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAS7C;CACF;AAED,gEAAgE;AAChE,qBAAa,cAAe,SAAQ,UAAU;IAC5C,YAAY,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAS1C;CACF;AAED,8DAA8D;AAC9D,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,YAAY,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAS1C;CACF;AAED,qEAAqE;AACrE,qBAAa,cAAe,SAAQ,UAAU;IAC5C,YAAY,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAS1C;CACF;AAeD,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAK/D;AAED,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAYtE;AAED,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAErD"}

package/dist/store/errors.js

@@ -0,0 +1,130 @@
+export class JournalRecoveryRequiredError extends Error {
+    code = "journal_recovery_required";
+    status = 503;
+    retryable = false;
+    requiredActions = ["inspect_recovery", "export_recovery", "quarantine_partition"];
+    evidenceRefs = [];
+    recovery;
+    constructor(recovery) {
+        const safe = Object.freeze({ ...recovery, location: Object.freeze({ ...recovery.location }) });
+        const where = safe.location.kind === "byte"
+            ? `byte ${safe.location.byteOffset}`
+            : `cursor ${safe.location.epoch}:${safe.location.seq}`;
+        super(`journal partition requires recovery at ${where}: ${safe.reason}`);
+        this.name = "JournalRecoveryRequiredError";
+        this.recovery = safe;
+    }
+}
+/**
+ * Typed failures of the engine store. Every error carries the `code` /
+ * `status` / `retryable` triple the daemon's problem projection already
+ * understands (`rpc-problem.ts`, control-api problem mapping), so no consumer
+ * needs a new enum value: a dispatch that cannot be flushed stays
+ * `not_started` with this problem attached, an account reset becomes
+ * `completed/unavailable` with `detail: store_flush_unavailable`.
+ */
+export class StoreError extends Error {
+    code;
+    status;
+    retryable;
+    constructor(code, status, retryable, message, options) {
+        super(message, options);
+        this.name = "StoreError";
+        this.code = code;
+        this.status = status;
+        this.retryable = retryable;
+    }
+}
+/** The running Node lacks `node:sqlite` or bundles a SQLite older than the
+ * WAL-reset corruption fix (3.51.3). Raised before any root is touched. */
+export class EngineRuntimeUnsupportedError extends StoreError {
+    nodeVersion;
+    sqliteVersion;
+    requiredSqlite;
+    constructor(input) {
+        super("engine_runtime_unsupported", 503, false, `engine runtime unsupported: ${input.detail} (node ${input.nodeVersion}, sqlite ${input.sqliteVersion ?? "absent"}, requires sqlite >= ${input.requiredSqlite})`, input.cause === undefined ? undefined : { cause: input.cause });
+        this.name = "EngineRuntimeUnsupportedError";
+        this.nodeVersion = input.nodeVersion;
+        this.sqliteVersion = input.sqliteVersion;
+        this.requiredSqlite = input.requiredSqlite;
+    }
+}
+/** The database file carries another application's id or a schema version
+ * this engine cannot serve. Raised before any write. */
+export class StoreSchemaUnsupportedError extends StoreError {
+    applicationId;
+    userVersion;
+    constructor(input) {
+        super("store_schema_unsupported", 503, false, `engine store schema unsupported: ${input.detail} (application_id ${input.applicationId}, user_version ${input.userVersion})`);
+        this.name = "StoreSchemaUnsupportedError";
+        this.applicationId = input.applicationId;
+        this.userVersion = input.userVersion;
+    }
+}
+/** The flusher died before the requested generation was proven durable. The
+ * commit itself is intact (crash-class); only the power-loss barrier is
+ * unproven. A false refusal after an already completed barrier is safe. */
+export class StoreFlushUnavailableError extends StoreError {
+    generation;
+    constructor(generation, detail) {
+        super("store_flush_unavailable", 503, true, `engine store flush unavailable for generation ${generation}: ${detail}`);
+        this.name = "StoreFlushUnavailableError";
+        this.generation = generation;
+    }
+}
+/** ENOSPC / SQLITE_FULL on the database or an external file. */
+export class StoreFullError extends StoreError {
+    constructor(detail, cause) {
+        super("store_full", 507, true, `engine store is out of space: ${detail}`, cause === undefined ? undefined : { cause });
+        this.name = "StoreFullError";
+    }
+}
+/** SQLITE_CORRUPT / SQLITE_NOTADB surfaced by a statement. */
+export class StoreCorruptError extends StoreError {
+    constructor(detail, cause) {
+        super("store_corrupt", 503, false, `engine store is corrupt: ${detail}`, cause === undefined ? undefined : { cause });
+        this.name = "StoreCorruptError";
+    }
+}
+/** The busy fuse blew: a statement waited the whole busy timeout. */
+export class StoreBusyError extends StoreError {
+    constructor(detail, cause) {
+        super("store_busy", 503, true, `engine store is busy: ${detail}`, cause === undefined ? undefined : { cause });
+        this.name = "StoreBusyError";
+    }
+}
+const SQLITE_BUSY = 5;
+const SQLITE_LOCKED = 6;
+const SQLITE_CORRUPT = 11;
+const SQLITE_FULL = 13;
+const SQLITE_NOTADB = 26;
+/** Primary SQLite result code of a `node:sqlite` error, or null for any other error. */
+export function sqlitePrimaryCode(error) {
+    if (!error || typeof error !== "object")
+        return null;
+    const shape = error;
+    if (shape.code !== "ERR_SQLITE_ERROR" || typeof shape.errcode !== "number")
+        return null;
+    return shape.errcode & 0xff;
+}
+/** Map a statement failure to the store's typed classes; anything else is returned as is. */
+export function mapStoreError(error, context) {
+    if (error instanceof StoreError)
+        return error;
+    const primary = sqlitePrimaryCode(error);
+    const detail = `${context}: ${error instanceof Error ? error.message : String(error)}`;
+    if (primary === SQLITE_FULL)
+        return new StoreFullError(detail, error);
+    if (primary === SQLITE_CORRUPT || primary === SQLITE_NOTADB)
+        return new StoreCorruptError(detail, error);
+    if (primary === SQLITE_BUSY || primary === SQLITE_LOCKED)
+        return new StoreBusyError(detail, error);
+    if (error && typeof error === "object" && error.code === "ENOSPC")
+        return new StoreFullError(detail, error);
+    return error;
+}
+/** Whether a mapped error means the busy fuse blew (counted as `busy_waits`). */
+export function isBusyFailure(error) {
+    return error instanceof StoreBusyError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/store/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/store/errors.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,IAAI,GAAW,2BAA2B,CAAC;IAC3C,MAAM,GAAG,GAAG,CAAC;IACb,SAAS,GAAG,KAAK,CAAC;IAClB,eAAe,GAAG,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IAClF,YAAY,GAAa,EAAE,CAAC;IAC5B,QAAQ,CAAiE;IAElF,YAAY,QAAwE;QAClF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,KAAK,GACT,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM;YAC3B,CAAC,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;YACpC,CAAC,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3D,KAAK,CAAC,0CAA0C,KAAK,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,CAAS;IACb,MAAM,CAAS;IACf,SAAS,CAAU;IAE5B,YACE,IAAY,EACZ,MAAc,EACd,SAAkB,EAClB,OAAe,EACf,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED;2EAC2E;AAC3E,MAAM,OAAO,6BAA8B,SAAQ,UAAU;IAClD,WAAW,CAAS;IACpB,aAAa,CAAgB;IAC7B,cAAc,CAAS;IAEhC,YAAY,KAMX;QACC,KAAK,CACH,4BAA4B,EAC5B,GAAG,EACH,KAAK,EACL,+BAA+B,KAAK,CAAC,MAAM,UAAU,KAAK,CAAC,WAAW,YAAY,KAAK,CAAC,aAAa,IAAI,QAAQ,wBAAwB,KAAK,CAAC,cAAc,GAAG,EAChK,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAC/D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC7C,CAAC;CACF;AAED;wDACwD;AACxD,MAAM,OAAO,2BAA4B,SAAQ,UAAU;IAChD,aAAa,CAAS;IACtB,WAAW,CAAS;IAE7B,YAAY,KAAqE;QAC/E,KAAK,CACH,0BAA0B,EAC1B,GAAG,EACH,KAAK,EACL,oCAAoC,KAAK,CAAC,MAAM,oBAAoB,KAAK,CAAC,aAAa,kBAAkB,KAAK,CAAC,WAAW,GAAG,CAC9H,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACvC,CAAC;CACF;AAED;;2EAE2E;AAC3E,MAAM,OAAO,0BAA2B,SAAQ,UAAU;IAC/C,UAAU,CAAS;IAE5B,YAAY,UAAkB,EAAE,MAAc;QAC5C,KAAK,CACH,yBAAyB,EACzB,GAAG,EACH,IAAI,EACJ,iDAAiD,UAAU,KAAK,MAAM,EAAE,CACzE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,OAAO,cAAe,SAAQ,UAAU;IAC5C,YAAY,MAAc,EAAE,KAAe;QACzC,KAAK,CACH,YAAY,EACZ,GAAG,EACH,IAAI,EACJ,iCAAiC,MAAM,EAAE,EACzC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAC5C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IAC/C,YAAY,MAAc,EAAE,KAAe;QACzC,KAAK,CACH,eAAe,EACf,GAAG,EACH,KAAK,EACL,4BAA4B,MAAM,EAAE,EACpC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAC5C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,qEAAqE;AACrE,MAAM,OAAO,cAAe,SAAQ,UAAU;IAC5C,YAAY,MAAc,EAAE,KAAe;QACzC,KAAK,CACH,YAAY,EACZ,GAAG,EACH,IAAI,EACJ,yBAAyB,MAAM,EAAE,EACjC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAC5C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AASD,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,KAAK,GAAG,KAAyB,CAAC;IACxC,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,OAAe;IAC3D,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACvF,IAAI,OAAO,KAAK,WAAW;QAAE,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtE,IAAI,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,aAAa;QACzD,OAAO,IAAI,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,aAAa;QACtD,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAA4B,CAAC,IAAI,KAAK,QAAQ;QACvF,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,cAAc,CAAC;AACzC,CAAC"}

package/dist/store/event-store.d.ts

@@ -0,0 +1,52 @@
+import type { EventLedger, StoreEvent } from "../store-contracts.js";
+import { BlobFiles, type BodyRef } from "./blob-files.js";
+import { type MutationContext } from "./mutation.js";
+import type { PartitionGeneration } from "./partitions.js";
+import { type AppendedEvent } from "./retention.js";
+import type { EngineStore } from "./store.js";
+/** File-mode bodies outlive the SQL deletion until the shared C10 barrier.
+ * Inline rows are removed atomically by runMutation before COMMIT. */
+export declare function collectReleasedBodies(store: EngineStore, blobs: BlobFiles, digests: readonly string[], log?: (message: string) => void): void;
+export interface PreparedEvent<T = unknown> {
+    type: string;
+    time: string;
+    payload: T;
+    encodedPayload: Buffer;
+    body: BodyRef | null;
+}
+/** Prepare the immutable JSON body before entering a transaction. Large bodies
+ * use the existing BlobFiles writer; rollback may leave an unowned file for
+ * its existing sweep, never a committed row or an advanced owner generation. */
+export declare function prepareEvent<T>(blobs: BlobFiles, input: {
+    type: string;
+    time: string;
+    payload: T;
+}): PreparedEvent<T>;
+/** Composes with the decision's other row writers in one mutation. The fold
+ * sees the logical payload, while the row holds JSON null for a referenced body. */
+export declare function appendPreparedEventInTx(tx: MutationContext, blobs: BlobFiles, pid: number, event: PreparedEvent): AppendedEvent;
+/** Prune uses the same addressed key deletion as fold, including owner deltas. */
+export declare function deleteEventsInTx(tx: MutationContext, pid: number, keys: readonly string[]): string[];
+/** The narrow logical event port used by quota/setup reducers. Production
+ * composition still chooses the legacy ledger until the importer switch. Run
+ * event producers continue to own typed selection and journal-copy redaction. */
+export declare class SqlEventLedger implements EventLedger {
+    private readonly store;
+    private readonly blobs;
+    readonly generation: Pick<PartitionGeneration, "pid" | "name" | "epoch">;
+    constructor(store: EngineStore, blobs: BlobFiles, generation: Pick<PartitionGeneration, "pid" | "name" | "epoch">);
+    prepare<T>(type: string, payload: T): PreparedEvent<T>;
+    appendInTx<T>(tx: MutationContext, prepared: PreparedEvent<T>): StoreEvent<T>;
+    append<T>(type: string, payload: T): StoreEvent<T>;
+    appendBatch(entries: readonly {
+        type: string;
+        payload: unknown;
+    }[]): StoreEvent[];
+    records<T = unknown>(afterSeq: number, types: readonly string[]): StoreEvent<T>[];
+    /** Addressed setup history uses the stable saved group, never the log group
+     * that terminal saves retire. Both readers hydrate through the same decoder. */
+    recordsInGroup<T = unknown>(groupKey: string, afterSeq: number, types: readonly string[]): StoreEvent<T>[];
+    private readRows;
+    cursorFor(record: Pick<StoreEvent, "partition" | "epoch" | "seq">): string;
+}
+//# sourceMappingURL=event-store.d.ts.map

package/dist/store/event-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-store.d.ts","sourceRoot":"","sources":["../../src/store/event-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAyB,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAEjF,OAAO,EAAe,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAoC,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACtF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;sEACsE;AACtE,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,GAAG,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAmB,GAC5C,IAAI,CAQN;AAED,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,CAAC,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;CACtB;AAED;;gFAEgF;AAChF,wBAAgB,YAAY,CAAC,CAAC,EAC5B,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,CAAC,CAAA;CAAE,GAChD,aAAa,CAAC,CAAC,CAAC,CASlB;AAED;oFACoF;AACpF,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,eAAe,EACnB,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,aAAa,GACnB,aAAa,CAcf;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,eAAe,EACnB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,MAAM,EAAE,CAIV;AAED;;iFAEiF;AACjF,qBAAa,cAAe,YAAW,WAAW;IAE9C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IAH1E,YACmB,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,SAAS,EACxB,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,EACtE;IAEJ,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAErD;IAED,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAc5E;IAED,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAGjD;IAED,WAAW,CAAC,OAAO,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,GAAG,UAAU,EAAE,CAGhF;IAED,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAEhF;IAED;oFACgF;IAChF,cAAc,CAAC,CAAC,GAAG,OAAO,EACxB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,UAAU,CAAC,CAAC,CAAC,EAAE,CAEjB;IAED,OAAO,CAAC,QAAQ;IAiChB,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,OAAO,GAAG,KAAK,CAAC,GAAG,MAAM,CAEzE;CACF"}

package/dist/store/event-store.js

@@ -0,0 +1,117 @@
+import { INLINE_BODY_MAX_BYTES } from "./blob-files.js";
+import { encodeJournalCursor, readStoredEventPayload } from "./cursors.js";
+import { runMutation } from "./mutation.js";
+import { appendEvent, deleteEventKeysInTx } from "./retention.js";
+/** File-mode bodies outlive the SQL deletion until the shared C10 barrier.
+ * Inline rows are removed atomically by runMutation before COMMIT. */
+export function collectReleasedBodies(store, blobs, digests, log = console.warn) {
+    for (const digest of new Set(digests)) {
+        if (!store.prepare("SELECT 1 FROM blob WHERE sha256=? AND inline IS NULL").get(digest))
+            continue;
+        void blobs.gc(digest).catch((error) => {
+            if (!store.isClosed)
+                log(`Body cleanup remains pending: ${String(error)}`);
+        });
+    }
+}
+/** Prepare the immutable JSON body before entering a transaction. Large bodies
+ * use the existing BlobFiles writer; rollback may leave an unowned file for
+ * its existing sweep, never a committed row or an advanced owner generation. */
+export function prepareEvent(blobs, input) {
+    const bytes = Buffer.from(JSON.stringify(input.payload ?? null));
+    return {
+        type: input.type,
+        time: input.time,
+        payload: JSON.parse(bytes.toString("utf8")),
+        encodedPayload: bytes,
+        body: bytes.byteLength > INLINE_BODY_MAX_BYTES ? blobs.prepareBody(bytes) : null,
+    };
+}
+/** Composes with the decision's other row writers in one mutation. The fold
+ * sees the logical payload, while the row holds JSON null for a referenced body. */
+export function appendPreparedEventInTx(tx, blobs, pid, event) {
+    const appended = appendEvent(tx, pid, {
+        type: event.type,
+        time: event.time,
+        payload: event.payload,
+        encodedPayload: event.encodedPayload,
+        payloadSha: event.body?.sha256,
+    });
+    if (appended.stored && event.body) {
+        blobs.insertRow(event.body);
+        tx.changes.blobChanged(event.body.sha256);
+    }
+    tx.changes.blobChanged(...appended.releasedDigests);
+    return appended;
+}
+/** Prune uses the same addressed key deletion as fold, including owner deltas. */
+export function deleteEventsInTx(tx, pid, keys) {
+    const released = deleteEventKeysInTx(tx, pid, keys);
+    tx.changes.blobChanged(...released);
+    return released;
+}
+/** The narrow logical event port used by quota/setup reducers. Production
+ * composition still chooses the legacy ledger until the importer switch. Run
+ * event producers continue to own typed selection and journal-copy redaction. */
+export class SqlEventLedger {
+    store;
+    blobs;
+    generation;
+    constructor(store, blobs, generation) {
+        this.store = store;
+        this.blobs = blobs;
+        this.generation = generation;
+    }
+    prepare(type, payload) {
+        return prepareEvent(this.blobs, { type, payload, time: this.store.now().toISOString() });
+    }
+    appendInTx(tx, prepared) {
+        const result = appendPreparedEventInTx(tx, this.blobs, this.generation.pid, prepared);
+        if (result.releasedDigests.length)
+            tx.changes.afterCommit(() => collectReleasedBodies(this.store, this.blobs, result.releasedDigests));
+        return {
+            partition: this.generation.name,
+            epoch: this.generation.epoch,
+            seq: result.seq,
+            time: prepared.time,
+            type: prepared.type,
+            payload: prepared.payload,
+        };
+    }
+    append(type, payload) {
+        const prepared = this.prepare(type, payload);
+        return runMutation(this.store, (tx) => this.appendInTx(tx, prepared));
+    }
+    appendBatch(entries) {
+        const prepared = entries.map((entry) => this.prepare(entry.type, entry.payload));
+        return runMutation(this.store, (tx) => prepared.map((entry) => this.appendInTx(tx, entry)));
+    }
+    records(afterSeq, types) {
+        return this.readRows(afterSeq, types);
+    }
+    /** Addressed setup history uses the stable saved group, never the log group
+     * that terminal saves retire. Both readers hydrate through the same decoder. */
+    recordsInGroup(groupKey, afterSeq, types) {
+        return this.readRows(afterSeq, types, groupKey);
+    }
+    readRows(afterSeq, types, groupKey) {
+        if (types.length === 0)
+            return [];
+        const rows = this.store
+            .prepare(`SELECT seq, time, type, payload, payload_sha FROM event${groupKey === undefined ? "" : " INDEXED BY event_group"}
+         WHERE pid = ? AND seq > ? AND type IN (${types.map(() => "?").join(",")})${groupKey === undefined ? "" : " AND group_key = ?"} ORDER BY seq`)
+            .all(this.generation.pid, afterSeq, ...types, ...(groupKey === undefined ? [] : [groupKey]));
+        return rows.map((row) => ({
+            partition: this.generation.name,
+            epoch: this.generation.epoch,
+            seq: Number(row.seq),
+            time: row.time,
+            type: row.type,
+            payload: readStoredEventPayload(row, this.blobs),
+        }));
+    }
+    cursorFor(record) {
+        return encodeJournalCursor(record.partition, record.epoch, record.seq);
+    }
+}
+//# sourceMappingURL=event-store.js.map

package/dist/store/event-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-store.js","sourceRoot":"","sources":["../../src/store/event-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,qBAAqB,EAAgB,MAAM,iBAAiB,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAwB,MAAM,eAAe,CAAC;AAElE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAsB,MAAM,gBAAgB,CAAC;AAGtF;sEACsE;AACtE,MAAM,UAAU,qBAAqB,CACnC,KAAkB,EAClB,KAAgB,EAChB,OAA0B,EAC1B,GAAG,GAA8B,OAAO,CAAC,IAAI;IAE7C,KAAK,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YACpF,SAAS;QACX,KAAK,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ;gBAAE,GAAG,CAAC,iCAAiC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAUD;;gFAEgF;AAChF,MAAM,UAAU,YAAY,CAC1B,KAAgB,EAChB,KAAiD;IAEjD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC;IACjE,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM;QAChD,cAAc,EAAE,KAAK;QACrB,IAAI,EAAE,KAAK,CAAC,UAAU,GAAG,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;KACjF,CAAC;AACJ,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,uBAAuB,CACrC,EAAmB,EACnB,KAAgB,EAChB,GAAW,EACX,KAAoB;IAEpB,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE;QACpC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM;KAC/B,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAC9B,EAAmB,EACnB,GAAW,EACX,IAAuB;IAEvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACpD,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;iFAEiF;AACjF,MAAM,OAAO,cAAc;IAEN,KAAK;IACL,KAAK;IACb,UAAU;IAHrB,YACmB,KAAkB,EAClB,KAAgB,EACxB,UAA+D;qBAFvD,KAAK;qBACL,KAAK;0BACb,UAAU;IAClB,CAAC;IAEJ,OAAO,CAAI,IAAY,EAAE,OAAU;QACjC,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,UAAU,CAAI,EAAmB,EAAE,QAA0B;QAC3D,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM;YAC/B,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,CAC1B,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,CACtE,CAAC;QACJ,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC/B,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,CAAI,IAAY,EAAE,OAAU;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,WAAW,CAAC,OAAsD;QAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACjF,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO,CAAc,QAAgB,EAAE,KAAwB;QAC7D,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED;oFACgF;IAChF,cAAc,CACZ,QAAgB,EAChB,QAAgB,EAChB,KAAwB;QAExB,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAEO,QAAQ,CACd,QAAgB,EAChB,KAAwB,EACxB,QAAiB;QAEjB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK;aACpB,OAAO,CACN,0DAA0D,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB;kDACvE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,eAAe,CAC9I;aACA,GAAG,CACF,IAAI,CAAC,UAAU,CAAC,GAAG,EACnB,QAAQ,EACR,GAAG,KAAK,EACR,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAO/C,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC/B,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAM;SACtD,CAAC,CAAC,CAAC;IACN,CAAC;IAED,SAAS,CAAC,MAAuD;QAC/D,OAAO,mBAAmB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/store/external-files.d.ts

@@ -0,0 +1,40 @@
+/** The one thing an external-file writer needs from the store. */
+export interface ExternalRegistry {
+    registerExternal(dir: string): number;
+}
+export interface ExternalFileReceipt {
+    path: string;
+    /** Generation whose pass makes the directory entry durable. */
+    generation: number;
+    /** False when a content-addressed target already existed and was kept. */
+    written: boolean;
+}
+/** Node does not expose the POSIX O_DSYNC name on Windows, but passes numeric
+ * open flags to libuv. UV_FS_O_DSYNC maps to FILE_FLAG_WRITE_THROUGH there
+ * (deps/uv/include/uv/win.h in the supported Node runtime). */
+export declare function externalWriteFlags(access: number): number;
+/**
+ * Write an external file the SYNTHESIS_R5 §4.4 way: a sibling `.tmp` opened
+ * `O_DSYNC` (the data is at the drive when `write` returns, 0.05–0.4 ms for
+ * 4 KiB–2 MiB), then `rename` into place, then a `{g, dir}` registration so
+ * the flusher's pass fsyncs the directory entry. No Node sync primitive runs
+ * on this thread. `keepExisting` is the content-addressed mode: an existing
+ * target is never rewritten.
+ */
+export declare function writeExternalFile(registry: ExternalRegistry, input: {
+    dir: string;
+    name: string;
+    bytes: Uint8Array;
+    keepExisting?: boolean;
+}): ExternalFileReceipt;
+/** Publish by hard link (finalize, SYNTHESIS_R5 §6.4): an existing target wins. */
+export declare function linkExternalFile(registry: ExternalRegistry, input: {
+    source: string;
+    dir: string;
+    name: string;
+}): ExternalFileReceipt;
+/** Remove a file; a missing file is already removed. The directory is registered. */
+export declare function unlinkExternalFile(registry: ExternalRegistry, path: string): number;
+/** Create a directory (and register its parent, whose entry changed). */
+export declare function ensureDirectory(registry: ExternalRegistry, dir: string): void;
+//# sourceMappingURL=external-files.d.ts.map

package/dist/store/external-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-files.d.ts","sourceRoot":"","sources":["../../src/store/external-files.ts"],"names":[],"mappings":"AAeA,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;+DAE+D;AAC/D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9E,mBAAmB,CAmCrB;AAED,mFAAmF;AACnF,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnD,mBAAmB,CAarB;AAED,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CASnF;AAED,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAI7E"}

package/dist/store/external-files.js

@@ -0,0 +1,90 @@
+import { randomUUID } from "node:crypto";
+import { closeSync, constants, existsSync, linkSync, mkdirSync, openSync, renameSync, unlinkSync, writeSync, } from "node:fs";
+import { dirname, join } from "node:path";
+import { mapStoreError } from "./errors.js";
+/** Node does not expose the POSIX O_DSYNC name on Windows, but passes numeric
+ * open flags to libuv. UV_FS_O_DSYNC maps to FILE_FLAG_WRITE_THROUGH there
+ * (deps/uv/include/uv/win.h in the supported Node runtime). */
+export function externalWriteFlags(access) {
+    const sync = process.platform === "win32" ? 0x04000000 : constants.O_DSYNC;
+    return access | sync | (constants.O_NOFOLLOW ?? 0);
+}
+/**
+ * Write an external file the SYNTHESIS_R5 §4.4 way: a sibling `.tmp` opened
+ * `O_DSYNC` (the data is at the drive when `write` returns, 0.05–0.4 ms for
+ * 4 KiB–2 MiB), then `rename` into place, then a `{g, dir}` registration so
+ * the flusher's pass fsyncs the directory entry. No Node sync primitive runs
+ * on this thread. `keepExisting` is the content-addressed mode: an existing
+ * target is never rewritten.
+ */
+export function writeExternalFile(registry, input) {
+    const target = join(input.dir, input.name);
+    if (input.keepExisting && existsSync(target)) {
+        return { path: target, generation: registry.registerExternal(input.dir), written: false };
+    }
+    ensureDirectory(registry, input.dir);
+    const temp = join(input.dir, `.${input.name}.${randomUUID()}.tmp`);
+    let fd = null;
+    try {
+        fd = openSync(temp, externalWriteFlags(constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL), 0o600);
+        let offset = 0;
+        while (offset < input.bytes.byteLength) {
+            offset += writeSync(fd, input.bytes, offset, input.bytes.byteLength - offset, offset);
+        }
+        closeSync(fd);
+        fd = null;
+        if (input.keepExisting && existsSync(target)) {
+            unlinkSync(temp);
+            return { path: target, generation: registry.registerExternal(input.dir), written: false };
+        }
+        renameSync(temp, target);
+    }
+    catch (error) {
+        if (fd !== null)
+            closeSync(fd);
+        try {
+            unlinkSync(temp);
+        }
+        catch {
+            /* best effort; the orphan sweep removes stale .tmp files */
+        }
+        throw mapStoreError(error, `writing ${target}`);
+    }
+    return { path: target, generation: registry.registerExternal(input.dir), written: true };
+}
+/** Publish by hard link (finalize, SYNTHESIS_R5 §6.4): an existing target wins. */
+export function linkExternalFile(registry, input) {
+    const target = join(input.dir, input.name);
+    ensureDirectory(registry, input.dir);
+    let written = false;
+    try {
+        linkSync(input.source, target);
+        written = true;
+    }
+    catch (error) {
+        if (error.code !== "EEXIST") {
+            throw mapStoreError(error, `linking ${input.source} to ${target}`);
+        }
+    }
+    return { path: target, generation: registry.registerExternal(input.dir), written };
+}
+/** Remove a file; a missing file is already removed. The directory is registered. */
+export function unlinkExternalFile(registry, path) {
+    try {
+        unlinkSync(path);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT") {
+            throw mapStoreError(error, `unlinking ${path}`);
+        }
+    }
+    return registry.registerExternal(dirname(path));
+}
+/** Create a directory (and register its parent, whose entry changed). */
+export function ensureDirectory(registry, dir) {
+    if (existsSync(dir))
+        return;
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    registry.registerExternal(dirname(dir));
+}
+//# sourceMappingURL=external-files.js.map

package/dist/store/external-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-files.js","sourceRoot":"","sources":["../../src/store/external-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,UAAU,EACV,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAe5C;;+DAE+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC;IAC3E,OAAO,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAA0B,EAC1B,KAA+E;IAE/E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,YAAY,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5F,CAAC;IACD,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IACnE,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CACX,IAAI,EACJ,kBAAkB,CAAC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,EAC7E,KAAK,CACN,CAAC;QACF,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,IAAI,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;QACxF,CAAC;QACD,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,EAAE,GAAG,IAAI,CAAC;QACV,IAAI,KAAK,CAAC,YAAY,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5F,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QACD,MAAM,aAAa,CAAC,KAAK,EAAE,WAAW,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3F,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAC9B,QAA0B,EAC1B,KAAoD;IAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,aAAa,CAAC,KAAK,EAAE,WAAW,KAAK,CAAC,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;AACrF,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,QAA0B,EAAE,IAAY;IACzE,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,aAAa,CAAC,KAAK,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,QAA0B,EAAE,GAAW;IACrE,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/store/flusher-protocol.d.ts

@@ -0,0 +1,82 @@
+/** Flusher pass interval (SYNTHESIS_R5 §4.2): a code constant, not a knob. */
+export declare const FLUSH_INTERVAL_MS = 200;
+/** The `workerData` discriminator every store worker is spawned with. The
+ * worker modules self-start on it, so the same module graph serves the dev
+ * `dist/` layout (adjacent worker file) and the single-file daemon bundle
+ * (the bundle itself is the worker entry and dispatches by this key). */
+export declare const STORE_WORKER_DATA_KEY = "claudexorStoreWorker";
+/** Test seams of the flusher worker. Inert unless the store was opened with them. */
+export interface FlusherHooks {
+    /** Passes run only on an explicit `tick` command (generation causality tests). */
+    manualTick?: boolean;
+    /** Honour an `exit` command (worker-death tests). */
+    allowExit?: boolean;
+    /** Sleep inside the pass, between checkpoint and barrier (kill-during-pass tests). */
+    passDelayMs?: number;
+}
+export interface FlusherWorkerData {
+    [STORE_WORKER_DATA_KEY]: "flusher";
+    dbPath: string;
+    hooks: FlusherHooks;
+}
+export type FlusherCommand = {
+    type: "register";
+    g: number;
+    dir: string;
+} | {
+    type: "flush";
+    g: number;
+} | {
+    type: "tick";
+} | {
+    type: "exit";
+    code: number;
+} | {
+    type: "stop";
+};
+export interface FlusherCounters {
+    passes: number;
+    barriers: number;
+    dirSyncs: number;
+    busyPassive: number;
+    walReopens: number;
+}
+export interface FlusherPassReport {
+    /** Highest generation received before the pass started; everything up to it is covered. */
+    g: number;
+    dirty: boolean;
+    /** The explicit WAL F_FULLFSYNC ran in this pass. Never derived from the checkpoint result. */
+    barrier: boolean;
+    dirsSynced: string[];
+    /** Registered directories that no longer existed at pass time (nothing left to prove). */
+    dirsMissing: string[];
+    /** Raw `PRAGMA wal_checkpoint(PASSIVE)` row — informational, never a barrier proof. */
+    checkpoint: {
+        busy: number;
+        log: number;
+        checkpointed: number;
+    } | null;
+    walBytes: number | null;
+    passMs: number;
+    barrierMs: number | null;
+    counters: FlusherCounters;
+    at: number;
+}
+export type FlusherEvent = {
+    type: "ready";
+    at: number;
+} | {
+    type: "synced";
+    report: FlusherPassReport;
+} | {
+    type: "stopped";
+};
+/**
+ * Where a store worker starts. Beside this module in the built `dist/` tree
+ * the worker file exists and is the entry; inside the single-file daemon
+ * bundle `import.meta.url` IS the bundle (esbuild defines it so), the
+ * adjacent file does not exist, and the bundle itself is the entry — it
+ * embeds the worker modules, which self-start on `workerData`.
+ */
+export declare function resolveStoreWorkerEntry(moduleUrl: string, workerFile: string): string;
+//# sourceMappingURL=flusher-protocol.d.ts.map

package/dist/store/flusher-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flusher-protocol.d.ts","sourceRoot":"","sources":["../../src/store/flusher-protocol.ts"],"names":[],"mappings":"AAGA,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC;;;yEAGyE;AACzE,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAE5D,qFAAqF;AACrF,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,qDAAqD;IACrD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,CAAC,qBAAqB,CAAC,EAAE,SAAS,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,2FAA2F;IAC3F,CAAC,EAAE,MAAM,CAAC;IACV,KAAK,EAAE,OAAO,CAAC;IACf,+FAA+F;IAC/F,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,0FAA0F;IAC1F,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,uFAAuF;IACvF,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,eAAe,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAExB;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAIrF"}