@claudexor/daemon 3.25.1 → 4.0.1

package/dist/store/publish-blob.js

@@ -0,0 +1,158 @@
+import { existsSync, readFileSync } from "node:fs";
+import { ControlResource } from "@claudexor/schema";
+import { hashJson, newId } from "@claudexor/util";
+import { sha256Hex } from "./blob-files.js";
+import { bindIdempotencyInTx } from "./idempotency.js";
+import { runMutation } from "./mutation.js";
+import { assertContentAllowed, putResourceInTx, putUploadInTx, readResourceRow, readUploadRow, resourceError, resourceSha, verifiedResourceBytes, } from "./resource-rows.js";
+import { uploadKeyDigest } from "./upload-binding-retention.js";
+/** One publication identity across tx1, link, tx2, restart and exact replay. */
+export class PublishBlob {
+    store;
+    blobs;
+    obligations;
+    uploads;
+    defer;
+    constructor(store, blobs, obligations, uploads, defer) {
+        this.store = store;
+        this.blobs = blobs;
+        this.obligations = obligations;
+        this.uploads = uploads;
+        this.defer = defer;
+        obligations.registerHandler("publish_blob", (row, effects) => this.recover(row, effects));
+    }
+    finalize(id, expectedSha256, key) {
+        const requestDigest = hashJson({ uploadId: id, expectedSha256: expectedSha256 ?? null });
+        const prior = this.uploads.bindings.lookup("finalize", key, requestDigest, id);
+        if (prior) {
+            const row = readUploadRow(this.store, id);
+            if (row?.state === "finalizing")
+                this.complete(row);
+            return ControlResource.parse(prior.result);
+        }
+        const upload = this.uploads.get(id);
+        const keyDigest = uploadKeyDigest("finalize", key);
+        if (upload.finalization) {
+            if (upload.finalization.keyDigest !== keyDigest ||
+                upload.finalization.requestDigest !== requestDigest)
+                throw resourceError("idempotency key was already used with a different request", 409, "idempotency_conflict");
+            return this.complete(upload);
+        }
+        if (upload.status.state !== "uploaded")
+            throw resourceError(`upload ${id} is ${upload.status.state}`, 409, "upload_not_uploaded");
+        const bytes = readFileSync(this.uploads.partPath(id));
+        if (bytes.length !== upload.status.expectedBytes)
+            throw resourceError("uploaded file no longer matches declared size", 409, "upload_size_mismatch");
+        try {
+            assertContentAllowed(upload.request, bytes);
+        }
+        catch (error) {
+            this.uploads.cancel(id);
+            throw error;
+        }
+        const sha = sha256Hex(bytes);
+        if (expectedSha256 !== undefined && expectedSha256 !== `sha256:${sha}`)
+            throw resourceError("uploaded byte digest does not match expectedSha256", 409, "digest_mismatch");
+        const resource = ControlResource.parse({
+            resourceId: newId("res"),
+            ...(upload.request.purpose ? { purpose: upload.request.purpose } : {}),
+            kind: upload.request.kind,
+            mime: upload.request.mime,
+            name: upload.request.name,
+            sha256: `sha256:${sha}`,
+            sizeBytes: bytes.length,
+            createdAt: this.store.now().toISOString(),
+            deduplicated: existsSync(this.blobs.filePath(sha)),
+        });
+        upload.state = "finalizing";
+        upload.finalizeSha = sha;
+        upload.resourceId = resource.resourceId;
+        upload.finalization = { keyDigest, requestDigest, result: resource };
+        runMutation(this.store, (tx) => {
+            putUploadInTx(tx, upload);
+            putResourceInTx(tx, { resource, state: "publishing", expiresAt: null, releasedAt: null });
+            bindIdempotencyInTx(tx, {
+                owner: "upload",
+                pid: 0,
+                keyDigest,
+                operation: "finalize",
+                requestDigest,
+                targetId: id,
+                result: resource,
+                createdAt: tx.now().toISOString(),
+            });
+            this.obligations.create("publish_blob", id, 0, { sha, resource_id: resource.resourceId });
+            tx.changes.blobChanged(sha);
+            tx.changes.uploadChanged(id);
+        });
+        return this.complete(upload);
+    }
+    /** Called by the composition's single Obligations.onCleared hook, after its owner notification. */
+    onCleared(rows) {
+        for (const row of rows) {
+            if (row.kind !== "publish_blob")
+                continue;
+            this.uploads.cleanPart(row.key);
+            const { sha } = row.payload;
+            // Release may have happened while publication still owned this digest.
+            if (!this.blobs.owned(sha))
+                this.defer(this.blobs.gc(sha));
+        }
+    }
+    complete(upload, effects) {
+        const resource = upload.finalization.result;
+        const row = readResourceRow(this.store, resource.resourceId);
+        if (!row)
+            throw resourceError(`no such resource: ${resource.resourceId}`, 404, "resource_not_found");
+        // Receipts survive byte release. Never link a released or expired resource again.
+        if (row.state === "released" || row.state === "expired") {
+            // Complete custody without republishing bytes. The new barrier covers
+            // release before the post-clear hook can remove the remaining part.
+            const generation = this.store.mark();
+            upload.state = "published";
+            runMutation(this.store, (tx) => {
+                putUploadInTx(tx, upload);
+                if (!effects)
+                    this.obligations.materializeInTx(tx, "publish_blob", upload.status.uploadId, generation);
+                tx.changes.uploadChanged(upload.status.uploadId);
+                tx.changes.blobChanged(upload.finalizeSha);
+            });
+            return resource;
+        }
+        const sha = resourceSha(resource);
+        const path = this.blobs.filePath(sha);
+        const bytes = verifiedResourceBytes(resource, existsSync(path) ? path : this.uploads.partPath(upload.status.uploadId));
+        assertContentAllowed(resource, bytes);
+        const linked = this.blobs.publishLink(this.uploads.partPath(upload.status.uploadId), sha);
+        const generation = effects ? effects.register(this.blobs.dir) : linked.generation;
+        // The part stays through the durability barrier. Only the post-clear hook removes it.
+        upload.state = "published";
+        runMutation(this.store, (tx) => {
+            this.blobs.insertRow({
+                sha256: sha,
+                size: resource.sizeBytes,
+                inline: null,
+                file: path,
+                generation,
+            });
+            putResourceInTx(tx, { ...row, state: "ready" });
+            putUploadInTx(tx, upload);
+            if (!effects)
+                this.obligations.materializeInTx(tx, "publish_blob", upload.status.uploadId, generation);
+            tx.changes.blobChanged(sha);
+            tx.changes.uploadChanged(upload.status.uploadId);
+        });
+        return ControlResource.parse(resource);
+    }
+    recover(obligation, effects) {
+        const upload = readUploadRow(this.store, obligation.key);
+        if (!upload?.finalization)
+            throw new Error(`publication upload ${obligation.key} is unavailable`);
+        const { sha, resource_id } = obligation.payload;
+        if (resourceSha(upload.finalization.result) !== sha || upload.resourceId !== resource_id)
+            throw new Error(`publication binding mismatch for ${obligation.key}`);
+        // completeOpen owns rematerialization with this process's new registration.
+        this.complete(upload, effects);
+    }
+}
+//# sourceMappingURL=publish-blob.js.map

package/dist/store/publish-blob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-blob.js","sourceRoot":"","sources":["../../src/store/publish-blob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAa,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,eAAe,EACf,aAAa,EACb,aAAa,EACb,WAAW,EACX,qBAAqB,GAEtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,gFAAgF;AAChF,MAAM,OAAO,WAAW;IAEH,KAAK;IACL,KAAK;IACL,WAAW;IACX,OAAO;IACP,KAAK;IALxB,YACmB,KAAkB,EAClB,KAAgB,EAChB,WAAwB,EACxB,OAAmB,EACnB,KAAuC;qBAJvC,KAAK;qBACL,KAAK;2BACL,WAAW;uBACX,OAAO;qBACP,KAAK;QAEtB,WAAW,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,QAAQ,CAAC,EAAU,EAAE,cAAkC,EAAE,GAAW;QAClE,MAAM,aAAa,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,cAAc,IAAI,IAAI,EAAE,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,GAAG,EAAE,KAAK,KAAK,YAAY;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACpD,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,IACE,MAAM,CAAC,YAAY,CAAC,SAAS,KAAK,SAAS;gBAC3C,MAAM,CAAC,YAAY,CAAC,aAAa,KAAK,aAAa;gBAEnD,MAAM,aAAa,CACjB,2DAA2D,EAC3D,GAAG,EACH,sBAAsB,CACvB,CAAC;YACJ,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU;YACpC,MAAM,aAAa,CAAC,UAAU,EAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa;YAC9C,MAAM,aAAa,CACjB,+CAA+C,EAC/C,GAAG,EACH,sBAAsB,CACvB,CAAC;QACJ,IAAI,CAAC;YACH,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,UAAU,GAAG,EAAE;YACpE,MAAM,aAAa,CACjB,oDAAoD,EACpD,GAAG,EACH,iBAAiB,CAClB,CAAC;QACJ,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC;YACrC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,MAAM,EAAE,UAAU,GAAG,EAAE;YACvB,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACzC,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,GAAG,YAAY,CAAC;QAC5B,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC;QACzB,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACxC,MAAM,CAAC,YAAY,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACrE,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;YAC7B,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC1B,eAAe,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1F,mBAAmB,CAAC,EAAE,EAAE;gBACtB,KAAK,EAAE,QAAQ;gBACf,GAAG,EAAE,CAAC;gBACN,SAAS;gBACT,SAAS,EAAE,UAAU;gBACrB,aAAa;gBACb,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAC1F,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC5B,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,mGAAmG;IACnG,SAAS,CAAC,IAA8B;QACtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YAC1C,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAA0B,CAAC;YAC/C,uEAAuE;YACvE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,MAAiB,EAAE,OAA2B;QAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAa,CAAC,MAAM,CAAC;QAC7C,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG;YACN,MAAM,aAAa,CAAC,qBAAqB,QAAQ,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC7F,kFAAkF;QAClF,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACxD,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC;YAC3B,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;gBAC7B,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC1B,IAAI,CAAC,OAAO;oBACV,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC3F,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,qBAAqB,CACjC,QAAQ,EACR,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CACxE,CAAC;QACF,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1F,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QAClF,sFAAsF;QACtF,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;YAC7B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,QAAQ,CAAC,SAAS;gBACxB,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,IAAI;gBACV,UAAU;aACX,CAAC,CAAC;YACH,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO;gBACV,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC3F,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC5B,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,OAAO,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAEO,OAAO,CAAC,UAAyB,EAAE,OAA0B;QACnE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,EAAE,YAAY;YACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,CAAC,GAAG,iBAAiB,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC,OAA+C,CAAC;QACxF,IAAI,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW;YACtF,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,4EAA4E;QAC5E,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/store/purge-files.d.ts

@@ -0,0 +1,30 @@
+import { type Thread } from "@claudexor/schema";
+import type { EngineStore } from "./store.js";
+import type { Obligations, ObligationHandler } from "./obligations.js";
+export interface PurgeFilesPayload {
+    thread: Thread;
+}
+/** Uses the CLI/workspace's existing purge owner; it reports touched parents. */
+export type PurgeFilesEffect = (thread: Thread) => Promise<readonly string[]>;
+/** SQL owns the decision and retry; the existing workspace owner owns deletion. */
+export declare class SqlPurgeFiles {
+    readonly store: EngineStore;
+    readonly obligations: Obligations;
+    private readonly pending;
+    constructor(store: EngineStore, obligations: Obligations);
+    handler(perform: PurgeFilesEffect): ObligationHandler;
+    /** Runtime replay uses the same handler as startup, without replaying every
+     * open obligation or resetting another effect's materialized state. */
+    complete(id: string, perform: PurgeFilesEffect): Promise<void>;
+    private completeOne;
+}
+/** PR-D supplies already validated, engine-owned leftovers. Logical SQL
+ * archives have no fake filesystem move; only a real leftover creates this. */
+export interface PartitionFilesPayload {
+    source: string;
+    destination: string;
+}
+export declare function partitionFilesHandler(store: EngineStore): ObligationHandler;
+/** Removed parents cannot be opened by the flusher; sync the surviving parent. */
+export declare function existingDirectory(path: string): string;
+//# sourceMappingURL=purge-files.d.ts.map

package/dist/store/purge-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge-files.d.ts","sourceRoot":"","sources":["../../src/store/purge-files.ts"],"names":[],"mappings":"AAEA,OAAO,EAA0B,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEvE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,iFAAiF;AACjF,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;AAE9E,mFAAmF;AACnF,qBAAa,aAAa;IAGtB,QAAQ,CAAC,KAAK,EAAE,WAAW;IAC3B,QAAQ,CAAC,WAAW,EAAE,WAAW;IAHnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,YACW,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,WAAW,EAC/B;IAEJ,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,iBAAiB,CAUpD;IAED;2EACuE;IACvE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAM7D;YAEa,WAAW;CA6B1B;AAED;+EAC+E;AAC/E,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,WAAW,GAAG,iBAAiB,CAc3E;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKtD"}

package/dist/store/purge-files.js

@@ -0,0 +1,79 @@
+import { existsSync, renameSync, statSync } from "node:fs";
+import { dirname } from "node:path";
+import { Thread as ThreadSchema } from "@claudexor/schema";
+/** SQL owns the decision and retry; the existing workspace owner owns deletion. */
+export class SqlPurgeFiles {
+    store;
+    obligations;
+    pending = new Map();
+    constructor(store, obligations) {
+        this.store = store;
+        this.obligations = obligations;
+    }
+    handler(perform) {
+        return async (obligation, effects) => {
+            const thread = ThreadSchema.parse(obligation.payload.thread);
+            if (thread.id !== obligation.key)
+                throw new Error("purge obligation does not name its thread");
+            // Covers the decision committed before this call, also after restart.
+            await this.store.synced(this.store.mark());
+            const dirs = await perform(thread);
+            for (const dir of new Set(dirs))
+                effects.register(dir);
+        };
+    }
+    /** Runtime replay uses the same handler as startup, without replaying every
+     * open obligation or resetting another effect's materialized state. */
+    complete(id, perform) {
+        const existing = this.pending.get(id);
+        if (existing)
+            return existing;
+        const completion = this.completeOne(id, perform).finally(() => this.pending.delete(id));
+        this.pending.set(id, completion);
+        return completion;
+    }
+    async completeOne(id, perform) {
+        const row = this.store
+            .prepare("SELECT pid,payload,created_at,state,materialized_g FROM effect_obligation WHERE kind='purge_fs' AND key=?")
+            .get(id);
+        if (!row || row.state === "materialized")
+            return;
+        await this.handler(perform)({
+            kind: "purge_fs",
+            key: id,
+            pid: row.pid,
+            createdAt: row.created_at,
+            payload: JSON.parse(Buffer.from(row.payload).toString("utf8")),
+            state: row.state,
+            materializedGeneration: row.materialized_g,
+        }, { register: (dir) => this.obligations.registerEffect("purge_fs", id, dir) });
+        this.obligations.materialize("purge_fs", id);
+    }
+}
+export function partitionFilesHandler(store) {
+    return async (obligation, effects) => {
+        const { source, destination } = obligation.payload;
+        if (typeof source !== "string" || typeof destination !== "string")
+            throw new Error("invalid partition filesystem obligation");
+        await store.synced(store.mark());
+        if (existsSync(source)) {
+            if (existsSync(destination))
+                throw new Error("partition archive destination already exists");
+            renameSync(source, destination);
+        }
+        else if (!existsSync(destination))
+            throw new Error("partition archive source and destination are missing");
+        effects.register(existingDirectory(dirname(source)));
+        effects.register(existingDirectory(dirname(destination)));
+    };
+}
+/** Removed parents cannot be opened by the flusher; sync the surviving parent. */
+export function existingDirectory(path) {
+    for (let current = path;; current = dirname(current)) {
+        if (existsSync(current) && statSync(current).isDirectory())
+            return current;
+        if (dirname(current) === current)
+            throw new Error(`no surviving parent directory of ${path}`);
+    }
+}
+//# sourceMappingURL=purge-files.js.map

package/dist/store/purge-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge-files.js","sourceRoot":"","sources":["../../src/store/purge-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,IAAI,YAAY,EAAe,MAAM,mBAAmB,CAAC;AAUxE,mFAAmF;AACnF,MAAM,OAAO,aAAa;IAGb,KAAK;IACL,WAAW;IAHL,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC5D,YACW,KAAkB,EAClB,WAAwB;qBADxB,KAAK;2BACL,WAAW;IACnB,CAAC;IAEJ,OAAO,CAAC,OAAyB;QAC/B,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAE,UAAU,CAAC,OAA6B,CAAC,MAAM,CAAC,CAAC;YACpF,IAAI,MAAM,CAAC,EAAE,KAAK,UAAU,CAAC,GAAG;gBAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,sEAAsE;YACtE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YACnC,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC,CAAC;IACJ,CAAC;IAED;2EACuE;IACvE,QAAQ,CAAC,EAAU,EAAE,OAAyB;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACjC,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,OAAyB;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK;aACnB,OAAO,CACN,2GAA2G,CAC5G;aACA,GAAG,CAAC,EAAE,CAQI,CAAC;QACd,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,cAAc;YAAE,OAAO;QACjD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CACzB;YACE,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,EAAE;YACP,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY;YACzE,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,sBAAsB,EAAE,GAAG,CAAC,cAAc;SAC3C,EACD,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAC5E,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;CACF;AASD,MAAM,UAAU,qBAAqB,CAAC,KAAkB;IACtD,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;QACnC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC,OAAgC,CAAC;QAC5E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,WAAW,KAAK,QAAQ;YAC/D,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,IAAI,UAAU,CAAC,WAAW,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC7F,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,KAAK,IAAI,OAAO,GAAG,IAAI,GAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,OAAO,CAAC;QAC3E,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC"}

package/dist/store/resource-rows.d.ts

@@ -0,0 +1,40 @@
+import { ControlResource, ControlUploadCreateRequest, ControlUploadStatus, ModelPayloadRef } from "@claudexor/schema";
+import { type SqlWriteContext } from "./mutation.js";
+export type ResourceState = "publishing" | "ready" | "released" | "expired";
+export interface ResourceRow {
+    resource: ControlResource;
+    state: ResourceState;
+    expiresAt: string | null;
+    releasedAt: string | null;
+}
+export interface UploadFinalization {
+    keyDigest: string;
+    requestDigest: string;
+    result: ControlResource;
+}
+export interface UploadRow {
+    request: ControlUploadCreateRequest;
+    status: ControlUploadStatus;
+    state: "open" | "uploaded" | "finalizing" | "published" | "discarded";
+    finalizeSha: string | null;
+    resourceId?: string;
+    finalization?: UploadFinalization;
+}
+type SqlReader = Pick<SqlWriteContext, "prepare">;
+export declare function readResourceRow(sql: SqlReader, id: string): ResourceRow | undefined;
+export declare function readUploadRow(sql: SqlReader, id: string): UploadRow | undefined;
+/** Pure row reducer: the caller owns the transaction, files and live notifications. */
+export declare function putResourceInTx(sql: SqlWriteContext, row: ResourceRow): void;
+/** Also used by the importer; no EngineStore, COMMIT, files or workers are involved. */
+export declare function putUploadInTx(sql: SqlWriteContext, row: UploadRow): void;
+export declare function resourceError(message: string, status?: number, code?: string): Error;
+export declare function assertResourceId(id: string): void;
+export declare function resourceSha(resource: Pick<ControlResource, "sha256">): string;
+export declare function payloadRef(resource: ControlResource): ModelPayloadRef;
+export declare function sensitiveResourceError(): Error;
+export declare function assertContentAllowed(resource: Pick<ControlResource, "purpose">, bytes: Uint8Array): void;
+export declare function assertModelRef(resource: ControlResource, ref: ModelPayloadRef): void;
+export declare function purposeMismatch(): Error;
+export declare function verifiedResourceBytes(resource: ControlResource, path: string): Buffer;
+export {};
+//# sourceMappingURL=resource-rows.d.ts.map

package/dist/store/resource-rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-rows.d.ts","sourceRoot":"","sources":["../../src/store/resource-rows.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,EACnB,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAEzE,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;AAC5E,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AACD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,eAAe,CAAC;CACzB;AACD,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,0BAA0B,CAAC;IACpC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,GAAG,WAAW,GAAG,WAAW,CAAC;IACtE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,KAAK,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;AAClD,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAgBnF;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CA4B/E;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAuB5E;AAED,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,SAAS,GAAG,IAAI,CAiBxE;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAM,EAAE,IAAI,SAAmB,GAAG,KAAK,CAE3F;AACD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAGjD;AACD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,GAAG,MAAM,CAI7E;AACD,wBAAgB,UAAU,CAAC,QAAQ,EAAE,eAAe,GAAG,eAAe,CAMrE;AACD,wBAAgB,sBAAsB,IAAI,KAAK,CAM9C;AACD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EAC1C,KAAK,EAAE,UAAU,GAChB,IAAI,CAMN;AACD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,GAAG,IAAI,CAQpF;AACD,wBAAgB,eAAe,IAAI,KAAK,CAMvC;AACD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAWrF"}

package/dist/store/resource-rows.js

@@ -0,0 +1,103 @@
+import { readFileSync, existsSync } from "node:fs";
+import { ControlResource, ControlUploadCreateRequest, ControlUploadStatus, ModelPayloadRef, } from "@claudexor/schema";
+import { sensitiveResourcePolicy } from "@claudexor/util";
+import { sha256Hex } from "./blob-files.js";
+import { requireTransaction } from "./mutation.js";
+export function readResourceRow(sql, id) {
+    const row = sql
+        .prepare("SELECT state, expires_at, released_at, body FROM resource WHERE id = ?")
+        .get(id);
+    if (!row)
+        return undefined;
+    const resource = ControlResource.parse(JSON.parse(Buffer.from(row.body).toString("utf8")));
+    if (resource.resourceId !== id)
+        throw resourceError("resource identity mismatch", 409, "resource_digest_mismatch");
+    return { resource, state: row.state, expiresAt: row.expires_at, releasedAt: row.released_at };
+}
+export function readUploadRow(sql, id) {
+    const row = sql
+        .prepare("SELECT state, finalize_sha, received_bytes, expected_bytes, body FROM upload WHERE id = ?")
+        .get(id);
+    if (!row)
+        return undefined;
+    const body = JSON.parse(Buffer.from(row.body).toString("utf8"));
+    return {
+        ...body,
+        request: ControlUploadCreateRequest.parse(body.request),
+        status: ControlUploadStatus.parse({
+            ...body.status,
+            uploadId: id,
+            receivedBytes: Number(row.received_bytes),
+            expectedBytes: Number(row.expected_bytes),
+        }),
+        state: row.state,
+        finalizeSha: row.finalize_sha,
+    };
+}
+/** Pure row reducer: the caller owns the transaction, files and live notifications. */
+export function putResourceInTx(sql, row) {
+    requireTransaction(sql);
+    const r = row.resource;
+    sql
+        .prepare(`INSERT INTO resource(id, purpose, kind, sha256, size_bytes, state, created_at, expires_at, released_at, body)
+    VALUES(?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    ON CONFLICT(id) DO UPDATE SET purpose=excluded.purpose, kind=excluded.kind, sha256=excluded.sha256,
+    size_bytes=excluded.size_bytes, state=excluded.state, created_at=excluded.created_at,
+    expires_at=excluded.expires_at, released_at=excluded.released_at, body=excluded.body`)
+        .run(r.resourceId, r.purpose ?? null, r.kind, resourceSha(r), r.sizeBytes, row.state, r.createdAt, row.expiresAt, row.releasedAt, Buffer.from(JSON.stringify(r)));
+}
+/** Also used by the importer; no EngineStore, COMMIT, files or workers are involved. */
+export function putUploadInTx(sql, row) {
+    requireTransaction(sql);
+    const { state, finalizeSha, ...body } = row;
+    sql
+        .prepare(`INSERT INTO upload(id, state, received_bytes, expected_bytes, finalize_sha, body) VALUES(?, ?, ?, ?, ?, ?)
+    ON CONFLICT(id) DO UPDATE SET state=excluded.state, received_bytes=excluded.received_bytes,
+    expected_bytes=excluded.expected_bytes, finalize_sha=excluded.finalize_sha, body=excluded.body`)
+        .run(row.status.uploadId, state, row.status.receivedBytes, row.status.expectedBytes, finalizeSha, Buffer.from(JSON.stringify(body)));
+}
+export function resourceError(message, status = 400, code = "resource_error") {
+    return Object.assign(new Error(message), { status, code });
+}
+export function assertResourceId(id) {
+    if (!/^[a-zA-Z0-9_-]+$/.test(id))
+        throw resourceError("invalid resource id", 400, "invalid_resource_id");
+}
+export function resourceSha(resource) {
+    if (!/^sha256:[a-f0-9]{64}$/.test(resource.sha256))
+        throw resourceError("invalid resource digest", 409, "resource_digest_mismatch");
+    return resource.sha256.slice(7);
+}
+export function payloadRef(resource) {
+    return ModelPayloadRef.parse({
+        resourceId: resource.resourceId,
+        sha256: resource.sha256,
+        sizeBytes: resource.sizeBytes,
+    });
+}
+export function sensitiveResourceError() {
+    return resourceError("resource rejected by sensitive-resource policy", 422, "sensitive_resource_rejected");
+}
+export function assertContentAllowed(resource, bytes) {
+    if (resource.purpose !== "model" &&
+        sensitiveResourcePolicy.containsSensitiveContent(Buffer.from(bytes).toString("utf8")))
+        throw sensitiveResourceError();
+}
+export function assertModelRef(resource, ref) {
+    if (resource.purpose !== "model")
+        throw purposeMismatch();
+    if (resource.sha256 !== ref.sha256 || resource.sizeBytes !== ref.sizeBytes)
+        throw resourceError("model resource reference does not match finalized bytes", 409, "resource_digest_mismatch");
+}
+export function purposeMismatch() {
+    return resourceError("resource purpose does not match this operation", 409, "resource_purpose_mismatch");
+}
+export function verifiedResourceBytes(resource, path) {
+    if (!existsSync(path))
+        throw resourceError("resource blob is unavailable", 409, "resource_unavailable");
+    const bytes = readFileSync(path);
+    if (bytes.length !== resource.sizeBytes || sha256Hex(bytes) !== resourceSha(resource))
+        throw resourceError("resource blob no longer matches finalized bytes", 409, "resource_digest_mismatch");
+    return bytes;
+}
+//# sourceMappingURL=resource-rows.js.map

package/dist/store/resource-rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-rows.js","sourceRoot":"","sources":["../../src/store/resource-rows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,EACnB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAwB,MAAM,eAAe,CAAC;AAwBzE,MAAM,UAAU,eAAe,CAAC,GAAc,EAAE,EAAU;IACxD,MAAM,GAAG,GAAG,GAAG;SACZ,OAAO,CAAC,wEAAwE,CAAC;SACjF,GAAG,CAAC,EAAE,CAOI,CAAC;IACd,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3F,IAAI,QAAQ,CAAC,UAAU,KAAK,EAAE;QAC5B,MAAM,aAAa,CAAC,4BAA4B,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACrF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAc,EAAE,EAAU;IACtD,MAAM,GAAG,GAAG,GAAG;SACZ,OAAO,CACN,2FAA2F,CAC5F;SACA,GAAG,CAAC,EAAE,CAQI,CAAC;IACd,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAc,CAAC;IAC7E,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;QACvD,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;YAChC,GAAG,IAAI,CAAC,MAAM;YACd,QAAQ,EAAE,EAAE;YACZ,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;YACzC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;SAC1C,CAAC;QACF,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,YAAY;KAC9B,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,GAAoB,EAAE,GAAgB;IACpE,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;IACvB,GAAG;SACA,OAAO,CACN;;;;yFAImF,CACpF;SACA,GAAG,CACF,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,OAAO,IAAI,IAAI,EACjB,CAAC,CAAC,IAAI,EACN,WAAW,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,EACX,GAAG,CAAC,KAAK,EACT,CAAC,CAAC,SAAS,EACX,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,UAAU,EACd,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAC/B,CAAC;AACN,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,GAAoB,EAAE,GAAc;IAChE,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IAC5C,GAAG;SACA,OAAO,CACN;;mGAE6F,CAC9F;SACA,GAAG,CACF,GAAG,CAAC,MAAM,CAAC,QAAQ,EACnB,KAAK,EACL,GAAG,CAAC,MAAM,CAAC,aAAa,EACxB,GAAG,CAAC,MAAM,CAAC,aAAa,EACxB,WAAW,EACX,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAClC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,GAAG,gBAAgB;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,aAAa,CAAC,qBAAqB,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;AAC3E,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,QAAyC;IACnE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAChD,MAAM,aAAa,CAAC,yBAAyB,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAClF,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,QAAyB;IAClD,OAAO,eAAe,CAAC,KAAK,CAAC;QAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,sBAAsB;IACpC,OAAO,aAAa,CAClB,gDAAgD,EAChD,GAAG,EACH,6BAA6B,CAC9B,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,oBAAoB,CAClC,QAA0C,EAC1C,KAAiB;IAEjB,IACE,QAAQ,CAAC,OAAO,KAAK,OAAO;QAC5B,uBAAuB,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAErF,MAAM,sBAAsB,EAAE,CAAC;AACnC,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,QAAyB,EAAE,GAAoB;IAC5E,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;QAAE,MAAM,eAAe,EAAE,CAAC;IAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS;QACxE,MAAM,aAAa,CACjB,yDAAyD,EACzD,GAAG,EACH,0BAA0B,CAC3B,CAAC;AACN,CAAC;AACD,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAClB,gDAAgD,EAChD,GAAG,EACH,2BAA2B,CAC5B,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,QAAyB,EAAE,IAAY;IAC3E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACnB,MAAM,aAAa,CAAC,8BAA8B,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,QAAQ,CAAC;QACnF,MAAM,aAAa,CACjB,iDAAiD,EACjD,GAAG,EACH,0BAA0B,CAC3B,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/store/resources.d.ts

@@ -0,0 +1,67 @@
+import { Attachment, ModelPayloadRef, type ResourceAttachmentRef } from "@claudexor/schema";
+import type { ResourceStorePort } from "../store-contracts.js";
+import { BlobFiles } from "./blob-files.js";
+import { Obligations, type ObligationRow } from "./obligations.js";
+import type { EngineStore } from "./store.js";
+/** Resource metadata and replay live in the one engine DB; only immutable bytes are files. */
+export declare class SqlResourceStore implements ResourceStorePort {
+    private readonly store;
+    private readonly blobs;
+    private readonly log;
+    private readonly uploads;
+    private readonly publisher;
+    private readonly cleanup;
+    constructor(store: EngineStore, blobs: BlobFiles, obligations: Obligations, log?: (line: string) => void);
+    create(raw: unknown, key: string): {
+        uploadId: string;
+        state: "cancelled" | "open" | "uploaded" | "uploading";
+        receivedBytes: number;
+        expectedBytes: number;
+    };
+    status(id: string): {
+        uploadId: string;
+        state: "cancelled" | "open" | "uploaded" | "uploading";
+        receivedBytes: number;
+        expectedBytes: number;
+    };
+    write(id: string, chunks: AsyncIterable<Uint8Array>): Promise<{
+        uploadId: string;
+        state: "cancelled" | "open" | "uploaded" | "uploading";
+        receivedBytes: number;
+        expectedBytes: number;
+    }>;
+    cancel(id: string): {
+        uploadId: string;
+        state: "cancelled" | "open" | "uploaded" | "uploading";
+        receivedBytes: number;
+        expectedBytes: number;
+    };
+    finalize(id: string, expectedSha256: string | undefined, key: string): {
+        resourceId: string;
+        purpose?: "model" | undefined;
+        kind: "file" | "image";
+        mime: string;
+        name: string;
+        sha256: string;
+        sizeBytes: number;
+        createdAt: string;
+        deduplicated: boolean;
+    };
+    resolve(refs: ResourceAttachmentRef[] | undefined): Attachment[];
+    readModel(raw: ModelPayloadRef): Buffer;
+    publishModel(bytes: Uint8Array): ModelPayloadRef;
+    releaseModel(raw: ModelPayloadRef): void;
+    /** Expiry has an observed custody timestamp; callers must not infer it from file mtime. */
+    expireModel(raw: ModelPayloadRef, expiredAt: string): void;
+    listModelResources(): Array<ModelPayloadRef & {
+        createdAt: string;
+    }>;
+    pruneUploadBindings(): number;
+    onObligationsCleared(rows: readonly ObligationRow[]): void;
+    /** Await this before closing the store; failures are logged and the existing sweep retries residue. */
+    drainCleanup(): Promise<void>;
+    private release;
+    private metadata;
+    private defer;
+}
+//# sourceMappingURL=resources.d.ts.map

package/dist/store/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../src/store/resources.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EAEV,eAAe,EACf,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAsC,MAAM,iBAAiB,CAAC;AAEhF,OAAO,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAgBnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C,8FAA8F;AAC9F,qBAAa,gBAAiB,YAAW,iBAAiB;IAMtD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAEtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IARtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IAEpD,YACmB,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,SAAS,EACjC,WAAW,EAAE,WAAW,EACP,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAmB,EAM5D;IACD,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM;;;;;MAE/B;IACD,MAAM,CAAC,EAAE,EAAE,MAAM;;;;;MAEhB;IACD,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC;;;;;OAElD;IACD,MAAM,CAAC,EAAE,EAAE,MAAM;;;;;MAEhB;IACD,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM;;;;;;;;;;MAEnE;IAED,OAAO,CAAC,IAAI,EAAE,qBAAqB,EAAE,GAAG,SAAS,GAAG,UAAU,EAAE,CAmB/D;IAED,SAAS,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CAKtC;IACD,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,eAAe,CAqB/C;IACD,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAEvC;IAED,2FAA2F;IAC3F,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAEzD;IAED,kBAAkB,IAAI,KAAK,CAAC,eAAe,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CASnE;IACD,mBAAmB,IAAI,MAAM,CAE5B;IACD,oBAAoB,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,GAAG,IAAI,CAEzD;IAED,uGAAuG;IACjG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAElC;IAED,OAAO,CAAC,OAAO;IAmBf,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,KAAK;CAad"}