@dsh-enhanced/preference-learning 0.1.7

package/lib/service.js

@@ -0,0 +1,260 @@
+import { Context, Service } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+import { PreferenceStore, canonicalPreferenceScope } from './store.js';
+import { registerPreferenceTools } from './tools.js';
+const configSchema = Schema.object({
+    enabled: Schema.boolean().default(true),
+    databasePath: Schema.string().required(),
+    signalTtlMs: Schema.number().step(1).min(86_400_000).max(31_536_000_000).default(7_776_000_000),
+    hypothesisTtlMs: Schema.number().step(1).min(3_600_000).max(2_592_000_000).default(2_592_000_000),
+    minSignalsForActivation: Schema.number().step(1).min(2).max(20).default(2),
+    minConfidenceBps: Schema.number().step(1).min(6_000).max(9_500).default(7_500),
+    maxContradictionBps: Schema.number().step(1).min(0).max(4_000).default(2_500),
+    maxActiveOverlays: Schema.number().step(1).min(1).max(8).default(6),
+    maxReviewHypotheses: Schema.number().step(1).min(1).max(50).default(20),
+    maxOverlayBytes: Schema.number().step(1).min(256).max(2_048).default(2_048),
+    maintenanceIntervalMs: Schema.number().step(1).min(60_000).max(86_400_000).default(3_600_000),
+    maintenanceBatchSize: Schema.number().step(1).min(1).max(5_000).default(500),
+});
+export class PreferenceLearningError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'PreferenceLearningError';
+    }
+}
+function decisionError(decision) {
+    return new PreferenceLearningError('policy-denied', `preference access denied: ${decision.reasonCode}`);
+}
+export class PreferenceLearningService extends Service {
+    static Config = configSchema;
+    static inject = ['assistantPolicy', 'systemPrompt'];
+    store;
+    policy;
+    config;
+    active = true;
+    constructor(ctx, input, options = {}) {
+        super(ctx, 'assistantPreferenceLearning');
+        try {
+            this.config = configSchema(input);
+        }
+        catch (error) {
+            throw new Error(`preference-learning: invalid configuration: ${String(error)}`, { cause: error });
+        }
+        if (this.config.hypothesisTtlMs > this.config.signalTtlMs) {
+            throw new Error('preference-learning: hypothesisTtlMs must not exceed signalTtlMs');
+        }
+        const policy = ctx.get('assistantPolicy');
+        if (policy === undefined)
+            throw new Error('preference-learning: assistantPolicy service is required');
+        this.policy = policy;
+        this.store = new PreferenceStore({
+            path: this.config.databasePath,
+            ...(options.now === undefined ? {} : { now: options.now }),
+            signalTtlMs: this.config.signalTtlMs,
+            hypothesisTtlMs: this.config.hypothesisTtlMs,
+            minSignalsForActivation: this.config.minSignalsForActivation,
+            minConfidenceBps: this.config.minConfidenceBps,
+            maxContradictionBps: this.config.maxContradictionBps,
+            maxActiveOverlays: this.config.maxActiveOverlays,
+            maxReviewHypotheses: this.config.maxReviewHypotheses,
+            maxOverlayBytes: this.config.maxOverlayBytes,
+        });
+        // Runtime context is re-evaluated before every model step. The AgentLoop
+        // projection replaces or clears its prior snapshot, so rollback, expiry,
+        // forget, disable/unload, and resumed sessions cannot retain stale policy.
+        ctx.systemPrompt.context({
+            name: 'preference-learning:active-overlay',
+            order: 250,
+            text: ({ agent }) => this.dynamicOverlay(agent),
+        });
+        ctx.inject(['assistantDelivery'], deliveryCtx => {
+            if (!this.config.enabled)
+                return;
+            const delivery = deliveryCtx.get('assistantDelivery');
+            if (delivery === undefined || typeof delivery.subscribePreferenceFeedback !== 'function')
+                return;
+            return delivery.subscribePreferenceFeedback(events => this.appendDeliveryFeedbackBatch(events));
+        });
+        const registeredTools = ctx.get('tools');
+        const disposeCurrentTools = registeredTools === undefined
+            ? undefined
+            : registerPreferenceTools(registeredTools, this);
+        ctx.inject(['tools'], toolsCtx => {
+            const tools = toolsCtx.tools;
+            if (tools === registeredTools)
+                return;
+            return registerPreferenceTools(tools, this);
+        });
+        this.store.maintain(this.config.maintenanceBatchSize);
+        const maintenanceTimer = setInterval(() => {
+            if (!this.active)
+                return;
+            try {
+                this.store.maintain(this.config.maintenanceBatchSize);
+            }
+            catch {
+                ctx.logger.warn('preference-learning: bounded retention maintenance failed');
+            }
+        }, this.config.maintenanceIntervalMs);
+        maintenanceTimer.unref();
+        ctx.effect(() => () => {
+            this.active = false;
+            clearInterval(maintenanceTimer);
+            disposeCurrentTools?.();
+            this.store.close();
+        }, 'preference-learning.database');
+    }
+    /**
+     * Unprivileged observation seam. Actor/source authority is assigned here;
+     * callers cannot use it to claim owner feedback or unlock an effect.
+     */
+    appendObservation(input) {
+        this.assertActive();
+        this.assertEnabled();
+        if (input.interpretationTrust !== 'behavioral-inference'
+            && input.interpretationTrust !== 'model-inference') {
+            throw new PreferenceLearningError('unattested-signal', 'unattested observations cannot claim explicit or typed owner feedback');
+        }
+        if (!['delivery-observation', 'evaluation-outcome', 'system-observation'].includes(input.source)) {
+            throw new PreferenceLearningError('unattested-signal', 'unattested observations cannot claim an authenticated feedback source');
+        }
+        return this.store.appendSignal({
+            ...input,
+            actorTrust: 'system-attested',
+            idempotencyKey: `unattested-observation:${input.idempotencyKey}`,
+        });
+    }
+    review(agent, limit) {
+        this.assertActive();
+        const scope = this.authorizedScope(agent, 'review', 'hypotheses');
+        const hypotheses = this.store.list(scope, limit);
+        return Object.freeze({
+            hypotheses: Object.freeze(hypotheses),
+            activeOverlay: this.config.enabled ? this.store.overlay(scope) : undefined,
+        });
+    }
+    activate(agent, hypothesisId, expectedVersion) {
+        this.assertActive();
+        this.assertEnabled();
+        const scope = this.authorizedScope(agent, 'activate', hypothesisId);
+        return this.store.activate(scope, hypothesisId, expectedVersion);
+    }
+    rollback(agent, hypothesisId, expectedVersion, reason) {
+        this.assertActive();
+        const scope = this.authorizedScope(agent, 'rollback', hypothesisId);
+        return this.store.rollback(scope, hypothesisId, expectedVersion, reason);
+    }
+    /** Host-only privacy seam. It removes exact-scope rows and retains only a scope digest tombstone. */
+    forgetScope(scope, idempotencyKey) {
+        this.assertActive();
+        return this.store.forgetScope(scope, idempotencyKey);
+    }
+    health() {
+        this.assertActive();
+        return Object.freeze({ ...this.store.health(), enabled: this.config.enabled });
+    }
+    limits() {
+        this.assertActive();
+        return Object.freeze({
+            signalTtlMs: this.config.signalTtlMs,
+            hypothesisTtlMs: this.config.hypothesisTtlMs,
+            minSignalsForActivation: this.config.minSignalsForActivation,
+            minConfidenceBps: this.config.minConfidenceBps,
+            maxContradictionBps: this.config.maxContradictionBps,
+            maxActiveOverlays: this.config.maxActiveOverlays,
+            maxReviewHypotheses: this.config.maxReviewHypotheses,
+            maxOverlayBytes: this.config.maxOverlayBytes,
+            maintenanceIntervalMs: this.config.maintenanceIntervalMs,
+            maintenanceBatchSize: this.config.maintenanceBatchSize,
+        });
+    }
+    /** Safe bounded maintenance seam used by health jobs and deterministic tests. */
+    maintain() {
+        this.assertActive();
+        return this.store.maintain(this.config.maintenanceBatchSize);
+    }
+    /** Host integration seam for foreground prompt composition. */
+    overlayForAgent(agent) {
+        this.assertActive();
+        if (!this.config.enabled)
+            return undefined;
+        const scope = this.authorizedScope(agent, 'snapshot', 'active');
+        return this.store.overlay(scope);
+    }
+    dynamicOverlay(agent) {
+        if (!this.config.enabled || agent === undefined)
+            return '';
+        try {
+            return this.overlayForAgent(agent) ?? '';
+        }
+        catch {
+            this.ctx.logger.warn('preference-learning: current scoped overlay is unavailable');
+            return '';
+        }
+    }
+    /**
+     * The closure is registered directly with Assistant Delivery. No public
+     * service method accepts owner-authenticated provenance.
+     */
+    appendDeliveryFeedbackBatch(events) {
+        this.assertActive();
+        this.assertEnabled();
+        if (!Array.isArray(events) || events.length < 1 || events.length > 16) {
+            throw new PreferenceLearningError('unattested-signal', 'delivery feedback batch is invalid');
+        }
+        const signals = events.map(event => {
+            if (event.stance !== 'support'
+                || event.actorTrust !== 'owner-authenticated'
+                || event.interpretationTrust !== 'typed-feedback'
+                || event.source !== 'direct-owner-feedback') {
+                throw new PreferenceLearningError('unattested-signal', 'delivery feedback attestation is invalid');
+            }
+            return {
+                scope: { workspace: event.scope.workspace, preset: event.scope.preset },
+                preferenceKey: event.preferenceKey,
+                candidateValue: event.candidateValue,
+                stance: 'support',
+                actorTrust: 'owner-authenticated',
+                interpretationTrust: 'typed-feedback',
+                source: 'direct-owner-feedback',
+                occurredAt: event.occurredAt,
+                idempotencyKey: `assistant-delivery:${event.idempotencyKey}`,
+            };
+        });
+        this.store.appendSignals(signals);
+        return Object.freeze(events.map(event => Object.freeze({
+            idempotencyKey: event.idempotencyKey,
+            status: 'recorded',
+        })));
+    }
+    authorizedScope(agent, action, resourceId) {
+        const header = agent?.session?.header;
+        if (agent === undefined || header === undefined
+            || typeof header.cwd !== 'string' || typeof header.agentPreset !== 'string') {
+            throw new PreferenceLearningError('missing-agent', `missing-agent: preference ${action} requires a trusted Agent`);
+        }
+        let scope;
+        try {
+            scope = canonicalPreferenceScope({ workspace: header.cwd, preset: header.agentPreset }).scope;
+        }
+        catch {
+            throw new PreferenceLearningError('missing-agent', `missing-agent: preference ${action} requires a valid scope`);
+        }
+        const decision = this.policy.authorizeAgent(agent, action, { kind: 'preference', id: resourceId }, { idempotencyKey: `preference:${action}:${agent.id}:${resourceId}` });
+        if (decision.effect !== 'allow')
+            throw decisionError(decision);
+        return scope;
+    }
+    assertEnabled() {
+        if (!this.config.enabled)
+            throw new PreferenceLearningError('disabled', 'preference learning is disabled');
+    }
+    assertActive() {
+        if (!this.active)
+            throw new PreferenceLearningError('disposed', 'preference-learning service is disposed');
+    }
+}
+export const Config = configSchema;
+//# sourceMappingURL=service.js.map

package/lib/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAEtD,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAQ7C,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAEtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AA4BpD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC/F,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACjG,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9E,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7E,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3E,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC7F,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAC7E,CAAmB,CAAA;AASpB,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC3B;IAArB,YAAqB,IAAiC,EAAE,OAAe;QACrE,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,SAAI,GAAJ,IAAI,CAA6B;QAEpD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED,SAAS,aAAa,CAAC,QAAwB;IAC7C,OAAO,IAAI,uBAAuB,CAAC,eAAe,EAAE,6BAA6B,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;AACzG,CAAC;AAMD,MAAM,OAAO,yBAA0B,SAAQ,OAAO;IACpD,MAAM,CAAC,MAAM,GAAG,YAAY,CAAA;IAC5B,MAAM,CAAC,MAAM,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAA;IAClC,KAAK,CAAiB;IACtB,MAAM,CAAwB;IAC9B,MAAM,CAAkB;IACjC,MAAM,GAAG,IAAI,CAAA;IAErB,YAAY,GAAY,EAAE,KAAa,EAAE,UAAkC,EAAE;QAC3E,KAAK,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAA;QACzC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAqB,CAAA;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACnG,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;QACrF,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAuC,CAAA;QAC/E,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;QACrG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,KAAK,GAAG,IAAI,eAAe,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YAC9B,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1D,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,uBAAuB,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB;YAC5D,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAC9C,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACpD,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAChD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACpD,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;SAC7C,CAAC,CAAA;QAEF,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;YACvB,IAAI,EAAE,oCAAoC;YAC1C,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;SAChD,CAAC,CAAA;QAEF,GAAG,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,EAAE,WAAW,CAAC,EAAE;YAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAM;YAChC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAyC,CAAA;YAC7F,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,2BAA2B,KAAK,UAAU;gBAAE,OAAM;YAChG,OAAO,QAAQ,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAA;QACjG,CAAC,CAAC,CAAA;QAEF,MAAM,eAAe,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAA4B,CAAA;QACnE,MAAM,mBAAmB,GAAG,eAAe,KAAK,SAAS;YACvD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,uBAAuB,CAAC,eAAe,EAAE,IAAI,CAAC,CAAA;QAClD,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,EAAE;YAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;YAC5B,IAAI,KAAK,KAAK,eAAe;gBAAE,OAAM;YACrC,OAAO,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;QACrD,MAAM,gBAAgB,GAAG,WAAW,CAAC,GAAG,EAAE;YACxC,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAM;YACxB,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;QACrC,gBAAgB,CAAC,KAAK,EAAE,CAAA;QACxB,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;YACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;YACnB,aAAa,CAAC,gBAAgB,CAAC,CAAA;YAC/B,mBAAmB,EAAE,EAAE,CAAA;YACvB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC,EAAE,8BAA8B,CAAC,CAAA;IACpC,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,KAAiC;QACjD,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,IAAI,CAAC,aAAa,EAAE,CAAA;QACpB,IAAI,KAAK,CAAC,mBAAmB,KAAK,sBAAsB;eACnD,KAAK,CAAC,mBAAmB,KAAK,iBAAiB,EAAE,CAAC;YACrD,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,uEAAuE,CACxE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,uEAAuE,CACxE,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YAC7B,GAAG,KAAK;YACR,UAAU,EAAE,iBAAiB;YAC7B,cAAc,EAAE,0BAA0B,KAAK,CAAC,cAAc,EAAE;SACjE,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,CAAC,KAAwB,EAAE,KAAc;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAChD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;YACrC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;SAC3E,CAAC,CAAA;IACJ,CAAC;IAED,QAAQ,CAAC,KAAwB,EAAE,YAAoB,EAAE,eAAuB;QAC9E,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,IAAI,CAAC,aAAa,EAAE,CAAA;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;QACnE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,eAAe,CAAC,CAAA;IAClE,CAAC;IAED,QAAQ,CACN,KAAwB,EACxB,YAAoB,EACpB,eAAuB,EACvB,MAAgC;QAEhC,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;QACnE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,CAAC,CAAA;IAC1E,CAAC;IAED,qGAAqG;IACrG,WAAW,CACT,KAAsB,EACtB,cAAsB;QAEtB,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IACtD,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,uBAAuB,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB;YAC5D,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAC9C,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACpD,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAChD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACpD,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB;YACxD,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;SACvD,CAAC,CAAA;IACJ,CAAC;IAED,iFAAiF;IACjF,QAAQ;QACN,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;IAC9D,CAAC;IAED,+DAA+D;IAC/D,eAAe,CAAC,KAAwB;QACtC,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAClC,CAAC;IAEO,cAAc,CAAC,KAAwB;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,CAAA;QAC1D,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;YAClF,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,2BAA2B,CACjC,MAAuD;QAEvD,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,IAAI,CAAC,aAAa,EAAE,CAAA;QACpB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACtE,MAAM,IAAI,uBAAuB,CAAC,mBAAmB,EAAE,oCAAoC,CAAC,CAAA;QAC9F,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YACjC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;mBACzB,KAAK,CAAC,UAAU,KAAK,qBAAqB;mBAC1C,KAAK,CAAC,mBAAmB,KAAK,gBAAgB;mBAC9C,KAAK,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;gBAC9C,MAAM,IAAI,uBAAuB,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAA;YACpG,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE;gBACvE,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,MAAM,EAAE,SAAkB;gBAC1B,UAAU,EAAE,qBAA8B;gBAC1C,mBAAmB,EAAE,gBAAyB;gBAC9C,MAAM,EAAE,uBAAgC;gBACxC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,cAAc,EAAE,sBAAsB,KAAK,CAAC,cAAc,EAAE;aAC7D,CAAA;QACH,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACrD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,MAAM,EAAE,UAAmB;SAC5B,CAAC,CAAC,CAAC,CAAA;IACN,CAAC;IAEO,eAAe,CAAC,KAAwB,EAAE,MAAc,EAAE,UAAkB;QAClF,MAAM,MAAM,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,CAAA;QACrC,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;eAC1C,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC9E,MAAM,IAAI,uBAAuB,CAAC,eAAe,EAAE,6BAA6B,MAAM,2BAA2B,CAAC,CAAA;QACpH,CAAC;QACD,IAAI,KAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,KAAK,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAA;QAC/F,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,uBAAuB,CAAC,eAAe,EAAE,6BAA6B,MAAM,yBAAyB,CAAC,CAAA;QAClH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CACzC,KAAK,EACL,MAAM,EACN,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAwE,EAC5G,EAAE,cAAc,EAAE,cAAc,MAAM,IAAI,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE,EAAE,CACrE,CAAA;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAA;QAC9D,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,uBAAuB,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAA;IAC5G,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,uBAAuB,CAAC,UAAU,EAAE,yCAAyC,CAAC,CAAA;IAC5G,CAAC;;AAGH,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,CAAA"}

package/lib/sqlite.d.ts

@@ -0,0 +1,9 @@
+import { DatabaseSync } from 'node:sqlite';
+export declare const preferenceSchemaVersion = 1;
+export type PreferenceDatabaseErrorCode = 'invalid-path' | 'unsafe-file' | 'schema-too-new';
+export declare class PreferenceDatabaseError extends Error {
+    readonly code: PreferenceDatabaseErrorCode;
+    constructor(code: PreferenceDatabaseErrorCode, message: string);
+}
+export declare function openPreferenceDatabase(path: string): DatabaseSync;
+//# sourceMappingURL=sqlite.d.ts.map

package/lib/sqlite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,eAAO,MAAM,uBAAuB,IAAI,CAAA;AAExC,MAAM,MAAM,2BAA2B,GAAG,cAAc,GAAG,aAAa,GAAG,gBAAgB,CAAA;AAE3F,qBAAa,uBAAwB,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,2BAA2B;gBAAjC,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,MAAM;CAIxE;AAwLD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAqBjE"}

package/lib/sqlite.js

@@ -0,0 +1,214 @@
+import { chmodSync, closeSync, constants, lstatSync, mkdirSync, openSync, } from 'node:fs';
+import { dirname, isAbsolute } from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+export const preferenceSchemaVersion = 1;
+export class PreferenceDatabaseError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'PreferenceDatabaseError';
+    }
+}
+function assertSafeFile(path) {
+    const stat = lstatSync(path);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1) {
+        throw new PreferenceDatabaseError('unsafe-file', 'preference database must be one regular, unlinked file');
+    }
+    if ((stat.mode & 0o077) !== 0) {
+        throw new PreferenceDatabaseError('unsafe-file', 'preference database permissions must not allow group or other access');
+    }
+    const uid = process.getuid?.();
+    if (uid !== undefined && stat.uid !== uid) {
+        throw new PreferenceDatabaseError('unsafe-file', 'preference database must be owned by the current OS user');
+    }
+}
+function preparePrivateFile(path) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    try {
+        const descriptor = openSync(path, constants.O_CREAT | constants.O_EXCL | constants.O_RDWR, 0o600);
+        closeSync(descriptor);
+    }
+    catch (error) {
+        if (!(error instanceof Error && 'code' in error && error.code === 'EEXIST'))
+            throw error;
+    }
+    assertSafeFile(path);
+}
+function userVersion(database) {
+    return database.prepare('PRAGMA user_version').get().user_version;
+}
+function migrate(database) {
+    let transactionStarted = false;
+    try {
+        database.exec('BEGIN IMMEDIATE');
+        transactionStarted = true;
+        // The version must be read while holding the write reservation. Another process may
+        // have completed the same migration while this connection was waiting for the lock.
+        const current = userVersion(database);
+        if (current > preferenceSchemaVersion) {
+            throw new PreferenceDatabaseError('schema-too-new', `preference schema ${current} is newer than supported schema ${preferenceSchemaVersion}`);
+        }
+        if (current === preferenceSchemaVersion) {
+            database.exec('COMMIT');
+            transactionStarted = false;
+            return;
+        }
+        database.exec(`
+      CREATE TABLE preference_schema_meta (
+        key TEXT PRIMARY KEY,
+        value TEXT NOT NULL
+      ) STRICT;
+
+      CREATE TABLE preference_signals (
+        id TEXT PRIMARY KEY,
+        idempotency_key TEXT NOT NULL UNIQUE,
+        payload_hash TEXT NOT NULL,
+        scope_key TEXT NOT NULL,
+        workspace TEXT NOT NULL,
+        preset TEXT NOT NULL,
+        preference_key TEXT NOT NULL,
+        candidate_value TEXT NOT NULL,
+        risk_tier TEXT NOT NULL CHECK (risk_tier IN ('T0', 'T1', 'T2', 'T3')),
+        stance TEXT NOT NULL CHECK (stance IN ('support', 'contradict')),
+        actor_trust TEXT NOT NULL CHECK (actor_trust IN (
+          'owner-authenticated', 'delegated-authenticated', 'system-attested', 'unverified'
+        )),
+        interpretation_trust TEXT NOT NULL CHECK (interpretation_trust IN (
+          'explicit-selection', 'typed-feedback', 'behavioral-inference', 'model-inference'
+        )),
+        source TEXT NOT NULL CHECK (source IN (
+          'direct-owner-feedback', 'signed-ui-feedback', 'delivery-observation',
+          'evaluation-outcome', 'system-observation'
+        )),
+        occurred_at INTEGER NOT NULL,
+        recorded_at INTEGER NOT NULL
+      ) STRICT;
+      CREATE INDEX preference_signals_scope_key_time
+        ON preference_signals(scope_key, preference_key, occurred_at DESC, id DESC);
+
+      CREATE TABLE preference_hypotheses (
+        id TEXT PRIMARY KEY,
+        scope_key TEXT NOT NULL,
+        workspace TEXT NOT NULL,
+        preset TEXT NOT NULL,
+        preference_key TEXT NOT NULL,
+        candidate_value TEXT NOT NULL,
+        risk_tier TEXT NOT NULL CHECK (risk_tier IN ('T1', 'T2')),
+        claim_state TEXT NOT NULL CHECK (claim_state IN (
+          'tentative', 'proposed', 'confirmed', 'rejected', 'expired'
+        )),
+        effect_state TEXT NOT NULL CHECK (effect_state IN (
+          'shadow', 'active', 'suppressed', 'rolled-back', 'inactive'
+        )),
+        confidence_bps INTEGER NOT NULL,
+        contradiction_bps INTEGER NOT NULL,
+        supporting_signals INTEGER NOT NULL,
+        contradicting_signals INTEGER NOT NULL,
+        evidence_mass INTEGER NOT NULL,
+        expires_at INTEGER NOT NULL,
+        activated_at INTEGER,
+        rolled_back_at INTEGER,
+        version INTEGER NOT NULL,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL,
+        UNIQUE(scope_key, preference_key, candidate_value)
+      ) STRICT;
+      CREATE INDEX preference_hypotheses_scope_state
+        ON preference_hypotheses(scope_key, effect_state, updated_at DESC, id DESC);
+      CREATE UNIQUE INDEX preference_hypotheses_one_active_key
+        ON preference_hypotheses(scope_key, preference_key) WHERE effect_state = 'active';
+
+      CREATE TABLE preference_transitions (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        hypothesis_id TEXT NOT NULL,
+        from_claim_state TEXT,
+        to_claim_state TEXT NOT NULL,
+        from_effect_state TEXT,
+        to_effect_state TEXT NOT NULL,
+        reason TEXT NOT NULL CHECK (reason IN (
+          'created', 'evidence-updated', 'activated', 'owner-rejected', 'contradicted',
+          'regression', 'expired', 'superseded', 'operator-request'
+        )),
+        version INTEGER NOT NULL,
+        occurred_at INTEGER NOT NULL,
+        FOREIGN KEY (hypothesis_id) REFERENCES preference_hypotheses(id) ON DELETE RESTRICT
+      ) STRICT;
+      CREATE INDEX preference_transitions_hypothesis
+        ON preference_transitions(hypothesis_id, version DESC, id DESC);
+
+      CREATE TABLE preference_scope_tombstones (
+        id TEXT PRIMARY KEY,
+        scope_digest TEXT NOT NULL,
+        idempotency_key TEXT NOT NULL UNIQUE,
+        payload_hash TEXT NOT NULL,
+        forgotten_through INTEGER NOT NULL,
+        recorded_at INTEGER NOT NULL,
+        deleted_signals INTEGER NOT NULL,
+        deleted_hypotheses INTEGER NOT NULL
+      ) STRICT;
+      CREATE INDEX preference_scope_tombstones_scope
+        ON preference_scope_tombstones(scope_digest, forgotten_through DESC, id DESC);
+
+      INSERT INTO preference_schema_meta(key, value) VALUES ('schema-version', '1');
+      PRAGMA user_version = 1;
+    `);
+        database.exec('COMMIT');
+        transactionStarted = false;
+    }
+    catch (error) {
+        if (transactionStarted) {
+            try {
+                database.exec('ROLLBACK');
+            }
+            catch (rollbackError) {
+                throw new AggregateError([error, rollbackError], 'preference schema migration and rollback failed');
+            }
+        }
+        throw error;
+    }
+}
+const walRetryWait = new Int32Array(new SharedArrayBuffer(Int32Array.BYTES_PER_ELEMENT));
+function enableWal(database) {
+    const deadline = Date.now() + 5_000;
+    while (true) {
+        try {
+            const row = database.prepare('PRAGMA journal_mode = WAL').get();
+            if (row.journal_mode.toLowerCase() !== 'wal') {
+                throw new Error(`preference database refused WAL mode: ${row.journal_mode}`);
+            }
+            return;
+        }
+        catch (error) {
+            const retryable = error instanceof Error && /database is (?:busy|locked)/i.test(error.message);
+            if (!retryable || Date.now() >= deadline)
+                throw error;
+            Atomics.wait(walRetryWait, 0, 0, 10);
+        }
+    }
+}
+export function openPreferenceDatabase(path) {
+    if (path !== ':memory:' && !isAbsolute(path)) {
+        throw new PreferenceDatabaseError('invalid-path', 'preference database path must be absolute');
+    }
+    if (path !== ':memory:')
+        preparePrivateFile(path);
+    const database = new DatabaseSync(path);
+    try {
+        database.exec('PRAGMA foreign_keys = ON');
+        database.exec('PRAGMA busy_timeout = 5000');
+        database.exec('PRAGMA synchronous = FULL');
+        database.exec('PRAGMA secure_delete = ON');
+        migrate(database);
+        if (path !== ':memory:') {
+            enableWal(database);
+            chmodSync(path, 0o600);
+        }
+        return database;
+    }
+    catch (error) {
+        database.close();
+        throw error;
+    }
+}
+//# sourceMappingURL=sqlite.js.map

package/lib/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,GACT,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAA;AAIxC,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC3B;IAArB,YAAqB,IAAiC,EAAE,OAAe;QACrE,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,SAAI,GAAJ,IAAI,CAA6B;QAEpD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,uBAAuB,CAAC,aAAa,EAAE,wDAAwD,CAAC,CAAA;IAC5G,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,uBAAuB,CAAC,aAAa,EAAE,sEAAsE,CAAC,CAAA;IAC1H,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,uBAAuB,CAAC,aAAa,EAAE,0DAA0D,CAAC,CAAA;IAC9G,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACjG,SAAS,CAAC,UAAU,CAAC,CAAA;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAA;IAC1F,CAAC;IACD,cAAc,CAAC,IAAI,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,QAAsB;IACzC,OAAQ,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA+B,CAAC,YAAY,CAAA;AACjG,CAAC;AAED,SAAS,OAAO,CAAC,QAAsB;IACrC,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAChC,kBAAkB,GAAG,IAAI,CAAA;QAEzB,oFAAoF;QACpF,oFAAoF;QACpF,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;QACrC,IAAI,OAAO,GAAG,uBAAuB,EAAE,CAAC;YACtC,MAAM,IAAI,uBAAuB,CAC/B,gBAAgB,EAChB,qBAAqB,OAAO,mCAAmC,uBAAuB,EAAE,CACzF,CAAA;QACH,CAAC;QACD,IAAI,OAAO,KAAK,uBAAuB,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvB,kBAAkB,GAAG,KAAK,CAAA;YAC1B,OAAM;QACR,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAkGb,CAAC,CAAA;QACF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACvB,kBAAkB,GAAG,KAAK,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC3B,CAAC;YAAC,OAAO,aAAa,EAAE,CAAC;gBACvB,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,iDAAiD,CAAC,CAAA;YACrG,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAA;AAExF,SAAS,SAAS,CAAC,QAAsB;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;IACnC,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAA8B,CAAA;YAC3F,IAAI,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAA;YAC9E,CAAC;YACD,OAAM;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,IAAI,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9F,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACrD,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,uBAAuB,CAAC,cAAc,EAAE,2CAA2C,CAAC,CAAA;IAChG,CAAC;IACD,IAAI,IAAI,KAAK,UAAU;QAAE,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACjD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;QACzC,QAAQ,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;QAC3C,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QAC1C,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QAC1C,OAAO,CAAC,QAAQ,CAAC,CAAA;QACjB,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,SAAS,CAAC,QAAQ,CAAC,CAAA;YACnB,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACxB,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,KAAK,EAAE,CAAA;QAChB,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/store.d.ts

@@ -0,0 +1,47 @@
+import type { PreferenceHealth, PreferenceHypothesis, PreferenceMaintenanceResult, PreferenceRollbackReason, PreferenceScope, PreferenceSignalInput, StoredPreferenceSignal } from './types.js';
+export type PreferenceStoreErrorCode = 'conflict' | 'disabled' | 'forbidden-tier' | 'idempotency-conflict' | 'invalid-input' | 'not-found' | 'not-ready' | 'privacy-purge-pending' | 'scope-forgotten';
+export declare class PreferenceStoreError extends Error {
+    readonly code: PreferenceStoreErrorCode;
+    constructor(code: PreferenceStoreErrorCode, message: string);
+}
+export interface PreferenceStoreOptions {
+    path: string;
+    now?: () => number;
+    signalTtlMs: number;
+    hypothesisTtlMs: number;
+    minSignalsForActivation: number;
+    minConfidenceBps: number;
+    maxContradictionBps: number;
+    maxActiveOverlays: number;
+    maxReviewHypotheses: number;
+    maxOverlayBytes: number;
+}
+export interface PreferenceForgetResult {
+    replayed: boolean;
+    forgottenThrough: number;
+    deletedSignals: number;
+    deletedHypotheses: number;
+}
+export declare function canonicalPreferenceScope(input: PreferenceScope): {
+    scope: PreferenceScope;
+    scopeKey: string;
+    scopeDigest: string;
+};
+export declare class PreferenceStore {
+    #private;
+    constructor(options: PreferenceStoreOptions);
+    appendSignal(input: PreferenceSignalInput): StoredPreferenceSignal;
+    /** Atomically record one small producer batch and reconcile each affected key once. */
+    appendSignals(inputs: readonly PreferenceSignalInput[]): StoredPreferenceSignal[];
+    list(scopeInput: PreferenceScope, limit?: number): PreferenceHypothesis[];
+    get(scopeInput: PreferenceScope, hypothesisIdInput: string): PreferenceHypothesis | undefined;
+    activate(scopeInput: PreferenceScope, hypothesisIdInput: string, expectedVersion: number): PreferenceHypothesis;
+    rollback(scopeInput: PreferenceScope, hypothesisIdInput: string, expectedVersion: number, reasonInput: PreferenceRollbackReason): PreferenceHypothesis;
+    overlay(scopeInput: PreferenceScope): string | undefined;
+    forgetScope(scopeInput: PreferenceScope, idempotencyKeyInput: string): PreferenceForgetResult;
+    health(): PreferenceHealth;
+    /** Delete one bounded batch whose evidence-retention window has elapsed. */
+    maintain(limit?: number): PreferenceMaintenanceResult;
+    close(): void;
+}
+//# sourceMappingURL=store.d.ts.map

package/lib/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAIV,gBAAgB,EAChB,oBAAoB,EAEpB,2BAA2B,EAC3B,wBAAwB,EACxB,eAAe,EACf,qBAAqB,EAGrB,sBAAsB,EACvB,MAAM,YAAY,CAAA;AAEnB,MAAM,MAAM,wBAAwB,GAChC,UAAU,GACV,UAAU,GACV,gBAAgB,GAChB,sBAAsB,GACtB,eAAe,GACf,WAAW,GACX,WAAW,GACX,uBAAuB,GACvB,iBAAiB,CAAA;AAErB,qBAAa,oBAAqB,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,wBAAwB;gBAA9B,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM;CAIrE;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,iBAAiB,EAAE,MAAM,CAAA;IACzB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,OAAO,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AAuFD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,eAAe,GAAG;IAChE,KAAK,EAAE,eAAe,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;CACpB,CAaA;AAkFD,qBAAa,eAAe;;gBAMd,OAAO,EAAE,sBAAsB;IAe3C,YAAY,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB;IAIlE,uFAAuF;IACvF,aAAa,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,GAAG,sBAAsB,EAAE;IAkFjF,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,KAAK,SAAoC,GAAG,oBAAoB,EAAE;IAsBpG,GAAG,CAAC,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAW7F,QAAQ,CAAC,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,oBAAoB;IAkE/G,QAAQ,CACN,UAAU,EAAE,eAAe,EAC3B,iBAAiB,EAAE,MAAM,EACzB,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,wBAAwB,GACpC,oBAAoB;IAoCvB,OAAO,CAAC,UAAU,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS;IAwBxD,WAAW,CACT,UAAU,EAAE,eAAe,EAC3B,mBAAmB,EAAE,MAAM,GAC1B,sBAAsB;IAsEzB,MAAM,IAAI,gBAAgB;IAiC1B,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,SAAM,GAAG,2BAA2B;IA8BlD,KAAK,IAAI,IAAI;CAgUd"}