@claudexor/daemon 3.25.1 → 4.0.1

package/dist/store/generations.d.ts

@@ -0,0 +1,43 @@
+import { type IdempotencyBinding } from "./idempotency.js";
+import { type SqlWriteContext } from "./mutation.js";
+import { type PartitionGeneration } from "./partitions.js";
+import type { EngineStore } from "./store.js";
+import type { BlobFiles } from "./blob-files.js";
+type Reader = Pick<SqlWriteContext, "prepare">;
+/** Current registry authority, including recovery-required global state. */
+export declare function globalGeneration(sql: Reader): PartitionGeneration | null;
+/** The registry, not just a partition's ready bit, determines visibility. */
+export declare const SERVED_PIDS_SQL = "\n  SELECT g.id FROM meta m JOIN partition g ON g.id = CAST(m.value AS INTEGER)\n    WHERE m.key = 'global_pid' AND g.status = 'ready'\n  UNION ALL\n  SELECT p.current_pid FROM meta m JOIN partition g ON g.id = CAST(m.value AS INTEGER)\n    JOIN project p ON p.pid = g.id AND p.status = 'active'\n    JOIN partition q ON q.id = p.current_pid AND q.status = 'ready'\n    WHERE m.key = 'global_pid' AND g.status = 'ready'";
+/** Addressed membership: no materialization of every project on hot lookups. */
+export declare function isServedPid(sql: Reader, pid: number): boolean;
+export declare function requireServedGeneration(sql: Reader, pid: number): PartitionGeneration;
+export declare function servedGenerations(sql: Reader): PartitionGeneration[];
+/** Used by first construction/import. No engine is opened or committed here. */
+export declare function setGlobalGenerationInTx(sql: SqlWriteContext, pid: number): void;
+/** Import's final pass, after project current_pid bindings are complete. */
+export declare function reconcileLiveInTx(sql: SqlWriteContext): void;
+export declare function setGenerationStatusInTx(sql: SqlWriteContext, pid: number, status: string): void;
+export declare function archiveGenerationInTx(sql: SqlWriteContext, pid: number): string;
+export declare function restoreGenerationInTx(sql: SqlWriteContext, pid: number): void;
+/** Preserves old rows as evidence. Restoring an unregistered generation cannot
+ * re-adopt it: only the current global registry can make its commands live. */
+export declare function quarantineGenerationInTx(sql: SqlWriteContext, oldPid: number, input: {
+    epoch: string;
+    createdAt: string;
+}): PartitionGeneration;
+/** Recovery owns request/fingerprint validation and any filesystem leftovers.
+ * A retry addresses oldPid, even after current authority has moved. */
+export declare function quarantineGeneration(store: EngineStore, blobs: BlobFiles, input: {
+    oldPid: number;
+    keyDigest: string;
+    requestDigest: string;
+    operationId: string;
+    payload: unknown;
+    epoch?: string;
+}): {
+    generation: PartitionGeneration | null;
+    binding: IdempotencyBinding;
+    replay: boolean;
+};
+export {};
+//# sourceMappingURL=generations.d.ts.map

package/dist/store/generations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generations.d.ts","sourceRoot":"","sources":["../../src/store/generations.ts"],"names":[],"mappings":"AACA,OAAO,EAA0C,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEnG,OAAO,EAAmC,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AACtF,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;AAE/C,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAIxE;AAED,6EAA6E;AAC7E,eAAO,MAAM,eAAe,waAO0B,CAAC;AAEvD,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAW7D;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,mBAAmB,CASrF;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAYpE;AAED,gFAAgF;AAChF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAa/E;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAQ5D;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAU/F;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAK/E;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAI7E;AAED;+EAC+E;AAC/E,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IACL,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,GACA,mBAAmB,CAcrB;AAED;uEACuE;AACvE,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE;IACL,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA;IAAE,UAAU,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CA4B1F"}

package/dist/store/generations.js

@@ -0,0 +1,143 @@
+import { randomUUID } from "node:crypto";
+import { bindIdempotencyInTx, lookupIdempotency } from "./idempotency.js";
+import { appendPreparedEventInTx, prepareEvent } from "./event-store.js";
+import { requireTransaction, runMutation } from "./mutation.js";
+import { generationOf, insertPartitionInTx, partitionById, } from "./partitions.js";
+/** Current registry authority, including recovery-required global state. */
+export function globalGeneration(sql) {
+    const row = sql.prepare("SELECT value FROM meta WHERE key = 'global_pid'").get();
+    return row ? partitionById(sql, Number(row.value)) : null;
+}
+/** The registry, not just a partition's ready bit, determines visibility. */
+export const SERVED_PIDS_SQL = `
+  SELECT g.id FROM meta m JOIN partition g ON g.id = CAST(m.value AS INTEGER)
+    WHERE m.key = 'global_pid' AND g.status = 'ready'
+  UNION ALL
+  SELECT p.current_pid FROM meta m JOIN partition g ON g.id = CAST(m.value AS INTEGER)
+    JOIN project p ON p.pid = g.id AND p.status = 'active'
+    JOIN partition q ON q.id = p.current_pid AND q.status = 'ready'
+    WHERE m.key = 'global_pid' AND g.status = 'ready'`;
+/** Addressed membership: no materialization of every project on hot lookups. */
+export function isServedPid(sql, pid) {
+    return Boolean(sql
+        .prepare(`SELECT 1 FROM partition q JOIN meta m ON m.key = 'global_pid'
+    JOIN partition g ON g.id = CAST(m.value AS INTEGER) AND g.status = 'ready'
+    WHERE q.id = ? AND q.status = 'ready' AND (q.id = g.id OR EXISTS(
+      SELECT 1 FROM project p WHERE p.current_pid = q.id AND p.pid = g.id AND p.status = 'active'))`)
+        .get(pid));
+}
+export function requireServedGeneration(sql, pid) {
+    const generation = partitionById(sql, pid);
+    if (!generation || !isServedPid(sql, pid)) {
+        throw Object.assign(new Error(`partition ${generation?.name ?? pid} requires journal recovery`), { code: "journal_recovery_required", status: 409 });
+    }
+    return generation;
+}
+export function servedGenerations(sql) {
+    return sql
+        .prepare(`SELECT q.id,q.name,q.epoch,q.status,q.next_seq FROM partition q
+    LEFT JOIN project p ON p.current_pid=q.id AND p.status='active'
+      AND p.pid=CAST((SELECT value FROM meta WHERE key='global_pid') AS INTEGER)
+    WHERE q.id IN (${SERVED_PIDS_SQL})
+    ORDER BY CASE WHEN q.name='global' THEN 0 ELSE 1 END,p.created_at,p.rowid`)
+        .all().map(generationOf);
+}
+/** Used by first construction/import. No engine is opened or committed here. */
+export function setGlobalGenerationInTx(sql, pid) {
+    requireTransaction(sql);
+    const generation = partitionById(sql, pid);
+    if (generation?.name !== "global")
+        throw new Error("global authority must name a global partition");
+    sql
+        .prepare("INSERT INTO meta(key, value) VALUES('global_pid', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value")
+        .run(String(pid));
+    // Global registry replacement also hides all previously registered projects.
+    sql.prepare("UPDATE command SET live = 0 WHERE live = 1 AND pid <> ?").run(pid);
+    reconcileLiveInTx(sql);
+}
+/** Import's final pass, after project current_pid bindings are complete. */
+export function reconcileLiveInTx(sql) {
+    requireTransaction(sql);
+    sql
+        .prepare(`UPDATE command SET live = CASE WHEN pid IN (${SERVED_PIDS_SQL}) THEN 1 ELSE 0 END
+    WHERE live <> CASE WHEN pid IN (${SERVED_PIDS_SQL}) THEN 1 ELSE 0 END`)
+        .run();
+}
+export function setGenerationStatusInTx(sql, pid, status) {
+    requireTransaction(sql);
+    sql.prepare("UPDATE partition SET status = ? WHERE id = ?").run(status, pid);
+    if (globalGeneration(sql)?.pid === pid) {
+        reconcileLiveInTx(sql);
+    }
+    else {
+        sql
+            .prepare("UPDATE command SET live = ? WHERE pid = ?")
+            .run(isServedPid(sql, pid) ? 1 : 0, pid);
+    }
+}
+export function archiveGenerationInTx(sql, pid) {
+    const generation = partitionById(sql, pid);
+    if (!generation)
+        throw new Error(`no partition ${pid}`);
+    setGenerationStatusInTx(sql, pid, "archived");
+    return `partition:${generation.name}@${generation.epoch}`;
+}
+export function restoreGenerationInTx(sql, pid) {
+    const generation = partitionById(sql, pid);
+    if (generation?.status !== "archived")
+        throw new Error(`partition ${pid} is not archived`);
+    setGenerationStatusInTx(sql, pid, "ready");
+}
+/** Preserves old rows as evidence. Restoring an unregistered generation cannot
+ * re-adopt it: only the current global registry can make its commands live. */
+export function quarantineGenerationInTx(sql, oldPid, input) {
+    requireTransaction(sql);
+    const old = partitionById(sql, oldPid);
+    if (!old)
+        throw new Error(`no partition ${oldPid}`);
+    const global = globalGeneration(sql);
+    const project = sql
+        .prepare("SELECT id FROM project WHERE pid = ? AND current_pid = ? AND status = 'active'")
+        .get(global?.pid ?? -1, oldPid);
+    if (global?.pid !== oldPid && !project)
+        throw new Error(`partition ${oldPid} is not current`);
+    setGenerationStatusInTx(sql, oldPid, "quarantined");
+    const next = insertPartitionInTx(sql, { name: old.name, ...input, projectId: project?.id });
+    if (global?.pid === oldPid)
+        setGlobalGenerationInTx(sql, next.pid);
+    else
+        sql.prepare("UPDATE project SET current_pid = ? WHERE id = ?").run(next.pid, project.id);
+    return next;
+}
+/** Recovery owns request/fingerprint validation and any filesystem leftovers.
+ * A retry addresses oldPid, even after current authority has moved. */
+export function quarantineGeneration(store, blobs, input) {
+    const key = { owner: "quarantine", pid: input.oldPid, keyDigest: input.keyDigest };
+    const prior = lookupIdempotency(store, key, input.requestDigest);
+    if (prior) {
+        // Recovery owns the original operation receipt. Never infer its generation
+        // from today's current pointer: it may have been quarantined again.
+        return { generation: null, binding: prior, replay: true };
+    }
+    const epoch = input.epoch ?? randomUUID().replace(/-/g, "");
+    const time = store.now().toISOString();
+    const event = prepareEvent(blobs, {
+        type: "journal.partition_quarantined",
+        time,
+        payload: input.payload,
+    });
+    const binding = {
+        ...key,
+        operation: "journal.partition.quarantine",
+        requestDigest: input.requestDigest,
+        targetId: input.operationId,
+        createdAt: time,
+    };
+    return runMutation(store, (tx) => {
+        const generation = quarantineGenerationInTx(tx, input.oldPid, { epoch, createdAt: time });
+        bindIdempotencyInTx(tx, binding);
+        appendPreparedEventInTx(tx, blobs, generation.pid, event);
+        return { generation, binding, replay: false };
+    });
+}
+//# sourceMappingURL=generations.js.map

package/dist/store/generations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generations.js","sourceRoot":"","sources":["../../src/store/generations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAA2B,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAwB,MAAM,eAAe,CAAC;AACtF,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,aAAa,GAEd,MAAM,iBAAiB,CAAC;AAMzB,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,EAC/C,CAAC;IAChC,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;sDAOuB,CAAC;AAEvD,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,GAAW;IAClD,OAAO,OAAO,CACZ,GAAG;SACA,OAAO,CACN;;;oGAG4F,CAC7F;SACA,GAAG,CAAC,GAAG,CAAC,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAW,EAAE,GAAW;IAC9D,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,aAAa,UAAU,EAAE,IAAI,IAAI,GAAG,4BAA4B,CAAC,EAC3E,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,GAAG,EAAE,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OACE,GAAG;SACA,OAAO,CACN;;;qBAGa,eAAe;8EAC0C,CACvE;SACA,GAAG,EACP,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACtB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CAAC,GAAoB,EAAE,GAAW;IACvE,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,UAAU,EAAE,IAAI,KAAK,QAAQ;QAC/B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,GAAG;SACA,OAAO,CACN,4GAA4G,CAC7G;SACA,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACpB,6EAA6E;IAC7E,GAAG,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChF,iBAAiB,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAAC,GAAoB;IACpD,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,GAAG;SACA,OAAO,CACN,+CAA+C,eAAe;sCAC9B,eAAe,qBAAqB,CACrE;SACA,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAoB,EAAE,GAAW,EAAE,MAAc;IACvF,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,GAAG,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7E,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,GAAG,EAAE,CAAC;QACvC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,GAAG;aACA,OAAO,CAAC,2CAA2C,CAAC;aACpD,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAoB,EAAE,GAAW;IACrE,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;IACxD,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,OAAO,aAAa,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAoB,EAAE,GAAW;IACrE,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,UAAU,EAAE,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,kBAAkB,CAAC,CAAC;IAC3F,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,wBAAwB,CACtC,GAAoB,EACpB,MAAc,EACd,KAGC;IAED,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,GAAG;SAChB,OAAO,CAAC,gFAAgF,CAAC;SACzF,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,MAAM,CAA+B,CAAC;IAChE,IAAI,MAAM,EAAE,GAAG,KAAK,MAAM,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,iBAAiB,CAAC,CAAC;IAC9F,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5F,IAAI,MAAM,EAAE,GAAG,KAAK,MAAM;QAAE,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;;QAC9D,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,OAAQ,CAAC,EAAE,CAAC,CAAC;IAC/F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;uEACuE;AACvE,MAAM,UAAU,oBAAoB,CAClC,KAAkB,EAClB,KAAgB,EAChB,KAOC;IAED,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,YAAqB,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IAC5F,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACjE,IAAI,KAAK,EAAE,CAAC;QACV,2EAA2E;QAC3E,oEAAoE;QACpE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE;QAChC,IAAI,EAAE,+BAA+B;QACrC,IAAI;QACJ,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAuB;QAClC,GAAG,GAAG;QACN,SAAS,EAAE,8BAA8B;QACzC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,QAAQ,EAAE,KAAK,CAAC,WAAW;QAC3B,SAAS,EAAE,IAAI;KAChB,CAAC;IACF,OAAO,WAAW,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;QAC/B,MAAM,UAAU,GAAG,wBAAwB,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,mBAAmB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACjC,uBAAuB,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/store/idempotency.d.ts

@@ -0,0 +1,25 @@
+import { type SqlWriteContext } from "./mutation.js";
+export type IdempotencyOwner = "command" | "thread" | "turn" | "decision" | "project" | "setup" | "upload" | "quarantine";
+export interface IdempotencyKey {
+    owner: IdempotencyOwner;
+    pid: number;
+    /** The caller's original digest formula, including any prefix, is preserved. */
+    keyDigest: string;
+}
+export interface IdempotencyBinding extends IdempotencyKey {
+    operation: string;
+    requestDigest: string;
+    targetId: string;
+    createdAt: string;
+    /** Only uploads store an original reply. Other owners resolve their target. */
+    result?: unknown;
+}
+/** Addressed replay; request/body hashes are never recomputed or interchanged. */
+export declare function lookupIdempotency(sql: Pick<SqlWriteContext, "prepare">, key: IdempotencyKey, requestDigest: string): IdempotencyBinding | undefined;
+/** Bind once, in the same transaction as the target. Same-request replay keeps
+ * the first target/result/time; a different request never overwrites a row. */
+export declare function bindIdempotencyInTx(sql: SqlWriteContext, binding: IdempotencyBinding): IdempotencyBinding;
+/** Delete only the removed target's bindings. A retained turn must not lose its
+ * key merely because its command was pruned, even when the ids happen to match. */
+export declare function deleteTargetIdempotencyInTx(sql: SqlWriteContext, owner: IdempotencyOwner, pid: number, targetId: string): number;
+//# sourceMappingURL=idempotency.d.ts.map

package/dist/store/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../src/store/idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAEzE,MAAM,MAAM,gBAAgB,GAC1B,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE7F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,gBAAgB,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAiBD,kFAAkF;AAClF,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EACrC,GAAG,EAAE,cAAc,EACnB,aAAa,EAAE,MAAM,GACpB,kBAAkB,GAAG,SAAS,CAoBhC;AAED;+EAC+E;AAC/E,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,kBAAkB,GAC1B,kBAAkB,CAsBpB;AAED;mFACmF;AACnF,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,eAAe,EACpB,KAAK,EAAE,gBAAgB,EACvB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GACf,MAAM,CAOR"}

package/dist/store/idempotency.js

@@ -0,0 +1,53 @@
+import { requireTransaction } from "./mutation.js";
+function conflict() {
+    throw Object.assign(new Error("idempotency key was already used with a different request"), {
+        code: "idempotency_conflict",
+        status: 409,
+    });
+}
+/** Addressed replay; request/body hashes are never recomputed or interchanged. */
+export function lookupIdempotency(sql, key, requestDigest) {
+    const row = sql
+        .prepare("SELECT operation, request_digest, target_id, result, created_at FROM idempotency WHERE owner = ? AND pid = ? AND key_digest = ?")
+        .get(key.owner, key.pid, key.keyDigest);
+    if (!row)
+        return undefined;
+    if (row.request_digest !== requestDigest)
+        conflict();
+    return {
+        owner: key.owner,
+        pid: key.pid,
+        keyDigest: key.keyDigest,
+        operation: row.operation,
+        requestDigest: row.request_digest,
+        targetId: row.target_id,
+        createdAt: row.created_at,
+        ...(row.result === null
+            ? {}
+            : { result: JSON.parse(Buffer.from(row.result).toString("utf8")) }),
+    };
+}
+/** Bind once, in the same transaction as the target. Same-request replay keeps
+ * the first target/result/time; a different request never overwrites a row. */
+export function bindIdempotencyInTx(sql, binding) {
+    requireTransaction(sql);
+    const existing = lookupIdempotency(sql, binding, binding.requestDigest);
+    if (existing)
+        return existing;
+    if (binding.owner !== "upload" && binding.result !== undefined) {
+        throw new Error("only upload idempotency bindings carry a result");
+    }
+    sql
+        .prepare("INSERT INTO idempotency(owner, pid, key_digest, operation, request_digest, target_id, result, created_at) VALUES(?, ?, ?, ?, ?, ?, ?, ?)")
+        .run(binding.owner, binding.pid, binding.keyDigest, binding.operation, binding.requestDigest, binding.targetId, binding.result === undefined ? null : Buffer.from(JSON.stringify(binding.result)), binding.createdAt);
+    return binding;
+}
+/** Delete only the removed target's bindings. A retained turn must not lose its
+ * key merely because its command was pruned, even when the ids happen to match. */
+export function deleteTargetIdempotencyInTx(sql, owner, pid, targetId) {
+    requireTransaction(sql);
+    return Number(sql
+        .prepare("DELETE FROM idempotency WHERE target_id = ? AND owner = ? AND pid = ?")
+        .run(targetId, owner, pid).changes);
+}
+//# sourceMappingURL=idempotency.js.map

package/dist/store/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../src/store/idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAwB,MAAM,eAAe,CAAC;AA6BzE,SAAS,QAAQ;IACf,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2DAA2D,CAAC,EAAE;QAC1F,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAC/B,GAAqC,EACrC,GAAmB,EACnB,aAAqB;IAErB,MAAM,GAAG,GAAG,GAAG;SACZ,OAAO,CACN,iIAAiI,CAClI;SACA,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAA2B,CAAC;IACpE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,GAAG,CAAC,cAAc,KAAK,aAAa;QAAE,QAAQ,EAAE,CAAC;IACrD,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI;YACrB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,mBAAmB,CACjC,GAAoB,EACpB,OAA2B;IAE3B,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACxE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,GAAG;SACA,OAAO,CACN,0IAA0I,CAC3I;SACA,GAAG,CACF,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EACjF,OAAO,CAAC,SAAS,CAClB,CAAC;IACJ,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;mFACmF;AACnF,MAAM,UAAU,2BAA2B,CACzC,GAAoB,EACpB,KAAuB,EACvB,GAAW,EACX,QAAgB;IAEhB,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,MAAM,CACX,GAAG;SACA,OAAO,CAAC,uEAAuE,CAAC;SAChF,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CACrC,CAAC;AACJ,CAAC"}

package/dist/store/import-context.d.ts

@@ -0,0 +1,22 @@
+import type { DatabaseSync, StatementSync } from "node:sqlite";
+import { type BodyRef } from "./blob-files.js";
+import { StoreError } from "./errors.js";
+import type { SqlWriteContext } from "./mutation.js";
+/** The importer has exactly one connection, no EngineStore or background worker. */
+export declare class ImportContext implements SqlWriteContext {
+    readonly db: DatabaseSync;
+    readonly blobsDir: string;
+    private readonly statements;
+    private active;
+    readonly externalDirectories: Set<string>;
+    constructor(db: DatabaseSync, blobsDir: string);
+    get inTransaction(): boolean;
+    prepare(sql: string): StatementSync;
+    transaction<T>(body: () => T): T;
+    /** Existing O_DSYNC writer, with a directory receipt instead of live generations.
+     * Parent fsyncs these directories before publishing the closed temp database. */
+    body(bytes: Uint8Array): BodyRef;
+    read(sha: string): Buffer;
+}
+export declare function importError(code: string, detail: string, cause?: unknown): StoreError;
+//# sourceMappingURL=import-context.d.ts.map

package/dist/store/import-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-context.d.ts","sourceRoot":"","sources":["../../src/store/import-context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAoC,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAEjF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,oFAAoF;AACpF,qBAAa,aAAc,YAAW,eAAe;IAMjD,QAAQ,CAAC,EAAE,EAAE,YAAY;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAN3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,MAAM,CAAS;IACvB,QAAQ,CAAC,mBAAmB,cAAqB;IAEjD,YACW,EAAE,EAAE,YAAY,EAChB,QAAQ,EAAE,MAAM,EACvB;IAEJ,IAAI,aAAa,IAAI,OAAO,CAE3B;IACD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAOlC;IAED,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAgB/B;IAED;qFACiF;IACjF,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CA0B/B;IAED,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CASxB;CACF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,UAAU,CAErF"}

package/dist/store/import-context.js

@@ -0,0 +1,87 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { INLINE_BODY_MAX_BYTES, sha256Hex } from "./blob-files.js";
+import { writeExternalFile } from "./external-files.js";
+import { StoreError } from "./errors.js";
+/** The importer has exactly one connection, no EngineStore or background worker. */
+export class ImportContext {
+    db;
+    blobsDir;
+    statements = new Map();
+    active = false;
+    externalDirectories = new Set();
+    constructor(db, blobsDir) {
+        this.db = db;
+        this.blobsDir = blobsDir;
+    }
+    get inTransaction() {
+        return this.active;
+    }
+    prepare(sql) {
+        let statement = this.statements.get(sql);
+        if (!statement) {
+            statement = this.db.prepare(sql);
+            this.statements.set(sql, statement);
+        }
+        return statement;
+    }
+    transaction(body) {
+        if (this.active)
+            throw new Error("nested import transaction");
+        this.db.exec("BEGIN IMMEDIATE");
+        this.active = true;
+        try {
+            const value = body();
+            if (value && typeof value.then === "function")
+                throw new Error("async import transaction");
+            this.db.exec("COMMIT");
+            return value;
+        }
+        catch (error) {
+            this.db.exec("ROLLBACK");
+            throw error;
+        }
+        finally {
+            this.active = false;
+        }
+    }
+    /** Existing O_DSYNC writer, with a directory receipt instead of live generations.
+     * Parent fsyncs these directories before publishing the closed temp database. */
+    body(bytes) {
+        const sha256 = sha256Hex(bytes);
+        if (bytes.byteLength <= INLINE_BODY_MAX_BYTES)
+            return {
+                sha256,
+                size: bytes.byteLength,
+                inline: Buffer.from(bytes),
+                file: null,
+                generation: null,
+            };
+        const receipt = writeExternalFile({
+            registerExternal: (dir) => {
+                this.externalDirectories.add(dir);
+                return 0;
+            },
+        }, { dir: this.blobsDir, name: sha256, bytes, keepExisting: true });
+        // Existing immutable bytes are never rewritten, including a resource collision.
+        if (!receipt.written) {
+            const prior = readFileSync(receipt.path);
+            if (prior.length !== bytes.byteLength || sha256Hex(prior) !== sha256)
+                throw importError("store_import_blob_mismatch", `existing body ${sha256} differs`);
+        }
+        return { sha256, size: bytes.byteLength, inline: null, file: receipt.path, generation: null };
+    }
+    read(sha) {
+        const row = this.prepare("SELECT size,inline FROM blob WHERE sha256=?").get(sha);
+        if (!row)
+            throw importError("store_import_blob_missing", `missing body ${sha}`);
+        const bytes = row.inline === null ? readFileSync(join(this.blobsDir, sha)) : Buffer.from(row.inline);
+        if (bytes.length !== row.size || sha256Hex(bytes) !== sha)
+            throw importError("store_import_blob_mismatch", `body ${sha} differs`);
+        return bytes;
+    }
+}
+export function importError(code, detail, cause) {
+    return new StoreError(code, 503, false, detail, cause === undefined ? undefined : { cause });
+}
+//# sourceMappingURL=import-context.js.map

package/dist/store/import-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-context.js","sourceRoot":"","sources":["../../src/store/import-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAgB,MAAM,iBAAiB,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,oFAAoF;AACpF,MAAM,OAAO,aAAa;IAMb,EAAE;IACF,QAAQ;IANF,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACvD,MAAM,GAAG,KAAK,CAAC;IACd,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjD,YACW,EAAgB,EAChB,QAAgB;kBADhB,EAAE;wBACF,QAAQ;IAChB,CAAC;IAEJ,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,GAAW;QACjB,IAAI,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,WAAW,CAAI,IAAa;QAC1B,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9D,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,IAAI,KAAK,IAAI,OAAQ,KAA4B,CAAC,IAAI,KAAK,UAAU;gBACnE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9C,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED;qFACiF;IACjF,IAAI,CAAC,KAAiB;QACpB,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,UAAU,IAAI,qBAAqB;YAC3C,OAAO;gBACL,MAAM;gBACN,IAAI,EAAE,KAAK,CAAC,UAAU;gBACtB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,IAAI;aACjB,CAAC;QACJ,MAAM,OAAO,GAAG,iBAAiB,CAC/B;YACE,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClC,OAAO,CAAC,CAAC;YACX,CAAC;SACF,EACD,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAChE,CAAC;QACF,gFAAgF;QAChF,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM;gBAClE,MAAM,WAAW,CAAC,4BAA4B,EAAE,iBAAiB,MAAM,UAAU,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,CAAC,GAAW;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,GAAG,CACtB,CAAC;QAC1D,IAAI,CAAC,GAAG;YAAE,MAAM,WAAW,CAAC,2BAA2B,EAAE,gBAAgB,GAAG,EAAE,CAAC,CAAC;QAChF,MAAM,KAAK,GACT,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzF,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG;YACvD,MAAM,WAAW,CAAC,4BAA4B,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAc,EAAE,KAAe;IACvE,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/F,CAAC"}

package/dist/store/import-discovery.d.ts

@@ -0,0 +1,6 @@
+import type { ImportPartitionSource } from "./import-source.js";
+/** Decode legacy names only; no recursive scan, journal writer or new layout.
+ * Existing global/project slugs also recover empty or damaged partitions.
+ * Other nonempty names come from the first frame through the original codec. */
+export declare function discoverLegacyPartitions(journalRoot: string): ImportPartitionSource[];
+//# sourceMappingURL=import-discovery.d.ts.map

package/dist/store/import-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-discovery.d.ts","sourceRoot":"","sources":["../../src/store/import-discovery.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhE;;gFAEgF;AAChF,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,EAAE,CA6BrF"}

package/dist/store/import-discovery.js

@@ -0,0 +1,66 @@
+import { closeSync, existsSync, openSync, readSync, readdirSync, statSync } from "node:fs";
+import { basename, join } from "node:path";
+import { PREFIX_BYTES, decodeFrameBody, readFramePrefix } from "./legacy-journal/frame-codec.js";
+import { journalPartitionDirectory } from "./legacy-journal/journal-partition.js";
+import { importError } from "./import-context.js";
+/** Decode legacy names only; no recursive scan, journal writer or new layout.
+ * Existing global/project slugs also recover empty or damaged partitions.
+ * Other nonempty names come from the first frame through the original codec. */
+export function discoverLegacyPartitions(journalRoot) {
+    const result = [];
+    for (const entry of readdirSync(journalRoot, { withFileTypes: true })) {
+        if (!entry.isDirectory())
+            continue;
+        const directory = join(journalRoot, entry.name), file = join(directory, "journal.bin");
+        const match = /^project-(.*)-[0-9a-f]{12}$/.exec(entry.name);
+        const candidate = entry.name === basename(journalPartitionDirectory(journalRoot, "global"))
+            ? "global"
+            : match
+                ? `project:${match[1]}`
+                : null;
+        if (candidate && journalPartitionDirectory(journalRoot, candidate) === directory) {
+            result.push({ name: candidate, directory });
+            continue;
+        }
+        if (!existsSync(file))
+            continue;
+        const name = firstPartitionName(file);
+        if (journalPartitionDirectory(journalRoot, name) !== directory)
+            throw importError("store_import_partition_identity", "legacy partition directory disagrees with its frame identity");
+        result.push({ name, directory });
+    }
+    if (!result.some((row) => row.name === "global"))
+        result.push({ name: "global", directory: journalPartitionDirectory(journalRoot, "global") });
+    return result;
+}
+function firstPartitionName(path) {
+    const fd = openSync(path, "r");
+    try {
+        const size = statSync(path).size, prefix = Buffer.alloc(Math.min(PREFIX_BYTES, size));
+        readExactly(fd, prefix, 0);
+        const decoded = readFramePrefix(prefix, size);
+        if (decoded.status !== "frame")
+            throw importError("store_import_partition_identity", "legacy partition has no readable name; source bytes retained");
+        const frame = Buffer.alloc(decoded.frameLength);
+        readExactly(fd, frame, 0);
+        const body = decodeFrameBody(frame, decoded.headerLength, decoded.payloadLength);
+        if (body.status !== "frame" ||
+            typeof body.header.partition !== "string" ||
+            !body.header.partition.trim())
+            throw importError("store_import_partition_identity", "legacy first frame has no verified partition identity");
+        return body.header.partition;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+function readExactly(fd, bytes, position) {
+    let offset = 0;
+    while (offset < bytes.length) {
+        const count = readSync(fd, bytes, offset, bytes.length - offset, position + offset);
+        if (!count)
+            throw importError("store_import_source_changed", "legacy frame changed while reading its identity");
+        offset += count;
+    }
+}
+//# sourceMappingURL=import-discovery.js.map

package/dist/store/import-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-discovery.js","sourceRoot":"","sources":["../../src/store/import-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACjG,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD;;gFAEgF;AAChF,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,EAC7C,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,SAAS,GACb,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACvE,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,KAAK;gBACL,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,EAAE;gBACvB,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,SAAS,IAAI,yBAAyB,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACjF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,yBAAyB,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,SAAS;YAC5D,MAAM,WAAW,CACf,iCAAiC,EACjC,8DAA8D,CAC/D,CAAC;QACJ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAC9B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;YAC5B,MAAM,WAAW,CACf,iCAAiC,EACjC,8DAA8D,CAC/D,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACjF,IACE,IAAI,CAAC,MAAM,KAAK,OAAO;YACvB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ;YACzC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;YAE7B,MAAM,WAAW,CACf,iCAAiC,EACjC,uDAAuD,CACxD,CAAC;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AACD,SAAS,WAAW,CAAC,EAAU,EAAE,KAAa,EAAE,QAAgB;IAC9D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC,CAAC;QACpF,IAAI,CAAC,KAAK;YACR,MAAM,WAAW,CACf,6BAA6B,EAC7B,iDAAiD,CAClD,CAAC;QACJ,MAAM,IAAI,KAAK,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/store/import-records.d.ts

@@ -0,0 +1,6 @@
+import type { JournalRecord } from "./legacy-journal/frame-codec.js";
+import { ImportContext } from "./import-context.js";
+/** Bodies are prepared before BEGIN; the returned batch uses only pure row
+ * reducers. Runtime append/owner notifications never run during import. */
+export declare function prepareImportRecords(sql: ImportContext, records: readonly JournalRecord[]): (pid: number) => void;
+//# sourceMappingURL=import-records.d.ts.map

package/dist/store/import-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-records.d.ts","sourceRoot":"","sources":["../../src/store/import-records.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAoBrE,OAAO,EAAE,aAAa,EAAe,MAAM,qBAAqB,CAAC;AAkBjE;2EAC2E;AAC3E,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,SAAS,aAAa,EAAE,GAChC,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CA4KvB"}