@danypops/papyrus 0.42.0 → 0.42.2

package/src/client.ts

@@ -1,10 +1,14 @@
 import { spawn as spawnProcess } from "node:child_process";
 import { fileURLToPath } from "node:url";
-import { connectWithPolicy, spawnDetachedDaemon } from "@danypops/vehicle-client/daemon-client";
+import { connectWithVersionCheck, spawnDetachedDaemon } from "@danypops/vehicle-client/daemon-client";
+import { readPackageVersion } from "@danypops/vehicle-client/version";
 import { DAEMON_CLIENT_TIMEOUT_MS, DAEMON_DIR_ENV, DAEMON_PROBE_TIMEOUT_MS } from "./constants.ts";
-import { daemonStateDir, readDaemonHandle, type DaemonHandle } from "./daemon-state.ts";
+import { type DaemonHandle, daemonStateDir, readDaemonHandle } from "./daemon-state.ts";
 import type { OperationName, SchemaState } from "./service.ts";
 
+/** Compared against the running daemon's /health-reported version by connectWithVersionCheck below -- a long-lived daemon holds whatever code was loaded at its own start. */
+const PAPYRUS_VERSION = readPackageVersion(new URL("../package.json", import.meta.url), "Papyrus");
+
 export type FetchAdapter = (request: Request) => Promise<Response>;
 
 export class PapyrusClient {
@@ -26,7 +30,7 @@ export class PapyrusClient {
 			signal: init.signal ?? AbortSignal.timeout(this.timeoutMs),
 		});
 		const response = await this.fetchAdapter(request);
-		const body = await response.json() as { error?: string } & T;
+		const body = (await response.json()) as { error?: string } & T;
 		if (!response.ok) throw new Error(body.error ?? `Papyrus daemon HTTP ${response.status}`);
 		return body;
 	}
@@ -64,6 +68,16 @@ function papyrusCliPath(): string {
 	return fileURLToPath(new URL("cli.ts", import.meta.url));
 }
 
+/** connectWithVersionCheck's killStaleProcess callback, factored out for a direct unit test -- a real spawned daemon can't be made to report a mismatched version without a second build. */
+export function killStalePapyrusDaemon(handle: Pick<DaemonHandle, "pid">): void {
+	if (handle.pid <= 0) return; // daemon-state.ts's inert "unknown pid" sentinel -- never a real process.
+	try {
+		process.kill(handle.pid, "SIGTERM");
+	} catch {
+		// Caller's handle-file poll is the real guarantee, not this call succeeding.
+	}
+}
+
 export interface ConnectPapyrusClientOptions {
 	/**
 	 * Environment passed to an auto-spawned daemon child. Defaults to the current
@@ -74,6 +88,8 @@ export interface ConnectPapyrusClientOptions {
 	 * silently diverge from wherever the child actually starts writing its handle.
 	 */
 	env?: Record<string, string | undefined>;
+	/** Overrides the version connectWithVersionCheck compares against. Defaults to PAPYRUS_VERSION; test-only -- lets a test force a mismatch against a real daemon without a second build. */
+	expectedVersion?: string;
 }
 
 /**
@@ -87,24 +103,34 @@ export interface ConnectPapyrusClientOptions {
  * failure (stale, not "never started") and is NOT auto-recovered here -- it still
  * throws its own actionable "restart manually" error, unchanged from before.
  */
-export async function connectPapyrusClient(dir: string = daemonStateDir(), options: ConnectPapyrusClientOptions = {}): Promise<PapyrusClient> {
-	return connectWithPolicy({
-		readHandle: () => readDaemonHandle(dir) ?? null,
-		buildClient: probedPapyrusClient,
-		autoStart: true,
-		spawn: () => {
-			spawnDetachedDaemon({
-				binPath: papyrusCliPath(),
-				args: ["serve"],
-				env: { ...(options.env ?? process.env), [DAEMON_DIR_ENV]: dir },
-				spawn: (command, args, spawnOptions) => {
-					const child = spawnProcess(command, args, spawnOptions);
-					child.unref();
-				},
-			});
+export async function connectPapyrusClient(
+	dir: string = daemonStateDir(),
+	options: ConnectPapyrusClientOptions = {},
+): Promise<PapyrusClient> {
+	return connectWithVersionCheck(
+		{
+			readHandle: () => readDaemonHandle(dir) ?? null,
+			buildClient: probedPapyrusClient,
+			autoStart: true,
+			spawn: () => {
+				spawnDetachedDaemon({
+					binPath: papyrusCliPath(),
+					args: ["serve"],
+					env: { ...(options.env ?? process.env), [DAEMON_DIR_ENV]: dir },
+					spawn: (command, args, spawnOptions) => {
+						const child = spawnProcess(command, args, spawnOptions);
+						child.unref();
+					},
+				});
+			},
+			fallbackMessage: "Papyrus daemon failed to start automatically; run `papyrus service install` or `papyrus serve` manually.",
+		},
+		{
+			expectedVersion: options.expectedVersion ?? PAPYRUS_VERSION,
+			readVersion: async (client) => (await client.health()).version,
+			killStaleProcess: killStalePapyrusDaemon,
 		},
-		fallbackMessage: "Papyrus daemon failed to start automatically; run `papyrus service install` or `papyrus serve` manually.",
-	});
+	);
 }
 
 export interface PushChannelTarget {

package/src/constants.ts

@@ -289,7 +289,7 @@ export const TASK_RECONCILIATION_INSTRUCTION = [
 
 /** $XDG_DATA_HOME/papyrus/papyrus.db */
 export function dbPath(): string {
-	const xdg = process.env["XDG_DATA_HOME"] || `${process.env["HOME"]}/.local/share`;
+	const xdg = process.env.XDG_DATA_HOME || `${process.env.HOME}/.local/share`;
 	return `${xdg}/papyrus/papyrus.db`;
 }
 
@@ -324,7 +324,18 @@ export const DEFAULT_STATUS_BY_KIND: Readonly<Record<string, string>> = {
  * triggers:    this playbook run applies to that work (playbook→task)
  */
 export const SEED_RELATIONS = [
-	"references", "implements", "follows", "depends_on",
-	"documents", "blocks", "supersedes", "relates_to",
-	"gates", "triggers", "contains", "part_of", "reply_to", "discusses",
+	"references",
+	"implements",
+	"follows",
+	"depends_on",
+	"documents",
+	"blocks",
+	"supersedes",
+	"relates_to",
+	"gates",
+	"triggers",
+	"contains",
+	"part_of",
+	"reply_to",
+	"discusses",
 ] as const;

package/src/daemon-state.ts

@@ -2,12 +2,7 @@ import { randomBytes } from "node:crypto";
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import {
-	DAEMON_DIR_ENV,
-	DAEMON_HOST,
-	DAEMON_PORT_FILE,
-	DAEMON_TOKEN_FILE,
-} from "./constants.ts";
+import { DAEMON_DIR_ENV, DAEMON_HOST, DAEMON_PORT_FILE, DAEMON_TOKEN_FILE } from "./constants.ts";
 
 export interface DaemonHandle {
 	baseUrl: string;
@@ -17,13 +12,10 @@ export interface DaemonHandle {
 	pid: number;
 }
 
-export function daemonStateDir(
-	env: Record<string, string | undefined> = process.env,
-	home: string = homedir(),
-): string {
+export function daemonStateDir(env: Record<string, string | undefined> = process.env, home: string = homedir()): string {
 	if (env[DAEMON_DIR_ENV]) return env[DAEMON_DIR_ENV];
-	if (env["XDG_RUNTIME_DIR"]) return join(env["XDG_RUNTIME_DIR"], "papyrus");
-	if (env["XDG_STATE_HOME"]) return join(env["XDG_STATE_HOME"], "papyrus");
+	if (env.XDG_RUNTIME_DIR) return join(env.XDG_RUNTIME_DIR, "papyrus");
+	if (env.XDG_STATE_HOME) return join(env.XDG_STATE_HOME, "papyrus");
 	return join(home, ".local", "state", "papyrus");
 }
 

package/src/daemon.ts

@@ -1,8 +1,8 @@
 import { PushChannel } from "@danypops/vehicle-server/push-channel";
-import { DAEMON_HOST, DB_OPTIMIZE_INTERVAL_MS, WAL_CHECKPOINT_INTERVAL_MS, dbPath } from "./constants.ts";
+import { DAEMON_HOST, DB_OPTIMIZE_INTERVAL_MS, dbPath, WAL_CHECKPOINT_INTERVAL_MS } from "./constants.ts";
 import { clearDaemonPort, daemonStateDir, loadOrCreateToken, writeDaemonPort } from "./daemon-state.ts";
+import { logEvent, vehicleLogger } from "./log.ts";
 import { createApp, createPapyrusService } from "./service.ts";
-import { logEvent } from "./log.ts";
 
 /**
  * Operations that never change what a Task-graph reader (the pi-papyrus widget's
@@ -13,8 +13,16 @@ import { logEvent } from "./log.ts";
  * silently-uncovered new mutation.
  */
 const TASK_READ_ONLY_OPERATIONS = new Set([
-	"tasks.active", "tasks.context", "tasks.event_feed", "tasks.focused",
-	"tasks.graph", "tasks.history", "tasks.list", "tasks.plan", "tasks.scope", "tasks.show",
+	"tasks.active",
+	"tasks.context",
+	"tasks.event_feed",
+	"tasks.focused",
+	"tasks.graph",
+	"tasks.history",
+	"tasks.list",
+	"tasks.plan",
+	"tasks.scope",
+	"tasks.show",
 ]);
 
 /** Start the supervised, long-running Papyrus service. */
@@ -31,6 +39,7 @@ export function serveMain(): void {
 				pushChannel.publish("tasks", { operation });
 			}
 		},
+		logger: vehicleLogger(),
 	});
 	const server = Bun.serve({
 		hostname: DAEMON_HOST,
@@ -49,10 +58,18 @@ export function serveMain(): void {
 	}
 	writeDaemonPort(stateDir, server.port);
 	const checkpointTimer = setInterval(() => {
-		try { service.checkpoint(); } catch (error) { logEvent("error", "checkpoint_failed", { message: error instanceof Error ? error.message : String(error) }); }
+		try {
+			service.checkpoint();
+		} catch (error) {
+			logEvent("error", "checkpoint_failed", { message: error instanceof Error ? error.message : String(error) });
+		}
 	}, WAL_CHECKPOINT_INTERVAL_MS);
 	const optimizeTimer = setInterval(() => {
-		try { service.optimize(); } catch (error) { logEvent("error", "optimize_failed", { message: error instanceof Error ? error.message : String(error) }); }
+		try {
+			service.optimize();
+		} catch (error) {
+			logEvent("error", "optimize_failed", { message: error instanceof Error ? error.message : String(error) });
+		}
 	}, DB_OPTIMIZE_INTERVAL_MS);
 	// Daily cadence (reusing DB_OPTIMIZE_INTERVAL_MS) is plenty against a 30-day staleness
 	// threshold (TASK_FOCUS_STALE_AFTER_MS) -- see clean-up-stale-per-session-task-focus-rows-
@@ -61,7 +78,9 @@ export function serveMain(): void {
 		try {
 			const removed = service.reapStaleFocus();
 			if (removed > 0) logEvent("info", "stale_focus_reaped", { removed });
-		} catch (error) { logEvent("error", "reap_stale_focus_failed", { message: error instanceof Error ? error.message : String(error) }); }
+		} catch (error) {
+			logEvent("error", "reap_stale_focus_failed", { message: error instanceof Error ? error.message : String(error) });
+		}
 	}, DB_OPTIMIZE_INTERVAL_MS);
 	// Same daily cadence: ARTIFACT_TRASH_RETENTION_MS is 30 days, so a daily sweep finds newly
 	// due artifacts promptly without needing its own tighter interval -- see domain/artifact-trash.ts.
@@ -69,7 +88,9 @@ export function serveMain(): void {
 		try {
 			const purged = service.purgeDueTrash();
 			if (purged > 0) logEvent("info", "artifact_trash_purged", { purged });
-		} catch (error) { logEvent("error", "purge_trash_failed", { message: error instanceof Error ? error.message : String(error) }); }
+		} catch (error) {
+			logEvent("error", "purge_trash_failed", { message: error instanceof Error ? error.message : String(error) });
+		}
 	}, DB_OPTIMIZE_INTERVAL_MS);
 	let stopping = false;
 	const shutdown = () => {
@@ -83,7 +104,8 @@ export function serveMain(): void {
 		service.close();
 		// .finally() re-throws rather than handling a rejection -- catching it first turns a bare
 		// unhandled-rejection warning into a real, queryable shutdown-failure log line.
-		void server.stop(true)
+		void server
+			.stop(true)
 			.catch((error) => logEvent("error", "server_stop_failed", { message: error instanceof Error ? error.message : String(error) }))
 			.finally(() => process.exit(0));
 	};

package/src/db.ts

@@ -1,12 +1,6 @@
-/**
- * db.ts — enforced-schema SQLite store for Papyrus.
- * Dual-runtime: bun:sqlite (Bun) / node:sqlite (Node/pi host).
- * Four kinds (doc/task/rule/skill) are FK-enforced; relations are universal (any→any).
- */
-import { createHash } from "node:crypto";
-import { createRequire } from "node:module";
 import { mkdirSync } from "node:fs";
-import { join, dirname } from "node:path";
+import { createRequire } from "node:module";
+import { dirname } from "node:path";
 import { runMigrations, type SqliteMigrationRunner } from "@danypops/vehicle-server/storage";
 import { SQLITE_BUSY_TIMEOUT_MS, SQLITE_SCHEMA_VERSION } from "./constants.ts";
 
@@ -373,10 +367,22 @@ export function migrationLedger(db: Db): ModuleMigrationRow[] {
 	// has no ledger table yet -- "nothing recorded" is the correct answer, not an error.
 	const tableExists = db.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'module_migrations'").get() != null;
 	if (!tableExists) return [];
-	const rows = db.prepare("SELECT module_id, version, name, checksum, applied_at FROM module_migrations ORDER BY module_id, version").all() as Array<{
-		module_id: string; version: number; name: string; checksum: string; applied_at: string;
+	const rows = db
+		.prepare("SELECT module_id, version, name, checksum, applied_at FROM module_migrations ORDER BY module_id, version")
+		.all() as Array<{
+		module_id: string;
+		version: number;
+		name: string;
+		checksum: string;
+		applied_at: string;
 	}>;
-	return rows.map((row) => ({ moduleId: row.module_id, version: row.version, name: row.name, checksum: row.checksum, appliedAt: row.applied_at }));
+	return rows.map((row) => ({
+		moduleId: row.module_id,
+		version: row.version,
+		name: row.name,
+		checksum: row.checksum,
+		appliedAt: row.applied_at,
+	}));
 }
 
 /**
@@ -407,10 +413,14 @@ function ensureCoreLedger(db: Db, alreadyAtCurrentSchema: boolean): void {
 	`);
 	inTransaction(db, () => {
 		for (const [index, entry] of CORE_LEDGER_VERSIONS.entries()) {
-			const existingRow = db.prepare("SELECT checksum FROM module_migrations WHERE module_id = 'core' AND version = ?").get(entry.version) as { checksum: string } | null;
+			const existingRow = db
+				.prepare("SELECT checksum FROM module_migrations WHERE module_id = 'core' AND version = ?")
+				.get(entry.version) as { checksum: string } | null;
 			if (existingRow != null) {
 				if (existingRow.checksum !== entry.checksum) {
-					throw new Error(`module migration "core" version ${entry.version} checksum mismatch: the frozen definition for this version was edited after it was applied`);
+					throw new Error(
+						`module migration "core" version ${entry.version} checksum mismatch: the frozen definition for this version was edited after it was applied`,
+					);
 				}
 				continue;
 			}
@@ -420,16 +430,18 @@ function ensureCoreLedger(db: Db, alreadyAtCurrentSchema: boolean): void {
 				db.exec(SEED_SQL);
 				db.exec(`PRAGMA user_version = ${SQLITE_SCHEMA_VERSION}`);
 			}
-			db.prepare("INSERT INTO module_migrations (module_id, version, name, checksum, applied_at) VALUES ('core', ?, ?, ?, ?)")
-				.run(entry.version, entry.name, entry.checksum, new Date().toISOString());
+			db.prepare("INSERT INTO module_migrations (module_id, version, name, checksum, applied_at) VALUES ('core', ?, ?, ?, ?)").run(
+				entry.version,
+				entry.name,
+				entry.checksum,
+				new Date().toISOString(),
+			);
 		}
 	});
 }
 
 function bootstrapEmptyDatabase(db: Db): void {
-	const existing = db
-		.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%' LIMIT 1")
-		.get();
+	const existing = db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%' LIMIT 1").get();
 	if (existing) throw new Error("database schema is unversioned; refusing to migrate existing data during boot");
 	ensureCoreLedger(db, false);
 }
@@ -524,7 +536,9 @@ const FUTURE_MIGRATIONS: ReadonlyArray<PapyrusMigration> = [
 		// older user_version to exercise this migration path must not fail with "duplicate column
 		// name" -- the same class of already-bootstrapped-fixture concern version 9's comment covers.
 		up: (db) => {
-			const existing = new Set((db.prepare("PRAGMA table_info(discussion_rounds)").all() as Array<{ name: string }>).map((row) => row.name));
+			const existing = new Set(
+				(db.prepare("PRAGMA table_info(discussion_rounds)").all() as Array<{ name: string }>).map((row) => row.name),
+			);
 			for (const column of ["options", "options_mode", "selected"]) {
 				if (!existing.has(column)) db.exec(`ALTER TABLE discussion_rounds ADD COLUMN ${column} TEXT`);
 			}
@@ -568,7 +582,9 @@ const FUTURE_MIGRATIONS: ReadonlyArray<PapyrusMigration> = [
 		// pattern as version 16's discuss-options -- a round with no per-option description (every
 		// round before this feature existed, and any that simply doesn't need one) stores NULL.
 		up: (db) => {
-			const existing = new Set((db.prepare("PRAGMA table_info(discussion_rounds)").all() as Array<{ name: string }>).map((row) => row.name));
+			const existing = new Set(
+				(db.prepare("PRAGMA table_info(discussion_rounds)").all() as Array<{ name: string }>).map((row) => row.name),
+			);
 			if (!existing.has("option_descriptions")) db.exec("ALTER TABLE discussion_rounds ADD COLUMN option_descriptions TEXT");
 		},
 	},
@@ -621,7 +637,10 @@ const FUTURE_MIGRATIONS: ReadonlyArray<PapyrusMigration> = [
 				WHEN NOT EXISTS (SELECT 1 FROM artifact_trash WHERE artifact_id = OLD.note_id AND purge_after <= strftime('%Y-%m-%dT%H:%M:%fZ','now'))
 				BEGIN SELECT RAISE(ABORT, 'note_events are append-only except during an explicit, elapsed-grace-period artifact trash purge'); END;
 			`);
-			const rows = db.prepare("SELECT id, extra FROM artifacts WHERE kind = 'doc' AND subtype = 'note'").all() as Array<{ id: string; extra: string }>;
+			const rows = db.prepare("SELECT id, extra FROM artifacts WHERE kind = 'doc' AND subtype = 'note'").all() as Array<{
+				id: string;
+				extra: string;
+			}>;
 			const insert = db.prepare(`
 				INSERT INTO note_events (note_id, occurred_at, event_type, actor, source, session_id, reason, related_id, disposition, event_schema_version)
 				VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 1)
@@ -629,20 +648,20 @@ const FUTURE_MIGRATIONS: ReadonlyArray<PapyrusMigration> = [
 			const strip = db.prepare("UPDATE artifacts SET extra = ? WHERE id = ?");
 			for (const row of rows) {
 				const extra = JSON.parse(row.extra) as Record<string, unknown>;
-				const noteHistory = extra["noteHistory"];
+				const noteHistory = extra.noteHistory;
 				if (Array.isArray(noteHistory)) {
 					for (const raw of noteHistory) {
 						const entry = raw as Record<string, unknown>;
 						insert.run(
 							row.id,
-							typeof entry["at"] === "string" ? entry["at"] : new Date().toISOString(),
-							typeof entry["action"] === "string" ? entry["action"] : "captured",
-							typeof entry["actor"] === "string" ? entry["actor"] : "system",
-							typeof entry["source"] === "string" ? entry["source"] : "unknown",
-							typeof entry["sessionId"] === "string" ? entry["sessionId"] : null,
-							typeof entry["reason"] === "string" ? entry["reason"] : null,
-							typeof entry["targetId"] === "string" ? entry["targetId"] : null,
-							typeof entry["disposition"] === "string" ? entry["disposition"] : null,
+							typeof entry.at === "string" ? entry.at : new Date().toISOString(),
+							typeof entry.action === "string" ? entry.action : "captured",
+							typeof entry.actor === "string" ? entry.actor : "system",
+							typeof entry.source === "string" ? entry.source : "unknown",
+							typeof entry.sessionId === "string" ? entry.sessionId : null,
+							typeof entry.reason === "string" ? entry.reason : null,
+							typeof entry.targetId === "string" ? entry.targetId : null,
+							typeof entry.disposition === "string" ? entry.disposition : null,
 						);
 					}
 				}
@@ -724,9 +743,10 @@ export function migrateDb(db: Db): MigrationResult {
 	// entire frozen chain, not merely fail to match any of its branches -- entering it and
 	// falling through to the final gap check would otherwise misreport a database correctly
 	// mid-way through FUTURE_MIGRATIONS as "no explicit migration path".
-	if (from < LEGACY_MIGRATION_CHAIN_TARGET_VERSION) inTransaction(db, () => {
-		if (schemaVersion(db) === 1) {
-			db.exec(`
+	if (from < LEGACY_MIGRATION_CHAIN_TARGET_VERSION)
+		inTransaction(db, () => {
+			if (schemaVersion(db) === 1) {
+				db.exec(`
 				INSERT OR IGNORE INTO statuses VALUES ('todo','task');
 				INSERT OR IGNORE INTO statuses VALUES ('in-progress','task');
 				INSERT OR IGNORE INTO statuses VALUES ('review','task');
@@ -751,10 +771,10 @@ export function migrateDb(db: Db): MigrationResult {
 				DELETE FROM statuses WHERE kind = 'task' AND name IN ('pending', 'active', 'failed');
 				PRAGMA user_version = 2;
 			`);
-			applied.push("task-lifecycle-and-focus");
-		}
-		if (schemaVersion(db) === 2) {
-			db.exec(`
+				applied.push("task-lifecycle-and-focus");
+			}
+			if (schemaVersion(db) === 2) {
+				db.exec(`
 				CREATE TABLE task_events (
 					id INTEGER PRIMARY KEY AUTOINCREMENT,
 					task_id TEXT NOT NULL REFERENCES artifacts(id),
@@ -777,10 +797,10 @@ export function migrateDb(db: Db): MigrationResult {
 				BEGIN SELECT RAISE(ABORT, 'task_events are append-only'); END;
 				PRAGMA user_version = 3;
 			`);
-			applied.push("task-history");
-		}
-		if (schemaVersion(db) === 3) {
-			db.exec(`
+				applied.push("task-history");
+			}
+			if (schemaVersion(db) === 3) {
+				db.exec(`
 				CREATE TABLE task_scopes (
 					task_id TEXT PRIMARY KEY REFERENCES artifacts(id),
 					project_root TEXT,
@@ -800,18 +820,18 @@ export function migrateDb(db: Db): MigrationResult {
 				FROM artifacts WHERE kind = 'task';
 				PRAGMA user_version = 4;
 			`);
-			applied.push("task-project-scope");
-		}
-		if (schemaVersion(db) === 4) {
-			db.exec(`
+				applied.push("task-project-scope");
+			}
+			if (schemaVersion(db) === 4) {
+				db.exec(`
 				ALTER TABLE task_focus ADD COLUMN status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'paused'));
 				ALTER TABLE task_focus ADD COLUMN pause_reason TEXT;
 				PRAGMA user_version = 5;
 			`);
-			applied.push("task-focus-continuation");
-		}
-		if (schemaVersion(db) === 5) {
-			db.exec(`
+				applied.push("task-focus-continuation");
+			}
+			if (schemaVersion(db) === 5) {
+				db.exec(`
 				INSERT OR IGNORE INTO relation_names VALUES ('reply_to','Append-only message replies to another message in the same thread');
 				INSERT OR IGNORE INTO relation_names VALUES ('discusses','Message or turn concerns a verified artifact');
 				CREATE TABLE discourse_threads (
@@ -853,10 +873,10 @@ export function migrateDb(db: Db): MigrationResult {
 				BEGIN SELECT RAISE(ABORT, 'discourse Context Mesh artifact type is immutable'); END;
 				PRAGMA user_version = 6;
 			`);
-			applied.push("discourse-context-mesh");
-		}
-		if (schemaVersion(db) === 6) {
-			db.exec(`
+				applied.push("discourse-context-mesh");
+			}
+			if (schemaVersion(db) === 6) {
+				db.exec(`
 				CREATE TABLE artifact_events (
 					id INTEGER PRIMARY KEY AUTOINCREMENT,
 					artifact_id TEXT NOT NULL REFERENCES artifacts(id),
@@ -881,10 +901,10 @@ export function migrateDb(db: Db): MigrationResult {
 				BEGIN SELECT RAISE(ABORT, 'artifact_events are append-only'); END;
 				PRAGMA user_version = 7;
 			`);
-			applied.push("artifact-event-log");
-		}
-		if (schemaVersion(db) === 7) {
-			db.exec(`
+				applied.push("artifact-event-log");
+			}
+			if (schemaVersion(db) === 7) {
+				db.exec(`
 				CREATE TABLE task_focus_v7 (
 					scope TEXT PRIMARY KEY,
 					task_id TEXT NOT NULL REFERENCES artifacts(id),
@@ -897,15 +917,15 @@ export function migrateDb(db: Db): MigrationResult {
 				ALTER TABLE task_focus_v7 RENAME TO task_focus;
 				PRAGMA user_version = 8;
 			`);
-			applied.push("task-focus-session-scope");
-		}
-		if (schemaVersion(db) === 8) {
-			// IF NOT EXISTS here, unlike earlier migration branches: a fully-bootstrapped
-			// :memory: fixture (used by unrelated tests that only roll user_version back to
-			// simulate an older *file* database) already has every table the current bootstrap
-			// DDL declares, this one included -- so this branch must be safe to run whether or
-			// not that already happened, not assume a truly-old database created it first.
-			db.exec(`
+				applied.push("task-focus-session-scope");
+			}
+			if (schemaVersion(db) === 8) {
+				// IF NOT EXISTS here, unlike earlier migration branches: a fully-bootstrapped
+				// :memory: fixture (used by unrelated tests that only roll user_version back to
+				// simulate an older *file* database) already has every table the current bootstrap
+				// DDL declares, this one included -- so this branch must be safe to run whether or
+				// not that already happened, not assume a truly-old database created it first.
+				db.exec(`
 				CREATE TABLE IF NOT EXISTS graph_projection_checkpoints (
 					producer_id    TEXT PRIMARY KEY,
 					last_sequence  INTEGER NOT NULL,
@@ -921,10 +941,10 @@ export function migrateDb(db: Db): MigrationResult {
 				CREATE INDEX IF NOT EXISTS graph_projection_identities_artifact_idx ON graph_projection_identities(artifact_id);
 				PRAGMA user_version = 9;
 			`);
-			applied.push("graph-projection-protocol");
-		}
-		if (schemaVersion(db) === 9) {
-			db.exec(`
+				applied.push("graph-projection-protocol");
+			}
+			if (schemaVersion(db) === 9) {
+				db.exec(`
 				CREATE TABLE IF NOT EXISTS artifact_scopes (
 					artifact_id   TEXT PRIMARY KEY REFERENCES artifacts(id),
 					project_root  TEXT,
@@ -934,10 +954,10 @@ export function migrateDb(db: Db): MigrationResult {
 				CREATE INDEX IF NOT EXISTS artifact_scopes_project_idx ON artifact_scopes(project_root, artifact_id);
 				PRAGMA user_version = 10;
 			`);
-			applied.push("docs-rules-skills-project-scope");
-		}
-		if (schemaVersion(db) === 10) {
-			db.exec(`
+				applied.push("docs-rules-skills-project-scope");
+			}
+			if (schemaVersion(db) === 10) {
+				db.exec(`
 				CREATE TABLE IF NOT EXISTS log_sources (
 					id            TEXT PRIMARY KEY,
 					label         TEXT NOT NULL,
@@ -961,18 +981,18 @@ export function migrateDb(db: Db): MigrationResult {
 				BEGIN SELECT RAISE(ABORT, 'log_entries are immutable once written; retention trimming is the only supported deletion path'); END;
 				PRAGMA user_version = 11;
 			`);
-			applied.push("log-domain");
-		}
-		if (schemaVersion(db) === 11) {
-			// Removes Discourse's Papyrus-embedded storage entirely: confirmed zero rows in every
-			// discourse_* table and zero Docs carrying the reserved context-thread/context-message
-			// subtypes in the real production database before this was written -- Discourse's real
-			// home is now the standalone @danypops/discourse package plus host adapters, and
-			// Papyrus's own copy never had a single real caller since it was built. IF EXISTS
-			// throughout: a database that never actually reached the v5->v6 discourse-context-mesh
-			// step in the first place (e.g. a test fixture that starts partway through the chain)
-			// must not fail here just because there was nothing to remove.
-			db.exec(`
+				applied.push("log-domain");
+			}
+			if (schemaVersion(db) === 11) {
+				// Removes Discourse's Papyrus-embedded storage entirely: confirmed zero rows in every
+				// discourse_* table and zero Docs carrying the reserved context-thread/context-message
+				// subtypes in the real production database before this was written -- Discourse's real
+				// home is now the standalone @danypops/discourse package plus host adapters, and
+				// Papyrus's own copy never had a single real caller since it was built. IF EXISTS
+				// throughout: a database that never actually reached the v5->v6 discourse-context-mesh
+				// step in the first place (e.g. a test fixture that starts partway through the chain)
+				// must not fail here just because there was nothing to remove.
+				db.exec(`
 				DROP TRIGGER IF EXISTS discourse_artifact_type_immutable;
 				DROP TRIGGER IF EXISTS discourse_posts_artifact_type;
 				DROP TRIGGER IF EXISTS discourse_threads_artifact_type;
@@ -985,14 +1005,14 @@ export function migrateDb(db: Db): MigrationResult {
 				DELETE FROM relation_names WHERE name IN ('reply_to', 'discusses');
 				PRAGMA user_version = 12;
 			`);
-			applied.push("remove-discourse");
-		}
-		if (schemaVersion(db) === 12) {
-			// See domain/session-identity.ts and verify-caller-identity-behind-papyrus-mutation-
-			// attribution-koxt: first-touch capability binding for session_id, the one place it is
-			// behavior-affecting today (Task Focus). Purely additive -- a session_id that never
-			// registers here behaves exactly as before.
-			db.exec(`
+				applied.push("remove-discourse");
+			}
+			if (schemaVersion(db) === 12) {
+				// See domain/session-identity.ts and verify-caller-identity-behind-papyrus-mutation-
+				// attribution-koxt: first-touch capability binding for session_id, the one place it is
+				// behavior-affecting today (Task Focus). Purely additive -- a session_id that never
+				// registers here behaves exactly as before.
+				db.exec(`
 				CREATE TABLE IF NOT EXISTS session_identities (
 					session_id    TEXT PRIMARY KEY,
 					secret_hash   TEXT NOT NULL,
@@ -1001,10 +1021,11 @@ export function migrateDb(db: Db): MigrationResult {
 				);
 				PRAGMA user_version = 13;
 			`);
-			applied.push("session-identity");
-		}
-		if (schemaVersion(db) !== LEGACY_MIGRATION_CHAIN_TARGET_VERSION) throw new Error(`no explicit migration path from database schema ${from}`);
-	});
+				applied.push("session-identity");
+			}
+			if (schemaVersion(db) !== LEGACY_MIGRATION_CHAIN_TARGET_VERSION)
+				throw new Error(`no explicit migration path from database schema ${from}`);
+		});
 
 	// Guarded by length: runMigrations treats an empty migrations array's "target version" as
 	// 0 (see its own sorted.at(-1) ?? 0), which would misreport a database the legacy chain