@getrift/rift 0.1.0-beta.20 → 0.1.0-beta.22

package/dist/src/ingestion/cursor/vscdb-reader.js

@@ -0,0 +1,113 @@
+/**
+ * Read-only reader for Cursor's `state.vscdb` SQLite stores.
+ *
+ * DISCOVERY SLICE ONLY — this is the single I/O boundary for Cursor capture.
+ * It is deliberately read-only by THREE independent guarantees:
+ *   1. SQLite is opened with the `immutable=1` URI flag, which forbids any
+ *      write and never creates/touches the -wal/-shm sidecar files.
+ *   2. Only SELECT statements are ever issued.
+ *   3. We shell out to the system `sqlite3` binary rather than linking a
+ *      writable driver. (Cursor itself holds the db open under WAL; immutable
+ *      lets us read a consistent snapshot without contending for the lock.)
+ *
+ * Why shell out instead of a native dep: Rift's Node engine floor still
+ * includes Node 20 (no `node:sqlite`), and we don't want to pull a native
+ * addon (better-sqlite3) into the tree for a read-only probe. macOS always
+ * ships `/usr/bin/sqlite3`, and Cursor is macOS-first. The future capture slice
+ * can revisit this (node:sqlite once the floor rises). See the discovery doc.
+ *
+ * PRIVACY: by default we fetch only the session index + per-session metadata
+ * (`composer.composerHeaders`, `composerData:*`). We never SELECT `cursorAuth/*`
+ * (access/refresh tokens) or `secret://*` (MCP OAuth secrets), and we do not
+ * fetch bubble bodies (`bubbleId:*`, the actual message text) unless the caller
+ * explicitly opts in.
+ */
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+/** Default macOS location of Cursor's per-user application support dir. */
+export function defaultCursorDir() {
+    return path.join(os.homedir(), "Library", "Application Support", "Cursor");
+}
+/** Global KV store path under a Cursor application-support dir. */
+export function globalStatePath(cursorDir) {
+    return path.join(cursorDir, "User", "globalStorage", "state.vscdb");
+}
+export class CursorReaderError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = "CursorReaderError";
+    }
+}
+function sqlite3Available() {
+    try {
+        execFileSync("sqlite3", ["--version"], { stdio: ["ignore", "ignore", "ignore"] });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Run a single SELECT against an immutable (read-only) view of the db and
+ * return rows as objects. Uses `.mode json` so values come back as strings.
+ */
+function selectJson(dbPath, sql) {
+    const uri = `file:${dbPath}?immutable=1`;
+    let stdout;
+    try {
+        stdout = execFileSync("sqlite3", ["-cmd", ".mode json", uri, sql], {
+            encoding: "utf-8",
+            maxBuffer: 256 * 1024 * 1024, // composer blobs can be large
+        });
+    }
+    catch (err) {
+        throw new CursorReaderError(`sqlite3 query failed: ${err instanceof Error ? err.message : String(err)}`, "query_failed");
+    }
+    const trimmed = stdout.trim();
+    if (!trimmed)
+        return [];
+    try {
+        return JSON.parse(trimmed);
+    }
+    catch (err) {
+        throw new CursorReaderError(`failed to parse sqlite3 JSON output: ${err instanceof Error ? err.message : String(err)}`, "query_failed");
+    }
+}
+function toKvRows(records) {
+    const rows = [];
+    for (const rec of records) {
+        if (typeof rec.key === "string" && typeof rec.value === "string") {
+            rows.push({ key: rec.key, value: rec.value });
+        }
+    }
+    return rows;
+}
+/**
+ * Read the global Cursor state.vscdb read-only and return raw rows for the pure
+ * discovery layer. Throws {@link CursorReaderError} with a stable `code` for the
+ * three expected failure modes so callers can render friendly guidance.
+ */
+export function readCursorGlobalState(options = {}) {
+    const cursorDir = options.cursorDir ?? defaultCursorDir();
+    const dbPath = globalStatePath(cursorDir);
+    if (!fs.existsSync(dbPath)) {
+        throw new CursorReaderError(`Cursor state.vscdb not found at ${dbPath}`, "db_missing");
+    }
+    if (!sqlite3Available()) {
+        throw new CursorReaderError("The `sqlite3` binary is required to read Cursor's store but was not found on PATH.", "sqlite_missing");
+    }
+    // Session index (ItemTable). Single, small row.
+    const itemTable = toKvRows(selectJson(dbPath, "SELECT key, value FROM ItemTable WHERE key = 'composer.composerHeaders'"));
+    // Per-session metadata (cursorDiskKV). Small; never tokens/secrets.
+    const composerData = toKvRows(selectJson(dbPath, "SELECT key, value FROM cursorDiskKV WHERE key LIKE 'composerData:%'"));
+    const cursorDiskKV = [...composerData];
+    if (options.includeBubbles) {
+        cursorDiskKV.push(...toKvRows(selectJson(dbPath, "SELECT key, value FROM cursorDiskKV WHERE key LIKE 'bubbleId:%'")));
+    }
+    return { dbPath, rows: { itemTable, cursorDiskKV } };
+}
+//# sourceMappingURL=vscdb-reader.js.map

package/dist/src/ingestion/cursor/vscdb-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vscdb-reader.js","sourceRoot":"","sources":["../../../../src/ingestion/cursor/vscdb-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,IAAI,CACd,EAAE,CAAC,OAAO,EAAE,EACZ,SAAS,EACT,qBAAqB,EACrB,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;AACtE,CAAC;AASD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAG/B;IAFX,YACE,OAAe,EACN,IAGS;QAElB,KAAK,CAAC,OAAO,CAAC,CAAC;QALN,SAAI,GAAJ,IAAI,CAGK;QAGlB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,YAAY,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,MAAc,EAAE,GAAW;IAC7C,MAAM,GAAG,GAAG,QAAQ,MAAM,cAAc,CAAC;IACzC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE;YACjE,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,8BAA8B;SAC7D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CACzB,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC3E,cAAc,CACf,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkC,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CACzB,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC1F,cAAc,CACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,OAAsC;IACtD,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAuB,EAAE;IAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAE1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,iBAAiB,CACzB,mCAAmC,MAAM,EAAE,EAC3C,YAAY,CACb,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,iBAAiB,CACzB,oFAAoF,EACpF,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,MAAM,SAAS,GAAG,QAAQ,CACxB,UAAU,CACR,MAAM,EACN,yEAAyE,CAC1E,CACF,CAAC;IAEF,oEAAoE;IACpE,MAAM,YAAY,GAAG,QAAQ,CAC3B,UAAU,CACR,MAAM,EACN,qEAAqE,CACtE,CACF,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;IAEvC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,YAAY,CAAC,IAAI,CACf,GAAG,QAAQ,CACT,UAAU,CACR,MAAM,EACN,iEAAiE,CAClE,CACF,CACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC;AACvD,CAAC"}

package/dist/src/ingestion/cursor/workspace-root.d.ts

@@ -0,0 +1,96 @@
+/** Sentinel `workspaceIdentifier.id` Cursor uses when no folder is open. */
+export declare const EMPTY_WINDOW_ID = "empty-window";
+/** The `uri` object Cursor embeds in a folder-bound composer header. */
+export interface CursorWorkspaceUri {
+    scheme?: string;
+    fsPath?: string;
+    path?: string;
+    external?: string;
+}
+/** A composer header's `workspaceIdentifier` (id + optional inline uri). */
+export interface CursorWorkspaceIdentifier {
+    id?: string;
+    uri?: CursorWorkspaceUri | null;
+}
+/**
+ * Outcome of resolving a workspace identifier to a project root. Every
+ * non-`resolved` status is a deliberate, named outcome — the capture slice must
+ * branch on these rather than ever fabricate a root.
+ */
+export type ProjectRootResolution = {
+    status: "resolved";
+    /** Absolute filesystem path of the project root. */
+    root: string;
+    /** Which link produced the root. */
+    source: "header_uri" | "workspace_json";
+    workspaceId: string | null;
+}
+/** No folder open (`empty-window`). Expected; not attributable. */
+ | {
+    status: "empty_window";
+    workspaceId: "empty-window";
+}
+/** Multi-root `.code-workspace`; root ambiguous. */
+ | {
+    status: "multi_root";
+    workspaceId: string;
+    configPath: string | null;
+}
+/** Non-`file` scheme (remote/ssh/wsl/devcontainer); not a local path. */
+ | {
+    status: "remote";
+    workspaceId: string | null;
+    scheme: string;
+}
+/** Id present but no inline uri and no readable `workspace.json`. */
+ | {
+    status: "unresolved";
+    workspaceId: string | null;
+};
+/**
+ * Parse a `workspace.json` file's text. Returns the folder root (single-folder
+ * window), a multi-root marker (`.code-workspace`), or unknown. Pure.
+ */
+export declare function parseWorkspaceJson(text: string): {
+    kind: "folder";
+    scheme: string | null;
+    root: string | null;
+} | {
+    kind: "multi_root";
+    configPath: string | null;
+} | {
+    kind: "unknown";
+};
+/** Injected dependencies for the pure resolver. */
+export interface ResolveOptions {
+    /**
+     * Returns the raw text of `workspaceStorage/<id>/workspace.json`, or null if
+     * absent. Injected so the resolver stays pure and fully fixture-testable.
+     * Used only as a fallback when the header carries no inline uri.
+     */
+    readWorkspaceJson?: (workspaceId: string) => string | null;
+}
+/**
+ * Resolve a composer header's `workspaceIdentifier` to a project root. Pure:
+ * the only I/O is the injected {@link ResolveOptions.readWorkspaceJson}. Tries
+ * the inline header uri first (current builds), then the on-disk
+ * `workspace.json` join (legacy builds / uri stripped). Never guesses — every
+ * non-resolvable case maps to an explicit status.
+ */
+export declare function resolveProjectRoot(identifier: CursorWorkspaceIdentifier | null | undefined, options?: ResolveOptions): ProjectRootResolution;
+/** Path to a workspace's `workspace.json` under a Cursor app-support dir. */
+export declare function workspaceJsonPath(cursorDir: string, workspaceId: string): string;
+/** Read `workspace.json` text read-only; null if it does not exist / unreadable. */
+export declare function readWorkspaceJsonFromDisk(cursorDir: string, workspaceId: string): string | null;
+/**
+ * Filesystem-backed resolution: resolve a header's identifier against a real
+ * Cursor app-support dir, reading `workspace.json` read-only when needed.
+ */
+export declare function resolveCursorProjectRoot(identifier: CursorWorkspaceIdentifier | null | undefined, cursorDir: string): ProjectRootResolution;
+/**
+ * Resolve a project root from a workspace id alone (no inline uri available).
+ * Used by the probe to upgrade `unresolved` discovery candidates on legacy
+ * builds via the on-disk `workspace.json` join.
+ */
+export declare function resolveProjectRootByWorkspaceId(cursorDir: string, workspaceId: string): ProjectRootResolution;
+//# sourceMappingURL=workspace-root.d.ts.map

package/dist/src/ingestion/cursor/workspace-root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-root.d.ts","sourceRoot":"","sources":["../../../../src/ingestion/cursor/workspace-root.ts"],"names":[],"mappings":"AAsDA,4EAA4E;AAC5E,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAE9C,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,4EAA4E;AAC5E,MAAM,WAAW,yBAAyB;IACxC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAAC;IACxC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AACH,mEAAmE;GACjE;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,cAAc,CAAA;CAAE;AACzD,oDAAoD;GAClD;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAC1E,yEAAyE;GACvE;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAClE,qEAAqE;GACnE;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAoCzD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,GAEV;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAkBtB;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC5D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,yBAAyB,GAAG,IAAI,GAAG,SAAS,EACxD,OAAO,GAAE,cAAmB,GAC3B,qBAAqB,CAqCvB;AAED,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED,oFAAoF;AACpF,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,IAAI,CAMf;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,yBAAyB,GAAG,IAAI,GAAG,SAAS,EACxD,SAAS,EAAE,MAAM,GAChB,qBAAqB,CAIvB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,qBAAqB,CAEvB"}

package/dist/src/ingestion/cursor/workspace-root.js

@@ -0,0 +1,187 @@
+/**
+ * Resolve a native Cursor session's `workspaceIdentifier` to a filesystem
+ * project root — the missing half of Cursor project-root attribution.
+ *
+ * DISCOVERY SLICE ONLY. Read-only, no LanceDB writes, no daemon, no capture.
+ * The pure resolver ({@link resolveProjectRoot}) takes an injected
+ * `readWorkspaceJson` so it is exhaustively unit-testable from synthetic
+ * metadata with no filesystem and no real Cursor install. The fs-backed wrapper
+ * ({@link resolveCursorProjectRoot}) only reads `workspace.json` (a tiny
+ * `{ "folder": "file://…" }` file) — never the workspace's `state.vscdb`,
+ * never tokens, never message content.
+ *
+ * ## The join contract (empirically verified, macOS Cursor "glass", 2026-06)
+ *
+ * On opening a folder window, Cursor writes the composer header's
+ * `workspaceIdentifier` with TWO independent links to the project root:
+ *
+ *   "workspaceIdentifier": {
+ *     "id": "<workspaceStorageHash>",          // e.g. "11ed9332b5bd79fd69ad93a7636abd28"
+ *     "uri": { "scheme": "file",
+ *              "fsPath": "/Users/me/projects/foo",
+ *              "path":   "/Users/me/projects/foo",
+ *              "external": "file:///Users/me/projects/foo" }
+ *   }
+ *
+ *   1. INLINE (primary, current builds): `uri.fsPath` IS the project root.
+ *      No disk lookup needed.
+ *   2. ON-DISK (authoritative fallback): `id` equals the directory name under
+ *      `~/Library/Application Support/Cursor/User/workspaceStorage/<id>/`,
+ *      whose `workspace.json` holds `{ "folder": "file://<root>" }`. Verified:
+ *      the same hash appears as both `workspaceIdentifier.id` and the storage
+ *      dir name, and its `workspace.json.folder` matches `uri.fsPath`.
+ *
+ * The storage hash is NOT a recomputable md5 of the folder URI (checked: no
+ * simple encoding reproduces it) — so resolution MUST read `workspace.json` (or
+ * trust the inline uri), never re-derive the hash.
+ *
+ * ## Failure modes (all first-class — never guessed)
+ *   - `id === "empty-window"` and no `uri`  → no folder open. NOT attributable.
+ *     This is the common case on a machine with only empty windows.
+ *   - `workspace.json` has `"workspace": "…code-workspace"` (multi-root) instead
+ *     of `"folder"` → project root is ambiguous. Do not pick one.
+ *   - `uri.scheme` / `folder` scheme is not `file` (ssh-remote, wsl, devcontainer)
+ *     → not a local path.
+ *   - `id` present but `workspace.json` missing/purged and no inline `uri`
+ *     → unresolved.
+ *
+ * The capture slice should scope to a project root ONLY on `resolved`; for every
+ * other status, capture WITHOUT project scoping (or behind a user-confirmed
+ * fallback). See docs/cursor-capture-discovery.md.
+ */
+import fs from "node:fs";
+import path from "node:path";
+/** Sentinel `workspaceIdentifier.id` Cursor uses when no folder is open. */
+export const EMPTY_WINDOW_ID = "empty-window";
+/** Parse a URI string into `{ scheme, path }`; `path` is null for non-file. */
+function parseUriString(uri) {
+    let parsed;
+    try {
+        parsed = new URL(uri);
+    }
+    catch {
+        return { scheme: null, path: null };
+    }
+    const scheme = parsed.protocol.replace(/:$/, "");
+    if (scheme !== "file")
+        return { scheme, path: null };
+    // file:///abs/path -> decode percent-encoding (spaces, accents in client dirs)
+    return { scheme, path: decodeURIComponent(parsed.pathname) };
+}
+/** Derive `{ scheme, root }` from an inline header `uri` object. */
+function rootFromInlineUri(uri) {
+    if (!uri || typeof uri !== "object")
+        return { scheme: null, root: null };
+    const scheme = typeof uri.scheme === "string" ? uri.scheme : null;
+    if (scheme && scheme !== "file")
+        return { scheme, root: null };
+    // fsPath / path are already decoded absolute paths in Cursor's serialization.
+    const direct = (typeof uri.fsPath === "string" && uri.fsPath) ||
+        (typeof uri.path === "string" && uri.path) ||
+        null;
+    if (direct)
+        return { scheme: scheme ?? "file", root: direct };
+    if (typeof uri.external === "string") {
+        const ext = parseUriString(uri.external);
+        return { scheme: ext.scheme ?? scheme, root: ext.path };
+    }
+    return { scheme, root: null };
+}
+/**
+ * Parse a `workspace.json` file's text. Returns the folder root (single-folder
+ * window), a multi-root marker (`.code-workspace`), or unknown. Pure.
+ */
+export function parseWorkspaceJson(text) {
+    let obj;
+    try {
+        obj = JSON.parse(text);
+    }
+    catch {
+        return { kind: "unknown" };
+    }
+    if (!obj || typeof obj !== "object")
+        return { kind: "unknown" };
+    const rec = obj;
+    if (typeof rec.folder === "string") {
+        const { scheme, path: p } = parseUriString(rec.folder);
+        return { kind: "folder", scheme, root: p };
+    }
+    if (typeof rec.workspace === "string") {
+        const { path: p } = parseUriString(rec.workspace);
+        return { kind: "multi_root", configPath: p };
+    }
+    return { kind: "unknown" };
+}
+/**
+ * Resolve a composer header's `workspaceIdentifier` to a project root. Pure:
+ * the only I/O is the injected {@link ResolveOptions.readWorkspaceJson}. Tries
+ * the inline header uri first (current builds), then the on-disk
+ * `workspace.json` join (legacy builds / uri stripped). Never guesses — every
+ * non-resolvable case maps to an explicit status.
+ */
+export function resolveProjectRoot(identifier, options = {}) {
+    const id = typeof identifier?.id === "string" ? identifier.id : null;
+    // 1. Sentinel: no folder open. Common, expected, not attributable.
+    if (id === EMPTY_WINDOW_ID) {
+        return { status: "empty_window", workspaceId: EMPTY_WINDOW_ID };
+    }
+    // 2. Inline uri (Cursor embeds the folder directly on the header).
+    const inline = rootFromInlineUri(identifier?.uri);
+    if (inline.scheme && inline.scheme !== "file") {
+        return { status: "remote", workspaceId: id, scheme: inline.scheme };
+    }
+    if (inline.root) {
+        return { status: "resolved", root: inline.root, source: "header_uri", workspaceId: id };
+    }
+    // 3. On-disk fallback: join id -> workspaceStorage/<id>/workspace.json.
+    if (id && options.readWorkspaceJson) {
+        const text = options.readWorkspaceJson(id);
+        if (text) {
+            const parsed = parseWorkspaceJson(text);
+            if (parsed.kind === "folder") {
+                if (parsed.scheme && parsed.scheme !== "file") {
+                    return { status: "remote", workspaceId: id, scheme: parsed.scheme };
+                }
+                if (parsed.root) {
+                    return { status: "resolved", root: parsed.root, source: "workspace_json", workspaceId: id };
+                }
+            }
+            else if (parsed.kind === "multi_root") {
+                return { status: "multi_root", workspaceId: id, configPath: parsed.configPath };
+            }
+        }
+    }
+    // 4. Nothing reliable — do not guess.
+    return { status: "unresolved", workspaceId: id };
+}
+/** Path to a workspace's `workspace.json` under a Cursor app-support dir. */
+export function workspaceJsonPath(cursorDir, workspaceId) {
+    return path.join(cursorDir, "User", "workspaceStorage", workspaceId, "workspace.json");
+}
+/** Read `workspace.json` text read-only; null if it does not exist / unreadable. */
+export function readWorkspaceJsonFromDisk(cursorDir, workspaceId) {
+    try {
+        return fs.readFileSync(workspaceJsonPath(cursorDir, workspaceId), "utf-8");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Filesystem-backed resolution: resolve a header's identifier against a real
+ * Cursor app-support dir, reading `workspace.json` read-only when needed.
+ */
+export function resolveCursorProjectRoot(identifier, cursorDir) {
+    return resolveProjectRoot(identifier, {
+        readWorkspaceJson: (workspaceId) => readWorkspaceJsonFromDisk(cursorDir, workspaceId),
+    });
+}
+/**
+ * Resolve a project root from a workspace id alone (no inline uri available).
+ * Used by the probe to upgrade `unresolved` discovery candidates on legacy
+ * builds via the on-disk `workspace.json` join.
+ */
+export function resolveProjectRootByWorkspaceId(cursorDir, workspaceId) {
+    return resolveCursorProjectRoot({ id: workspaceId }, cursorDir);
+}
+//# sourceMappingURL=workspace-root.js.map

package/dist/src/ingestion/cursor/workspace-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-root.js","sourceRoot":"","sources":["../../../../src/ingestion/cursor/workspace-root.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAAC;AAuC9C,+EAA+E;AAC/E,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrD,+EAA+E;IAC/E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,oEAAoE;AACpE,SAAS,iBAAiB,CACxB,GAA0C;IAE1C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/D,8EAA8E;IAC9E,MAAM,MAAM,GACV,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC;QAC9C,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC;QAC1C,IAAI,CAAC;IACP,IAAI,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9D,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY;IAKZ,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAwD,EACxD,UAA0B,EAAE;IAE5B,MAAM,EAAE,GAAG,OAAO,UAAU,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAErE,mEAAmE;IACnE,IAAI,EAAE,KAAK,eAAe,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IAClE,CAAC;IAED,mEAAmE;IACnE,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,wEAAwE;IACxE,IAAI,EAAE,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC9C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtE,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAChB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;gBAC9F,CAAC;YACH,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACxC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,WAAmB;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AACzF,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,WAAmB;IAEnB,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAwD,EACxD,SAAiB;IAEjB,OAAO,kBAAkB,CAAC,UAAU,EAAE;QACpC,iBAAiB,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,yBAAyB,CAAC,SAAS,EAAE,WAAW,CAAC;KACtF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,SAAiB,EACjB,WAAmB;IAEnB,OAAO,wBAAwB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC"}

package/dist/src/ingestion/indexer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"indexer.d.ts","sourceRoot":"","sources":["../../../src/ingestion/indexer.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AASxF,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,wEAAwE;IACxE,SAAS,CAAC,EAAE,iBAAiB,GAAG,uBAAuB,CAAC;IACxD;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;gBAE3B,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,aAAa;IAK/D;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;YAcpC,YAAY;YAiEZ,YAAY;CAK3B"}
+{"version":3,"file":"indexer.d.ts","sourceRoot":"","sources":["../../../src/ingestion/indexer.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAYxF,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,wEAAwE;IACxE,SAAS,CAAC,EAAE,iBAAiB,GAAG,uBAAuB,CAAC;IACxD;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;gBAE3B,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,aAAa;IAK/D;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;YAcpC,YAAY;YAuEZ,YAAY;CAK3B"}

package/dist/src/ingestion/indexer.js

@@ -12,6 +12,9 @@ import { validatePath, validateUnlinkPath } from "../security/paths.js";
 import { writeSkipQuarantine } from "./skip-quarantine.js";
 import { recordEmbed } from "../observability/embedding-events.js";
 import { recordIndexWrite } from "../observability/index-events.js";
+import { chunkText, chunkingEnabled } from "./chunk-text.js";
+import { docChunkId, docChunkMetadata } from "./chunk-meta.js";
+import { eqFilter } from "../storage/filter.js";
 /**
  * Deterministic row ID from the canonical source path.
  * Same file always gets the same ID, enabling upsert via delete+add.
@@ -48,10 +51,11 @@ export class Indexer {
         // strings with HTTP 400, and indexing an empty row produces nothing
         // searchable anyway. Quarantine the skip so it's visible (not stderr-only)
         // and remove any stale row from a prior good extraction of the same path.
+        const table = getTable(this.config.tableName ?? "structured_docs");
+        const sourcePathFilter = eqFilter("source_path", filePath);
         if (isBlank(doc.content)) {
-            const id = fileId(filePath);
-            const table = getTable(this.config.tableName ?? "structured_docs");
-            await table.delete(`id = '${id}'`);
+            // Remove the whole prior set (single row or chunk set) for this path.
+            await table.delete(sourcePathFilter);
             await writeSkipQuarantine(this.config.dataDir, {
                 reason: "empty_extracted_content",
                 source_path: filePath,
@@ -59,41 +63,46 @@ export class Indexer {
             });
             return;
         }
-        const embeddingVec = await recordEmbed(this.config.dataDir, this.embedding, {
-            pipeline: this.config.sourceType === "filesystem_watched"
-                ? "watcher"
-                : "scheduled_scan",
-            operation: "document_embedding",
-            input_count: 1,
-        }, () => this.embedding.embed(doc.content));
-        const id = fileId(filePath);
-        const table = getTable(this.config.tableName ?? "structured_docs");
-        // Upsert: delete existing row (if any), then add new one.
-        await table.delete(`id = '${id}'`);
-        const row = {
-            id,
-            source_path: filePath,
-            content: doc.content,
-            embedding: embeddingVec,
-            source_type: this.config.sourceType,
-            source_scope: this.config.sourceScope,
-            client_name: this.config.clientName,
-            indexed_at: new Date().toISOString(),
-            metadata: JSON.stringify(doc.metadata),
-        };
+        const pipeline = this.config.sourceType === "filesystem_watched" ? "watcher" : "scheduled_scan";
+        const baseId = fileId(filePath);
+        // Chunk (flag-gated). chunkText short-circuits small docs to a single
+        // chunk, so a below-threshold doc — and every doc with the flag off —
+        // produces exactly one unmarked row, byte-identical to the prior behavior.
+        const chunks = chunkingEnabled() ? chunkText(doc.content) : [doc.content];
+        const count = chunks.length;
+        // Data-safety: embed the FULL new set BEFORE the destructive delete, so a
+        // failure leaves the old set intact (filesystem is the source of truth).
+        const indexedAt = new Date().toISOString();
+        const rows = [];
+        for (let i = 0; i < count; i++) {
+            const chunk = chunks[i];
+            const embeddingVec = await recordEmbed(this.config.dataDir, this.embedding, { pipeline, operation: "document_embedding", input_count: 1 }, () => this.embedding.embed(chunk));
+            rows.push({
+                id: count > 1 ? docChunkId(baseId, i) : baseId,
+                source_path: filePath,
+                content: chunk,
+                embedding: embeddingVec,
+                source_type: this.config.sourceType,
+                source_scope: this.config.sourceScope,
+                client_name: this.config.clientName,
+                indexed_at: indexedAt,
+                metadata: JSON.stringify(docChunkMetadata(doc.metadata, i, count)),
+            });
+        }
+        // Upsert by source_path: removes any prior chunk set AND any legacy
+        // single row for this file before writing the new set (no dup/stale chunks).
+        await table.delete(sourcePathFilter);
         await recordIndexWrite(this.config.dataDir, {
             table: this.config.tableName ?? "structured_docs",
-            pipeline: this.config.sourceType === "filesystem_watched"
-                ? "watcher"
-                : "scheduled_scan",
+            pipeline,
             operation: "structured_doc_upsert",
-            row_count: 1,
-        }, () => table.add([row]));
+            row_count: rows.length,
+        }, () => table.add(rows));
     }
     async handleDelete(filePath) {
-        const id = fileId(filePath);
         const table = getTable(this.config.tableName ?? "structured_docs");
-        await table.delete(`id = '${id}'`);
+        // Delete by source_path so all chunks of the file are removed together.
+        await table.delete(eqFilter("source_path", filePath));
     }
 }
 function isBlank(s) {

package/dist/src/ingestion/indexer.js.map

@@ -1 +1 @@
-{"version":3,"file":"indexer.js","sourceRoot":"","sources":["../../../src/ingestion/indexer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAuBpE;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,UAAkB;IACvC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,OAAO,OAAO;IACD,SAAS,CAAoB;IAC7B,MAAM,CAAgB;IAEvC,YAAY,SAA4B,EAAE,MAAqB;QAC7D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,KAAgB;QAChC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC3E,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAErE,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;YAAE,OAAO;QAEpC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAgB;QACzC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEpC,0EAA0E;QAC1E,oEAAoE;QACpE,2EAA2E;QAC3E,0EAA0E;QAC1E,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC;YACnE,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;gBAC7C,MAAM,EAAE,yBAAyB;gBACjC,WAAW,EAAE,QAAQ;gBACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,WAAW,CACpC,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,SAAS,EACd;YACE,QAAQ,EACN,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,oBAAoB;gBAC7C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,gBAAgB;YACtB,SAAS,EAAE,oBAAoB;YAC/B,WAAW,EAAE,CAAC;SACf,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CACxC,CAAC;QACF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC;QAEnE,0DAA0D;QAC1D,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEnC,MAAM,GAAG,GAAqB;YAC5B,EAAE;YACF,WAAW,EAAE,QAAQ;YACrB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,YAAY;YACvB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YACnC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YACnC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;SACvC,CAAC;QAEF,MAAM,gBAAgB,CACpB,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB;YACE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,iBAAiB;YACjD,QAAQ,EACN,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,oBAAoB;gBAC7C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,gBAAgB;YACtB,SAAS,EAAE,uBAAuB;YAClC,SAAS,EAAE,CAAC;SACb,EACD,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CACvB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAgB;QACzC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC;QACnE,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;CACF;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"indexer.js","sourceRoot":"","sources":["../../../src/ingestion/indexer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAuBhD;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,UAAkB;IACvC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,OAAO,OAAO;IACD,SAAS,CAAoB;IAC7B,MAAM,CAAgB;IAEvC,YAAY,SAA4B,EAAE,MAAqB;QAC7D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,KAAgB;QAChC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC3E,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAErE,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;YAAE,OAAO;QAEpC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAgB;QACzC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEpC,0EAA0E;QAC1E,oEAAoE;QACpE,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC;QACnE,MAAM,gBAAgB,GAAG,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAE3D,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,sEAAsE;YACtE,MAAM,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACrC,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;gBAC7C,MAAM,EAAE,yBAAyB;gBACjC,WAAW,EAAE,QAAQ;gBACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GACZ,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACjF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEhC,sEAAsE;QACtE,sEAAsE;QACtE,2EAA2E;QAC3E,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAE5B,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAuB,EAAE,CAAC;QACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;YACzB,MAAM,YAAY,GAAG,MAAM,WAAW,CACpC,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,SAAS,EACd,EAAE,QAAQ,EAAE,SAAS,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC,EAAE,EAC7D,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAClC,CAAC;YACF,IAAI,CAAC,IAAI,CAAC;gBACR,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;gBAC9C,WAAW,EAAE,QAAQ;gBACrB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,YAAY;gBACvB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;gBACnC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBACrC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;gBACnC,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;aACnE,CAAC,CAAC;QACL,CAAC;QAED,oEAAoE;QACpE,6EAA6E;QAC7E,MAAM,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrC,MAAM,gBAAgB,CACpB,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB;YACE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,iBAAiB;YACjD,QAAQ;YACR,SAAS,EAAE,uBAAuB;YAClC,SAAS,EAAE,IAAI,CAAC,MAAM;SACvB,EACD,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CACtB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAgB;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC;QACnE,wEAAwE;QACxE,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxD,CAAC;CACF;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/src/jobs/handlers/compact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compact.d.ts","sourceRoot":"","sources":["../../../../src/jobs/handlers/compact.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAO,UAAU,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAqB,MAAM,0BAA0B,CAAC;AACvG,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAQ1D,MAAM,WAAW,WAAW;IAC1B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB;AASD,4DAA4D;AAC5D,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5D;AAMD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,CAwBlE"}
+{"version":3,"file":"compact.d.ts","sourceRoot":"","sources":["../../../../src/jobs/handlers/compact.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAO,UAAU,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAqB,MAAM,0BAA0B,CAAC;AACvG,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAS1D,MAAM,WAAW,WAAW;IAC1B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB;AASD,4DAA4D;AAC5D,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5D;AAMD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,CAwBlE"}

package/dist/src/jobs/handlers/compact.js

@@ -31,6 +31,7 @@ import crypto from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
 import { getTable } from "../../storage/tables.js";
+import { eqFilter } from "../../storage/filter.js";
 import { atomicWrite } from "../../storage/atomic.js";
 import { recordEmbed } from "../../observability/embedding-events.js";
 import { recordIndexWrite } from "../../observability/index-events.js";
@@ -139,7 +140,7 @@ async function handleCompaction(deps, dryRun) {
     }, () => coldTable.add(toMove.map(cleanConversationRow)));
     // 2. Remove from hot
     for (const row of toMove) {
-        await hotTable.delete(`id = '${row.id}'`);
+        await hotTable.delete(eqFilter("id", row.id, { validateAsRowId: true }));
     }
     // 3. Write raw digest artifact BEFORE table insert (crash safety:
     //    if we crash after table insert but before raw write, reconcile
@@ -212,7 +213,7 @@ async function handleRollback(deps, dryRun) {
     for (const convId of manifest.conversation_ids) {
         const rows = (await coldTable
             .query()
-            .where(`id = '${convId}'`)
+            .where(eqFilter("id", convId, { validateAsRowId: true }))
             .toArray());
         if (rows.length > 0) {
             await recordIndexWrite(deps.dataDir, {
@@ -221,11 +222,11 @@ async function handleRollback(deps, dryRun) {
                 operation: "conversation_rollback_to_hot",
                 row_count: rows.length,
             }, () => hotTable.add(rows.map(cleanConversationRow)));
-            await coldTable.delete(`id = '${convId}'`);
+            await coldTable.delete(eqFilter("id", convId, { validateAsRowId: true }));
         }
     }
     // Remove the digest row from table
-    await digestTable.delete(`id = '${manifest.digest_id}'`);
+    await digestTable.delete(eqFilter("id", manifest.digest_id, { validateAsRowId: true }));
     // Remove the raw digest file so reconcile cannot resurrect it
     if (manifest.digest_filename) {
         const digestPath = path.join(deps.dataDir, "raw", "digests", manifest.digest_filename);
@@ -341,6 +342,10 @@ function cleanConversationRow(row) {
         // basic/placeholder row stays a backfill target after compaction.
         metadata_provider: row.metadata_provider ?? "",
         embedding_provider: row.embedding_provider ?? "",
+        // Preserve chunk identity so a chunk set survives hot → cold relocation.
+        parent_id: row.parent_id ?? "",
+        chunk_index: row.chunk_index ?? "",
+        chunk_count: row.chunk_count ?? "",
     };
 }
 function safeParseArray(json) {