@descryy/runtime-database-observation 0.4.8 → 0.5.1

package/dist/index.d.ts

@@ -11,4 +11,12 @@ export type { PostgresQueryCollectorOptions } from "./postgres-query-collector.t
 export { createPostgresQueryCollector } from "./postgres-query-collector.ts";
 export type { PostgresStatementLogSource } from "./postgres-log-source.ts";
 export { createPostgresLogSource } from "./postgres-log-source.ts";
+export type { ParsedRowChange, RowChangeOp } from "./postgres-decoding-parser.ts";
+export { parseTestDecodingLine } from "./postgres-decoding-parser.ts";
+export type { PgRowClient, PostgresRowChangeCollectorOptions } from "./postgres-row-collector.ts";
+export { createPostgresRowChangeCollector } from "./postgres-row-collector.ts";
+export type { SqliteRowSource, SqliteRowOp, SqliteRowDiff, TableSnapshot, SqliteRowChangeCollectorOptions } from "./sqlite-row-snapshot.ts";
+export { createSqliteRowChangeCollector, diffTableSnapshot } from "./sqlite-row-snapshot.ts";
+export type { MysqlRowChangeCollectorOptions } from "./mysql-row-collector.ts";
+export { createMysqlRowChangeCollector, MYSQL_ROW_CAPTURE_REFUSAL_REASON } from "./mysql-row-collector.ts";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,YAAY,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEhG,YAAY,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAElE,YAAY,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,YAAY,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAE7E,YAAY,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,YAAY,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEhG,YAAY,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAElE,YAAY,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,YAAY,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAE7E,YAAY,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,YAAY,EAAE,WAAW,EAAE,iCAAiC,EAAE,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAE/E,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,+BAA+B,EAAE,MAAM,0BAA0B,CAAC;AAC5I,OAAO,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7F,YAAY,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/index.js

@@ -6,4 +6,8 @@ export { resolveObservedDatabaseQuery } from "./graph-mapping.js";
 export { parsePostgresLogLine } from "./postgres-log-parser.js";
 export { createPostgresQueryCollector } from "./postgres-query-collector.js";
 export { createPostgresLogSource } from "./postgres-log-source.js";
+export { parseTestDecodingLine } from "./postgres-decoding-parser.js";
+export { createPostgresRowChangeCollector } from "./postgres-row-collector.js";
+export { createSqliteRowChangeCollector, diffTableSnapshot } from "./sqlite-row-snapshot.js";
+export { createMysqlRowChangeCollector, MYSQL_ROW_CAPTURE_REFUSAL_REASON } from "./mysql-row-collector.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAA2C,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAGhG,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAGlE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAG7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAA2C,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAGhG,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAGlE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAG7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAGnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAGtE,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAG/E,OAAO,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7F,OAAO,EAAE,6BAA6B,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/mysql-row-collector.d.ts

@@ -0,0 +1,28 @@
+/**
+ * MySQL/MariaDB row-change capture: a named, remediable refusal, not a
+ * binlog implementation. See DEC-NEXT-mysql-row-and-schema-capture-refused-no-driver
+ * (descry-core decisions inbox) for the full reasoning — in short, this
+ * repo's `pnpm-lock.yaml` carries no MySQL driver (`mysql2` or otherwise)
+ * today, and this lane cannot install one, so writing binlog-protocol
+ * parsing code that has never run against a real driver would be a worse
+ * violation of honest degradation (rule 7) than declining to write it.
+ *
+ * Shaped as a `Collector` for the same reason `createPostgresRowChangeCollector`
+ * is: a caller wiring up database observation for a run can try to start
+ * this collector unconditionally, exactly like the others, and get back a
+ * refusal it can disclose rather than a branch it has to special-case.
+ *
+ * The moment `mysql2` (with `binlog_format=ROW` and full row images) becomes
+ * an installed dependency, this refusal should be replaced with a real
+ * binlog client, following `postgres-row-collector.ts`'s dynamic-import
+ * pattern -- optional dependency, loaded lazily, refuse-by-name if absent.
+ */
+import type { Collector } from "@descryy/runtime-contracts";
+export interface MysqlRowChangeCollectorOptions {
+    readonly connectionString: string;
+    readonly service?: string;
+    readonly processId?: string;
+}
+export declare const MYSQL_ROW_CAPTURE_REFUSAL_REASON: string;
+export declare function createMysqlRowChangeCollector(options: MysqlRowChangeCollectorOptions): Collector;
+//# sourceMappingURL=mysql-row-collector.d.ts.map

package/dist/mysql-row-collector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql-row-collector.d.ts","sourceRoot":"","sources":["../src/mysql-row-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAiE,MAAM,4BAA4B,CAAC;AAE3H,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,eAAO,MAAM,gCAAgC,QAEkC,CAAC;AAEhF,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,8BAA8B,GAAG,SAAS,CAmChG"}

package/dist/mysql-row-collector.js

@@ -0,0 +1,53 @@
+/**
+ * MySQL/MariaDB row-change capture: a named, remediable refusal, not a
+ * binlog implementation. See DEC-NEXT-mysql-row-and-schema-capture-refused-no-driver
+ * (descry-core decisions inbox) for the full reasoning — in short, this
+ * repo's `pnpm-lock.yaml` carries no MySQL driver (`mysql2` or otherwise)
+ * today, and this lane cannot install one, so writing binlog-protocol
+ * parsing code that has never run against a real driver would be a worse
+ * violation of honest degradation (rule 7) than declining to write it.
+ *
+ * Shaped as a `Collector` for the same reason `createPostgresRowChangeCollector`
+ * is: a caller wiring up database observation for a run can try to start
+ * this collector unconditionally, exactly like the others, and get back a
+ * refusal it can disclose rather than a branch it has to special-case.
+ *
+ * The moment `mysql2` (with `binlog_format=ROW` and full row images) becomes
+ * an installed dependency, this refusal should be replaced with a real
+ * binlog client, following `postgres-row-collector.ts`'s dynamic-import
+ * pattern -- optional dependency, loaded lazily, refuse-by-name if absent.
+ */
+export const MYSQL_ROW_CAPTURE_REFUSAL_REASON = "MySQL row-change capture needs the optional dependency \"mysql2\" (with binlog_format=ROW and full row images), " +
+    "which is not installed in this build; the query-text channel is unaffected.";
+export function createMysqlRowChangeCollector(options) {
+    const processId = options.processId ?? "mysql-row-changes";
+    function capabilities() {
+        const unrelated = {
+            availability: "unavailable",
+            reason: "MysqlRowChangeCollector observes row-level DATABASE_QUERY (row-change) events only.",
+        };
+        return {
+            domObservation: unrelated,
+            consoleObservation: unrelated,
+            networkObservation: unrelated,
+            backendLogAccess: unrelated,
+            distributedTrace: unrelated,
+            sourceMapping: unrelated,
+            stackCapture: unrelated,
+            processLifecycle: unrelated,
+            databaseObservation: { availability: "unavailable", reason: MYSQL_ROW_CAPTURE_REFUSAL_REASON },
+            externalServiceObservation: unrelated,
+        };
+    }
+    return {
+        collectorId: `mysql-row-collector:${processId}`,
+        start(_context) {
+            return Promise.resolve({ available: false, reason: MYSQL_ROW_CAPTURE_REFUSAL_REASON });
+        },
+        stop() {
+            return Promise.resolve();
+        },
+        capabilities,
+    };
+}
+//# sourceMappingURL=mysql-row-collector.js.map

package/dist/mysql-row-collector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql-row-collector.js","sourceRoot":"","sources":["../src/mysql-row-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAUH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,kHAAkH;IAClH,6EAA6E,CAAC;AAEhF,MAAM,UAAU,6BAA6B,CAAC,OAAuC;IACnF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC;IAE3D,SAAS,YAAY;QACnB,MAAM,SAAS,GAAG;YAChB,YAAY,EAAE,aAAsB;YACpC,MAAM,EAAE,qFAAqF;SAC9F,CAAC;QACF,OAAO;YACL,cAAc,EAAE,SAAS;YACzB,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,SAAS;YAC7B,gBAAgB,EAAE,SAAS;YAC3B,gBAAgB,EAAE,SAAS;YAC3B,aAAa,EAAE,SAAS;YACxB,YAAY,EAAE,SAAS;YACvB,gBAAgB,EAAE,SAAS;YAC3B,mBAAmB,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,gCAAgC,EAAE;YAC9F,0BAA0B,EAAE,SAAS;SACtC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,uBAAuB,SAAS,EAAE;QAE/C,KAAK,CAAC,QAA0B;YAC9B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,IAAI;YACF,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,YAAY;KACb,CAAC;AACJ,CAAC"}

package/dist/postgres-decoding-parser.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Bounded reader over `test_decoding`'s documented output format (the
+ * built-in logical-decoding output plugin every Postgres ships — no
+ * extension install needed). `postgres-row-collector.ts` reads each row's
+ * `data` column back from `pg_logical_slot_get_changes` and hands it here,
+ * one line at a time; `xid` arrives as its own column on that same result
+ * row, so this parser does not need to track BEGIN/COMMIT for transaction
+ * identity — those lines simply refuse (`null`), same as this package's
+ * other parsers (`postgres-log-parser.ts`, `table-extraction.ts`) refuse
+ * rather than guess at a shape they don't recognise.
+ *
+ * Recognised shapes (per https://www.postgresql.org/docs/current/test-decoding.html):
+ *
+ * - `table <schema>.<table>: INSERT: <col>[<type>]:<value> ...`
+ * - `table <schema>.<table>: UPDATE: old-key: <col>[<type>]:<value> ... new-tuple: <col>[<type>]:<value> ...`
+ *   — present only when the table's `REPLICA IDENTITY` makes an old key
+ *   decodable at all (FULL, or DEFAULT when the key columns changed).
+ * - `table <schema>.<table>: UPDATE: <col>[<type>]:<value> ...` — no
+ *   `old-key:` segment; the new row only, no before-state in this line.
+ * - `table <schema>.<table>: DELETE: <col>[<type>]:<value> ...` — full or
+ *   key-only, depending on identity.
+ * - `table <schema>.<table>: DELETE: (no-tuple-data)` — `REPLICA IDENTITY
+ *   NOTHING`; no columns at all.
+ *
+ * Column values are captured as raw strings, never coerced to a JS number/
+ * boolean/null — `name[text]:'it''s here'` unescapes SQL-style doubled
+ * quotes, but a bareword value (`1`, `null`, `t`, `unchanged-toast-datum`)
+ * is reported exactly as `test_decoding` printed it. Coercing to a native
+ * type would need the column's Postgres type, which the `[type]` tag names
+ * but this parser deliberately does not interpret — same "don't guess past
+ * what's declared" stance as `live-schema.ts`'s column reader.
+ *
+ * What this parser does NOT decide: whether a given row's before-value is
+ * "full", "key-only" or "none" for a *table* — that is a property of
+ * `REPLICA IDENTITY`, looked up once from `pg_class.relreplident` by
+ * `postgres-row-collector.ts` and attached to every emitted event, not
+ * inferred from which of the three UPDATE/DELETE shapes above matched.
+ */
+export type RowChangeOp = "INSERT" | "UPDATE" | "DELETE";
+export interface ParsedRowChange {
+    readonly schema: string;
+    readonly table: string;
+    readonly op: RowChangeOp;
+    readonly before: Record<string, string> | null;
+    readonly after: Record<string, string> | null;
+}
+/**
+ * `null` for anything not one of the recognised `test_decoding` shapes —
+ * including `BEGIN <xid>` / `COMMIT <xid>` lines, which this parser is not
+ * asked to interpret (xid comes from the calling row's own column).
+ */
+export declare function parseTestDecodingLine(data: string): ParsedRowChange | null;
+//# sourceMappingURL=postgres-decoding-parser.d.ts.map

package/dist/postgres-decoding-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-decoding-parser.d.ts","sourceRoot":"","sources":["../src/postgres-decoding-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAC/C;AA0BD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CA6B1E"}

package/dist/postgres-decoding-parser.js

@@ -0,0 +1,92 @@
+/**
+ * Bounded reader over `test_decoding`'s documented output format (the
+ * built-in logical-decoding output plugin every Postgres ships — no
+ * extension install needed). `postgres-row-collector.ts` reads each row's
+ * `data` column back from `pg_logical_slot_get_changes` and hands it here,
+ * one line at a time; `xid` arrives as its own column on that same result
+ * row, so this parser does not need to track BEGIN/COMMIT for transaction
+ * identity — those lines simply refuse (`null`), same as this package's
+ * other parsers (`postgres-log-parser.ts`, `table-extraction.ts`) refuse
+ * rather than guess at a shape they don't recognise.
+ *
+ * Recognised shapes (per https://www.postgresql.org/docs/current/test-decoding.html):
+ *
+ * - `table <schema>.<table>: INSERT: <col>[<type>]:<value> ...`
+ * - `table <schema>.<table>: UPDATE: old-key: <col>[<type>]:<value> ... new-tuple: <col>[<type>]:<value> ...`
+ *   — present only when the table's `REPLICA IDENTITY` makes an old key
+ *   decodable at all (FULL, or DEFAULT when the key columns changed).
+ * - `table <schema>.<table>: UPDATE: <col>[<type>]:<value> ...` — no
+ *   `old-key:` segment; the new row only, no before-state in this line.
+ * - `table <schema>.<table>: DELETE: <col>[<type>]:<value> ...` — full or
+ *   key-only, depending on identity.
+ * - `table <schema>.<table>: DELETE: (no-tuple-data)` — `REPLICA IDENTITY
+ *   NOTHING`; no columns at all.
+ *
+ * Column values are captured as raw strings, never coerced to a JS number/
+ * boolean/null — `name[text]:'it''s here'` unescapes SQL-style doubled
+ * quotes, but a bareword value (`1`, `null`, `t`, `unchanged-toast-datum`)
+ * is reported exactly as `test_decoding` printed it. Coercing to a native
+ * type would need the column's Postgres type, which the `[type]` tag names
+ * but this parser deliberately does not interpret — same "don't guess past
+ * what's declared" stance as `live-schema.ts`'s column reader.
+ *
+ * What this parser does NOT decide: whether a given row's before-value is
+ * "full", "key-only" or "none" for a *table* — that is a property of
+ * `REPLICA IDENTITY`, looked up once from `pg_class.relreplident` by
+ * `postgres-row-collector.ts` and attached to every emitted event, not
+ * inferred from which of the three UPDATE/DELETE shapes above matched.
+ */
+const LINE_PATTERN = /^table\s+([^.\s]+)\.([^:\s]+):\s+(INSERT|UPDATE|DELETE):\s*(.*)$/;
+const OLD_KEY_NEW_TUPLE = /^old-key:\s*(.*?)\s+new-tuple:\s*(.*)$/;
+const NO_TUPLE_DATA = "(no-tuple-data)";
+/** `col[type]:'quoted value'` or `col[type]:bareword` pairs, in appearance order. */
+const COLUMN_PATTERN = /([A-Za-z_][A-Za-z0-9_]*)\[[^\]]*\]:('(?:[^']|'')*'|\S+)/g;
+function unquote(rawValue) {
+    if (rawValue.length >= 2 && rawValue.startsWith("'") && rawValue.endsWith("'")) {
+        return rawValue.slice(1, -1).replace(/''/g, "'");
+    }
+    return rawValue;
+}
+function parseColumns(segment) {
+    const columns = {};
+    for (const match of segment.matchAll(COLUMN_PATTERN)) {
+        const name = match[1];
+        const rawValue = match[2];
+        columns[name] = unquote(rawValue);
+    }
+    return columns;
+}
+/**
+ * `null` for anything not one of the recognised `test_decoding` shapes —
+ * including `BEGIN <xid>` / `COMMIT <xid>` lines, which this parser is not
+ * asked to interpret (xid comes from the calling row's own column).
+ */
+export function parseTestDecodingLine(data) {
+    const match = LINE_PATTERN.exec(data.trim());
+    if (match === null)
+        return null;
+    const [, schema, table, opRaw, rest] = match;
+    const op = opRaw;
+    if (op === "INSERT") {
+        return { schema: schema, table: table, op, before: null, after: parseColumns(rest) };
+    }
+    if (op === "DELETE") {
+        if (rest.trim() === NO_TUPLE_DATA) {
+            return { schema: schema, table: table, op, before: null, after: null };
+        }
+        return { schema: schema, table: table, op, before: parseColumns(rest), after: null };
+    }
+    // UPDATE
+    const oldKeyMatch = OLD_KEY_NEW_TUPLE.exec(rest);
+    if (oldKeyMatch !== null) {
+        return {
+            schema: schema,
+            table: table,
+            op,
+            before: parseColumns(oldKeyMatch[1]),
+            after: parseColumns(oldKeyMatch[2]),
+        };
+    }
+    return { schema: schema, table: table, op, before: null, after: parseColumns(rest) };
+}
+//# sourceMappingURL=postgres-decoding-parser.js.map

package/dist/postgres-decoding-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-decoding-parser.js","sourceRoot":"","sources":["../src/postgres-decoding-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAYH,MAAM,YAAY,GAAG,kEAAkE,CAAC;AACxF,MAAM,iBAAiB,GAAG,wCAAwC,CAAC;AACnE,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAExC,qFAAqF;AACrF,MAAM,cAAc,GAAG,0DAA0D,CAAC;AAElF,SAAS,OAAO,CAAC,QAAgB;IAC/B,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC7C,MAAM,EAAE,GAAG,KAAoB,CAAC;IAEhC,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,MAAO,EAAE,KAAK,EAAE,KAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,IAAK,CAAC,EAAE,CAAC;IAC1F,CAAC;IAED,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,IAAI,IAAK,CAAC,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC;YACnC,OAAO,EAAE,MAAM,EAAE,MAAO,EAAE,KAAK,EAAE,KAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAO,EAAE,KAAK,EAAE,KAAM,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,IAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1F,CAAC;IAED,SAAS;IACT,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAK,CAAC,CAAC;IAClD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,MAAO;YACf,KAAK,EAAE,KAAM;YACb,EAAE;YACF,MAAM,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;YACrC,KAAK,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;SACrC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAO,EAAE,KAAK,EAAE,KAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,IAAK,CAAC,EAAE,CAAC;AAC1F,CAAC"}

package/dist/postgres-query-collector.d.ts

@@ -12,9 +12,12 @@
  * this observes query *text* — `extractTargetTable` still resolves the
  * touched table — never a captured before/after row. Postgres's statement
  * log is a text stream, not a row-change feed; reading one would need a
- * separate mechanism (logical replication or a trigger-based audit table)
- * this collector does not add. See `packages/database-observation`'s
- * package description for the same disclosure on the `node:sqlite` path.
+ * separate mechanism this collector does not add. That mechanism is now a
+ * separate collector in this package — `postgres-row-collector.ts`, via a
+ * temporary logical replication slot — opted into independently rather than
+ * folded into this one, since it needs its own connection, its own
+ * preconditions (`wal_level`, replication privilege) and its own refusal
+ * path when either is absent.
  *
  * **Live-tested against a real, disposable `postgres:16` Docker container**
  * (`test/postgres-live.test.ts`): a real `INSERT`/`SELECT` issued via

package/dist/postgres-query-collector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-query-collector.d.ts","sourceRoot":"","sources":["../src/postgres-query-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmF,MAAM,4BAA4B,CAAC;AAC7I,OAAO,EAAyB,KAAK,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAMvG,MAAM,WAAW,6BAA6B;IAC5C,+HAA+H;IAC/H,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,mHAAmH;IACnH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AA2BD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,6BAA6B,GAAG,SAAS,CA6F9F"}
+{"version":3,"file":"postgres-query-collector.d.ts","sourceRoot":"","sources":["../src/postgres-query-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmF,MAAM,4BAA4B,CAAC;AAC7I,OAAO,EAAyB,KAAK,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAMvG,MAAM,WAAW,6BAA6B;IAC5C,+HAA+H;IAC/H,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,mHAAmH;IACnH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AA2BD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,6BAA6B,GAAG,SAAS,CA6F9F"}

package/dist/postgres-query-collector.js

@@ -12,9 +12,12 @@
  * this observes query *text* — `extractTargetTable` still resolves the
  * touched table — never a captured before/after row. Postgres's statement
  * log is a text stream, not a row-change feed; reading one would need a
- * separate mechanism (logical replication or a trigger-based audit table)
- * this collector does not add. See `packages/database-observation`'s
- * package description for the same disclosure on the `node:sqlite` path.
+ * separate mechanism this collector does not add. That mechanism is now a
+ * separate collector in this package — `postgres-row-collector.ts`, via a
+ * temporary logical replication slot — opted into independently rather than
+ * folded into this one, since it needs its own connection, its own
+ * preconditions (`wal_level`, replication privilege) and its own refusal
+ * path when either is absent.
  *
  * **Live-tested against a real, disposable `postgres:16` Docker container**
  * (`test/postgres-live.test.ts`): a real `INSERT`/`SELECT` issued via

package/dist/postgres-query-collector.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-query-collector.js","sourceRoot":"","sources":["../src/postgres-query-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,EAAE,qBAAqB,EAA4B,MAAM,sCAAsC,CAAC;AAEvG,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAS3D,MAAM,UAAU,GAAqB,gBAAgB,CAAC;AAEtD,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,kGAAkG,CAAC;IAClH,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,aAAsB,EAAE,MAAM,EAAE,CAAC;IAChE,OAAO;QACL,cAAc,EAAE,MAAM;QACtB,kBAAkB,EAAE,MAAM;QAC1B,kBAAkB,EAAE,MAAM;QAC1B,gBAAgB,EAAE,MAAM;QACxB,gBAAgB,EAAE;YAChB,YAAY,EAAE,UAAU;YACxB,MAAM,EAAE,gMAAgM;SACzM;QACD,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,MAAM;QACxB,mBAAmB,EAAE;YACnB,YAAY,EAAE,WAAW;YACzB,MAAM,EAAE,kIAAkI;SAC3I;QACD,0BAA0B,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,qEAAqE,EAAE;KAC3I,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAsC;IACjF,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAC3C,IAAI,eAA0C,CAAC;IAC/C,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAE7C,SAAS,iBAAiB,CAAC,KAAuD,EAAE,OAAyB;QAC3G,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI;YAC9D,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;YACjC,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE;gBACP,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;aACrC;YACD,OAAO;YACP,SAAS;YACT,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,mBAAmB;YACpC,gBAAgB,EAAE,iBAAiB;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,OAAyB;QAC9C,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,KAAK,IAAI;gBAAE,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE,4BAA4B,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;QAEnE,KAAK,CAAC,OAAyB;YAC7B,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC1D,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1F,kBAAkB,GAAG,MAAM,CAAC;gBAC5B,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC;wBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACnC,MAAM,EAAE,iBAAiB;wBACzB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI;wBAC9D,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;wBACjC,SAAS,EAAE,iBAAiB;wBAC5B,OAAO,EAAE;4BACP,GAAG,EAAE,yCAAyC,OAAO,CAAC,MAAM,CAAC,SAAS,uCAAuC,MAAM,EAAE;4BACrH,WAAW,EAAE,4BAA4B,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;4BACnE,KAAK,EAAE,MAAM;yBACd;wBACD,OAAO,EAAE,IAAI;wBACb,SAAS,EAAE,IAAI;wBACf,aAAa,EAAE,IAAI;wBACnB,WAAW,EAAE,IAAI;wBACjB,cAAc,EAAE,IAAI;wBACpB,UAAU,EAAE,IAAI;wBAChB,UAAU,EAAE,CAAC;wBACb,eAAe,EAAE,mBAAmB;wBACpC,gBAAgB,EAAE,iBAAiB;qBACpC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,SAAkB,EAAE,CAAC;oBAC5B,OAAO,CAAC,KAAK,CACX,6BAA6B,OAAO,CAAC,MAAM,CAAC,SAAS,yBAAyB,MAAM,2CAA2C,MAAM,CAAC,SAAS,CAAC,EAAE,CACnJ,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,IAAI;YACR,MAAM,eAAe,CAAC;QACxB,CAAC;QAED,YAAY;YACV,IAAI,kBAAkB,KAAK,IAAI;gBAAE,OAAO,YAAY,CAAC;YACrD,OAAO;gBACL,GAAG,YAAY;gBACf,gBAAgB,EAAE;oBAChB,YAAY,EAAE,aAAa;oBAC3B,MAAM,EAAE,6CAA6C,kBAAkB,gDAAgD;iBACxH;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"postgres-query-collector.js","sourceRoot":"","sources":["../src/postgres-query-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAE,qBAAqB,EAA4B,MAAM,sCAAsC,CAAC;AAEvG,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAS3D,MAAM,UAAU,GAAqB,gBAAgB,CAAC;AAEtD,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,kGAAkG,CAAC;IAClH,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,aAAsB,EAAE,MAAM,EAAE,CAAC;IAChE,OAAO;QACL,cAAc,EAAE,MAAM;QACtB,kBAAkB,EAAE,MAAM;QAC1B,kBAAkB,EAAE,MAAM;QAC1B,gBAAgB,EAAE,MAAM;QACxB,gBAAgB,EAAE;YAChB,YAAY,EAAE,UAAU;YACxB,MAAM,EAAE,gMAAgM;SACzM;QACD,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,MAAM;QACxB,mBAAmB,EAAE;YACnB,YAAY,EAAE,WAAW;YACzB,MAAM,EAAE,kIAAkI;SAC3I;QACD,0BAA0B,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,qEAAqE,EAAE;KAC3I,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAsC;IACjF,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAC3C,IAAI,eAA0C,CAAC;IAC/C,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAE7C,SAAS,iBAAiB,CAAC,KAAuD,EAAE,OAAyB;QAC3G,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI;YAC9D,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;YACjC,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE;gBACP,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;aACrC;YACD,OAAO;YACP,SAAS;YACT,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,mBAAmB;YACpC,gBAAgB,EAAE,iBAAiB;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,OAAyB;QAC9C,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,KAAK,IAAI;gBAAE,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE,4BAA4B,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;QAEnE,KAAK,CAAC,OAAyB;YAC7B,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC1D,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1F,kBAAkB,GAAG,MAAM,CAAC;gBAC5B,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC;wBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACnC,MAAM,EAAE,iBAAiB;wBACzB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI;wBAC9D,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;wBACjC,SAAS,EAAE,iBAAiB;wBAC5B,OAAO,EAAE;4BACP,GAAG,EAAE,yCAAyC,OAAO,CAAC,MAAM,CAAC,SAAS,uCAAuC,MAAM,EAAE;4BACrH,WAAW,EAAE,4BAA4B,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;4BACnE,KAAK,EAAE,MAAM;yBACd;wBACD,OAAO,EAAE,IAAI;wBACb,SAAS,EAAE,IAAI;wBACf,aAAa,EAAE,IAAI;wBACnB,WAAW,EAAE,IAAI;wBACjB,cAAc,EAAE,IAAI;wBACpB,UAAU,EAAE,IAAI;wBAChB,UAAU,EAAE,CAAC;wBACb,eAAe,EAAE,mBAAmB;wBACpC,gBAAgB,EAAE,iBAAiB;qBACpC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,SAAkB,EAAE,CAAC;oBAC5B,OAAO,CAAC,KAAK,CACX,6BAA6B,OAAO,CAAC,MAAM,CAAC,SAAS,yBAAyB,MAAM,2CAA2C,MAAM,CAAC,SAAS,CAAC,EAAE,CACnJ,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,IAAI;YACR,MAAM,eAAe,CAAC;QACxB,CAAC;QAED,YAAY;YACV,IAAI,kBAAkB,KAAK,IAAI;gBAAE,OAAO,YAAY,CAAC;YACrD,OAAO;gBACL,GAAG,YAAY;gBACf,gBAAgB,EAAE;oBAChB,YAAY,EAAE,aAAa;oBAC3B,MAAM,EAAE,6CAA6C,kBAAkB,gDAAgD;iBACxH;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/postgres-row-collector.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Closes the gap `postgres-query-collector.ts` discloses: "queries only ...
+ * no before/after row state." Postgres's own logical decoding is the
+ * mechanism — no extension install, no schema change, no trigger/audit
+ * table the target application doesn't already have.
+ *
+ * Lifecycle, deliberately shaped around `Collector.start()`/`stop()` rather
+ * than a continuous stream (unlike `PostgresQueryCollector`, which tails a
+ * log line-by-line as it's written):
+ *
+ * - `start()`: opens ONE `pg` connection, checks two preconditions
+ *   (`wal_level = 'logical'`, and the role has `REPLICATION` or superuser),
+ *   refuses by name (never throws) if either fails, then creates a
+ *   **temporary** logical replication slot (`pg_create_logical_replication_slot`
+ *   with `test_decoding` and `temporary = true`). Temporary slots drop on
+ *   disconnect — a crash between create and read cannot leave WAL retained
+ *   on the server, which a permanent slot could. The `CollectorContext`
+ *   passed in is retained (closed over) for use at `stop()`, since
+ *   `Collector.stop()` itself takes none.
+ * - `stop()`: reads `pg_logical_slot_get_changes` once on that same
+ *   connection, parses each row via `postgres-decoding-parser.ts`, emits one
+ *   `DATABASE_QUERY` evidence item per recognised row change, then closes
+ *   the connection (which also drops the temporary slot).
+ *
+ * Before-value completeness is a table-level fact (`REPLICA IDENTITY`), read
+ * once via `pg_class.relreplident` at slot-creation time and attached to
+ * every emitted row as `beforeCompleteness` — disclosed per DEC-NEXT
+ * row-change-evidence-reuses-database-query-type, never inferred from which
+ * of `postgres-decoding-parser.ts`'s three UPDATE/DELETE shapes matched.
+ *
+ * `pg` is an *optional* dependency here, loaded via dynamic `import()`
+ * exactly like `adapter-sql`'s `live-schema.ts` (see that file's own header
+ * for why: keeps every consumer that never wants row capture from needing a
+ * Postgres client library, and keeps `tsc` from requiring `pg`'s types to
+ * check this file). Not installed → the import throws → this collector
+ * refuses by name, same as a failed precondition check.
+ */
+import type { Collector } from "@descryy/runtime-contracts";
+/** The narrow slice of `pg`'s `Client` this module calls — same shape `live-schema.ts` uses, small enough to be satisfied by a test double with no real database involved. */
+export interface PgRowClient {
+    connect(): Promise<void>;
+    query(text: string, params?: readonly unknown[]): Promise<{
+        rows: readonly Record<string, unknown>[];
+    }>;
+    end(): Promise<void>;
+}
+export interface PostgresRowChangeCollectorOptions {
+    readonly connectionString: string;
+    /** Which owned system this collector's evidence should be attributed to (plan §16.7). */
+    readonly service?: string;
+    readonly processId?: string;
+    /** Test/advanced seam — defaults to a real `pg.Client` loaded dynamically. */
+    readonly clientFactory?: (connectionString: string) => Promise<PgRowClient> | PgRowClient;
+}
+type PgClientConstructor = new (config: unknown) => PgRowClient;
+/**
+ * The `Client` constructor from a dynamically imported `pg`. `pg` is CommonJS,
+ * so under `import()` its exports sit on `default` and Node's named-export
+ * detection does not surface `Client` at the top level; the first release read
+ * only the top level and every real connection failed with "pgModule.Client is
+ * not a constructor". Both shapes are read, and a module exposing neither is a
+ * loud error rather than a silent no-op.
+ */
+export declare function pgClientConstructor(loaded: unknown): PgClientConstructor;
+export declare function createPostgresRowChangeCollector(options: PostgresRowChangeCollectorOptions): Collector;
+export {};
+//# sourceMappingURL=postgres-row-collector.d.ts.map

package/dist/postgres-row-collector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-row-collector.d.ts","sourceRoot":"","sources":["../src/postgres-row-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmF,MAAM,4BAA4B,CAAC;AAK7I,8KAA8K;AAC9K,MAAM,WAAW,WAAW;IAC1B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;KAAE,CAAC,CAAC;IACxG,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,yFAAyF;IACzF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC;CAC3F;AAMD,KAAK,mBAAmB,GAAG,KAAK,MAAM,EAAE,OAAO,KAAK,WAAW,CAAC;AAEhE;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,mBAAmB,CAOxE;AAsBD,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,iCAAiC,GAAG,SAAS,CAsMtG"}

package/dist/postgres-row-collector.js

@@ -0,0 +1,273 @@
+/**
+ * Closes the gap `postgres-query-collector.ts` discloses: "queries only ...
+ * no before/after row state." Postgres's own logical decoding is the
+ * mechanism — no extension install, no schema change, no trigger/audit
+ * table the target application doesn't already have.
+ *
+ * Lifecycle, deliberately shaped around `Collector.start()`/`stop()` rather
+ * than a continuous stream (unlike `PostgresQueryCollector`, which tails a
+ * log line-by-line as it's written):
+ *
+ * - `start()`: opens ONE `pg` connection, checks two preconditions
+ *   (`wal_level = 'logical'`, and the role has `REPLICATION` or superuser),
+ *   refuses by name (never throws) if either fails, then creates a
+ *   **temporary** logical replication slot (`pg_create_logical_replication_slot`
+ *   with `test_decoding` and `temporary = true`). Temporary slots drop on
+ *   disconnect — a crash between create and read cannot leave WAL retained
+ *   on the server, which a permanent slot could. The `CollectorContext`
+ *   passed in is retained (closed over) for use at `stop()`, since
+ *   `Collector.stop()` itself takes none.
+ * - `stop()`: reads `pg_logical_slot_get_changes` once on that same
+ *   connection, parses each row via `postgres-decoding-parser.ts`, emits one
+ *   `DATABASE_QUERY` evidence item per recognised row change, then closes
+ *   the connection (which also drops the temporary slot).
+ *
+ * Before-value completeness is a table-level fact (`REPLICA IDENTITY`), read
+ * once via `pg_class.relreplident` at slot-creation time and attached to
+ * every emitted row as `beforeCompleteness` — disclosed per DEC-NEXT
+ * row-change-evidence-reuses-database-query-type, never inferred from which
+ * of `postgres-decoding-parser.ts`'s three UPDATE/DELETE shapes matched.
+ *
+ * `pg` is an *optional* dependency here, loaded via dynamic `import()`
+ * exactly like `adapter-sql`'s `live-schema.ts` (see that file's own header
+ * for why: keeps every consumer that never wants row capture from needing a
+ * Postgres client library, and keeps `tsc` from requiring `pg`'s types to
+ * check this file). Not installed → the import throws → this collector
+ * refuses by name, same as a failed precondition check.
+ */
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { parseTestDecodingLine } from "./postgres-decoding-parser.js";
+import { COLLECTOR_VERSION } from "./collector-version.js";
+const EVENT_TYPE = "DATABASE_QUERY";
+/**
+ * The `Client` constructor from a dynamically imported `pg`. `pg` is CommonJS,
+ * so under `import()` its exports sit on `default` and Node's named-export
+ * detection does not surface `Client` at the top level; the first release read
+ * only the top level and every real connection failed with "pgModule.Client is
+ * not a constructor". Both shapes are read, and a module exposing neither is a
+ * loud error rather than a silent no-op.
+ */
+export function pgClientConstructor(loaded) {
+    const module = loaded;
+    const candidate = module?.Client ?? module?.default?.Client;
+    if (typeof candidate !== "function") {
+        throw new Error('"pg" was loaded but exposes no Client constructor, at its top level or on its default export');
+    }
+    return candidate;
+}
+async function defaultClientFactory(connectionString) {
+    // Read from a variable, not a string literal -- see the module header:
+    // keeps `tsc` from requiring `pg`'s type declarations to check this file,
+    // an ordinary dynamic import at runtime either way.
+    const moduleName = "pg";
+    const Client = pgClientConstructor(await import(__rewriteRelativeImportExtension(moduleName)));
+    return new Client({ connectionString });
+}
+function makeSlotName(processId) {
+    const safe = processId.replace(/[^a-zA-Z0-9_]/g, "_").slice(0, 40);
+    return `descry_rowcap_${safe}_${Date.now()}_${Math.floor(Math.random() * 1_000_000)}`;
+}
+function replidentToCompleteness(code) {
+    if (code === "f")
+        return "full";
+    if (code === "n" || code === "i")
+        return "none";
+    return "key-only"; // "d" (default, PK-only) and anything unrecognised -- assume the narrower claim, never the wider one
+}
+export function createPostgresRowChangeCollector(options) {
+    const processId = options.processId ?? "postgres-row-changes";
+    const clientFactory = options.clientFactory ?? defaultClientFactory;
+    let client = null;
+    let slot = null;
+    let savedContext = null;
+    let refusalReason = null;
+    let identityByTable = new Map();
+    function computeCapabilities() {
+        const unrelated = {
+            availability: "unavailable",
+            reason: "PostgresRowChangeCollector observes row-level DATABASE_QUERY (row-change) events only.",
+        };
+        const databaseObservation = refusalReason !== null
+            ? { availability: "unavailable", reason: refusalReason }
+            : {
+                availability: "available",
+                reason: "row-level INSERT/UPDATE/DELETE via a temporary logical replication slot (test_decoding); " +
+                    "before-values are full only for tables with REPLICA IDENTITY FULL -- key-only or absent " +
+                    "otherwise, disclosed per row as beforeCompleteness.",
+            };
+        return {
+            domObservation: unrelated,
+            consoleObservation: unrelated,
+            networkObservation: unrelated,
+            backendLogAccess: unrelated,
+            distributedTrace: unrelated,
+            sourceMapping: unrelated,
+            stackCapture: unrelated,
+            processLifecycle: unrelated,
+            databaseObservation,
+            externalServiceObservation: unrelated,
+        };
+    }
+    function emitRowChange(context, parsed, xid) {
+        const completeness = identityByTable.get(`${parsed.schema}.${parsed.table}`) ?? "key-only";
+        context.emit({
+            timestamp: new Date().toISOString(),
+            source: "backend-process",
+            service: options.service ?? null,
+            process: processId,
+            eventType: EVENT_TYPE,
+            payload: {
+                kind: "row-change",
+                schema: parsed.schema,
+                table: parsed.table,
+                op: parsed.op,
+                before: parsed.before,
+                after: parsed.after,
+                xid: xid === undefined || xid === null ? null : String(xid),
+                beforeCompleteness: completeness,
+            },
+            traceId: null,
+            requestId: null,
+            correlationId: null,
+            graphNodeId: null,
+            sourceLocation: null,
+            stackTrace: null,
+            confidence: 1,
+            redactionStatus: "pending-redaction",
+            collectorVersion: COLLECTOR_VERSION,
+        });
+    }
+    function emitCollectorError(context, detail) {
+        try {
+            context.emit({
+                timestamp: new Date().toISOString(),
+                source: "backend-process",
+                service: options.service ?? null,
+                process: processId,
+                eventType: "COLLECTOR_ERROR",
+                payload: {
+                    raw: `postgres row-change collector for process "${processId}" failed: ${detail}`,
+                    collectorId: `postgres-row-collector:${processId}`,
+                    error: detail,
+                },
+                traceId: null,
+                requestId: null,
+                correlationId: null,
+                graphNodeId: null,
+                sourceLocation: null,
+                stackTrace: null,
+                confidence: 1,
+                redactionStatus: "pending-redaction",
+                collectorVersion: COLLECTOR_VERSION,
+            });
+        }
+        catch (emitError) {
+            console.error(`[postgres-row-collector:${processId}] failed (${detail}) AND the failure could not be emitted: ${String(emitError)}`);
+        }
+    }
+    async function closeClient() {
+        if (client === null)
+            return;
+        try {
+            await client.end();
+        }
+        catch {
+            // Best-effort close -- the temporary slot drops on disconnect regardless.
+        }
+        client = null;
+        slot = null;
+    }
+    return {
+        collectorId: `postgres-row-collector:${processId}`,
+        async start(context) {
+            savedContext = context;
+            let candidate;
+            try {
+                candidate = await clientFactory(options.connectionString);
+                await candidate.connect();
+            }
+            catch (error) {
+                const detail = error instanceof Error ? `${error.name}: ${error.message}` : String(error);
+                refusalReason = `could not connect for row-level capture (${detail}); the query-text channel is unaffected.`;
+                return { available: false, reason: refusalReason };
+            }
+            client = candidate;
+            try {
+                const walLevelResult = await client.query("SHOW wal_level");
+                const walLevel = String(walLevelResult.rows[0]?.wal_level ?? "").toLowerCase();
+                if (walLevel !== "logical") {
+                    refusalReason =
+                        `wal_level is "${walLevel || "unknown"}", not "logical" -- row-level capture needs logical replication ` +
+                            "enabled on the server (a superuser-only setting); the query-text channel is unaffected.";
+                    await closeClient();
+                    return { available: false, reason: refusalReason };
+                }
+                const roleResult = await client.query("SELECT rolreplication, rolsuper FROM pg_roles WHERE rolname = current_user");
+                const role = roleResult.rows[0];
+                if (role === undefined || (role.rolreplication !== true && role.rolsuper !== true)) {
+                    refusalReason =
+                        "the connection's role has neither REPLICATION nor superuser privilege -- row-level capture needs one " +
+                            "of them to create a logical replication slot; the query-text channel is unaffected.";
+                    await closeClient();
+                    return { available: false, reason: refusalReason };
+                }
+                const identityResult = await client.query("SELECT n.nspname AS schema, c.relname AS table, c.relreplident AS identity " +
+                    "FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace " +
+                    "WHERE c.relkind = 'r' AND n.nspname NOT IN ('pg_catalog', 'information_schema')");
+                identityByTable = new Map();
+                for (const row of identityResult.rows) {
+                    const r = row;
+                    identityByTable.set(`${String(r.schema)}.${String(r.table)}`, replidentToCompleteness(r.identity));
+                }
+                slot = makeSlotName(processId);
+                await client.query("SELECT * FROM pg_create_logical_replication_slot($1, 'test_decoding', false, true)", [slot]);
+                return { available: true };
+            }
+            catch (error) {
+                const detail = error instanceof Error ? `${error.name}: ${error.message}` : String(error);
+                refusalReason = `could not start row-level capture: ${detail}`;
+                await closeClient();
+                return { available: false, reason: refusalReason };
+            }
+        },
+        async stop() {
+            if (client === null || slot === null)
+                return;
+            const activeClient = client;
+            const activeSlot = slot;
+            const context = savedContext;
+            try {
+                const changes = await activeClient.query("SELECT xid, data FROM pg_logical_slot_get_changes($1, NULL, NULL)", [activeSlot]);
+                for (const row of changes.rows) {
+                    const data = String(row.data ?? "");
+                    const xid = row.xid;
+                    const parsed = parseTestDecodingLine(data);
+                    if (parsed === null)
+                        continue; // BEGIN/COMMIT or unrecognised -- refused, not guessed
+                    if (context !== null)
+                        emitRowChange(context, parsed, xid);
+                }
+            }
+            catch (error) {
+                const detail = error instanceof Error ? `${error.name}: ${error.message}` : String(error);
+                refusalReason = `could not read the replication slot: ${detail}`;
+                if (context !== null)
+                    emitCollectorError(context, detail);
+            }
+            finally {
+                await closeClient();
+            }
+        },
+        capabilities() {
+            return computeCapabilities();
+        },
+    };
+}
+//# sourceMappingURL=postgres-row-collector.js.map

package/dist/postgres-row-collector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-row-collector.js","sourceRoot":"","sources":["../src/postgres-row-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;;;;;;;;;AAIH,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAkB3D,MAAM,UAAU,GAAqB,gBAAgB,CAAC;AAMtD;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAe;IACjD,MAAM,MAAM,GAAG,MAAgG,CAAC;IAChH,MAAM,SAAS,GAAG,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;IAC5D,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,SAAgC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,gBAAwB;IAC1D,uEAAuE;IACvE,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,UAAU,GAAG,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,MAAM,kCAAC,UAAU,EAAC,CAAC,CAAC;IAC7D,OAAO,IAAI,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,iBAAiB,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAa;IAC5C,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IAChD,OAAO,UAAU,CAAC,CAAC,qGAAqG;AAC1H,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,OAA0C;IACzF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,sBAAsB,CAAC;IAC9D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,oBAAoB,CAAC;IAEpE,IAAI,MAAM,GAAuB,IAAI,CAAC;IACtC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,YAAY,GAA4B,IAAI,CAAC;IACjD,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,eAAe,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE5D,SAAS,mBAAmB;QAC1B,MAAM,SAAS,GAAG;YAChB,YAAY,EAAE,aAAsB;YACpC,MAAM,EAAE,wFAAwF;SACjG,CAAC;QACF,MAAM,mBAAmB,GACvB,aAAa,KAAK,IAAI;YACpB,CAAC,CAAC,EAAE,YAAY,EAAE,aAAsB,EAAE,MAAM,EAAE,aAAa,EAAE;YACjE,CAAC,CAAC;gBACE,YAAY,EAAE,WAAoB;gBAClC,MAAM,EACJ,2FAA2F;oBAC3F,0FAA0F;oBAC1F,qDAAqD;aACxD,CAAC;QACR,OAAO;YACL,cAAc,EAAE,SAAS;YACzB,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,SAAS;YAC7B,gBAAgB,EAAE,SAAS;YAC3B,gBAAgB,EAAE,SAAS;YAC3B,aAAa,EAAE,SAAS;YACxB,YAAY,EAAE,SAAS;YACvB,gBAAgB,EAAE,SAAS;YAC3B,mBAAmB;YACnB,0BAA0B,EAAE,SAAS;SACtC,CAAC;IACJ,CAAC;IAED,SAAS,aAAa,CACpB,OAAyB,EACzB,MAA6D,EAC7D,GAAY;QAEZ,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,UAAU,CAAC;QAC3F,OAAO,CAAC,IAAI,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;YAChC,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE;gBACP,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,EAAE,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBAC3D,kBAAkB,EAAE,YAAY;aACjC;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,mBAAmB;YACpC,gBAAgB,EAAE,iBAAiB;SACpC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,kBAAkB,CAAC,OAAyB,EAAE,MAAc;QACnE,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;gBAChC,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE;oBACP,GAAG,EAAE,8CAA8C,SAAS,aAAa,MAAM,EAAE;oBACjF,WAAW,EAAE,0BAA0B,SAAS,EAAE;oBAClD,KAAK,EAAE,MAAM;iBACd;gBACD,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,CAAC;gBACb,eAAe,EAAE,mBAAmB;gBACpC,gBAAgB,EAAE,iBAAiB;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,SAAkB,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,2BAA2B,SAAS,aAAa,MAAM,2CAA2C,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvI,CAAC;IACH,CAAC;IAED,KAAK,UAAU,WAAW;QACxB,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;QACd,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,WAAW,EAAE,0BAA0B,SAAS,EAAE;QAElD,KAAK,CAAC,KAAK,CAAC,OAAyB;YACnC,YAAY,GAAG,OAAO,CAAC;YACvB,IAAI,SAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAC1D,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1F,aAAa,GAAG,4CAA4C,MAAM,0CAA0C,CAAC;gBAC7G,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,SAAS,CAAC;YAEnB,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBAC5D,MAAM,QAAQ,GAAG,MAAM,CAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAyC,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBACxH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,aAAa;wBACX,iBAAiB,QAAQ,IAAI,SAAS,kEAAkE;4BACxG,yFAAyF,CAAC;oBAC5F,MAAM,WAAW,EAAE,CAAC;oBACpB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;gBACrD,CAAC;gBAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAC;gBACpH,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAiE,CAAC;gBAChG,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC;oBACnF,aAAa;wBACX,uGAAuG;4BACvG,qFAAqF,CAAC;oBACxF,MAAM,WAAW,EAAE,CAAC;oBACpB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;gBACrD,CAAC;gBAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,KAAK,CACvC,6EAA6E;oBAC3E,gEAAgE;oBAChE,iFAAiF,CACpF,CAAC;gBACF,eAAe,GAAG,IAAI,GAAG,EAAE,CAAC;gBAC5B,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,GAA6D,CAAC;oBACxE,eAAe,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACrG,CAAC;gBAED,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC/B,MAAM,MAAM,CAAC,KAAK,CAAC,oFAAoF,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1F,aAAa,GAAG,sCAAsC,MAAM,EAAE,CAAC;gBAC/D,MAAM,WAAW,EAAE,CAAC;gBACpB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;YACrD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI;YACR,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO;YAC7C,MAAM,YAAY,GAAG,MAAM,CAAC;YAC5B,MAAM,UAAU,GAAG,IAAI,CAAC;YACxB,MAAM,OAAO,GAAG,YAAY,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,mEAAmE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC5H,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;oBAC/B,MAAM,IAAI,GAAG,MAAM,CAAE,GAA0B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;oBAC5D,MAAM,GAAG,GAAI,GAAyB,CAAC,GAAG,CAAC;oBAC3C,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;oBAC3C,IAAI,MAAM,KAAK,IAAI;wBAAE,SAAS,CAAC,uDAAuD;oBACtF,IAAI,OAAO,KAAK,IAAI;wBAAE,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1F,aAAa,GAAG,wCAAwC,MAAM,EAAE,CAAC;gBACjE,IAAI,OAAO,KAAK,IAAI;oBAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5D,CAAC;oBAAS,CAAC;gBACT,MAAM,WAAW,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;QAED,YAAY;YACV,OAAO,mBAAmB,EAAE,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/sqlite-row-snapshot.d.ts

@@ -0,0 +1,57 @@
+/**
+ * SQLite row-change capture: before/after snapshot-and-diff, not a
+ * change-feed — SQLite has no logical-decoding equivalent, so this observes
+ * by re-reading, not by tailing. `sqlite-instrumentation.ts`'s preload
+ * already captures query *text*; this closes the same before/after-row gap
+ * `postgres-row-collector.ts` closes for Postgres, by a different mechanism
+ * because SQLite offers a different one.
+ *
+ * Lifecycle: `start()` opens the target database **read-only**
+ * (`new DatabaseSync(path, { readOnly: true })` — this collector never
+ * writes) and snapshots every user table (`sqlite_master`, excluding
+ * `sqlite_%` internal tables) up to `rowCap` rows each, keyed by `rowid`.
+ * `stop()` re-reads the same table set and diffs by `rowid`: present only
+ * before → DELETE, present only after → INSERT, present in both with
+ * different column values → UPDATE. See
+ * DEC-NEXT-sqlite-row-snapshot-scope-and-cap for why scope is "every table
+ * in the database" rather than a query-derived subset, and why a
+ * `WITHOUT ROWID` table (no `rowid` to key by) is skipped and disclosed by
+ * name rather than guessed at with a substitute key.
+ *
+ * `truncated: true` on an emitted row's table means that table had more
+ * than `rowCap` rows at one of the two snapshots — a change outside the
+ * sampled window could exist and go unreported. Disclosed per row, not
+ * buried in a capability string alone.
+ */
+import type { Collector } from "@descryy/runtime-contracts";
+/** The narrow slice of `node:sqlite` this module needs — swappable in tests for a fake with no real file on disk. */
+export interface SqliteRowSource {
+    listTables(): readonly string[];
+    /** Reads up to `limit + 1` rows (the `+1` lets the caller detect truncation without a second COUNT query), keyed by `rowid`. Throws for a table this source cannot key by rowid (e.g. `WITHOUT ROWID`). */
+    readRows(table: string, limit: number): readonly Record<string, unknown>[];
+    close(): void;
+}
+export interface TableSnapshot {
+    readonly rowsByRowid: Map<string, Record<string, unknown>>;
+    readonly truncated: boolean;
+}
+export type SqliteRowOp = "INSERT" | "UPDATE" | "DELETE";
+export interface SqliteRowDiff {
+    readonly table: string;
+    readonly op: SqliteRowOp;
+    readonly before: Record<string, unknown> | null;
+    readonly after: Record<string, unknown> | null;
+    readonly truncated: boolean;
+}
+/** Pure, independently testable: diffs one table's before/after snapshot by rowid. Exported for direct unit testing without a real database file. */
+export declare function diffTableSnapshot(table: string, before: TableSnapshot, after: TableSnapshot): SqliteRowDiff[];
+export interface SqliteRowChangeCollectorOptions {
+    readonly databasePath: string;
+    readonly rowCap?: number;
+    readonly service?: string;
+    readonly processId?: string;
+    /** Test/advanced seam — defaults to a real read-only `node:sqlite` handle. */
+    readonly sourceFactory?: (databasePath: string) => SqliteRowSource;
+}
+export declare function createSqliteRowChangeCollector(options: SqliteRowChangeCollectorOptions): Collector;
+//# sourceMappingURL=sqlite-row-snapshot.d.ts.map

package/dist/sqlite-row-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-row-snapshot.d.ts","sourceRoot":"","sources":["../src/sqlite-row-snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAmF,MAAM,4BAA4B,CAAC;AAM7I,qHAAqH;AACrH,MAAM,WAAW,eAAe;IAC9B,UAAU,IAAI,SAAS,MAAM,EAAE,CAAC;IAChC,2MAA2M;IAC3M,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAC3E,KAAK,IAAI,IAAI,CAAC;CACf;AAwBD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAqBD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,qJAAqJ;AACrJ,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,GAAG,aAAa,EAAE,CAgB7G;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,eAAe,CAAC;CACpE;AAID,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,+BAA+B,GAAG,SAAS,CA4HlG"}

package/dist/sqlite-row-snapshot.js

@@ -0,0 +1,210 @@
+/**
+ * SQLite row-change capture: before/after snapshot-and-diff, not a
+ * change-feed — SQLite has no logical-decoding equivalent, so this observes
+ * by re-reading, not by tailing. `sqlite-instrumentation.ts`'s preload
+ * already captures query *text*; this closes the same before/after-row gap
+ * `postgres-row-collector.ts` closes for Postgres, by a different mechanism
+ * because SQLite offers a different one.
+ *
+ * Lifecycle: `start()` opens the target database **read-only**
+ * (`new DatabaseSync(path, { readOnly: true })` — this collector never
+ * writes) and snapshots every user table (`sqlite_master`, excluding
+ * `sqlite_%` internal tables) up to `rowCap` rows each, keyed by `rowid`.
+ * `stop()` re-reads the same table set and diffs by `rowid`: present only
+ * before → DELETE, present only after → INSERT, present in both with
+ * different column values → UPDATE. See
+ * DEC-NEXT-sqlite-row-snapshot-scope-and-cap for why scope is "every table
+ * in the database" rather than a query-derived subset, and why a
+ * `WITHOUT ROWID` table (no `rowid` to key by) is skipped and disclosed by
+ * name rather than guessed at with a substitute key.
+ *
+ * `truncated: true` on an emitted row's table means that table had more
+ * than `rowCap` rows at one of the two snapshots — a change outside the
+ * sampled window could exist and go unreported. Disclosed per row, not
+ * buried in a capability string alone.
+ */
+import { DatabaseSync } from "node:sqlite";
+import { COLLECTOR_VERSION } from "./collector-version.js";
+const DEFAULT_ROW_CAP = 10_000;
+function quoteIdentifier(name) {
+    return `"${name.replace(/"/g, '""')}"`;
+}
+function defaultSourceFactory(databasePath) {
+    const db = new DatabaseSync(databasePath, { readOnly: true });
+    return {
+        listTables() {
+            const rows = db
+                .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite\\_%' ESCAPE '\\'")
+                .all();
+            return rows.map((row) => row.name);
+        },
+        readRows(table, limit) {
+            return db.prepare(`SELECT rowid AS __rowid, * FROM ${quoteIdentifier(table)} LIMIT ?`).all(limit);
+        },
+        close() {
+            db.close();
+        },
+    };
+}
+function snapshotTable(source, table, rowCap) {
+    const rows = source.readRows(table, rowCap + 1);
+    const truncated = rows.length > rowCap;
+    const bounded = truncated ? rows.slice(0, rowCap) : rows;
+    const rowsByRowid = new Map();
+    for (const row of bounded) {
+        const { __rowid, ...rest } = row;
+        rowsByRowid.set(String(__rowid), rest);
+    }
+    return { rowsByRowid, truncated };
+}
+function rowsEqual(a, b) {
+    const aKeys = Object.keys(a);
+    const bKeys = Object.keys(b);
+    if (aKeys.length !== bKeys.length)
+        return false;
+    return aKeys.every((key) => Object.is(a[key], b[key]) || String(a[key]) === String(b[key]));
+}
+/** Pure, independently testable: diffs one table's before/after snapshot by rowid. Exported for direct unit testing without a real database file. */
+export function diffTableSnapshot(table, before, after) {
+    const diffs = [];
+    const truncated = before.truncated || after.truncated;
+    const allRowids = new Set([...before.rowsByRowid.keys(), ...after.rowsByRowid.keys()]);
+    for (const rowid of allRowids) {
+        const beforeRow = before.rowsByRowid.get(rowid) ?? null;
+        const afterRow = after.rowsByRowid.get(rowid) ?? null;
+        if (beforeRow === null && afterRow !== null) {
+            diffs.push({ table, op: "INSERT", before: null, after: afterRow, truncated });
+        }
+        else if (beforeRow !== null && afterRow === null) {
+            diffs.push({ table, op: "DELETE", before: beforeRow, after: null, truncated });
+        }
+        else if (beforeRow !== null && afterRow !== null && !rowsEqual(beforeRow, afterRow)) {
+            diffs.push({ table, op: "UPDATE", before: beforeRow, after: afterRow, truncated });
+        }
+    }
+    return diffs;
+}
+const EVENT_TYPE = "DATABASE_QUERY";
+export function createSqliteRowChangeCollector(options) {
+    const processId = options.processId ?? "sqlite-row-changes";
+    const rowCap = options.rowCap ?? DEFAULT_ROW_CAP;
+    const sourceFactory = options.sourceFactory ?? defaultSourceFactory;
+    let source = null;
+    let tables = [];
+    let beforeSnapshots = new Map();
+    let skippedTables = [];
+    let refusalReason = null;
+    function capabilities() {
+        const unrelated = {
+            availability: "unavailable",
+            reason: "SqliteRowChangeCollector observes row-level DATABASE_QUERY (row-change) events only.",
+        };
+        const databaseObservation = refusalReason !== null
+            ? { availability: "unavailable", reason: refusalReason }
+            : {
+                availability: "available",
+                reason: `row-level INSERT/UPDATE/DELETE via before/after snapshot-and-diff, capped at ${rowCap} rows per table ` +
+                    "(truncated tables are disclosed per row as truncated: true)." +
+                    (skippedTables.length > 0
+                        ? ` Skipped (no rowid to key by, likely WITHOUT ROWID): ${skippedTables.join(", ")}.`
+                        : ""),
+            };
+        return {
+            domObservation: unrelated,
+            consoleObservation: unrelated,
+            networkObservation: unrelated,
+            backendLogAccess: unrelated,
+            distributedTrace: unrelated,
+            sourceMapping: unrelated,
+            stackCapture: unrelated,
+            processLifecycle: unrelated,
+            databaseObservation,
+            externalServiceObservation: unrelated,
+        };
+    }
+    function emitDiff(context, diff) {
+        context.emit({
+            timestamp: new Date().toISOString(),
+            source: "backend-process",
+            service: options.service ?? null,
+            process: processId,
+            eventType: EVENT_TYPE,
+            payload: {
+                kind: "row-change",
+                table: diff.table,
+                op: diff.op,
+                before: diff.before,
+                after: diff.after,
+                truncated: diff.truncated,
+            },
+            traceId: null,
+            requestId: null,
+            correlationId: null,
+            graphNodeId: null,
+            sourceLocation: null,
+            stackTrace: null,
+            confidence: 1,
+            redactionStatus: "pending-redaction",
+            collectorVersion: COLLECTOR_VERSION,
+        });
+    }
+    let savedContext = null;
+    return {
+        collectorId: `sqlite-row-collector:${processId}`,
+        start(context) {
+            savedContext = context;
+            try {
+                source = sourceFactory(options.databasePath);
+                tables = source.listTables();
+                beforeSnapshots = new Map();
+                skippedTables = [];
+                for (const table of tables) {
+                    try {
+                        beforeSnapshots.set(table, snapshotTable(source, table, rowCap));
+                    }
+                    catch {
+                        skippedTables.push(table);
+                    }
+                }
+                return Promise.resolve({ available: true });
+            }
+            catch (error) {
+                const detail = error instanceof Error ? `${error.name}: ${error.message}` : String(error);
+                refusalReason = `could not open "${options.databasePath}" read-only for row-level capture: ${detail}`;
+                source = null;
+                return Promise.resolve({ available: false, reason: refusalReason });
+            }
+        },
+        async stop() {
+            if (source === null)
+                return;
+            const activeSource = source;
+            const context = savedContext;
+            try {
+                for (const table of tables) {
+                    const before = beforeSnapshots.get(table);
+                    if (before === undefined)
+                        continue; // skipped at start() -- stays skipped, disclosed via capabilities
+                    let after;
+                    try {
+                        after = snapshotTable(activeSource, table, rowCap);
+                    }
+                    catch {
+                        continue;
+                    }
+                    const diffs = diffTableSnapshot(table, before, after);
+                    if (context !== null) {
+                        for (const diff of diffs)
+                            emitDiff(context, diff);
+                    }
+                }
+            }
+            finally {
+                activeSource.close();
+                source = null;
+            }
+        },
+        capabilities,
+    };
+}
+//# sourceMappingURL=sqlite-row-snapshot.js.map

package/dist/sqlite-row-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-row-snapshot.js","sourceRoot":"","sources":["../src/sqlite-row-snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,MAAM,eAAe,GAAG,MAAM,CAAC;AAU/B,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACzC,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB;IAChD,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,OAAO;QACL,UAAU;YACR,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CAAC,gGAAgG,CAAC;iBACzG,GAAG,EAAwB,CAAC;YAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,QAAQ,CAAC,KAAa,EAAE,KAAa;YACnC,OAAO,EAAE,CAAC,OAAO,CAAC,mCAAmC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAA8B,CAAC;QACjI,CAAC;QACD,KAAK;YACH,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,aAAa,CAAC,MAAuB,EAAE,KAAa,EAAE,MAAc;IAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAqD,CAAC;QACnF,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,CAA0B,EAAE,CAA0B;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAYD,qJAAqJ;AACrJ,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,MAAqB,EAAE,KAAoB;IAC1F,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;QACtD,IAAI,SAAS,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QAChF,CAAC;aAAM,IAAI,SAAS,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,SAAS,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtF,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD,MAAM,UAAU,GAAqB,gBAAgB,CAAC;AAEtD,MAAM,UAAU,8BAA8B,CAAC,OAAwC;IACrF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,oBAAoB,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;IACjD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,oBAAoB,CAAC;IAEpE,IAAI,MAAM,GAA2B,IAAI,CAAC;IAC1C,IAAI,MAAM,GAAsB,EAAE,CAAC;IACnC,IAAI,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAC;IACvD,IAAI,aAAa,GAAa,EAAE,CAAC;IACjC,IAAI,aAAa,GAAkB,IAAI,CAAC;IAExC,SAAS,YAAY;QACnB,MAAM,SAAS,GAAG;YAChB,YAAY,EAAE,aAAsB;YACpC,MAAM,EAAE,sFAAsF;SAC/F,CAAC;QACF,MAAM,mBAAmB,GACvB,aAAa,KAAK,IAAI;YACpB,CAAC,CAAC,EAAE,YAAY,EAAE,aAAsB,EAAE,MAAM,EAAE,aAAa,EAAE;YACjE,CAAC,CAAC;gBACE,YAAY,EAAE,WAAoB;gBAClC,MAAM,EACJ,gFAAgF,MAAM,kBAAkB;oBACxG,8DAA8D;oBAC9D,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;wBACvB,CAAC,CAAC,wDAAwD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;wBACrF,CAAC,CAAC,EAAE,CAAC;aACV,CAAC;QACR,OAAO;YACL,cAAc,EAAE,SAAS;YACzB,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,SAAS;YAC7B,gBAAgB,EAAE,SAAS;YAC3B,gBAAgB,EAAE,SAAS;YAC3B,aAAa,EAAE,SAAS;YACxB,YAAY,EAAE,SAAS;YACvB,gBAAgB,EAAE,SAAS;YAC3B,mBAAmB;YACnB,0BAA0B,EAAE,SAAS;SACtC,CAAC;IACJ,CAAC;IAED,SAAS,QAAQ,CAAC,OAAyB,EAAE,IAAmB;QAC9D,OAAO,CAAC,IAAI,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;YAChC,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE;gBACP,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,mBAAmB;YACpC,gBAAgB,EAAE,iBAAiB;SACpC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,GAA4B,IAAI,CAAC;IAEjD,OAAO;QACL,WAAW,EAAE,wBAAwB,SAAS,EAAE;QAEhD,KAAK,CAAC,OAAyB;YAC7B,YAAY,GAAG,OAAO,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC7C,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC7B,eAAe,GAAG,IAAI,GAAG,EAAE,CAAC;gBAC5B,aAAa,GAAG,EAAE,CAAC;gBACnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,IAAI,CAAC;wBACH,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;oBACnE,CAAC;oBAAC,MAAM,CAAC;wBACP,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1F,aAAa,GAAG,mBAAmB,OAAO,CAAC,YAAY,sCAAsC,MAAM,EAAE,CAAC;gBACtG,MAAM,GAAG,IAAI,CAAC;gBACd,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI;YACR,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO;YAC5B,MAAM,YAAY,GAAG,MAAM,CAAC;YAC5B,MAAM,OAAO,GAAG,YAAY,CAAC;YAC7B,IAAI,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC1C,IAAI,MAAM,KAAK,SAAS;wBAAE,SAAS,CAAC,kEAAkE;oBACtG,IAAI,KAAoB,CAAC;oBACzB,IAAI,CAAC;wBACH,KAAK,GAAG,aAAa,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACrD,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS;oBACX,CAAC;oBACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;oBACtD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;wBACrB,KAAK,MAAM,IAAI,IAAI,KAAK;4BAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;QAED,YAAY;KACb,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@descryy/runtime-database-observation",
-  "version": "0.4.8",
+  "version": "0.5.1",
   "type": "module",
-  "description": "Database query observation (plan §18, checklist §14): real DATABASE_QUERY capture via driver instrumentation, never parsed application logs. Driver #1 is node:sqlite.",
+  "description": "Database observation (plan §18, checklist §14): real DATABASE_QUERY capture via driver instrumentation, never parsed application logs, plus row-level before/after state where the driver honestly supports it (Postgres logical decoding, SQLite before/after snapshot; MySQL refuses by name pending an installed driver). Driver #1 is node:sqlite.",
   "license": "UNLICENSED",
   "repository": {
     "type": "git",
@@ -25,16 +25,20 @@
     "registry": "https://registry.npmjs.org",
     "access": "public"
   },
-  "scripts": {
-    "build": "tsc -b"
-  },
   "dependencies": {
     "@descryy/runtime-contracts": "0.3.3",
     "@descryy/runtime-backend-observation": "0.3.6",
-    "@descryy/runtime-graph-correlator": "0.4.8"
+    "@descryy/runtime-graph-correlator": "0.5.0"
   },
   "devDependencies": {
-    "@descryy/runtime-controller": "0.3.7",
-    "@descryy/runtime-orchestrator": "0.4.8"
+    "@descryy/ir": "0.11.0",
+    "@descryy/runtime-controller": "0.3.9",
+    "@descryy/runtime-orchestrator": "0.4.12"
+  },
+  "optionalDependencies": {
+    "pg": "^8.13.0"
+  },
+  "scripts": {
+    "build": "tsc -b"
   }
-}
+}