@cleocode/core 2026.6.12 → 2026.6.13

package/dist/store/safety-data-accessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"safety-data-accessor.js","sourceRoot":"","sources":["../../src/store/safety-data-accessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAWzC,OAAO,EAEL,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAGlC,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;AAUrC,4DAA4D;AAC5D,SAAS,gBAAgB;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAkB;IAC7B,6CAA6C;IACrC,KAAK,CAAe;IAE5B,wCAAwC;IAChC,GAAG,CAAU;IAErB,4BAA4B;IACpB,MAAM,CAAsB;IAEpC;;;;;;OAMG;IACH,YAAY,KAAmB,EAAE,GAAY,EAAE,MAAqC;QAClF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;YACd,GAAG,MAAM;SACV,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,OAAe;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC3B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC/B,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;SAC5B,CAAC;IACJ,CAAC;IAED,2CAA2C;IAE3C,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACnC,CAAC;IAED,2CAA2C;IAE3C,KAAK,CAAC,YAAY,CAAC,IAAe;QAChC,IAAI,CAAC,UAAU,CAAC,wBAAwB,IAAI,CAAC,MAAM,WAAW,CAAC,CAAC;QAChE,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAiB;QACjC,IAAI,CAAC,UAAU,CAAC,2BAA2B,IAAI,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpF,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAA8B;QAC5C,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;QACvC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,uDAAuD;IAEvD,KAAK,CAAC,gBAAgB,CAAC,IAAU;QAC/B,IAAI,CAAC,UAAU,CAAC,yBAAyB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,mBAAmB,CACvB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,EAAE,EACP,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,EACvC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,gBAAgB,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,MAAqB;QAC3D,IAAI,CAAC,UAAU,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;QACnD,MAAM,mBAAmB,CACvB,IAAI,CAAC,KAAK,EACV,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,EAClD,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,gBAAgB,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,IAAI,CAAC,UAAU,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,mBAAmB,CACvB,IAAI,CAAC,KAAK,EACV,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EACzC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,gBAAgB,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,qDAAqD;IAErD,KAAK,CAAC,WAAW,CACf,MAAc,EACd,SAAiB,EACjB,YAAoB,EACpB,MAAe;QAEf,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,SAAiB,EAAE,YAAqB;QAC3E,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACnE,CAAC;IAED,4CAA4C;IAE5C,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,gDAAgD;IAEhD,KAAK,CAAC,aAAa,CAAC,KAAwB;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,6CAA6C;IAE7C,KAAK,CAAC,YAAY,CAAI,GAAW;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAc;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACvC,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,UAAU,CAAC,OAAyB;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAwB;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAGhB;QACC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAiB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,iDAAiD;IAEjD,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,MAAwB;QAC7D,IAAI,CAAC,UAAU,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,mBAAmB,CACvB,IAAI,CAAC,KAAK,EACV,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,EACjD,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,gBAAgB,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAAuB;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAAuB,EACvB,YAAoB,EACpB,KAAa;QAEb,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,WAAW,CAAI,EAA2C;QAC9D,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACxC,mDAAmD;QACnD,mEAAmE;QACnE,2CAA2C;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,2DAA2D;IAE3D,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAA8C;QACtE,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,4BAA4B;IAE5B,KAAK,CAAC,kBAAkB,CAAC,OAGxB;QACC,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,gCAAgC;IAEhC,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,OAAe;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,sBAAsB;IAEtB,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,QAAsB,EAAE,GAAY;IACjE,8BAA8B;IAC9B,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CACN,8FAA8F,CAC/F,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,IAAI,kBAAkB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,gBAAgB,EAAE,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAI7B,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,2DAA2D;SACpE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}
+{"version":3,"file":"safety-data-accessor.js","sourceRoot":"","sources":["../../src/store/safety-data-accessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAWzC,OAAO,EAEL,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAGlC,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;AAUrC,4DAA4D;AAC5D,SAAS,gBAAgB;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAkB;IAC7B,6CAA6C;IACrC,KAAK,CAAe;IAE5B,wCAAwC;IAChC,GAAG,CAAU;IAErB,4BAA4B;IACpB,MAAM,CAAsB;IAEpC;;;;;;OAMG;IACH,YAAY,KAAmB,EAAE,GAAY,EAAE,MAAqC;QAClF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;YACd,GAAG,MAAM;SACV,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,OAAe;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC3B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC/B,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;SAC5B,CAAC;IACJ,CAAC;IAED,2CAA2C;IAE3C,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACnC,CAAC;IAED,2CAA2C;IAE3C,KAAK,CAAC,YAAY,CAAC,IAAe;QAChC,IAAI,CAAC,UAAU,CAAC,wBAAwB,IAAI,CAAC,MAAM,WAAW,CAAC,CAAC;QAChE,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAiB;QACjC,IAAI,CAAC,UAAU,CAAC,2BAA2B,IAAI,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpF,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAA8B;QAC5C,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;QACvC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,uDAAuD;IAEvD,KAAK,CAAC,gBAAgB,CAAC,IAAU;QAC/B,IAAI,CAAC,UAAU,CAAC,yBAAyB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,mBAAmB,CACvB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,EAAE,EACP,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,EACvC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,gBAAgB,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,MAAqB;QAC3D,IAAI,CAAC,UAAU,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;QACnD,MAAM,mBAAmB,CACvB,IAAI,CAAC,KAAK,EACV,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,EAClD,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,gBAAgB,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,IAAI,CAAC,UAAU,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,mBAAmB,CACvB,IAAI,CAAC,KAAK,EACV,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EACzC,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,gBAAgB,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,qDAAqD;IAErD,KAAK,CAAC,WAAW,CACf,MAAc,EACd,SAAiB,EACjB,YAAoB,EACpB,MAAe;QAEf,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,SAAiB,EAAE,YAAqB;QAC3E,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACnE,CAAC;IAED,4CAA4C;IAE5C,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,gDAAgD;IAEhD,KAAK,CAAC,aAAa,CAAC,KAAwB;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,6CAA6C;IAE7C,KAAK,CAAC,YAAY,CAAI,GAAW;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAc;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACvC,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,UAAU,CAAC,OAAyB;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAwB;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAGhB;QACC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAiB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,iDAAiD;IAEjD,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,MAAwB;QAC7D,IAAI,CAAC,UAAU,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,mBAAmB,CACvB,IAAI,CAAC,KAAK,EACV,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,EACjD,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,gBAAgB,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAAuB;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAAuB,EACvB,YAAoB,EACpB,KAAa;QAEb,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,WAAW,CAAI,EAA2C;QAC9D,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACxC,mDAAmD;QACnD,mEAAmE;QACnE,2CAA2C;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,2DAA2D;IAE3D,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,yEAAyE;QACzE,uDAAuD;QACvD,OAAO,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAA8C;QACtE,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,4BAA4B;IAE5B,KAAK,CAAC,kBAAkB,CAAC,OAGxB;QACC,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,gCAAgC;IAEhC,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,OAAe;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,sBAAsB;IAEtB,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,QAAsB,EAAE,GAAY;IACjE,8BAA8B;IAC9B,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CACN,8FAA8F,CAC/F,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,IAAI,kBAAkB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,gBAAgB,EAAE,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAI7B,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,2DAA2D;SACpE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/store/schema/cleo-global/accounts.d.ts

@@ -0,0 +1,357 @@
+/**
+ * Global-scope `cleo.db` — **LLM credential pool** (`accounts`, 1 table).
+ *
+ * EP-PROVIDER-VAULT (epic T10410 · task T11709 · saga SG-VAULT-CORE T10409). This
+ * table is the queryable, `cleo health`-visible home for the **pooled LLM provider
+ * credentials** that today live as a plaintext JSON blob with no schema, no index,
+ * and no health surface. Each row is one credential ("account") for one provider —
+ * an API key or OAuth token pair — plus the rotation / cooldown / health metadata
+ * the pool runner uses to pick the next live account and to retire dead ones.
+ *
+ * ## NOT `agent_registry_accounts` (do not confuse the two)
+ *
+ * The consolidated global `cleo.db` ALSO carries `agent_registry_accounts` — the
+ * better-auth OAuth-account table from the agent-identity tier (the cloud-sync
+ * `accounts` source, renamed under T11622). That table is a SaaS account record;
+ * THIS table (`accounts`, bare) is the local machine-wide LLM-credential pool. The
+ * two never overlap: the physical names differ (`accounts` vs
+ * `agent_registry_accounts`) and the JS exports differ (`accounts` here vs
+ * `agentRegistryAccounts`). The bare name `accounts` is the credential pool.
+ *
+ * ## Encrypted at rest (global KDF — T11710)
+ *
+ * `secretEnc` / `refreshEnc` are ciphertext, NEVER plaintext. They are produced by
+ * `encryptGlobal()` (packages/core/src/crypto/credentials.ts, T11710) — the
+ * project-INDEPENDENT KDF `HMAC-SHA256(machine-key || globalSalt, id)` reusing the
+ * machine-local `getGlobalSalt()` (store/global-salt.ts). The ciphertext keeps the
+ * versioned `0x01 + 12B IV + 16B authTag` framing. Global (not project-bound)
+ * encryption is required because an LLM credential must decrypt consistently for
+ * the same machine regardless of which project's cwd the pool is read from.
+ *
+ * ## Active-account pointer (`isActive`)
+ *
+ * `isActive` is the per-provider "currently-selected" pointer: AT MOST ONE row per
+ * `provider` may carry `isActive = 1`. drizzle-orm cannot model a partial-`WHERE`
+ * unique index, so the one-active-per-provider invariant is enforced by a raw-SQL
+ * **partial unique index** `ux_accounts_active_provider ON accounts (provider)
+ * WHERE is_active = 1` emitted in the forward migration (the established repo
+ * pattern — cf. `_writer_leases.active`, T11627). This module declares only the
+ * full-column table plus the non-partial `(provider, label)` unique index, which
+ * drizzle CAN emit.
+ *
+ * @task T11709
+ * @epic T10410
+ * @saga T10409
+ * @see ../../../crypto/credentials.ts — `encryptGlobal` / `decryptGlobal` (T11710)
+ * @see ../../global-salt.ts — `getGlobalSalt` (the reused machine-local salt)
+ * @see ./agent-registry.ts — `agentRegistryAccounts` (the UNRELATED OAuth-account table)
+ * @see ../../../../migrations/drizzle-cleo-global — the forward migration (raw partial index)
+ */
+/**
+ * Legal `accounts.status` values — the health lifecycle of a pooled credential.
+ *
+ * - `ok` — usable; the pool may select it.
+ * - `exhausted` — rate-limited / quota-hit; usable again after `cooldownResetAt`.
+ * - `dead` — permanently unusable (revoked key, hard auth failure); never selected.
+ *
+ * @task T11709
+ */
+export declare const ACCOUNT_STATUSES: readonly ["ok", "exhausted", "dead"];
+/** TypeScript union derived from {@link ACCOUNT_STATUSES}. */
+export type AccountStatus = (typeof ACCOUNT_STATUSES)[number];
+/**
+ * `accounts` — the machine-wide pooled-LLM-credential table.
+ *
+ * One row per credential ("account") for one provider. Carries the encrypted
+ * secret/refresh material plus the rotation, cooldown, and health metadata the
+ * pool runner consults to choose the next live account (highest `priority` among
+ * `status = 'ok'`) and to retire dead ones. The `(provider, label)` pair is unique;
+ * `isActive` is the per-provider active pointer (one active row per provider,
+ * enforced by the raw-SQL partial unique index in the migration).
+ *
+ * @task T11709
+ */
+export declare const accounts: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "accounts";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "number int53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        provider: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        label: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        authType: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        secretEnc: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        refreshEnc: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        expiresAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        priority: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "number int53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        source: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        status: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string enum";
+            data: "ok" | "exhausted" | "dead";
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["ok", "exhausted", "dead"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        lastErrorCode: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        cooldownResetAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        requestCount: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "number int53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        metadata: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        isActive: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "boolean";
+            data: boolean;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+        updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: string;
+            tableName: "accounts";
+            dataType: "string";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}>;
+    };
+    dialect: "sqlite";
+}>;
+/** Row type for `accounts` SELECT queries. */
+export type AccountRow = typeof accounts.$inferSelect;
+/** Row type for `accounts` INSERT/UPSERT operations. */
+export type NewAccountRow = typeof accounts.$inferInsert;
+//# sourceMappingURL=accounts.d.ts.map

package/dist/store/schema/cleo-global/accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.d.ts","sourceRoot":"","sources":["../../../../src/store/schema/cleo-global/accounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAKH;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,sCAAuC,CAAC;AAErE,8DAA8D;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiEpB,CAAC;AAEF,8CAA8C;AAC9C,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAC;AACtD,wDAAwD;AACxD,MAAM,MAAM,aAAa,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAC"}

package/dist/store/schema/cleo-global/accounts.js

@@ -0,0 +1,136 @@
+/**
+ * Global-scope `cleo.db` — **LLM credential pool** (`accounts`, 1 table).
+ *
+ * EP-PROVIDER-VAULT (epic T10410 · task T11709 · saga SG-VAULT-CORE T10409). This
+ * table is the queryable, `cleo health`-visible home for the **pooled LLM provider
+ * credentials** that today live as a plaintext JSON blob with no schema, no index,
+ * and no health surface. Each row is one credential ("account") for one provider —
+ * an API key or OAuth token pair — plus the rotation / cooldown / health metadata
+ * the pool runner uses to pick the next live account and to retire dead ones.
+ *
+ * ## NOT `agent_registry_accounts` (do not confuse the two)
+ *
+ * The consolidated global `cleo.db` ALSO carries `agent_registry_accounts` — the
+ * better-auth OAuth-account table from the agent-identity tier (the cloud-sync
+ * `accounts` source, renamed under T11622). That table is a SaaS account record;
+ * THIS table (`accounts`, bare) is the local machine-wide LLM-credential pool. The
+ * two never overlap: the physical names differ (`accounts` vs
+ * `agent_registry_accounts`) and the JS exports differ (`accounts` here vs
+ * `agentRegistryAccounts`). The bare name `accounts` is the credential pool.
+ *
+ * ## Encrypted at rest (global KDF — T11710)
+ *
+ * `secretEnc` / `refreshEnc` are ciphertext, NEVER plaintext. They are produced by
+ * `encryptGlobal()` (packages/core/src/crypto/credentials.ts, T11710) — the
+ * project-INDEPENDENT KDF `HMAC-SHA256(machine-key || globalSalt, id)` reusing the
+ * machine-local `getGlobalSalt()` (store/global-salt.ts). The ciphertext keeps the
+ * versioned `0x01 + 12B IV + 16B authTag` framing. Global (not project-bound)
+ * encryption is required because an LLM credential must decrypt consistently for
+ * the same machine regardless of which project's cwd the pool is read from.
+ *
+ * ## Active-account pointer (`isActive`)
+ *
+ * `isActive` is the per-provider "currently-selected" pointer: AT MOST ONE row per
+ * `provider` may carry `isActive = 1`. drizzle-orm cannot model a partial-`WHERE`
+ * unique index, so the one-active-per-provider invariant is enforced by a raw-SQL
+ * **partial unique index** `ux_accounts_active_provider ON accounts (provider)
+ * WHERE is_active = 1` emitted in the forward migration (the established repo
+ * pattern — cf. `_writer_leases.active`, T11627). This module declares only the
+ * full-column table plus the non-partial `(provider, label)` unique index, which
+ * drizzle CAN emit.
+ *
+ * @task T11709
+ * @epic T10410
+ * @saga T10409
+ * @see ../../../crypto/credentials.ts — `encryptGlobal` / `decryptGlobal` (T11710)
+ * @see ../../global-salt.ts — `getGlobalSalt` (the reused machine-local salt)
+ * @see ./agent-registry.ts — `agentRegistryAccounts` (the UNRELATED OAuth-account table)
+ * @see ../../../../migrations/drizzle-cleo-global — the forward migration (raw partial index)
+ */
+import { sql } from 'drizzle-orm';
+import { index, integer, sqliteTable, text, unique } from 'drizzle-orm/sqlite-core';
+/**
+ * Legal `accounts.status` values — the health lifecycle of a pooled credential.
+ *
+ * - `ok` — usable; the pool may select it.
+ * - `exhausted` — rate-limited / quota-hit; usable again after `cooldownResetAt`.
+ * - `dead` — permanently unusable (revoked key, hard auth failure); never selected.
+ *
+ * @task T11709
+ */
+export const ACCOUNT_STATUSES = ['ok', 'exhausted', 'dead'];
+/**
+ * `accounts` — the machine-wide pooled-LLM-credential table.
+ *
+ * One row per credential ("account") for one provider. Carries the encrypted
+ * secret/refresh material plus the rotation, cooldown, and health metadata the
+ * pool runner consults to choose the next live account (highest `priority` among
+ * `status = 'ok'`) and to retire dead ones. The `(provider, label)` pair is unique;
+ * `isActive` is the per-provider active pointer (one active row per provider,
+ * enforced by the raw-SQL partial unique index in the migration).
+ *
+ * @task T11709
+ */
+export const accounts = sqliteTable('accounts', {
+    /** Surrogate primary key (autoincrement via INTEGER PRIMARY KEY rowid alias). */
+    id: integer('id').primaryKey(),
+    /** Provider key (e.g. `anthropic` | `openai` | `google`). Selection is per-provider. */
+    provider: text('provider').notNull(),
+    /**
+     * Human-readable credential label, unique WITHIN a provider (e.g. `work-key`,
+     * `personal-oauth`). The `(provider, label)` pair is the natural unique key.
+     */
+    label: text('label').notNull(),
+    /** Credential kind — `api-key` | `oauth` (drives which `*_enc` columns are populated). */
+    authType: text('auth_type').notNull(),
+    /**
+     * Encrypted primary secret (API key or OAuth access token), `encryptGlobal()`
+     * ciphertext (`0x01 + 12B IV + 16B authTag` framing, T11710). NEVER plaintext.
+     */
+    secretEnc: text('secret_enc'),
+    /**
+     * Encrypted OAuth refresh token, `encryptGlobal()` ciphertext. NULL for an
+     * `api-key` credential (no refresh material).
+     */
+    refreshEnc: text('refresh_enc'),
+    /** ISO-8601 UTC expiry of the secret; NULL for a non-expiring API key. */
+    expiresAt: text('expires_at'),
+    /** Selection priority — HIGHER is preferred. The pool picks the highest live priority. */
+    priority: integer('priority').notNull().default(0),
+    /** Provenance — where this credential came from (e.g. `env` | `oauth-flow` | `import`). */
+    source: text('source'),
+    /**
+     * Health lifecycle — `ok` | `exhausted` | `dead` ({@link ACCOUNT_STATUSES}).
+     * Only `ok` rows are eligible for selection.
+     */
+    status: text('status', { enum: ACCOUNT_STATUSES }).notNull().default('ok'),
+    /** Last transport/provider error code observed (e.g. `429` | `invalid_api_key`); NULL when healthy. */
+    lastErrorCode: text('last_error_code'),
+    /**
+     * ISO-8601 UTC instant an `exhausted` credential becomes eligible again; NULL
+     * when not cooling down. The pool skips an `exhausted` row until `now >= this`.
+     */
+    cooldownResetAt: text('cooldown_reset_at'),
+    /** Monotonic count of requests served by this credential (rotation telemetry). */
+    requestCount: integer('request_count').notNull().default(0),
+    /** Free-form JSON blob for forward-compatible per-credential metadata (serialized TEXT). */
+    metadata: text('metadata').notNull().default('{}'),
+    /**
+     * Per-provider active-pointer. AT MOST ONE row per `provider` carries `true`,
+     * enforced by the raw-SQL partial unique index `ux_accounts_active_provider`
+     * (drizzle cannot model a partial-`WHERE` unique). Defaults to `false`.
+     */
+    isActive: integer('is_active', { mode: 'boolean' }).notNull().default(false),
+    /** ISO-8601 UTC row-creation instant. Defaults to write time. */
+    createdAt: text('created_at').notNull().default(sql `(datetime('now'))`),
+    /** ISO-8601 UTC last-update instant. Defaults to write time; bumped on mutation. */
+    updatedAt: text('updated_at').notNull().default(sql `(datetime('now'))`),
+}, (table) => [
+    // The natural unique key: a label is unique within a provider. drizzle CAN
+    // emit this (non-partial) unique; the per-provider active pointer is the
+    // SEPARATE partial unique index emitted as raw SQL in the migration.
+    unique('ux_accounts_provider_label').on(table.provider, table.label),
+    // Selection index — the pool scans live rows per provider ordered by priority.
+    index('idx_accounts_provider_status_priority').on(table.provider, table.status, table.priority),
+]);
+//# sourceMappingURL=accounts.js.map

package/dist/store/schema/cleo-global/accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../../../../src/store/schema/cleo-global/accounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEpF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAU,CAAC;AAKrE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CACjC,UAAU,EACV;IACE,iFAAiF;IACjF,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC9B,wFAAwF;IACxF,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC;;;OAGG;IACH,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,0FAA0F;IAC1F,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC;;;OAGG;IACH,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B;;;OAGG;IACH,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,0EAA0E;IAC1E,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,0FAA0F;IAC1F,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,2FAA2F;IAC3F,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB;;;OAGG;IACH,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1E,uGAAuG;IACvG,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACtC;;;OAGG;IACH,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,kFAAkF;IAClF,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,4FAA4F;IAC5F,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClD;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5E,iEAAiE;IACjE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,mBAAmB,CAAC;IACvE,oFAAoF;IACpF,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,mBAAmB,CAAC;CACxE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,2EAA2E;IAC3E,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;IACpE,+EAA+E;IAC/E,KAAK,CAAC,uCAAuC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;CAChG,CACF,CAAC"}

package/dist/store/schema/cleo-global/index.d.ts

@@ -92,8 +92,10 @@
  * @see drizzle/cleo-global.config.ts (per-scope domain membership)
  */
 export * from '../cleo-shared/index.js';
+export * from './accounts.js';
 export * from './agent-registry.js';
 export * from './nexus.js';
+export * from './session-manifest.js';
 export * from './skills.js';
 export * from './telemetry.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/store/schema/cleo-global/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/store/schema/cleo-global/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/store/schema/cleo-global/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/store/schema/cleo-global/index.js

@@ -92,8 +92,10 @@
  * @see drizzle/cleo-global.config.ts (per-scope domain membership)
  */
 export * from '../cleo-shared/index.js';
+export * from './accounts.js';
 export * from './agent-registry.js';
 export * from './nexus.js';
+export * from './session-manifest.js';
 export * from './skills.js';
 export * from './telemetry.js';
 //# sourceMappingURL=index.js.map

package/dist/store/schema/cleo-global/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/store/schema/cleo-global/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/store/schema/cleo-global/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}