@devflow-tools/database 0.15.0 → 0.16.0

package/dist/database.js

@@ -1,9 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DevFlowDatabase = void 0;
+exports.getGlobalDevFlowDbPath = getGlobalDevFlowDbPath;
+exports.openGlobalDevFlowDatabase = openGlobalDevFlowDatabase;
 const node_sqlite_1 = require("./node-sqlite");
 const path_1 = require("path");
 const fs_1 = require("fs");
+const os_1 = require("os");
+function getGlobalDevFlowDbPath(home = (0, os_1.homedir)()) {
+    const stateDir = process.env.DEVFLOW_STATE_DIR ?? (0, path_1.join)(home, '.devflow', 'global');
+    return (0, path_1.join)(stateDir, 'devflow.db');
+}
+function openGlobalDevFlowDatabase(home = (0, os_1.homedir)(), options) {
+    return new DevFlowDatabase(home, {
+        dbPath: getGlobalDevFlowDbPath(home),
+        busyTimeoutMs: options?.busyTimeoutMs,
+    });
+}
 class DevFlowDatabase {
     constructor(projectRoot, opts) {
         let dbPath;
@@ -19,9 +32,9 @@ class DevFlowDatabase {
                 (0, fs_1.mkdirSync)(devflowDir, { recursive: true });
             dbPath = (0, path_1.join)(devflowDir, 'devflow.db');
         }
-        this.db = new node_sqlite_1.NodeSqliteDatabase(dbPath);
+        this.db = new node_sqlite_1.NodeSqliteDatabase(dbPath, opts?.busyTimeoutMs);
         this.db.exec('PRAGMA journal_mode = WAL');
-        this.db.exec('PRAGMA busy_timeout = 5000');
+        this.db.exec(`PRAGMA busy_timeout = ${Math.max(0, Math.floor(opts?.busyTimeoutMs ?? 5000))}`);
         this.db.exec('PRAGMA foreign_keys = OFF');
         this.initializeSchema();
     }
@@ -123,7 +136,8 @@ class DevFlowDatabase {
         subagent_id TEXT,
         error TEXT,
         blocked INTEGER DEFAULT 0 CHECK (blocked IN (0, 1)),
-        block_reason TEXT
+        block_reason TEXT,
+        failure_category TEXT
       );
 
       CREATE INDEX IF NOT EXISTS idx_executions_skill ON skill_executions(skill_name);
@@ -151,6 +165,80 @@ class DevFlowDatabase {
 
       CREATE INDEX IF NOT EXISTS idx_sessions_project ON sessions(project_root);
       CREATE INDEX IF NOT EXISTS idx_sessions_started ON sessions(started_at DESC);
+
+      CREATE TABLE IF NOT EXISTS feedback (
+        id TEXT PRIMARY KEY,
+        project_root TEXT NOT NULL,
+        query TEXT NOT NULL,
+        rating TEXT NOT NULL CHECK (rating IN ('hit', 'partial', 'miss')),
+        task_type TEXT,
+        context_mode TEXT,
+        run_id TEXT,
+        token_count INTEGER DEFAULT 0,
+        created_at INTEGER NOT NULL
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_feedback_project ON feedback(project_root);
+      CREATE INDEX IF NOT EXISTS idx_feedback_created ON feedback(created_at DESC);
+
+      CREATE TABLE IF NOT EXISTS telemetry_failures (
+        id TEXT PRIMARY KEY,
+        operation TEXT NOT NULL,
+        payload TEXT,
+        error TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        resolved_at INTEGER
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_telemetry_failures_created ON telemetry_failures(created_at DESC);
+      CREATE INDEX IF NOT EXISTS idx_telemetry_failures_unresolved ON telemetry_failures(resolved_at) WHERE resolved_at IS NULL;
+
+      CREATE TABLE IF NOT EXISTS devflow_rules (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        level TEXT NOT NULL DEFAULT 'project',
+        gate INTEGER NOT NULL DEFAULT 1,
+        condition_json TEXT NOT NULL,
+        action TEXT NOT NULL DEFAULT 'warn',
+        message TEXT NOT NULL,
+        enabled INTEGER NOT NULL DEFAULT 1,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS devflow_audit_chain (
+        seq INTEGER PRIMARY KEY AUTOINCREMENT,
+        ts INTEGER NOT NULL,
+        tool TEXT NOT NULL,
+        args_hash TEXT NOT NULL,
+        decision TEXT NOT NULL,
+        rule_id TEXT,
+        session_id TEXT NOT NULL,
+        prev_hash TEXT NOT NULL,
+        signature TEXT NOT NULL
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_devflow_audit_ts ON devflow_audit_chain(ts DESC);
+
+      CREATE TABLE IF NOT EXISTS devflow_hook_receipts (
+        project_root TEXT PRIMARY KEY,
+        last_mcp_call INTEGER,
+        bypass_count INTEGER NOT NULL DEFAULT 0,
+        updated_at INTEGER NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS devflow_memory_distill_checkpoints (
+        id TEXT PRIMARY KEY,
+        project_root TEXT NOT NULL,
+        session_id TEXT,
+        trigger TEXT NOT NULL CHECK(trigger IN ('pre_compact', 'session_end')),
+        pending_events INTEGER NOT NULL DEFAULT 0,
+        released_leases INTEGER NOT NULL DEFAULT 0,
+        created_at INTEGER NOT NULL
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_distill_checkpoints_project
+        ON devflow_memory_distill_checkpoints(project_root, created_at DESC);
     `);
         // Migration: add session_id to skill_executions (SQLite compat — ignore if exists)
         try {
@@ -177,6 +265,20 @@ class DevFlowDatabase {
             this.db.exec('ALTER TABLE tool_call_events ADD COLUMN workflow_run_id TEXT');
         }
         catch { }
+        try {
+            this.db.exec('ALTER TABLE tool_call_events ADD COLUMN failure_category TEXT');
+        }
+        catch { }
+        try {
+            this.db.exec('ALTER TABLE devflow_rules ADD COLUMN gate INTEGER NOT NULL DEFAULT 1');
+        }
+        catch { }
+        try {
+            this.db.exec('ALTER TABLE devflow_rules ADD COLUMN updated_at INTEGER');
+        }
+        catch { }
+        this.db.exec('UPDATE devflow_rules SET updated_at = created_at WHERE updated_at IS NULL');
+        this.db.exec('CREATE INDEX IF NOT EXISTS idx_devflow_rules_gate ON devflow_rules(gate, enabled)');
         // Migration: tool_metrics table for per-tool metrics collection
         try {
             this.db.exec(`
@@ -221,6 +323,28 @@ class DevFlowDatabase {
         CREATE INDEX IF NOT EXISTS idx_accuracy_queries_engine ON accuracy_queries(engine);
         CREATE INDEX IF NOT EXISTS idx_accuracy_queries_session ON accuracy_queries(session_id);
         CREATE INDEX IF NOT EXISTS idx_accuracy_queries_feedback ON accuracy_queries(relevance_feedback);
+      `);
+        }
+        catch { }
+        // Canonical benchmark reports live in the global DevFlow database.
+        try {
+            this.db.exec(`
+        CREATE TABLE IF NOT EXISTS benchmark_reports (
+          run_id TEXT PRIMARY KEY,
+          suite_id TEXT NOT NULL,
+          suite_version TEXT NOT NULL,
+          project_root TEXT NOT NULL,
+          commit_sha TEXT,
+          task_count INTEGER NOT NULL,
+          status TEXT NOT NULL CHECK(status IN ('completed')),
+          report_json TEXT NOT NULL,
+          created_at INTEGER NOT NULL
+        );
+
+        CREATE INDEX IF NOT EXISTS idx_benchmark_reports_created
+          ON benchmark_reports(created_at DESC);
+        CREATE INDEX IF NOT EXISTS idx_benchmark_reports_suite
+          ON benchmark_reports(suite_id, suite_version, created_at DESC);
       `);
         }
         catch { }
@@ -272,7 +396,7 @@ class DevFlowDatabase {
     }
     insertRun(run) {
         this.db.prepare(`
-      INSERT INTO runs (id, source, tool, input, status, started_at, finished_at, token_used, metadata, created_at)
+      INSERT OR IGNORE INTO runs (id, source, tool, input, status, started_at, finished_at, token_used, metadata, created_at)
       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `).run(run.id, run.source, run.tool, JSON.stringify(run.input) ?? null, run.status, run.startedAt, run.finishedAt ?? null, run.tokenUsed ?? 0, JSON.stringify(run.metadata) ?? null, Date.now());
     }
@@ -476,6 +600,7 @@ class DevFlowDatabase {
             error: row.error,
             blocked: row.blocked === 1,
             blockReason: row.block_reason,
+            failureCategory: row.failure_category,
             tokensUsed: row.tokens_used ?? 0,
         }));
     }
@@ -509,6 +634,7 @@ class DevFlowDatabase {
                 error: row.error,
                 blocked: row.blocked === 1,
                 blockReason: row.block_reason,
+                failureCategory: row.failure_category,
                 tokensUsed: row.tokens_used ?? 0,
             });
         }
@@ -517,7 +643,7 @@ class DevFlowDatabase {
     // ---- Skill Executions ----
     insertSkillExecution(params) {
         this.db.prepare(`
-      INSERT INTO skill_executions
+      INSERT OR IGNORE INTO skill_executions
       (execution_id, session_id, skill_name, started_at, status, required_mcp_tools, available_mcp_tools)
       VALUES (?, ?, ?, ?, ?, ?, ?)
     `).run(params.executionId, params.sessionId ?? null, params.skillName, params.startedAt, params.status, params.requiredMcpTools ? JSON.stringify(params.requiredMcpTools) : null, params.availableMcpTools ? JSON.stringify(params.availableMcpTools) : null);
@@ -616,22 +742,27 @@ class DevFlowDatabase {
     }
     // ---- Tool Call Events ----
     insertToolCallEvent(params) {
-        this.db.prepare(`
-      INSERT INTO tool_call_events
-      (event_id, execution_id, session_id, timestamp, tool_name, tool_type, is_mcp_tool,
-       mcp_tool_name, mcp_enforced, mcp_fallback, kind, input, output, duration,
-       parent_tool_call_id, subagent_id, error, blocked, block_reason, workflow_run_id)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-    `).run(params.eventId, params.executionId || null, params.sessionId ?? null, params.timestamp, params.toolName, params.toolType, params.isMcpTool ? 1 : 0, params.mcpToolName || null, params.mcpEnforced ? 1 : 0, params.mcpFallback ? 1 : 0, params.kind ?? 'tool_use', JSON.stringify(params.input) ?? null, params.output ? JSON.stringify(params.output) : null, params.duration, params.parentToolCallId || null, params.subagentId || null, params.error || null, params.blocked ? 1 : 0, params.blockReason || null, params.workflowRunId || null);
-        // Update execution summary counters
-        this.db.prepare(`
-      UPDATE skill_executions
-      SET total_tool_calls = total_tool_calls + 1,
-          mcp_tool_calls = mcp_tool_calls + ?,
-          direct_tool_calls = direct_tool_calls + ?,
-          subagent_count = subagent_count + ?
-      WHERE execution_id = ?
-    `).run(params.isMcpTool ? 1 : 0, params.isMcpTool ? 0 : 1, params.toolType === 'subagent' ? 1 : 0, params.executionId);
+        return this.db.transaction(() => {
+            const result = this.db.prepare(`
+        INSERT OR IGNORE INTO tool_call_events
+        (event_id, execution_id, session_id, timestamp, tool_name, tool_type, is_mcp_tool,
+         mcp_tool_name, mcp_enforced, mcp_fallback, kind, input, output, tokens_used, duration,
+         parent_tool_call_id, subagent_id, error, blocked, block_reason, workflow_run_id,
+         failure_category)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `).run(params.eventId, params.executionId || '', params.sessionId ?? null, params.timestamp, params.toolName, params.toolType, params.isMcpTool ? 1 : 0, params.mcpToolName || null, params.mcpEnforced ? 1 : 0, params.mcpFallback ? 1 : 0, params.kind ?? 'tool_use', JSON.stringify(params.input) ?? null, params.output !== undefined ? JSON.stringify(params.output) : null, params.tokensUsed ?? 0, params.duration, params.parentToolCallId || null, params.subagentId || null, params.error || null, params.blocked ? 1 : 0, params.blockReason || null, params.workflowRunId || null, params.failureCategory || null);
+            if (result.changes === 0)
+                return false;
+            this.db.prepare(`
+        UPDATE skill_executions
+        SET total_tool_calls = total_tool_calls + 1,
+            mcp_tool_calls = mcp_tool_calls + ?,
+            direct_tool_calls = direct_tool_calls + ?,
+            subagent_count = subagent_count + ?
+        WHERE execution_id = ?
+      `).run(params.isMcpTool ? 1 : 0, params.isMcpTool ? 0 : 1, params.toolType === 'subagent' ? 1 : 0, params.executionId);
+            return true;
+        });
     }
     listToolCallEvents(executionId) {
         const rows = this.db.prepare('SELECT * FROM tool_call_events WHERE execution_id = ? ORDER BY timestamp ASC').all(executionId);
@@ -655,6 +786,7 @@ class DevFlowDatabase {
             error: row.error,
             blocked: row.blocked === 1,
             blockReason: row.block_reason,
+            failureCategory: row.failure_category,
         }));
     }
     updateToolCallEvent(eventId, updates) {
@@ -674,8 +806,10 @@ class DevFlowDatabase {
         }
         if (sets.length > 0) {
             values.push(eventId);
-            this.db.prepare(`UPDATE tool_call_events SET ${sets.join(', ')} WHERE event_id = ?`).run(...values);
+            const result = this.db.prepare(`UPDATE tool_call_events SET ${sets.join(', ')} WHERE event_id = ?`).run(...values);
+            return result.changes > 0;
         }
+        return false;
     }
     // ---- MCP Compliance ----
     getMcpCompliance() {
@@ -725,7 +859,7 @@ class DevFlowDatabase {
     }
     insertToolMetric(metric) {
         this.db.prepare(`
-      INSERT OR REPLACE INTO tool_metrics (id, tool_call_event_id, session_id, tool_name, query, status, result_count, result_size_bytes, latency_ms, engine, accuracy_query_id, metadata, created_at)
+      INSERT OR IGNORE INTO tool_metrics (id, tool_call_event_id, session_id, tool_name, query, status, result_count, result_size_bytes, latency_ms, engine, accuracy_query_id, metadata, created_at)
       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `).run(metric.id, metric.toolCallEventId, metric.sessionId, metric.toolName, metric.query ?? null, metric.status ?? 'success', metric.resultCount ?? 0, metric.resultSizeBytes ?? 0, metric.latencyMs ?? 0, metric.engine ?? null, metric.accuracyQueryId ?? null, metric.metadata ?? null, metric.createdAt);
     }
@@ -766,6 +900,111 @@ class DevFlowDatabase {
             avgLatency: Math.round(r.avg_latency),
         }));
     }
+    aggregatePendingToolMetrics(limit = 1000) {
+        const rows = this.db.prepare(`
+      SELECT e.*
+      FROM tool_call_events e
+      LEFT JOIN tool_metrics m ON m.tool_call_event_id = e.event_id
+      WHERE m.id IS NULL AND e.output IS NOT NULL
+      ORDER BY e.timestamp ASC
+      LIMIT ?
+    `).all(limit);
+        let inserted = 0;
+        this.db.transaction(() => {
+            for (const row of rows) {
+                const input = parseJson(row.input);
+                const output = parseJson(row.output);
+                const toolName = row.mcp_tool_name || row.tool_name;
+                const resultCount = countTelemetryResults(output);
+                const resultSizeBytes = Buffer.byteLength(row.output ?? '', 'utf8');
+                const status = row.error || row.blocked
+                    ? 'error'
+                    : resultCount === 0 ? 'empty' : 'success';
+                const result = this.db.prepare(`
+          INSERT OR IGNORE INTO tool_metrics
+          (id, tool_call_event_id, session_id, tool_name, query, status, result_count,
+           result_size_bytes, latency_ms, engine, metadata, created_at)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        `).run(`metric:${row.event_id}`, row.event_id, row.session_id || '', toolName, deriveQuery(input), status, resultCount, resultSizeBytes, row.duration ?? 0, deriveEngine(toolName), JSON.stringify({ executionId: row.execution_id, kind: row.kind }), row.timestamp);
+                inserted += result.changes;
+            }
+        });
+        return inserted;
+    }
+    // ---- Context Feedback ----
+    insertFeedback(feedback) {
+        this.db.prepare(`
+      INSERT OR IGNORE INTO feedback
+      (id, project_root, query, rating, task_type, context_mode, run_id, token_count, created_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(feedback.id, feedback.projectRoot, feedback.query, feedback.rating, feedback.taskType ?? null, feedback.contextMode ?? null, feedback.runId ?? null, feedback.tokenCount ?? 0, feedback.createdAt);
+    }
+    listFeedback(projectRoot, limit = 100) {
+        const rows = projectRoot
+            ? this.db.prepare('SELECT * FROM feedback WHERE project_root = ? ORDER BY created_at DESC LIMIT ?').all(projectRoot, limit)
+            : this.db.prepare('SELECT * FROM feedback ORDER BY created_at DESC LIMIT ?').all(limit);
+        return rows.map(row => ({
+            id: row.id,
+            projectRoot: row.project_root,
+            query: row.query,
+            rating: row.rating,
+            taskType: row.task_type ?? undefined,
+            contextMode: row.context_mode ?? undefined,
+            runId: row.run_id ?? undefined,
+            tokenCount: row.token_count ?? 0,
+            createdAt: row.created_at,
+        }));
+    }
+    getFeedbackSummary(projectRoot) {
+        const row = (projectRoot
+            ? this.db.prepare(`SELECT COUNT(*) total, SUM(rating = 'hit') hits, SUM(rating = 'partial') partials, SUM(rating = 'miss') misses FROM feedback WHERE project_root = ?`).get(projectRoot)
+            : this.db.prepare(`SELECT COUNT(*) total, SUM(rating = 'hit') hits, SUM(rating = 'partial') partials, SUM(rating = 'miss') misses FROM feedback`).get());
+        const total = Number(row?.total ?? 0);
+        const hits = Number(row?.hits ?? 0);
+        const partials = Number(row?.partials ?? 0);
+        const misses = Number(row?.misses ?? 0);
+        return { total, hits, partials, misses, hitRate: total > 0 ? hits / total : 0 };
+    }
+    // ---- Telemetry Failures ----
+    insertTelemetryFailure(failure) {
+        this.db.prepare(`
+      INSERT OR IGNORE INTO telemetry_failures
+      (id, operation, payload, error, created_at, resolved_at)
+      VALUES (?, ?, ?, ?, ?, ?)
+    `).run(failure.id, failure.operation, JSON.stringify(failure.payload) ?? null, failure.error, failure.createdAt, failure.resolvedAt ?? null);
+    }
+    resolveTelemetryFailure(id, resolvedAt = Date.now()) {
+        this.db.prepare('UPDATE telemetry_failures SET resolved_at = ? WHERE id = ?').run(resolvedAt, id);
+    }
+    listTelemetryFailures(options) {
+        const where = options?.unresolvedOnly ? 'WHERE resolved_at IS NULL' : '';
+        const rows = this.db.prepare(`SELECT * FROM telemetry_failures ${where} ORDER BY created_at DESC LIMIT ?`)
+            .all(options?.limit ?? 100);
+        return rows.map(row => ({
+            id: row.id,
+            operation: row.operation,
+            payload: parseJson(row.payload),
+            error: row.error,
+            createdAt: row.created_at,
+            resolvedAt: row.resolved_at ?? undefined,
+        }));
+    }
+    countTelemetryFailures(unresolvedOnly = false) {
+        const row = this.db.prepare(`SELECT COUNT(*) count FROM telemetry_failures ${unresolvedOnly ? 'WHERE resolved_at IS NULL' : ''}`).get();
+        return Number(row?.count ?? 0);
+    }
+    trimTelemetryFailures(maxRows = 500) {
+        const limit = Math.max(1, Math.floor(maxRows));
+        const result = this.db.prepare(`
+      DELETE FROM telemetry_failures
+      WHERE id IN (
+        SELECT id FROM telemetry_failures
+        ORDER BY created_at DESC, id DESC
+        LIMIT -1 OFFSET ?
+      )
+    `).run(limit);
+        return Number(result.changes);
+    }
     // ---- Accuracy Queries ----
     insertAccuracyQuery(q) {
         this.db.prepare(`
@@ -830,6 +1069,202 @@ class DevFlowDatabase {
         }
         return statsByEngine;
     }
+    // ---- Benchmark Reports ----
+    insertBenchmarkReport(report) {
+        this.db.prepare(`
+      INSERT INTO benchmark_reports
+        (run_id, suite_id, suite_version, project_root, commit_sha, task_count, status, report_json, created_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+      ON CONFLICT(run_id) DO UPDATE SET
+        suite_id = excluded.suite_id,
+        suite_version = excluded.suite_version,
+        project_root = excluded.project_root,
+        commit_sha = excluded.commit_sha,
+        task_count = excluded.task_count,
+        status = excluded.status,
+        report_json = excluded.report_json,
+        created_at = excluded.created_at
+    `).run(report.runId, report.suiteId, report.suiteVersion, report.projectRoot, report.commit, report.tasks.length, report.status, JSON.stringify(report), report.createdAt);
+    }
+    getBenchmarkReport(runId) {
+        const row = this.db.prepare('SELECT report_json FROM benchmark_reports WHERE run_id = ?').get(runId);
+        return row?.report_json
+            ? JSON.parse(row.report_json)
+            : null;
+    }
+    getLatestBenchmarkReport(suiteId) {
+        const row = (suiteId
+            ? this.db.prepare('SELECT report_json FROM benchmark_reports WHERE suite_id = ? ORDER BY created_at DESC LIMIT 1').get(suiteId)
+            : this.db.prepare('SELECT report_json FROM benchmark_reports ORDER BY created_at DESC LIMIT 1').get());
+        return row?.report_json
+            ? JSON.parse(row.report_json)
+            : null;
+    }
+    listBenchmarkReports(limit = 50) {
+        const rows = this.db.prepare(`
+      SELECT run_id, suite_id, suite_version, project_root, commit_sha,
+             task_count, status, created_at
+      FROM benchmark_reports
+      ORDER BY created_at DESC
+      LIMIT ?
+    `).all(Math.max(1, Math.min(limit, 500)));
+        return rows.map((row) => ({
+            runId: row.run_id,
+            suiteId: row.suite_id,
+            suiteVersion: row.suite_version,
+            projectRoot: row.project_root,
+            commit: row.commit_sha,
+            taskCount: row.task_count,
+            createdAt: row.created_at,
+            status: row.status,
+        }));
+    }
+    // ---- Enforcer Governance ----
+    listGovernanceRules(includeDisabled = true) {
+        const where = includeDisabled ? '' : 'WHERE enabled = 1';
+        const rows = this.db.prepare(`
+      SELECT id, name, gate, level, condition_json, action, message,
+             enabled, created_at, updated_at
+      FROM devflow_rules ${where}
+      ORDER BY gate, id
+    `).all();
+        return rows.map(row => ({
+            id: row.id,
+            name: row.name,
+            gate: row.gate,
+            level: row.level,
+            condition: parseJson(row.condition_json),
+            action: row.action,
+            message: row.message,
+            enabled: row.enabled === 1,
+            createdAt: row.created_at,
+            updatedAt: row.updated_at,
+        }));
+    }
+    getGovernanceRule(id) {
+        return this.listGovernanceRules(true).find(rule => rule.id === id) ?? null;
+    }
+    upsertGovernanceRule(rule) {
+        const now = Date.now();
+        this.db.prepare(`
+      INSERT INTO devflow_rules
+        (id, name, gate, level, condition_json, action, message, enabled, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      ON CONFLICT(id) DO UPDATE SET
+        name = excluded.name,
+        gate = excluded.gate,
+        level = excluded.level,
+        condition_json = excluded.condition_json,
+        action = excluded.action,
+        message = excluded.message,
+        enabled = excluded.enabled,
+        updated_at = excluded.updated_at
+    `).run(rule.id, rule.name, rule.gate, rule.level, JSON.stringify(rule.condition), rule.action, rule.message, rule.enabled ? 1 : 0, rule.createdAt ?? now, now);
+        return this.getGovernanceRule(rule.id);
+    }
+    deleteGovernanceRule(id) {
+        return this.db.prepare('DELETE FROM devflow_rules WHERE id = ?').run(id).changes > 0;
+    }
+    listGovernanceAudit(limit = 100, offset = 0) {
+        const boundedLimit = Math.max(1, Math.min(limit, 500));
+        const boundedOffset = Math.max(0, offset);
+        const rows = this.db.prepare(`
+      SELECT seq, ts, tool, args_hash, decision, rule_id, session_id, prev_hash, signature
+      FROM devflow_audit_chain
+      ORDER BY seq DESC
+      LIMIT ? OFFSET ?
+    `).all(boundedLimit, boundedOffset);
+        const count = this.db.prepare('SELECT COUNT(*) AS total FROM devflow_audit_chain').get();
+        return {
+            items: rows.map(row => ({
+                seq: row.seq,
+                ts: row.ts,
+                tool: row.tool,
+                argsHash: row.args_hash,
+                decision: row.decision,
+                ruleId: row.rule_id,
+                sessionId: row.session_id,
+                prevHash: row.prev_hash,
+                signature: row.signature,
+            })),
+            total: Number(count?.total ?? 0),
+        };
+    }
+    // ---- Hook Lifecycle ----
+    getHookReceipt(projectRoot) {
+        const row = this.db.prepare(`
+      SELECT project_root, last_mcp_call, bypass_count, updated_at
+      FROM devflow_hook_receipts WHERE project_root = ?
+    `).get(projectRoot);
+        if (!row)
+            return null;
+        return {
+            projectRoot: row.project_root,
+            lastMcpCall: row.last_mcp_call ?? undefined,
+            bypassCount: Number(row.bypass_count ?? 0),
+            updatedAt: Number(row.updated_at),
+        };
+    }
+    updateHookReceipt(projectRoot, updater) {
+        this.db.exec('BEGIN IMMEDIATE');
+        try {
+            const current = this.getHookReceipt(projectRoot);
+            const next = updater(current);
+            const updatedAt = Date.now();
+            this.db.prepare(`
+        INSERT INTO devflow_hook_receipts
+          (project_root, last_mcp_call, bypass_count, updated_at)
+        VALUES (?, ?, ?, ?)
+        ON CONFLICT(project_root) DO UPDATE SET
+          last_mcp_call = excluded.last_mcp_call,
+          bypass_count = excluded.bypass_count,
+          updated_at = excluded.updated_at
+      `).run(projectRoot, next.lastMcpCall ?? null, next.bypassCount ?? 0, updatedAt);
+            this.db.exec('COMMIT');
+            return {
+                projectRoot,
+                lastMcpCall: next.lastMcpCall,
+                bypassCount: next.bypassCount ?? 0,
+                updatedAt,
+            };
+        }
+        catch (error) {
+            try {
+                this.db.exec('ROLLBACK');
+            }
+            catch { }
+            throw error;
+        }
+    }
+    deleteHookReceipt(projectRoot) {
+        return this.db.prepare('DELETE FROM devflow_hook_receipts WHERE project_root = ?')
+            .run(projectRoot).changes > 0;
+    }
+    recordMemoryDistillCheckpoint(checkpoint) {
+        this.db.prepare(`
+      INSERT INTO devflow_memory_distill_checkpoints
+        (id, project_root, session_id, trigger, pending_events, released_leases, created_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?)
+    `).run(checkpoint.id, checkpoint.projectRoot, checkpoint.sessionId ?? null, checkpoint.trigger, checkpoint.pendingEvents, checkpoint.releasedLeases, checkpoint.createdAt);
+    }
+    listMemoryDistillCheckpoints(projectRoot, limit = 50) {
+        const rows = this.db.prepare(`
+      SELECT id, project_root, session_id, trigger, pending_events, released_leases, created_at
+      FROM devflow_memory_distill_checkpoints
+      WHERE project_root = ?
+      ORDER BY created_at DESC
+      LIMIT ?
+    `).all(projectRoot, Math.max(1, Math.min(limit, 500)));
+        return rows.map(row => ({
+            id: row.id,
+            projectRoot: row.project_root,
+            sessionId: row.session_id ?? undefined,
+            trigger: row.trigger,
+            pendingEvents: Number(row.pending_events),
+            releasedLeases: Number(row.released_leases),
+            createdAt: Number(row.created_at),
+        }));
+    }
     // Convenience methods for raw SQL queries (used by AutoChecker)
     all(sql, ...params) {
         return this.db.prepare(sql).all(...params);
@@ -842,3 +1277,54 @@ class DevFlowDatabase {
     }
 }
 exports.DevFlowDatabase = DevFlowDatabase;
+function parseJson(value) {
+    if (typeof value !== 'string')
+        return value;
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return value;
+    }
+}
+function deriveQuery(input) {
+    if (!input || typeof input !== 'object')
+        return null;
+    const record = input;
+    for (const key of ['query', 'task', 'prompt', 'name', 'command']) {
+        if (typeof record[key] === 'string' && record[key])
+            return record[key];
+    }
+    return null;
+}
+function deriveEngine(toolName) {
+    if (/project_context|symbol|dependency_graph|codegraph/.test(toolName))
+        return 'codegraph';
+    if (/knowledge|docs/.test(toolName))
+        return 'knowledge';
+    if (/memory/.test(toolName))
+        return 'memory';
+    return null;
+}
+function countTelemetryResults(value, depth = 0) {
+    if (value == null || depth > 2)
+        return 0;
+    if (Array.isArray(value))
+        return value.length;
+    if (typeof value !== 'object')
+        return value === '' ? 0 : 1;
+    const record = value;
+    const unwrapped = record.data ?? record.structuredContent;
+    if (unwrapped !== undefined && unwrapped !== value)
+        return countTelemetryResults(unwrapped, depth + 1);
+    let count = 0;
+    for (const key of ['files', 'results', 'result', 'memories', 'nodes', 'chunks', 'findings', 'symbols', 'keySymbols']) {
+        if (Array.isArray(record[key]))
+            count += record[key].length;
+    }
+    if (count > 0)
+        return count;
+    if (record.error)
+        return 0;
+    return Object.keys(record).length > 0 ? 1 : 0;
+}

package/dist/index.d.ts

@@ -1 +1,2 @@
-export { DevFlowDatabase } from './database';
+export { DevFlowDatabase, getGlobalDevFlowDbPath, openGlobalDevFlowDatabase, } from './database';
+export type { BenchmarkReportMetaRecord, BenchmarkReportRecord, FeedbackRecord, GovernanceAuditRecord, GovernanceRuleRecord, HookReceiptRecord, MemoryDistillCheckpointRecord, TelemetryFailureRecord, } from './database';

package/dist/index.js

@@ -1,5 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DevFlowDatabase = void 0;
+exports.openGlobalDevFlowDatabase = exports.getGlobalDevFlowDbPath = exports.DevFlowDatabase = void 0;
 var database_1 = require("./database");
 Object.defineProperty(exports, "DevFlowDatabase", { enumerable: true, get: function () { return database_1.DevFlowDatabase; } });
+Object.defineProperty(exports, "getGlobalDevFlowDbPath", { enumerable: true, get: function () { return database_1.getGlobalDevFlowDbPath; } });
+Object.defineProperty(exports, "openGlobalDevFlowDatabase", { enumerable: true, get: function () { return database_1.openGlobalDevFlowDatabase; } });

package/dist/node-sqlite.d.ts

@@ -1,7 +1,7 @@
 import type { Database, Statement } from './types';
 export declare class NodeSqliteDatabase implements Database {
     private db;
-    constructor(path: string);
+    constructor(path: string, busyTimeoutMs?: number);
     exec(sql: string): void;
     prepare(sql: string): Statement;
     transaction<T>(fn: () => T): T;