@covro/covro 0.0.0-stage → 0.1.0-dev.1

package/dist/server/db/operations.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/server/db/operations.ts"],
+  "sourcesContent": ["import { createHash } from 'node:crypto';\nimport { and, eq, isNull, or } from 'drizzle-orm';\nimport type { AppDatabase } from './index.js';\nimport { executionMarkers, operations, threadLinks } from './schema.js';\nimport type { ApiError } from '../../shared/types.js';\n\nexport type OperationRow = typeof operations.$inferSelect;\nexport type ExecutionMarker = typeof executionMarkers.$inferSelect;\nexport type ThreadLink = typeof threadLinks.$inferSelect;\n\nexport class StoreConflict extends Error {\n  constructor(\n    public readonly code: 'OPERATION_CONFLICT' | 'THREAD_BUSY',\n    message: string,\n    public readonly threadId?: string,\n  ) {\n    super(message);\n  }\n}\n\nfunction canonical(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(canonical).join(',')}]`;\n  if (value !== null && typeof value === 'object') {\n    return `{${Object.entries(value)\n      .filter(([, item]) => item !== undefined)\n      .sort(([a], [b]) => a.localeCompare(b))\n      .map(([key, item]) => `${JSON.stringify(key)}:${canonical(item)}`)\n      .join(',')}}`;\n  }\n  return JSON.stringify(value) ?? 'null';\n}\n\nexport function requestDigest(value: unknown): string {\n  return createHash('sha256').update(canonical(value)).digest('hex');\n}\n\n/** Every transaction is synchronous; no process/network work occurs inside one. */\nexport class OperationStore {\n  constructor(public readonly database: AppDatabase) {}\n\n  accept(\n    clientOperationId: string,\n    kind: string,\n    target: string,\n    request: unknown,\n  ): { operation: OperationRow; inserted: boolean } {\n    const digest = requestDigest(request);\n    return this.database.transaction((tx) => {\n      const now = Date.now();\n      const inserted =\n        tx\n          .insert(operations)\n          .values({\n            clientOperationId,\n            kind,\n            target,\n            requestDigest: digest,\n            state: 'accepted',\n            createdAt: now,\n            updatedAt: now,\n          })\n          .onConflictDoNothing({ target: operations.clientOperationId })\n          .run().changes === 1;\n      const operation = tx\n        .select()\n        .from(operations)\n        .where(eq(operations.clientOperationId, clientOperationId))\n        .get();\n      if (!operation) throw new Error('Operation insert did not persist');\n      if (\n        operation.kind !== kind ||\n        operation.target !== target ||\n        operation.requestDigest !== digest\n      ) {\n        throw new StoreConflict('OPERATION_CONFLICT', '\u540C\u4E00\u64CD\u4F5C ID \u5DF2\u7528\u4E8E\u4E0D\u540C\u7684\u8BF7\u6C42');\n      }\n      return { operation, inserted };\n    });\n  }\n\n  get(id: string): OperationRow | undefined {\n    return this.database\n      .select()\n      .from(operations)\n      .where(eq(operations.clientOperationId, id))\n      .get();\n  }\n\n  associateProject(id: string, projectId: string): void {\n    this.database\n      .update(operations)\n      .set({ projectId })\n      .where(and(eq(operations.clientOperationId, id), eq(operations.state, 'accepted')))\n      .run();\n  }\n\n  /** Includes older rows whose project can be recovered from their stable target/link. */\n  pendingProjectOperations(projectId: string): OperationRow[] {\n    return this.database\n      .select()\n      .from(operations)\n      .where(\n        or(\n          eq(operations.state, 'accepted'),\n          eq(operations.state, 'dispatching'),\n          and(eq(operations.state, 'unknown'), isNull(operations.reconciledAt)),\n        ),\n      )\n      .all()\n      .filter((operation) => {\n        if (\n          ![\n            'thread.create',\n            'thread.resume',\n            'thread.fork',\n            'thread.archive',\n            'thread.rename',\n          ].includes(operation.kind)\n        )\n          return false;\n        const owner =\n          operation.projectId ??\n          (operation.kind === 'thread.create'\n            ? operation.target\n            : this.getThreadLink(operation.target)?.projectId);\n        return owner === projectId;\n      });\n  }\n\n  dispatch(\n    id: string,\n    marker?: { threadId: string; workspaceKey: string; codexEpoch: string },\n  ): void {\n    this.database.transaction((tx) => {\n      if (marker) {\n        const occupied = tx\n          .select()\n          .from(executionMarkers)\n          .where(\n            and(isNull(executionMarkers.endedAt), eq(executionMarkers.threadId, marker.threadId)),\n          )\n          .get();\n        if (occupied)\n          throw new StoreConflict(\n            'THREAD_BUSY',\n            '\u8BE5\u4F1A\u8BDD\u7684\u4E0A\u4E00\u8F6E\u6267\u884C\u5C1A\u672A\u7ED3\u675F\uFF0C\u8BF7\u8FFD\u52A0\u8981\u6C42\u6216\u7B49\u5F85\u7ED3\u675F',\n            occupied.threadId,\n          );\n      }\n      const updated = tx\n        .update(operations)\n        .set({ state: 'dispatching', updatedAt: Date.now() })\n        .where(and(eq(operations.clientOperationId, id), eq(operations.state, 'accepted')))\n        .run();\n      if (updated.changes !== 1)\n        throw new StoreConflict('OPERATION_CONFLICT', '\u64CD\u4F5C\u5DF2\u7ECF\u6D3E\u53D1\u6216\u7ED3\u675F');\n      if (marker)\n        tx.insert(executionMarkers)\n          .values({ operationId: id, ...marker, state: 'active', createdAt: Date.now() })\n          .run();\n    });\n  }\n\n  acknowledge(id: string, result: unknown, turnId?: string): OperationRow {\n    this.database.transaction((tx) => {\n      tx.update(operations)\n        .set({ state: 'acknowledged', result, error: null, updatedAt: Date.now() })\n        .where(and(eq(operations.clientOperationId, id), eq(operations.state, 'dispatching')))\n        .run();\n      if (turnId !== undefined)\n        tx.update(executionMarkers)\n          .set({ turnId })\n          .where(eq(executionMarkers.operationId, id))\n          .run();\n    });\n    return this.get(id)!;\n  }\n\n  fail(id: string, error: ApiError, uncertain = false): OperationRow {\n    this.database.transaction((tx) => {\n      const changed = tx\n        .update(operations)\n        .set({ state: uncertain ? 'unknown' : 'failed', error, updatedAt: Date.now() })\n        .where(\n          and(\n            eq(operations.clientOperationId, id),\n            or(eq(operations.state, 'accepted'), eq(operations.state, 'dispatching')),\n          ),\n        )\n        .run();\n      // A late rejection must not turn an already-recovered unknown execution into a release.\n      if (changed.changes === 0) return;\n      tx.update(executionMarkers)\n        .set(uncertain ? { state: 'unknown' } : { state: 'terminal', endedAt: Date.now() })\n        .where(and(eq(executionMarkers.operationId, id), isNull(executionMarkers.endedAt)))\n        .run();\n    });\n    return this.get(id)!;\n  }\n\n  /** Includes acknowledged requests with unfinished turns; none of these are retried. */\n  recover(): void {\n    this.database.transaction((tx) => {\n      tx.update(operations)\n        .set({\n          state: 'failed',\n          error: { code: 'NOT_DISPATCHED', message: '\u670D\u52A1\u5728\u6D3E\u53D1\u524D\u505C\u6B62\uFF1B\u64CD\u4F5C\u6CA1\u6709\u6267\u884C' },\n          updatedAt: Date.now(),\n        })\n        .where(eq(operations.state, 'accepted'))\n        .run();\n      tx.update(operations)\n        .set({\n          state: 'unknown',\n          error: { code: 'RESULT_UNKNOWN', message: '\u8FD0\u884C\u65F6\u5DF2\u505C\u6B62\uFF0C\u63D0\u4EA4\u7ED3\u679C\u9700\u8981\u6838\u5BF9' },\n          updatedAt: Date.now(),\n        })\n        .where(eq(operations.state, 'dispatching'))\n        .run();\n      tx.update(executionMarkers)\n        .set({ state: 'unknown' })\n        .where(isNull(executionMarkers.endedAt))\n        .run();\n    });\n  }\n\n  activeMarkers(): ExecutionMarker[] {\n    return this.database\n      .select()\n      .from(executionMarkers)\n      .where(isNull(executionMarkers.endedAt))\n      .all();\n  }\n\n  unresolvedOperations(): OperationRow[] {\n    return this.database\n      .select()\n      .from(operations)\n      .where(\n        or(\n          eq(operations.state, 'accepted'),\n          eq(operations.state, 'dispatching'),\n          and(eq(operations.state, 'unknown'), isNull(operations.reconciledAt)),\n        ),\n      )\n      .all();\n  }\n\n  marker(operationId: string): ExecutionMarker | undefined {\n    return this.database\n      .select()\n      .from(executionMarkers)\n      .where(eq(executionMarkers.operationId, operationId))\n      .get();\n  }\n\n  activeForThread(threadId: string): ExecutionMarker | undefined {\n    return this.database\n      .select()\n      .from(executionMarkers)\n      .where(and(eq(executionMarkers.threadId, threadId), isNull(executionMarkers.endedAt)))\n      .get();\n  }\n\n  attachTurn(operationId: string, turnId: string): void {\n    this.database\n      .update(executionMarkers)\n      .set({ turnId })\n      .where(and(eq(executionMarkers.operationId, operationId), isNull(executionMarkers.endedAt)))\n      .run();\n  }\n\n  finishTurn(threadId: string, turnId: string, codexEpoch: string): void {\n    this.database\n      .update(executionMarkers)\n      .set({ state: 'terminal', endedAt: Date.now() })\n      .where(\n        and(\n          eq(executionMarkers.threadId, threadId),\n          eq(executionMarkers.turnId, turnId),\n          eq(executionMarkers.codexEpoch, codexEpoch),\n          isNull(executionMarkers.endedAt),\n        ),\n      )\n      .run();\n  }\n\n  /** Keys the release to the original execution; an old decision cannot unlock a later turn. */\n  reconcile(targetOperationId: string, reconciliationOperationId: string): void {\n    this.database.transaction((tx) => {\n      const now = Date.now();\n      tx.update(operations)\n        .set({ reconciledAt: now, reconciliationDecision: 'confirmed-ended' })\n        .where(\n          and(eq(operations.clientOperationId, targetOperationId), isNull(operations.reconciledAt)),\n        )\n        .run();\n      tx.update(executionMarkers)\n        .set({ state: 'reconciled', endedAt: now, reconciledAt: now, reconciliationOperationId })\n        .where(\n          and(\n            eq(executionMarkers.operationId, targetOperationId),\n            isNull(executionMarkers.endedAt),\n          ),\n        )\n        .run();\n      tx.update(operations)\n        .set({\n          state: 'acknowledged',\n          result: { targetOperationId, decision: 'confirmed-ended', reconciledAt: now },\n          updatedAt: now,\n        })\n        .where(\n          and(\n            eq(operations.clientOperationId, reconciliationOperationId),\n            eq(operations.state, 'dispatching'),\n          ),\n        )\n        .run();\n    });\n  }\n\n  linkThread(link: Omit<ThreadLink, 'updatedAt'>): void {\n    this.database\n      .insert(threadLinks)\n      .values({ ...link, updatedAt: Date.now() })\n      .onConflictDoUpdate({ target: threadLinks.threadId, set: { ...link, updatedAt: Date.now() } })\n      .run();\n  }\n\n  getThreadLink(threadId: string): ThreadLink | undefined {\n    return this.database.select().from(threadLinks).where(eq(threadLinks.threadId, threadId)).get();\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,KAAK,IAAI,QAAQ,UAAU;AAEpC,SAAS,kBAAkB,YAAY,mBAAmB;AAOnD,MAAM,sBAAsB,MAAM;AAAA,EACvC,YACkB,MAChB,SACgB,UAChB;AACA,UAAM,OAAO;AAJG;AAEA;AAAA,EAGlB;AAAA,EALkB;AAAA,EAEA;AAIpB;AAEA,SAAS,UAAU,OAAwB;AACzC,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,SAAS,EAAE,KAAK,GAAG,CAAC;AACnE,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,WAAO,IAAI,OAAO,QAAQ,KAAK,EAC5B,OAAO,CAAC,CAAC,EAAE,IAAI,MAAM,SAAS,MAAS,EACvC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EACrC,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,UAAU,IAAI,CAAC,EAAE,EAChE,KAAK,GAAG,CAAC;AAAA,EACd;AACA,SAAO,KAAK,UAAU,KAAK,KAAK;AAClC;AAEO,SAAS,cAAc,OAAwB;AACpD,SAAO,WAAW,QAAQ,EAAE,OAAO,UAAU,KAAK,CAAC,EAAE,OAAO,KAAK;AACnE;AAGO,MAAM,eAAe;AAAA,EAC1B,YAA4B,UAAuB;AAAvB;AAAA,EAAwB;AAAA,EAAxB;AAAA,EAE5B,OACE,mBACA,MACA,QACA,SACgD;AAChD,UAAM,SAAS,cAAc,OAAO;AACpC,WAAO,KAAK,SAAS,YAAY,CAAC,OAAO;AACvC,YAAM,MAAM,KAAK,IAAI;AACrB,YAAM,WACJ,GACG,OAAO,UAAU,EACjB,OAAO;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,QACA,eAAe;AAAA,QACf,OAAO;AAAA,QACP,WAAW;AAAA,QACX,WAAW;AAAA,MACb,CAAC,EACA,oBAAoB,EAAE,QAAQ,WAAW,kBAAkB,CAAC,EAC5D,IAAI,EAAE,YAAY;AACvB,YAAM,YAAY,GACf,OAAO,EACP,KAAK,UAAU,EACf,MAAM,GAAG,WAAW,mBAAmB,iBAAiB,CAAC,EACzD,IAAI;AACP,UAAI,CAAC,UAAW,OAAM,IAAI,MAAM,kCAAkC;AAClE,UACE,UAAU,SAAS,QACnB,UAAU,WAAW,UACrB,UAAU,kBAAkB,QAC5B;AACA,cAAM,IAAI,cAAc,sBAAsB,8EAAkB;AAAA,MAClE;AACA,aAAO,EAAE,WAAW,SAAS;AAAA,IAC/B,CAAC;AAAA,EACH;AAAA,EAEA,IAAI,IAAsC;AACxC,WAAO,KAAK,SACT,OAAO,EACP,KAAK,UAAU,EACf,MAAM,GAAG,WAAW,mBAAmB,EAAE,CAAC,EAC1C,IAAI;AAAA,EACT;AAAA,EAEA,iBAAiB,IAAY,WAAyB;AACpD,SAAK,SACF,OAAO,UAAU,EACjB,IAAI,EAAE,UAAU,CAAC,EACjB,MAAM,IAAI,GAAG,WAAW,mBAAmB,EAAE,GAAG,GAAG,WAAW,OAAO,UAAU,CAAC,CAAC,EACjF,IAAI;AAAA,EACT;AAAA;AAAA,EAGA,yBAAyB,WAAmC;AAC1D,WAAO,KAAK,SACT,OAAO,EACP,KAAK,UAAU,EACf;AAAA,MACC;AAAA,QACE,GAAG,WAAW,OAAO,UAAU;AAAA,QAC/B,GAAG,WAAW,OAAO,aAAa;AAAA,QAClC,IAAI,GAAG,WAAW,OAAO,SAAS,GAAG,OAAO,WAAW,YAAY,CAAC;AAAA,MACtE;AAAA,IACF,EACC,IAAI,EACJ,OAAO,CAAC,cAAc;AACrB,UACE,CAAC;AAAA,QACC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,EAAE,SAAS,UAAU,IAAI;AAEzB,eAAO;AACT,YAAM,QACJ,UAAU,cACT,UAAU,SAAS,kBAChB,UAAU,SACV,KAAK,cAAc,UAAU,MAAM,GAAG;AAC5C,aAAO,UAAU;AAAA,IACnB,CAAC;AAAA,EACL;AAAA,EAEA,SACE,IACA,QACM;AACN,SAAK,SAAS,YAAY,CAAC,OAAO;AAChC,UAAI,QAAQ;AACV,cAAM,WAAW,GACd,OAAO,EACP,KAAK,gBAAgB,EACrB;AAAA,UACC,IAAI,OAAO,iBAAiB,OAAO,GAAG,GAAG,iBAAiB,UAAU,OAAO,QAAQ,CAAC;AAAA,QACtF,EACC,IAAI;AACP,YAAI;AACF,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,YACA,SAAS;AAAA,UACX;AAAA,MACJ;AACA,YAAM,UAAU,GACb,OAAO,UAAU,EACjB,IAAI,EAAE,OAAO,eAAe,WAAW,KAAK,IAAI,EAAE,CAAC,EACnD,MAAM,IAAI,GAAG,WAAW,mBAAmB,EAAE,GAAG,GAAG,WAAW,OAAO,UAAU,CAAC,CAAC,EACjF,IAAI;AACP,UAAI,QAAQ,YAAY;AACtB,cAAM,IAAI,cAAc,sBAAsB,wDAAW;AAC3D,UAAI;AACF,WAAG,OAAO,gBAAgB,EACvB,OAAO,EAAE,aAAa,IAAI,GAAG,QAAQ,OAAO,UAAU,WAAW,KAAK,IAAI,EAAE,CAAC,EAC7E,IAAI;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,YAAY,IAAY,QAAiB,QAA+B;AACtE,SAAK,SAAS,YAAY,CAAC,OAAO;AAChC,SAAG,OAAO,UAAU,EACjB,IAAI,EAAE,OAAO,gBAAgB,QAAQ,OAAO,MAAM,WAAW,KAAK,IAAI,EAAE,CAAC,EACzE,MAAM,IAAI,GAAG,WAAW,mBAAmB,EAAE,GAAG,GAAG,WAAW,OAAO,aAAa,CAAC,CAAC,EACpF,IAAI;AACP,UAAI,WAAW;AACb,WAAG,OAAO,gBAAgB,EACvB,IAAI,EAAE,OAAO,CAAC,EACd,MAAM,GAAG,iBAAiB,aAAa,EAAE,CAAC,EAC1C,IAAI;AAAA,IACX,CAAC;AACD,WAAO,KAAK,IAAI,EAAE;AAAA,EACpB;AAAA,EAEA,KAAK,IAAY,OAAiB,YAAY,OAAqB;AACjE,SAAK,SAAS,YAAY,CAAC,OAAO;AAChC,YAAM,UAAU,GACb,OAAO,UAAU,EACjB,IAAI,EAAE,OAAO,YAAY,YAAY,UAAU,OAAO,WAAW,KAAK,IAAI,EAAE,CAAC,EAC7E;AAAA,QACC;AAAA,UACE,GAAG,WAAW,mBAAmB,EAAE;AAAA,UACnC,GAAG,GAAG,WAAW,OAAO,UAAU,GAAG,GAAG,WAAW,OAAO,aAAa,CAAC;AAAA,QAC1E;AAAA,MACF,EACC,IAAI;AAEP,UAAI,QAAQ,YAAY,EAAG;AAC3B,SAAG,OAAO,gBAAgB,EACvB,IAAI,YAAY,EAAE,OAAO,UAAU,IAAI,EAAE,OAAO,YAAY,SAAS,KAAK,IAAI,EAAE,CAAC,EACjF,MAAM,IAAI,GAAG,iBAAiB,aAAa,EAAE,GAAG,OAAO,iBAAiB,OAAO,CAAC,CAAC,EACjF,IAAI;AAAA,IACT,CAAC;AACD,WAAO,KAAK,IAAI,EAAE;AAAA,EACpB;AAAA;AAAA,EAGA,UAAgB;AACd,SAAK,SAAS,YAAY,CAAC,OAAO;AAChC,SAAG,OAAO,UAAU,EACjB,IAAI;AAAA,QACH,OAAO;AAAA,QACP,OAAO,EAAE,MAAM,kBAAkB,SAAS,6FAAkB;AAAA,QAC5D,WAAW,KAAK,IAAI;AAAA,MACtB,CAAC,EACA,MAAM,GAAG,WAAW,OAAO,UAAU,CAAC,EACtC,IAAI;AACP,SAAG,OAAO,UAAU,EACjB,IAAI;AAAA,QACH,OAAO;AAAA,QACP,OAAO,EAAE,MAAM,kBAAkB,SAAS,6FAAkB;AAAA,QAC5D,WAAW,KAAK,IAAI;AAAA,MACtB,CAAC,EACA,MAAM,GAAG,WAAW,OAAO,aAAa,CAAC,EACzC,IAAI;AACP,SAAG,OAAO,gBAAgB,EACvB,IAAI,EAAE,OAAO,UAAU,CAAC,EACxB,MAAM,OAAO,iBAAiB,OAAO,CAAC,EACtC,IAAI;AAAA,IACT,CAAC;AAAA,EACH;AAAA,EAEA,gBAAmC;AACjC,WAAO,KAAK,SACT,OAAO,EACP,KAAK,gBAAgB,EACrB,MAAM,OAAO,iBAAiB,OAAO,CAAC,EACtC,IAAI;AAAA,EACT;AAAA,EAEA,uBAAuC;AACrC,WAAO,KAAK,SACT,OAAO,EACP,KAAK,UAAU,EACf;AAAA,MACC;AAAA,QACE,GAAG,WAAW,OAAO,UAAU;AAAA,QAC/B,GAAG,WAAW,OAAO,aAAa;AAAA,QAClC,IAAI,GAAG,WAAW,OAAO,SAAS,GAAG,OAAO,WAAW,YAAY,CAAC;AAAA,MACtE;AAAA,IACF,EACC,IAAI;AAAA,EACT;AAAA,EAEA,OAAO,aAAkD;AACvD,WAAO,KAAK,SACT,OAAO,EACP,KAAK,gBAAgB,EACrB,MAAM,GAAG,iBAAiB,aAAa,WAAW,CAAC,EACnD,IAAI;AAAA,EACT;AAAA,EAEA,gBAAgB,UAA+C;AAC7D,WAAO,KAAK,SACT,OAAO,EACP,KAAK,gBAAgB,EACrB,MAAM,IAAI,GAAG,iBAAiB,UAAU,QAAQ,GAAG,OAAO,iBAAiB,OAAO,CAAC,CAAC,EACpF,IAAI;AAAA,EACT;AAAA,EAEA,WAAW,aAAqB,QAAsB;AACpD,SAAK,SACF,OAAO,gBAAgB,EACvB,IAAI,EAAE,OAAO,CAAC,EACd,MAAM,IAAI,GAAG,iBAAiB,aAAa,WAAW,GAAG,OAAO,iBAAiB,OAAO,CAAC,CAAC,EAC1F,IAAI;AAAA,EACT;AAAA,EAEA,WAAW,UAAkB,QAAgB,YAA0B;AACrE,SAAK,SACF,OAAO,gBAAgB,EACvB,IAAI,EAAE,OAAO,YAAY,SAAS,KAAK,IAAI,EAAE,CAAC,EAC9C;AAAA,MACC;AAAA,QACE,GAAG,iBAAiB,UAAU,QAAQ;AAAA,QACtC,GAAG,iBAAiB,QAAQ,MAAM;AAAA,QAClC,GAAG,iBAAiB,YAAY,UAAU;AAAA,QAC1C,OAAO,iBAAiB,OAAO;AAAA,MACjC;AAAA,IACF,EACC,IAAI;AAAA,EACT;AAAA;AAAA,EAGA,UAAU,mBAA2B,2BAAyC;AAC5E,SAAK,SAAS,YAAY,CAAC,OAAO;AAChC,YAAM,MAAM,KAAK,IAAI;AACrB,SAAG,OAAO,UAAU,EACjB,IAAI,EAAE,cAAc,KAAK,wBAAwB,kBAAkB,CAAC,EACpE;AAAA,QACC,IAAI,GAAG,WAAW,mBAAmB,iBAAiB,GAAG,OAAO,WAAW,YAAY,CAAC;AAAA,MAC1F,EACC,IAAI;AACP,SAAG,OAAO,gBAAgB,EACvB,IAAI,EAAE,OAAO,cAAc,SAAS,KAAK,cAAc,KAAK,0BAA0B,CAAC,EACvF;AAAA,QACC;AAAA,UACE,GAAG,iBAAiB,aAAa,iBAAiB;AAAA,UAClD,OAAO,iBAAiB,OAAO;AAAA,QACjC;AAAA,MACF,EACC,IAAI;AACP,SAAG,OAAO,UAAU,EACjB,IAAI;AAAA,QACH,OAAO;AAAA,QACP,QAAQ,EAAE,mBAAmB,UAAU,mBAAmB,cAAc,IAAI;AAAA,QAC5E,WAAW;AAAA,MACb,CAAC,EACA;AAAA,QACC;AAAA,UACE,GAAG,WAAW,mBAAmB,yBAAyB;AAAA,UAC1D,GAAG,WAAW,OAAO,aAAa;AAAA,QACpC;AAAA,MACF,EACC,IAAI;AAAA,IACT,CAAC;AAAA,EACH;AAAA,EAEA,WAAW,MAA2C;AACpD,SAAK,SACF,OAAO,WAAW,EAClB,OAAO,EAAE,GAAG,MAAM,WAAW,KAAK,IAAI,EAAE,CAAC,EACzC,mBAAmB,EAAE,QAAQ,YAAY,UAAU,KAAK,EAAE,GAAG,MAAM,WAAW,KAAK,IAAI,EAAE,EAAE,CAAC,EAC5F,IAAI;AAAA,EACT;AAAA,EAEA,cAAc,UAA0C;AACtD,WAAO,KAAK,SAAS,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,GAAG,YAAY,UAAU,QAAQ,CAAC,EAAE,IAAI;AAAA,EAChG;AACF;",
+  "names": []
+}

package/dist/server/db/schema.js

@@ -0,0 +1,99 @@
+import { sql } from "drizzle-orm";
+import {
+  check,
+  index,
+  integer,
+  primaryKey,
+  sqliteTable,
+  text,
+  uniqueIndex
+} from "drizzle-orm/sqlite-core";
+const operations = sqliteTable(
+  "operations",
+  {
+    clientOperationId: text("client_operation_id").primaryKey(),
+    kind: text("kind").notNull(),
+    target: text("target").notNull(),
+    projectId: text("project_id"),
+    requestDigest: text("request_digest").notNull(),
+    state: text("state", {
+      enum: ["accepted", "dispatching", "acknowledged", "failed", "unknown"]
+    }).notNull(),
+    result: text("result", { mode: "json" }).$type(),
+    error: text("error", { mode: "json" }).$type(),
+    createdAt: integer("created_at").notNull(),
+    updatedAt: integer("updated_at").notNull(),
+    reconciledAt: integer("reconciled_at"),
+    reconciliationDecision: text("reconciliation_decision")
+  },
+  (table) => [
+    check(
+      "operations_state_check",
+      sql`${table.state} in ('accepted', 'dispatching', 'acknowledged', 'failed', 'unknown')`
+    ),
+    index("operations_state_idx").on(table.state)
+  ]
+);
+const executionMarkers = sqliteTable(
+  "execution_markers",
+  {
+    operationId: text("operation_id").primaryKey().references(() => operations.clientOperationId),
+    threadId: text("thread_id").notNull(),
+    turnId: text("turn_id"),
+    workspaceKey: text("workspace_key").notNull(),
+    codexEpoch: text("codex_epoch").notNull(),
+    state: text("state", { enum: ["active", "unknown", "terminal", "reconciled"] }).notNull(),
+    createdAt: integer("created_at").notNull(),
+    endedAt: integer("ended_at"),
+    reconciledAt: integer("reconciled_at"),
+    reconciliationOperationId: text("reconciliation_operation_id").references(
+      () => operations.clientOperationId
+    )
+  },
+  (table) => [
+    check(
+      "execution_markers_state_check",
+      sql`${table.state} in ('active', 'unknown', 'terminal', 'reconciled')`
+    ),
+    uniqueIndex("execution_markers_active_thread").on(table.threadId).where(sql`${table.endedAt} is null`)
+  ]
+);
+const threadLinks = sqliteTable("thread_links", {
+  threadId: text("thread_id").primaryKey(),
+  projectId: text("project_id").notNull(),
+  cwd: text("cwd").notNull(),
+  source: text("source").notNull(),
+  managedEpoch: text("managed_epoch"),
+  updatedAt: integer("updated_at").notNull()
+});
+const preferences = sqliteTable("preferences", {
+  key: text("key").primaryKey(),
+  value: text("value", { mode: "json" }).$type().notNull()
+});
+const turnUsage = sqliteTable(
+  "turn_usage",
+  {
+    threadId: text("thread_id").notNull(),
+    turnId: text("turn_id").notNull(),
+    outputTokens: integer("output_tokens").notNull()
+  },
+  (table) => [primaryKey({ columns: [table.threadId, table.turnId] })]
+);
+const projectRegistrations = sqliteTable("project_registrations", {
+  id: text("id").primaryKey(),
+  name: text("name").notNull(),
+  path: text("path").notNull(),
+  canonicalRoot: text("canonical_root"),
+  removedAt: integer("removed_at"),
+  createdAt: integer("created_at").notNull(),
+  updatedAt: integer("updated_at").notNull()
+});
+export {
+  executionMarkers,
+  operations,
+  preferences,
+  projectRegistrations,
+  threadLinks,
+  turnUsage
+};
+//# sourceMappingURL=schema.js.map

package/dist/server/db/schema.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/server/db/schema.ts"],
+  "sourcesContent": ["import { sql } from 'drizzle-orm';\nimport {\n  check,\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n  uniqueIndex,\n} from 'drizzle-orm/sqlite-core';\nimport type { ApiError } from '../../shared/types.js';\n\nexport const operations = sqliteTable(\n  'operations',\n  {\n    clientOperationId: text('client_operation_id').primaryKey(),\n    kind: text('kind').notNull(),\n    target: text('target').notNull(),\n    projectId: text('project_id'),\n    requestDigest: text('request_digest').notNull(),\n    state: text('state', {\n      enum: ['accepted', 'dispatching', 'acknowledged', 'failed', 'unknown'],\n    }).notNull(),\n    result: text('result', { mode: 'json' }).$type<unknown>(),\n    error: text('error', { mode: 'json' }).$type<ApiError>(),\n    createdAt: integer('created_at').notNull(),\n    updatedAt: integer('updated_at').notNull(),\n    reconciledAt: integer('reconciled_at'),\n    reconciliationDecision: text('reconciliation_decision'),\n  },\n  (table) => [\n    check(\n      'operations_state_check',\n      sql`${table.state} in ('accepted', 'dispatching', 'acknowledged', 'failed', 'unknown')`,\n    ),\n    index('operations_state_idx').on(table.state),\n  ],\n);\n\nexport const executionMarkers = sqliteTable(\n  'execution_markers',\n  {\n    operationId: text('operation_id')\n      .primaryKey()\n      .references(() => operations.clientOperationId),\n    threadId: text('thread_id').notNull(),\n    turnId: text('turn_id'),\n    workspaceKey: text('workspace_key').notNull(),\n    codexEpoch: text('codex_epoch').notNull(),\n    state: text('state', { enum: ['active', 'unknown', 'terminal', 'reconciled'] }).notNull(),\n    createdAt: integer('created_at').notNull(),\n    endedAt: integer('ended_at'),\n    reconciledAt: integer('reconciled_at'),\n    reconciliationOperationId: text('reconciliation_operation_id').references(\n      () => operations.clientOperationId,\n    ),\n  },\n  (table) => [\n    check(\n      'execution_markers_state_check',\n      sql`${table.state} in ('active', 'unknown', 'terminal', 'reconciled')`,\n    ),\n    uniqueIndex('execution_markers_active_thread')\n      .on(table.threadId)\n      .where(sql`${table.endedAt} is null`),\n  ],\n);\n\nexport const threadLinks = sqliteTable('thread_links', {\n  threadId: text('thread_id').primaryKey(),\n  projectId: text('project_id').notNull(),\n  cwd: text('cwd').notNull(),\n  source: text('source').notNull(),\n  managedEpoch: text('managed_epoch'),\n  updatedAt: integer('updated_at').notNull(),\n});\n\nexport const preferences = sqliteTable('preferences', {\n  key: text('key').primaryKey(),\n  value: text('value', { mode: 'json' }).$type<unknown>().notNull(),\n});\n\n/** Locally observed turn totals; upstream turn history does not include token usage. */\nexport const turnUsage = sqliteTable(\n  'turn_usage',\n  {\n    threadId: text('thread_id').notNull(),\n    turnId: text('turn_id').notNull(),\n    outputTokens: integer('output_tokens').notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.threadId, table.turnId] })],\n);\n\n/** Removing a registration retains its identity and all existing thread links. */\nexport const projectRegistrations = sqliteTable('project_registrations', {\n  id: text('id').primaryKey(),\n  name: text('name').notNull(),\n  path: text('path').notNull(),\n  canonicalRoot: text('canonical_root'),\n  removedAt: integer('removed_at'),\n  createdAt: integer('created_at').notNull(),\n  updatedAt: integer('updated_at').notNull(),\n});\n"],
+  "mappings": "AAAA,SAAS,WAAW;AACpB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGA,MAAM,aAAa;AAAA,EACxB;AAAA,EACA;AAAA,IACE,mBAAmB,KAAK,qBAAqB,EAAE,WAAW;AAAA,IAC1D,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA,IAC/B,WAAW,KAAK,YAAY;AAAA,IAC5B,eAAe,KAAK,gBAAgB,EAAE,QAAQ;AAAA,IAC9C,OAAO,KAAK,SAAS;AAAA,MACnB,MAAM,CAAC,YAAY,eAAe,gBAAgB,UAAU,SAAS;AAAA,IACvE,CAAC,EAAE,QAAQ;AAAA,IACX,QAAQ,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC,EAAE,MAAe;AAAA,IACxD,OAAO,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC,EAAE,MAAgB;AAAA,IACvD,WAAW,QAAQ,YAAY,EAAE,QAAQ;AAAA,IACzC,WAAW,QAAQ,YAAY,EAAE,QAAQ;AAAA,IACzC,cAAc,QAAQ,eAAe;AAAA,IACrC,wBAAwB,KAAK,yBAAyB;AAAA,EACxD;AAAA,EACA,CAAC,UAAU;AAAA,IACT;AAAA,MACE;AAAA,MACA,MAAM,MAAM,KAAK;AAAA,IACnB;AAAA,IACA,MAAM,sBAAsB,EAAE,GAAG,MAAM,KAAK;AAAA,EAC9C;AACF;AAEO,MAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,aAAa,KAAK,cAAc,EAC7B,WAAW,EACX,WAAW,MAAM,WAAW,iBAAiB;AAAA,IAChD,UAAU,KAAK,WAAW,EAAE,QAAQ;AAAA,IACpC,QAAQ,KAAK,SAAS;AAAA,IACtB,cAAc,KAAK,eAAe,EAAE,QAAQ;AAAA,IAC5C,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA,IACxC,OAAO,KAAK,SAAS,EAAE,MAAM,CAAC,UAAU,WAAW,YAAY,YAAY,EAAE,CAAC,EAAE,QAAQ;AAAA,IACxF,WAAW,QAAQ,YAAY,EAAE,QAAQ;AAAA,IACzC,SAAS,QAAQ,UAAU;AAAA,IAC3B,cAAc,QAAQ,eAAe;AAAA,IACrC,2BAA2B,KAAK,6BAA6B,EAAE;AAAA,MAC7D,MAAM,WAAW;AAAA,IACnB;AAAA,EACF;AAAA,EACA,CAAC,UAAU;AAAA,IACT;AAAA,MACE;AAAA,MACA,MAAM,MAAM,KAAK;AAAA,IACnB;AAAA,IACA,YAAY,iCAAiC,EAC1C,GAAG,MAAM,QAAQ,EACjB,MAAM,MAAM,MAAM,OAAO,UAAU;AAAA,EACxC;AACF;AAEO,MAAM,cAAc,YAAY,gBAAgB;AAAA,EACrD,UAAU,KAAK,WAAW,EAAE,WAAW;AAAA,EACvC,WAAW,KAAK,YAAY,EAAE,QAAQ;AAAA,EACtC,KAAK,KAAK,KAAK,EAAE,QAAQ;AAAA,EACzB,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA,EAC/B,cAAc,KAAK,eAAe;AAAA,EAClC,WAAW,QAAQ,YAAY,EAAE,QAAQ;AAC3C,CAAC;AAEM,MAAM,cAAc,YAAY,eAAe;AAAA,EACpD,KAAK,KAAK,KAAK,EAAE,WAAW;AAAA,EAC5B,OAAO,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC,EAAE,MAAe,EAAE,QAAQ;AAClE,CAAC;AAGM,MAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,UAAU,KAAK,WAAW,EAAE,QAAQ;AAAA,IACpC,QAAQ,KAAK,SAAS,EAAE,QAAQ;AAAA,IAChC,cAAc,QAAQ,eAAe,EAAE,QAAQ;AAAA,EACjD;AAAA,EACA,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,MAAM,UAAU,MAAM,MAAM,EAAE,CAAC,CAAC;AACrE;AAGO,MAAM,uBAAuB,YAAY,yBAAyB;AAAA,EACvE,IAAI,KAAK,IAAI,EAAE,WAAW;AAAA,EAC1B,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,eAAe,KAAK,gBAAgB;AAAA,EACpC,WAAW,QAAQ,YAAY;AAAA,EAC/B,WAAW,QAAQ,YAAY,EAAE,QAAQ;AAAA,EACzC,WAAW,QAAQ,YAAY,EAAE,QAAQ;AAC3C,CAAC;",
+  "names": []
+}

package/dist/server/db/turn-usage.js

@@ -0,0 +1,31 @@
+import { eq } from "drizzle-orm";
+import { turnUsage } from "./schema.js";
+class TurnUsageStore {
+  constructor(database) {
+    this.database = database;
+  }
+  database;
+  save(threadId, turn) {
+    if (turn.outputTokens === void 0 || !Number.isSafeInteger(turn.outputTokens) || turn.outputTokens < 0)
+      return;
+    this.database.insert(turnUsage).values({
+      threadId,
+      turnId: turn.id,
+      outputTokens: turn.outputTokens
+    }).onConflictDoNothing().run();
+  }
+  restore(threadId, turns) {
+    if (turns.length === 0) return turns;
+    const saved = new Map(
+      this.database.select().from(turnUsage).where(eq(turnUsage.threadId, threadId)).all().map((entry) => [entry.turnId, entry.outputTokens])
+    );
+    return turns.map((turn) => {
+      const outputTokens = saved.get(turn.id);
+      return outputTokens === void 0 ? turn : { ...turn, outputTokens };
+    });
+  }
+}
+export {
+  TurnUsageStore
+};
+//# sourceMappingURL=turn-usage.js.map

package/dist/server/db/turn-usage.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/server/db/turn-usage.ts"],
+  "sourcesContent": ["import { eq } from 'drizzle-orm';\nimport type { AppDatabase } from './index.js';\nimport { turnUsage } from './schema.js';\nimport type { TurnView } from '../../shared/types.js';\n\nexport class TurnUsageStore {\n  constructor(private readonly database: AppDatabase) {}\n\n  save(threadId: string, turn: TurnView): void {\n    if (\n      turn.outputTokens === undefined ||\n      !Number.isSafeInteger(turn.outputTokens) ||\n      turn.outputTokens < 0\n    )\n      return;\n    this.database\n      .insert(turnUsage)\n      .values({\n        threadId,\n        turnId: turn.id,\n        outputTokens: turn.outputTokens,\n      })\n      .onConflictDoNothing()\n      .run();\n  }\n\n  restore(threadId: string, turns: TurnView[]): TurnView[] {\n    if (turns.length === 0) return turns;\n    const saved = new Map(\n      this.database\n        .select()\n        .from(turnUsage)\n        .where(eq(turnUsage.threadId, threadId))\n        .all()\n        .map((entry) => [entry.turnId, entry.outputTokens]),\n    );\n    return turns.map((turn) => {\n      const outputTokens = saved.get(turn.id);\n      return outputTokens === undefined ? turn : { ...turn, outputTokens };\n    });\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,UAAU;AAEnB,SAAS,iBAAiB;AAGnB,MAAM,eAAe;AAAA,EAC1B,YAA6B,UAAuB;AAAvB;AAAA,EAAwB;AAAA,EAAxB;AAAA,EAE7B,KAAK,UAAkB,MAAsB;AAC3C,QACE,KAAK,iBAAiB,UACtB,CAAC,OAAO,cAAc,KAAK,YAAY,KACvC,KAAK,eAAe;AAEpB;AACF,SAAK,SACF,OAAO,SAAS,EAChB,OAAO;AAAA,MACN;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,cAAc,KAAK;AAAA,IACrB,CAAC,EACA,oBAAoB,EACpB,IAAI;AAAA,EACT;AAAA,EAEA,QAAQ,UAAkB,OAA+B;AACvD,QAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,UAAM,QAAQ,IAAI;AAAA,MAChB,KAAK,SACF,OAAO,EACP,KAAK,SAAS,EACd,MAAM,GAAG,UAAU,UAAU,QAAQ,CAAC,EACtC,IAAI,EACJ,IAAI,CAAC,UAAU,CAAC,MAAM,QAAQ,MAAM,YAAY,CAAC;AAAA,IACtD;AACA,WAAO,MAAM,IAAI,CAAC,SAAS;AACzB,YAAM,eAAe,MAAM,IAAI,KAAK,EAAE;AACtC,aAAO,iBAAiB,SAAY,OAAO,EAAE,GAAG,MAAM,aAAa;AAAA,IACrE,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/server/events.js

@@ -0,0 +1,123 @@
+import { randomUUID } from "node:crypto";
+class EventHub {
+  constructor(maxBytes = 16 * 1024 * 1024) {
+    this.maxBytes = maxBytes;
+  }
+  maxBytes;
+  serverEpoch = randomUUID();
+  seq = 0;
+  discardedThrough = 0;
+  bytes = 0;
+  events = [];
+  listeners = /* @__PURE__ */ new Set();
+  runtimeListeners = /* @__PURE__ */ new Set();
+  overviewListeners = /* @__PURE__ */ new Set();
+  cursor() {
+    return { serverEpoch: this.serverEpoch, seq: this.seq };
+  }
+  publish(kind, payload, threadId) {
+    const event = {
+      type: "event",
+      cursor: { serverEpoch: this.serverEpoch, seq: ++this.seq },
+      kind,
+      payload: structuredClone(payload),
+      ...threadId === void 0 ? {} : { threadId }
+    };
+    const bytes = Buffer.byteLength(JSON.stringify(event));
+    this.events.push({ event, bytes });
+    this.bytes += bytes;
+    while (this.bytes > this.maxBytes && this.events.length > 0) {
+      const removed = this.events.shift();
+      this.bytes -= removed.bytes;
+      this.discardedThrough = removed.event.cursor.seq;
+    }
+    for (const listener of this.listeners)
+      if (!event.threadId || event.threadId === listener.threadId)
+        this.deliver(listener.send, event);
+    if (kind === "runtime")
+      for (const listener of this.runtimeListeners) this.deliver(listener, event);
+  }
+  subscribeRuntime(send) {
+    this.runtimeListeners.add(send);
+    return () => {
+      this.runtimeListeners.delete(send);
+    };
+  }
+  /** Overview is recovered via HTTP; it never consumes the detailed replay buffer. */
+  publishSummary(summary) {
+    const event = {
+      type: "event",
+      kind: "threadSummary",
+      threadId: summary.id,
+      cursor: this.cursor(),
+      payload: structuredClone(summary)
+    };
+    for (const listener of this.overviewListeners) this.deliver(listener, event);
+  }
+  subscribeOverview(send) {
+    this.overviewListeners.add(send);
+    return () => {
+      this.overviewListeners.delete(send);
+    };
+  }
+  /** Only connected overview clients receive this signal. It never enters the replay buffer. */
+  publishCompletion(completion) {
+    const event = {
+      type: "event",
+      kind: "turnCompletion",
+      threadId: completion.threadId,
+      cursor: this.cursor(),
+      payload: structuredClone(completion)
+    };
+    for (const listener of this.overviewListeners) this.deliver(listener, event);
+  }
+  /** Project snapshots have their own update boundary even without a thread event. */
+  publishProjects(projects) {
+    const event = {
+      type: "event",
+      kind: "projects",
+      cursor: { serverEpoch: this.serverEpoch, seq: ++this.seq },
+      payload: structuredClone(projects)
+    };
+    for (const listener of this.overviewListeners) this.deliver(listener, event);
+  }
+  subscribe(threadId, snapshot, after, send) {
+    const replayable = after?.serverEpoch === this.serverEpoch && after.seq >= this.discardedThrough && after.seq <= this.seq;
+    const queued = [];
+    let initializing = true;
+    const listener = {
+      threadId,
+      send: (message) => {
+        if (initializing) queued.push(message);
+        else send(message);
+      }
+    };
+    this.listeners.add(listener);
+    let boundary = this.seq;
+    if (replayable && after) {
+      for (const { event } of [...this.events])
+        if (event.cursor.seq > after.seq && event.cursor.seq <= boundary && (!event.threadId || event.threadId === threadId))
+          this.deliver(send, event);
+    } else {
+      const data = structuredClone(snapshot());
+      boundary = this.seq;
+      this.deliver(send, { type: "snapshot", cursor: this.cursor(), threadId, data });
+    }
+    initializing = false;
+    for (const message of queued)
+      if (message.type === "event" && message.cursor.seq > boundary) this.deliver(send, message);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  }
+  deliver(send, message) {
+    try {
+      send(message);
+    } catch {
+    }
+  }
+}
+export {
+  EventHub
+};
+//# sourceMappingURL=events.js.map

package/dist/server/events.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/server/events.ts"],
+  "sourcesContent": ["import { randomUUID } from 'node:crypto';\nimport type {\n  Cursor,\n  Operation,\n  Project,\n  ServerMessage,\n  SystemInfo,\n  ThreadSummary,\n  ThreadView,\n  TurnCompletion,\n} from '../shared/types.js';\n\ntype BusinessEvent = Extract<ServerMessage, { type: 'event' }>;\ntype Listener = (message: ServerMessage) => void;\n\n/** Synchronous snapshot+subscription forms one JS event-loop boundary. */\nexport class EventHub {\n  readonly serverEpoch = randomUUID();\n  private seq = 0;\n  private discardedThrough = 0;\n  private bytes = 0;\n  private readonly events: { event: BusinessEvent; bytes: number }[] = [];\n  private readonly listeners = new Set<{ threadId: string; send: Listener }>();\n  private readonly runtimeListeners = new Set<Listener>();\n  private readonly overviewListeners = new Set<Listener>();\n\n  constructor(private readonly maxBytes = 16 * 1024 * 1024) {}\n\n  cursor(): Cursor {\n    return { serverEpoch: this.serverEpoch, seq: this.seq };\n  }\n\n  publish(\n    kind: 'thread' | 'runtime' | 'operation',\n    payload: ThreadView | SystemInfo | Operation,\n    threadId?: string,\n  ): void {\n    const event: BusinessEvent = {\n      type: 'event',\n      cursor: { serverEpoch: this.serverEpoch, seq: ++this.seq },\n      kind,\n      payload: structuredClone(payload),\n      ...(threadId === undefined ? {} : { threadId }),\n    };\n    const bytes = Buffer.byteLength(JSON.stringify(event));\n    this.events.push({ event, bytes });\n    this.bytes += bytes;\n    while (this.bytes > this.maxBytes && this.events.length > 0) {\n      const removed = this.events.shift()!;\n      this.bytes -= removed.bytes;\n      this.discardedThrough = removed.event.cursor.seq;\n    }\n    for (const listener of this.listeners)\n      if (!event.threadId || event.threadId === listener.threadId)\n        this.deliver(listener.send, event);\n    if (kind === 'runtime')\n      for (const listener of this.runtimeListeners) this.deliver(listener, event);\n  }\n\n  subscribeRuntime(send: Listener): () => void {\n    this.runtimeListeners.add(send);\n    return () => {\n      this.runtimeListeners.delete(send);\n    };\n  }\n\n  /** Overview is recovered via HTTP; it never consumes the detailed replay buffer. */\n  publishSummary(summary: ThreadSummary): void {\n    const event: BusinessEvent = {\n      type: 'event',\n      kind: 'threadSummary',\n      threadId: summary.id,\n      cursor: this.cursor(),\n      payload: structuredClone(summary),\n    };\n    for (const listener of this.overviewListeners) this.deliver(listener, event);\n  }\n\n  subscribeOverview(send: Listener): () => void {\n    this.overviewListeners.add(send);\n    return () => {\n      this.overviewListeners.delete(send);\n    };\n  }\n\n  /** Only connected overview clients receive this signal. It never enters the replay buffer. */\n  publishCompletion(completion: TurnCompletion): void {\n    const event: BusinessEvent = {\n      type: 'event',\n      kind: 'turnCompletion',\n      threadId: completion.threadId,\n      cursor: this.cursor(),\n      payload: structuredClone(completion),\n    };\n    for (const listener of this.overviewListeners) this.deliver(listener, event);\n  }\n\n  /** Project snapshots have their own update boundary even without a thread event. */\n  publishProjects(projects: Project[]): void {\n    const event: BusinessEvent = {\n      type: 'event',\n      kind: 'projects',\n      cursor: { serverEpoch: this.serverEpoch, seq: ++this.seq },\n      payload: structuredClone(projects),\n    };\n    for (const listener of this.overviewListeners) this.deliver(listener, event);\n  }\n\n  subscribe(\n    threadId: string,\n    snapshot: () => ThreadView,\n    after: Cursor | undefined,\n    send: Listener,\n  ): () => void {\n    const replayable =\n      after?.serverEpoch === this.serverEpoch &&\n      after.seq >= this.discardedThrough &&\n      after.seq <= this.seq;\n    const queued: ServerMessage[] = [];\n    let initializing = true;\n    const listener = {\n      threadId,\n      send: (message: ServerMessage) => {\n        if (initializing) queued.push(message);\n        else send(message);\n      },\n    };\n    this.listeners.add(listener);\n    // No await may occur between reading the snapshot and registering the listener.\n    let boundary = this.seq;\n    if (replayable && after) {\n      for (const { event } of [...this.events])\n        if (\n          event.cursor.seq > after.seq &&\n          event.cursor.seq <= boundary &&\n          (!event.threadId || event.threadId === threadId)\n        )\n          this.deliver(send, event);\n    } else {\n      const data = structuredClone(snapshot());\n      boundary = this.seq;\n      this.deliver(send, { type: 'snapshot', cursor: this.cursor(), threadId, data });\n    }\n    initializing = false;\n    for (const message of queued)\n      if (message.type === 'event' && message.cursor.seq > boundary) this.deliver(send, message);\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  private deliver(send: Listener, message: ServerMessage): void {\n    // A closed or slow browser must never unwind the upstream event consumer.\n    try {\n      send(message);\n    } catch {\n      /* Transport closes or unsubscribes its own failed socket. */\n    }\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAgBpB,MAAM,SAAS;AAAA,EAUpB,YAA6B,WAAW,KAAK,OAAO,MAAM;AAA7B;AAAA,EAA8B;AAAA,EAA9B;AAAA,EATpB,cAAc,WAAW;AAAA,EAC1B,MAAM;AAAA,EACN,mBAAmB;AAAA,EACnB,QAAQ;AAAA,EACC,SAAoD,CAAC;AAAA,EACrD,YAAY,oBAAI,IAA0C;AAAA,EAC1D,mBAAmB,oBAAI,IAAc;AAAA,EACrC,oBAAoB,oBAAI,IAAc;AAAA,EAIvD,SAAiB;AACf,WAAO,EAAE,aAAa,KAAK,aAAa,KAAK,KAAK,IAAI;AAAA,EACxD;AAAA,EAEA,QACE,MACA,SACA,UACM;AACN,UAAM,QAAuB;AAAA,MAC3B,MAAM;AAAA,MACN,QAAQ,EAAE,aAAa,KAAK,aAAa,KAAK,EAAE,KAAK,IAAI;AAAA,MACzD;AAAA,MACA,SAAS,gBAAgB,OAAO;AAAA,MAChC,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA,IAC/C;AACA,UAAM,QAAQ,OAAO,WAAW,KAAK,UAAU,KAAK,CAAC;AACrD,SAAK,OAAO,KAAK,EAAE,OAAO,MAAM,CAAC;AACjC,SAAK,SAAS;AACd,WAAO,KAAK,QAAQ,KAAK,YAAY,KAAK,OAAO,SAAS,GAAG;AAC3D,YAAM,UAAU,KAAK,OAAO,MAAM;AAClC,WAAK,SAAS,QAAQ;AACtB,WAAK,mBAAmB,QAAQ,MAAM,OAAO;AAAA,IAC/C;AACA,eAAW,YAAY,KAAK;AAC1B,UAAI,CAAC,MAAM,YAAY,MAAM,aAAa,SAAS;AACjD,aAAK,QAAQ,SAAS,MAAM,KAAK;AACrC,QAAI,SAAS;AACX,iBAAW,YAAY,KAAK,iBAAkB,MAAK,QAAQ,UAAU,KAAK;AAAA,EAC9E;AAAA,EAEA,iBAAiB,MAA4B;AAC3C,SAAK,iBAAiB,IAAI,IAAI;AAC9B,WAAO,MAAM;AACX,WAAK,iBAAiB,OAAO,IAAI;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAGA,eAAe,SAA8B;AAC3C,UAAM,QAAuB;AAAA,MAC3B,MAAM;AAAA,MACN,MAAM;AAAA,MACN,UAAU,QAAQ;AAAA,MAClB,QAAQ,KAAK,OAAO;AAAA,MACpB,SAAS,gBAAgB,OAAO;AAAA,IAClC;AACA,eAAW,YAAY,KAAK,kBAAmB,MAAK,QAAQ,UAAU,KAAK;AAAA,EAC7E;AAAA,EAEA,kBAAkB,MAA4B;AAC5C,SAAK,kBAAkB,IAAI,IAAI;AAC/B,WAAO,MAAM;AACX,WAAK,kBAAkB,OAAO,IAAI;AAAA,IACpC;AAAA,EACF;AAAA;AAAA,EAGA,kBAAkB,YAAkC;AAClD,UAAM,QAAuB;AAAA,MAC3B,MAAM;AAAA,MACN,MAAM;AAAA,MACN,UAAU,WAAW;AAAA,MACrB,QAAQ,KAAK,OAAO;AAAA,MACpB,SAAS,gBAAgB,UAAU;AAAA,IACrC;AACA,eAAW,YAAY,KAAK,kBAAmB,MAAK,QAAQ,UAAU,KAAK;AAAA,EAC7E;AAAA;AAAA,EAGA,gBAAgB,UAA2B;AACzC,UAAM,QAAuB;AAAA,MAC3B,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ,EAAE,aAAa,KAAK,aAAa,KAAK,EAAE,KAAK,IAAI;AAAA,MACzD,SAAS,gBAAgB,QAAQ;AAAA,IACnC;AACA,eAAW,YAAY,KAAK,kBAAmB,MAAK,QAAQ,UAAU,KAAK;AAAA,EAC7E;AAAA,EAEA,UACE,UACA,UACA,OACA,MACY;AACZ,UAAM,aACJ,OAAO,gBAAgB,KAAK,eAC5B,MAAM,OAAO,KAAK,oBAClB,MAAM,OAAO,KAAK;AACpB,UAAM,SAA0B,CAAC;AACjC,QAAI,eAAe;AACnB,UAAM,WAAW;AAAA,MACf;AAAA,MACA,MAAM,CAAC,YAA2B;AAChC,YAAI,aAAc,QAAO,KAAK,OAAO;AAAA,YAChC,MAAK,OAAO;AAAA,MACnB;AAAA,IACF;AACA,SAAK,UAAU,IAAI,QAAQ;AAE3B,QAAI,WAAW,KAAK;AACpB,QAAI,cAAc,OAAO;AACvB,iBAAW,EAAE,MAAM,KAAK,CAAC,GAAG,KAAK,MAAM;AACrC,YACE,MAAM,OAAO,MAAM,MAAM,OACzB,MAAM,OAAO,OAAO,aACnB,CAAC,MAAM,YAAY,MAAM,aAAa;AAEvC,eAAK,QAAQ,MAAM,KAAK;AAAA,IAC9B,OAAO;AACL,YAAM,OAAO,gBAAgB,SAAS,CAAC;AACvC,iBAAW,KAAK;AAChB,WAAK,QAAQ,MAAM,EAAE,MAAM,YAAY,QAAQ,KAAK,OAAO,GAAG,UAAU,KAAK,CAAC;AAAA,IAChF;AACA,mBAAe;AACf,eAAW,WAAW;AACpB,UAAI,QAAQ,SAAS,WAAW,QAAQ,OAAO,MAAM,SAAU,MAAK,QAAQ,MAAM,OAAO;AAC3F,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA,EAEQ,QAAQ,MAAgB,SAA8B;AAE5D,QAAI;AACF,WAAK,OAAO;AAAA,IACd,QAAQ;AAAA,IAER;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/server/http.js

@@ -0,0 +1,305 @@
+import { Hono } from "hono";
+import { bodyLimit } from "hono/body-limit";
+import { serveStatic } from "@hono/node-server/serve-static";
+import { upgradeWebSocket } from "@hono/node-server";
+import { ZodError } from "zod";
+import { AppError } from "../shared/errors.js";
+import { IMAGE_REQUEST_BYTES } from "../shared/images.js";
+import * as schemas from "../shared/validation.js";
+import { ConfigStore } from "./config-store.js";
+import { createAuthenticator } from "./auth.js";
+import { socketHandlers } from "./websocket.js";
+import { z } from "zod";
+import { releaseChannels } from "../shared/updates.js";
+import { settingsSchema, updateRequestSchema } from "../updates/manager.js";
+function createApp({
+  config,
+  service,
+  staticDir,
+  authenticate = createAuthenticator(config),
+  updates
+}) {
+  const app = new Hono();
+  app.onError((error, c) => {
+    const failure = error instanceof AppError ? error : error instanceof ZodError || error instanceof SyntaxError ? new AppError("VALIDATION_FAILED", "Invalid request data", 400) : new AppError("INTERNAL_ERROR", "An internal error occurred", 500);
+    return c.json({ error: failure.toJSON(c.get("operationId")) }, failure.status);
+  });
+  app.get("/api/health", (c) => c.json({ ok: true }));
+  app.use("*", async (c, next) => {
+    c.set("identity", await authenticate(c.req.raw, c.req.path === "/ws"));
+    await next();
+  });
+  app.use(
+    "/api/*",
+    (c, next) => bodyLimit({
+      maxSize: /^\/api\/threads\/[^/]+\/(turns|steer)$/.test(c.req.path) ? IMAGE_REQUEST_BYTES : 512 * 1024,
+      onError: () => {
+        throw new AppError("BODY_TOO_LARGE", "Request body exceeds limit", 413);
+      }
+    })(c, next)
+  );
+  app.use("/api/*", async (c, next) => {
+    c.header("Cache-Control", "no-store");
+    if (service.isInMaintenance() && !["GET", "HEAD", "OPTIONS"].includes(c.req.method) && !c.req.path.startsWith("/api/updates"))
+      throw new AppError("UPDATE_MAINTENANCE", "\u6B63\u5728\u5347\u7EA7\uFF0C\u8BF7\u7B49\u5F85\u670D\u52A1\u91CD\u65B0\u8FDE\u63A5", 503);
+    await next();
+  });
+  if (updates) {
+    app.get("/api/updates", async (c) => c.json(await updates.status()));
+    app.post("/api/updates/check", async (c) => {
+      const input = z.object({ channel: z.enum(releaseChannels).optional() }).strict().parse(await c.req.json());
+      return c.json(await updates.check(input.channel));
+    });
+    app.post(
+      "/api/updates/settings",
+      async (c) => c.json(await updates.configure(settingsSchema.parse(await c.req.json())))
+    );
+    app.post(
+      "/api/updates/run",
+      async (c) => c.json(await updates.start(updateRequestSchema.parse(await c.req.json())), 202)
+    );
+  }
+  const id = (value) => schemas.idSchema.parse(value);
+  const parse = async (c, schema) => {
+    const value = await c.req.json();
+    if (value && typeof value === "object" && "clientOperationId" in value && typeof value.clientOperationId === "string")
+      c.set("operationId", value.clientOperationId);
+    return schema.parse(value);
+  };
+  const status = (op) => op.status === "dispatching" || op.status === "accepted" ? 202 : 200;
+  const configuration = new ConfigStore(config);
+  app.use("/api/config*", async (c, next) => {
+    c.header("Cache-Control", "no-store");
+    await next();
+  });
+  app.get("/api/config", async (c) => c.json(await configuration.snapshot()));
+  app.post("/api/config", async (c) => c.json(await configuration.save(await c.req.json())));
+  app.post(
+    "/api/config/import",
+    async (c) => c.json(await configuration.previewImport(await c.req.json()))
+  );
+  app.get("/api/config/export", async (c) => {
+    c.header("Content-Disposition", 'attachment; filename="codex-web-config.json"');
+    return c.json(await configuration.export());
+  });
+  app.get("/api/system", (c) => c.json(service.getSystem()));
+  app.post("/api/system/compatibility/confirm", async (c) => {
+    const op = await service.confirmCompatibility(
+      await parse(c, schemas.confirmCompatibilitySchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.get("/api/projects", async (c) => c.json({ data: await service.listProjects() }));
+  app.get(
+    "/api/projects/:projectId/runtime-settings",
+    async (c) => c.json(await service.readRuntimeSettings(id(c.req.param("projectId"))))
+  );
+  app.post("/api/projects/:projectId/model-defaults", async (c) => {
+    const op = await service.saveModelDefaults(
+      id(c.req.param("projectId")),
+      await parse(c, schemas.saveModelDefaultsSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post(
+    "/api/projects",
+    async (c) => c.json(service.addProject(await parse(c, schemas.createProjectSchema)))
+  );
+  app.post(
+    "/api/projects/:projectId/rename",
+    async (c) => c.json(
+      service.renameProject(
+        id(c.req.param("projectId")),
+        await parse(c, schemas.renameProjectSchema)
+      )
+    )
+  );
+  app.post("/api/projects/:projectId/remove", async (c) => {
+    await parse(c, schemas.removeProjectSchema);
+    return c.json(service.removeProject(id(c.req.param("projectId"))));
+  });
+  app.get(
+    "/api/projects/:projectId/threads",
+    async (c) => c.json(
+      await service.listThreadSummaries(
+        id(c.req.param("projectId")),
+        c.req.query("cursor") === void 0 ? void 0 : schemas.cursorSchema.parse(c.req.query("cursor")),
+        schemas.archivedQuerySchema.parse(c.req.query("archived"))
+      )
+    )
+  );
+  app.get(
+    "/api/threads",
+    async (c) => c.json(
+      await service.listThreads(
+        id(c.req.query("projectId") ?? ""),
+        c.req.query("cursor") === void 0 ? void 0 : schemas.cursorSchema.parse(c.req.query("cursor")),
+        schemas.archivedQuerySchema.parse(c.req.query("archived"))
+      )
+    )
+  );
+  app.post("/api/threads/:threadId/archive", async (c) => {
+    return c.json(
+      await service.setThreadArchived(
+        id(c.req.param("threadId")),
+        await parse(c, schemas.archiveThreadSchema)
+      )
+    );
+  });
+  app.get(
+    "/api/threads/:threadId",
+    async (c) => c.json(await service.getThread(id(c.req.param("threadId"))))
+  );
+  app.get(
+    "/api/threads/:threadId/metadata",
+    async (c) => c.json(await service.getThreadMetadata(id(c.req.param("threadId"))))
+  );
+  app.get("/api/threads/:threadId/export", async (c) => {
+    const exported = await service.exportThread(id(c.req.param("threadId")));
+    c.header("Content-Type", "text/markdown; charset=utf-8");
+    c.header("Content-Disposition", `attachment; filename="${exported.filename}"`);
+    c.header("Cache-Control", "no-store");
+    c.header("X-Content-Type-Options", "nosniff");
+    c.header("X-Export-Completeness", exported.partial ? "partial" : "saved-history");
+    return c.body(exported.markdown);
+  });
+  app.get("/api/threads/:threadId/images", async (c) => {
+    c.header("Cache-Control", "private, no-store");
+    c.header("X-Content-Type-Options", "nosniff");
+    c.header("Cross-Origin-Resource-Policy", "same-origin");
+    c.header("Content-Security-Policy", "default-src 'none'; sandbox");
+    const image = await service.getThreadImage(id(c.req.param("threadId")), c.req.query("path"));
+    return c.body(image.bytes, 200, {
+      "Content-Type": image.contentType,
+      "Content-Length": String(image.bytes.length)
+    });
+  });
+  app.get("/api/threads/:threadId/markdown", async (c) => {
+    c.header("Cache-Control", "private, no-store");
+    c.header("X-Content-Type-Options", "nosniff");
+    c.header("Cross-Origin-Resource-Policy", "same-origin");
+    return c.json(
+      await service.getThreadMarkdown(id(c.req.param("threadId")), c.req.query("path"))
+    );
+  });
+  app.get(
+    "/api/operations/:operationId",
+    (c) => c.json(service.getOperation(id(c.req.param("operationId"))))
+  );
+  app.post("/api/projects/:projectId/threads", async (c) => {
+    const op = await service.createThread(
+      id(c.req.param("projectId")),
+      await parse(c, schemas.createThreadSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post("/api/threads/:threadId/resume", async (c) => {
+    const op = await service.resumeThread(
+      id(c.req.param("threadId")),
+      await parse(c, schemas.resumeThreadSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post("/api/threads/:threadId/fork", async (c) => {
+    const op = await service.forkThread(
+      id(c.req.param("threadId")),
+      await parse(c, schemas.forkThreadSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post("/api/threads/:threadId/rename", async (c) => {
+    const op = await service.renameThread(
+      id(c.req.param("threadId")),
+      await parse(c, schemas.renameThreadSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post("/api/threads/:threadId/turns", async (c) => {
+    const op = await service.startTurn(
+      id(c.req.param("threadId")),
+      await parse(c, schemas.startTurnSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post("/api/threads/:threadId/review", async (c) => {
+    const op = await service.startReview(
+      id(c.req.param("threadId")),
+      await parse(c, schemas.startReviewSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post("/api/threads/:threadId/steer", async (c) => {
+    const op = await service.steer(
+      id(c.req.param("threadId")),
+      await parse(c, schemas.steerSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post("/api/threads/:threadId/compact", async (c) => {
+    const op = await service.compactThread(
+      id(c.req.param("threadId")),
+      await parse(c, schemas.operationSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post("/api/threads/:threadId/interrupt", async (c) => {
+    const op = await service.interrupt(
+      id(c.req.param("threadId")),
+      await parse(c, schemas.interruptSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post("/api/actions/:actionId/resolve", async (c) => {
+    const op = await service.resolveAction(
+      id(c.req.param("actionId")),
+      await parse(c, schemas.resolveActionSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.post("/api/operations/:operationId/reconcile", async (c) => {
+    const op = await service.reconcileOperation(
+      id(c.req.param("operationId")),
+      await parse(c, schemas.reconcileSchema)
+    );
+    return c.json(op, status(op));
+  });
+  app.get(
+    "/ws",
+    upgradeWebSocket(
+      (c) => socketHandlers(service, config, c.get("identity"), c.req.query("overview") === "1")
+    )
+  );
+  app.all("/api/*", () => {
+    throw new AppError("NOT_FOUND", "API route not found", 404);
+  });
+  app.all("/api", () => {
+    throw new AppError("NOT_FOUND", "API route not found", 404);
+  });
+  app.all("/ws/*", () => {
+    throw new AppError("NOT_FOUND", "WebSocket route not found", 404);
+  });
+  app.use("*", async (c, next) => {
+    if (!c.req.path.startsWith("/assets/")) c.header("Cache-Control", "no-store");
+    c.header("X-Content-Type-Options", "nosniff");
+    c.header("Referrer-Policy", "same-origin");
+    c.header(
+      "Content-Security-Policy",
+      // Remote Markdown images load directly in the browser, including HTTPS redirects.
+      // Keep scripts, connections and all other resource policies restricted as before.
+      "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'"
+    );
+    await next();
+  });
+  app.get("*", serveStatic({ root: staticDir }));
+  app.get("*", async (c, next) => {
+    if (!c.req.header("accept")?.includes("text/html") || /\.[^/]+$/.test(c.req.path))
+      return c.json({ error: { code: "NOT_FOUND", message: "Resource not found" } }, 404);
+    return serveStatic({ path: `${staticDir}/index.html` })(c, next);
+  });
+  app.notFound((c) => c.json({ error: { code: "NOT_FOUND", message: "Resource not found" } }, 404));
+  return app;
+}
+export {
+  createApp
+};
+//# sourceMappingURL=http.js.map