@jigyasudham/veto 2.9.0 → 3.0.0

package/dist/transcripts/config.d.ts

@@ -0,0 +1,52 @@
+import { type TranscriptsConfig } from '../memory/config.js';
+export declare const CONSENT_VERSION = 1;
+export declare const DEFAULT_RETENTION_DAYS = 180;
+/**
+ * Platform-appropriate, NON-cloud-synced data dir for transcript archives.
+ * Deliberately not ~/.veto: on consumer Windows that can be redirected into
+ * OneDrive. %LOCALAPPDATA% / Application Support / $XDG_DATA_HOME are local.
+ */
+export declare function defaultTranscriptsDir(): string;
+/** The effective archive dir: user override when set, else the platform default. */
+export declare function effectiveTranscriptsDir(cfg?: TranscriptsConfig): string;
+/** True only when capture is enabled AND consent matches the current version. */
+export declare function isCaptureEnabled(cfg?: TranscriptsConfig): boolean;
+/** Enabled under an older consent version → capture is paused pending re-consent. */
+export declare function needsReconsent(cfg?: TranscriptsConfig): boolean;
+export type EnableResult = {
+    dir: string;
+    retention_days: number;
+    consent_version: number;
+    reconsented: boolean;
+};
+/** Turn capture ON and record consent (version + timestamp). Idempotent. */
+export declare function enableCapture(): EnableResult;
+/** Turn capture OFF. The consent record is retained as an audit trail. */
+export declare function disableCapture(): void;
+/**
+ * Returns a one-time note the FIRST time a real capture happens, then null
+ * forever after (records first_capture_at). Lets the save response tell the user
+ * capture is working without nagging on every save.
+ */
+export declare function firstCaptureNote(): string | null;
+export type CaptureStatus = {
+    enabled: boolean;
+    effective: boolean;
+    needsReconsent: boolean;
+    dir: string;
+    usingDefaultDir: boolean;
+    retention_days: number;
+    consent_version: number | null;
+    consent_at: string | null;
+    cloudSyncWarning: string | null;
+};
+export declare function captureStatus(): CaptureStatus;
+/**
+ * Heuristic: warn if the archive path looks like it lives inside a cloud-synced
+ * tree, so "machine-local forever" isn't quietly violated. Names the provider
+ * when matched; null when the path looks local.
+ */
+export declare function detectCloudSync(dir: string): string | null;
+/** Plain-language consent disclosure shown at enable time (what/where/retention/sensitivity/control). */
+export declare function consentText(dir: string, retentionDays: number): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/transcripts/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/transcripts/config.ts"],"names":[],"mappings":"AAUA,OAAO,EAAwB,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGnF,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAU9C;AAED,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,iBAA2C,GAAG,MAAM,CAEhG;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,iBAA2C,GAAG,OAAO,CAE1F;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,GAAG,GAAE,iBAA2C,GAAG,OAAO,CAExF;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,4EAA4E;AAC5E,wBAAgB,aAAa,IAAI,YAAY,CAa5C;AAED,0EAA0E;AAC1E,wBAAgB,cAAc,IAAI,IAAI,CAGrC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAMhD;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AAEF,wBAAgB,aAAa,IAAI,aAAa,CAc7C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAY1D;AAED,yGAAyG;AACzG,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAwBtE"}

package/dist/transcripts/config.js

@@ -0,0 +1,135 @@
+// Transcript-capture consent & config (VERSION-3 item 6, Step 1).
+//
+// Capture is OFF until `veto transcripts enable` is run. Enabling records the
+// current consent version + timestamp; a later bump of CONSENT_VERSION forces a
+// re-consent (the disclosure materially changed). All settings persist in the
+// shared ~/.veto/config.json under `transcripts` — no DB table, so Step 1
+// touches neither veto.db nor the (not-yet-created) sidecar transcripts.db.
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { getConfig, setConfig } from '../memory/config.js';
+// Bump when the consent disclosure materially changes → users are re-prompted.
+export const CONSENT_VERSION = 1;
+export const DEFAULT_RETENTION_DAYS = 180;
+/**
+ * Platform-appropriate, NON-cloud-synced data dir for transcript archives.
+ * Deliberately not ~/.veto: on consumer Windows that can be redirected into
+ * OneDrive. %LOCALAPPDATA% / Application Support / $XDG_DATA_HOME are local.
+ */
+export function defaultTranscriptsDir() {
+    if (process.platform === 'win32') {
+        const base = process.env.LOCALAPPDATA || join(homedir(), 'AppData', 'Local');
+        return join(base, 'veto', 'transcripts');
+    }
+    if (process.platform === 'darwin') {
+        return join(homedir(), 'Library', 'Application Support', 'veto', 'transcripts');
+    }
+    const base = process.env.XDG_DATA_HOME || join(homedir(), '.local', 'share');
+    return join(base, 'veto', 'transcripts');
+}
+/** The effective archive dir: user override when set, else the platform default. */
+export function effectiveTranscriptsDir(cfg = getConfig().transcripts) {
+    return cfg.dir && cfg.dir.trim() ? cfg.dir : defaultTranscriptsDir();
+}
+/** True only when capture is enabled AND consent matches the current version. */
+export function isCaptureEnabled(cfg = getConfig().transcripts) {
+    return cfg.enabled && cfg.consent_version === CONSENT_VERSION;
+}
+/** Enabled under an older consent version → capture is paused pending re-consent. */
+export function needsReconsent(cfg = getConfig().transcripts) {
+    return cfg.enabled && cfg.consent_version !== CONSENT_VERSION;
+}
+/** Turn capture ON and record consent (version + timestamp). Idempotent. */
+export function enableCapture() {
+    const current = getConfig().transcripts;
+    const reconsented = current.enabled && current.consent_version !== CONSENT_VERSION;
+    const retention_days = current.retention_days > 0 ? current.retention_days : DEFAULT_RETENTION_DAYS;
+    const next = {
+        ...current,
+        enabled: true,
+        retention_days,
+        consent_version: CONSENT_VERSION,
+        consent_at: new Date().toISOString(),
+    };
+    setConfig({ transcripts: next });
+    return { dir: effectiveTranscriptsDir(next), retention_days, consent_version: CONSENT_VERSION, reconsented };
+}
+/** Turn capture OFF. The consent record is retained as an audit trail. */
+export function disableCapture() {
+    const current = getConfig().transcripts;
+    setConfig({ transcripts: { ...current, enabled: false } });
+}
+/**
+ * Returns a one-time note the FIRST time a real capture happens, then null
+ * forever after (records first_capture_at). Lets the save response tell the user
+ * capture is working without nagging on every save.
+ */
+export function firstCaptureNote() {
+    const current = getConfig().transcripts;
+    if (current.first_capture_at)
+        return null;
+    setConfig({ transcripts: { ...current, first_capture_at: new Date().toISOString() } });
+    return 'Veto archived this session to your local transcript store (opt-in, on this machine only). '
+        + 'Recall past detail later with veto_session_replay; manage with `veto transcripts`.';
+}
+export function captureStatus() {
+    const cfg = getConfig().transcripts;
+    const dir = effectiveTranscriptsDir(cfg);
+    return {
+        enabled: cfg.enabled,
+        effective: isCaptureEnabled(cfg),
+        needsReconsent: needsReconsent(cfg),
+        dir,
+        usingDefaultDir: !(cfg.dir && cfg.dir.trim()),
+        retention_days: cfg.retention_days > 0 ? cfg.retention_days : DEFAULT_RETENTION_DAYS,
+        consent_version: cfg.consent_at ? cfg.consent_version : null,
+        consent_at: cfg.consent_at,
+        cloudSyncWarning: detectCloudSync(dir),
+    };
+}
+/**
+ * Heuristic: warn if the archive path looks like it lives inside a cloud-synced
+ * tree, so "machine-local forever" isn't quietly violated. Names the provider
+ * when matched; null when the path looks local.
+ */
+export function detectCloudSync(dir) {
+    const p = dir.toLowerCase();
+    const markers = [
+        [/onedrive/, 'OneDrive'],
+        [/dropbox/, 'Dropbox'],
+        [/google ?drive|[\\/]my drive/, 'Google Drive'],
+        [/[\\/]icloud|com~apple~clouddocs/, 'iCloud'],
+    ];
+    for (const [re, name] of markers) {
+        if (re.test(p))
+            return name;
+    }
+    return null;
+}
+/** Plain-language consent disclosure shown at enable time (what/where/retention/sensitivity/control). */
+export function consentText(dir, retentionDays) {
+    return [
+        'Veto transcript capture — what you are turning on:',
+        '',
+        '  • WHAT: when you save a session, Veto takes a COPY of your host CLI\'s own',
+        '    conversation transcript — the AI\'s underlying memory of that session:',
+        '    every message you sent, every reply, and all tool activity — and builds',
+        '    a searchable index over it so a future session can recall exact detail.',
+        '  • THE COPY IS SEPARATE: the original file is left untouched, but Veto\'s copy',
+        '    lives on independently. Clearing your AI client\'s history, or the client',
+        '    rotating its own logs, will NOT remove it. Only `veto transcripts purge`',
+        '    (or the retention window below) deletes a Veto archive.',
+        '  • WHERE: archives are stored on THIS machine only, at:',
+        `      ${dir}`,
+        '    Nothing is uploaded, sent to a server, or shared. No API keys involved.',
+        `  • RETENTION: archives older than ${retentionDays} days are pruned automatically`,
+        '    (configurable). You can change or turn this off at any time.',
+        '  • SENSITIVITY: an archive inherits the sensitivity of everything you typed or',
+        '    pasted during that session — including secrets and third parties\' data.',
+        '    Detected secrets are masked in the search index and never returned to an',
+        '    AI, but treat the archive itself as private data.',
+        '  • CONTROL: `veto transcripts disable` stops capture; `veto transcripts purge`',
+        '    deletes archives. Capture stays OFF until you enable it.',
+    ].join('\n');
+}
+//# sourceMappingURL=config.js.map

package/dist/transcripts/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/transcripts/config.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAE5E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,SAAS,EAA0B,MAAM,qBAAqB,CAAC;AAEnF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAEjC,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,MAAyB,SAAS,EAAE,CAAC,WAAW;IACtF,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC;AACvE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,MAAyB,SAAS,EAAE,CAAC,WAAW;IAC/E,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,eAAe,KAAK,eAAe,CAAC;AAChE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,MAAyB,SAAS,EAAE,CAAC,WAAW;IAC7E,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,eAAe,KAAK,eAAe,CAAC;AAChE,CAAC;AASD,4EAA4E;AAC5E,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,eAAe,KAAK,eAAe,CAAC;IACnF,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACpG,MAAM,IAAI,GAAsB;QAC9B,GAAG,OAAO;QACV,OAAO,EAAE,IAAI;QACb,cAAc;QACd,eAAe,EAAE,eAAe;QAChC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,OAAO,EAAE,GAAG,EAAE,uBAAuB,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;AAC/G,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC;IACxC,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC;IACxC,IAAI,OAAO,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC1C,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IACvF,OAAO,4FAA4F;UAC/F,oFAAoF,CAAC;AAC3F,CAAC;AAcD,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC;IACpC,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAChC,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC;QACnC,GAAG;QACH,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7C,cAAc,EAAE,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,sBAAsB;QACpF,eAAe,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;QAC5D,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,gBAAgB,EAAE,eAAe,CAAC,GAAG,CAAC;KACvC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC5B,MAAM,OAAO,GAA4B;QACvC,CAAC,UAAU,EAAE,UAAU,CAAC;QACxB,CAAC,SAAS,EAAE,SAAS,CAAC;QACtB,CAAC,6BAA6B,EAAE,cAAc,CAAC;QAC/C,CAAC,iCAAiC,EAAE,QAAQ,CAAC;KAC9C,CAAC;IACF,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACjC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,aAAqB;IAC5D,OAAO;QACL,oDAAoD;QACpD,EAAE;QACF,8EAA8E;QAC9E,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,iFAAiF;QACjF,+EAA+E;QAC/E,8EAA8E;QAC9E,6DAA6D;QAC7D,0DAA0D;QAC1D,SAAS,GAAG,EAAE;QACd,6EAA6E;QAC7E,sCAAsC,aAAa,gCAAgC;QACnF,kEAAkE;QAClE,iFAAiF;QACjF,8EAA8E;QAC9E,8EAA8E;QAC9E,uDAAuD;QACvD,iFAAiF;QACjF,8DAA8D;KAC/D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/transcripts/expand.d.ts

@@ -0,0 +1,20 @@
+import type { ArchiveRow } from './schema.js';
+export declare function _resetExpandCache(): void;
+export type ExpandResult = {
+    ok: boolean;
+    reason?: string;
+    text?: string;
+    secretsRedacted?: number;
+    source?: string;
+    sourceSessionId?: string;
+    provenance?: string;
+    fromSeq?: number;
+    toSeq?: number;
+};
+/** Serve a byte range from an archive, masked. Bounds are validated first. */
+export declare function expandBytes(archive: ArchiveRow, offset: number, length: number): ExpandResult;
+/** Expand a single event to its exact source line (masked), with a turn/timestamp citation. */
+export declare function expandEvent(eventId: string): ExpandResult;
+/** Expand a seq range to the exact contiguous L0 lines it covers (masked). */
+export declare function expandRange(archiveId: string, fromSeq: number, toSeq: number): ExpandResult;
+//# sourceMappingURL=expand.d.ts.map

package/dist/transcripts/expand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expand.d.ts","sourceRoot":"","sources":["../../src/transcripts/expand.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAY,MAAM,aAAa,CAAC;AAYxD,wBAAgB,iBAAiB,IAAI,IAAI,CAAmB;AAE5D,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAkBF,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAa7F;AAED,+FAA+F;AAC/F,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CASzD;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CAa3F"}

package/dist/transcripts/expand.js

@@ -0,0 +1,97 @@
+// Mask-on-expansion: serve exact L0 bytes, always masked (VERSION-3 item 6, Step 7).
+//
+// L0 is stored RAW (Rule 0), but nothing leaves this module unmasked. Every byte
+// range served out of an archive passes through mask() first, so even though a
+// secret may sit in the raw archive on disk, it can never transit into an AI
+// context through Veto. Offsets are validated against the archive length before
+// any slice (S6) so a corrupt index can never read out of bounds. This is the
+// read-side counterpart to Step 6's mask-on-write, and it is tested here BEFORE
+// the recall tool (Step 11) is allowed to trust it.
+import { readFileSync, existsSync, statSync } from 'node:fs';
+import { gunzipSync } from 'node:zlib';
+import { getTranscriptsDb } from './store.js';
+import { mask } from './mask.js';
+// Small 1-entry cache so a recall that expands several ranges gunzips once.
+let _cache = null;
+function loadArchive(path) {
+    const { mtimeMs } = statSync(path);
+    if (_cache && _cache.path === path && _cache.mtimeMs === mtimeMs)
+        return _cache.buf;
+    const buf = gunzipSync(readFileSync(path));
+    _cache = { path, mtimeMs, buf };
+    return buf;
+}
+export function _resetExpandCache() { _cache = null; }
+function getArchiveById(id) {
+    const db = getTranscriptsDb();
+    return db.prepare(`SELECT * FROM archives WHERE id = ?`).get(id) ?? null;
+}
+function cite(archive, loc) {
+    const parts = [archive.source, `session ${archive.source_session_id}`];
+    if (loc.seq !== undefined) {
+        parts.push(loc.toSeq !== undefined && loc.toSeq !== loc.seq ? `turns ${loc.seq}-${loc.toSeq}` : `turn ${loc.seq}`);
+    }
+    if (loc.ts)
+        parts.push(loc.ts);
+    if (loc.offset !== undefined && loc.length !== undefined)
+        parts.push(`bytes ${loc.offset}-${loc.offset + loc.length}`);
+    return `[${parts.join(' · ')}]`;
+}
+/** Serve a byte range from an archive, masked. Bounds are validated first. */
+export function expandBytes(archive, offset, length) {
+    if (!existsSync(archive.archive_path))
+        return { ok: false, reason: 'archive_missing' };
+    let buf;
+    try {
+        buf = loadArchive(archive.archive_path);
+    }
+    catch {
+        return { ok: false, reason: 'unreadable' };
+    }
+    if (!Number.isInteger(offset) || !Number.isInteger(length) || offset < 0 || length < 0 || offset + length > buf.length) {
+        return { ok: false, reason: 'out_of_bounds' };
+    }
+    const m = mask(buf.toString('utf8', offset, offset + length));
+    return {
+        ok: true, text: m.text, secretsRedacted: m.count,
+        source: archive.source, sourceSessionId: archive.source_session_id,
+        provenance: cite(archive, { offset, length }),
+    };
+}
+/** Expand a single event to its exact source line (masked), with a turn/timestamp citation. */
+export function expandEvent(eventId) {
+    const db = getTranscriptsDb();
+    const ev = db.prepare(`SELECT * FROM events WHERE id = ?`).get(eventId) ?? null;
+    if (!ev)
+        return { ok: false, reason: 'event_not_found' };
+    const archive = getArchiveById(ev.archive_id);
+    if (!archive)
+        return { ok: false, reason: 'archive_not_found' };
+    const r = expandBytes(archive, ev.raw_offset, ev.raw_length);
+    if (r.ok) {
+        r.provenance = cite(archive, { seq: ev.seq, ts: ev.ts_utc });
+        r.fromSeq = ev.seq;
+        r.toSeq = ev.seq;
+    }
+    return r;
+}
+/** Expand a seq range to the exact contiguous L0 lines it covers (masked). */
+export function expandRange(archiveId, fromSeq, toSeq) {
+    const db = getTranscriptsDb();
+    const archive = getArchiveById(archiveId);
+    if (!archive)
+        return { ok: false, reason: 'archive_not_found' };
+    const rows = db.prepare(`SELECT raw_offset, raw_length FROM events WHERE archive_id = ? AND seq BETWEEN ? AND ? ORDER BY seq`).all(archiveId, Math.min(fromSeq, toSeq), Math.max(fromSeq, toSeq));
+    if (rows.length === 0)
+        return { ok: false, reason: 'no_events' };
+    const start = Math.min(...rows.map(r => r.raw_offset));
+    const end = Math.max(...rows.map(r => r.raw_offset + r.raw_length));
+    const r = expandBytes(archive, start, end - start);
+    if (r.ok) {
+        r.provenance = cite(archive, { seq: fromSeq, toSeq });
+        r.fromSeq = fromSeq;
+        r.toSeq = toSeq;
+    }
+    return r;
+}
+//# sourceMappingURL=expand.js.map

package/dist/transcripts/expand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expand.js","sourceRoot":"","sources":["../../src/transcripts/expand.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,EAAE;AACF,iFAAiF;AACjF,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,oDAAoD;AAEpD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,4EAA4E;AAC5E,IAAI,MAAM,GAA0D,IAAI,CAAC;AACzE,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IACpF,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,KAAW,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;AAc5D,SAAS,cAAc,CAAC,EAAU;IAChC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC9B,OAAQ,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,EAAE,CAA4B,IAAI,IAAI,CAAC;AACvG,CAAC;AAGD,SAAS,IAAI,CAAC,OAAmB,EAAE,GAAQ;IACzC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,GAAG,CAAC,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACvH,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;AAClC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,OAAmB,EAAE,MAAc,EAAE,MAAc;IAC7E,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvF,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QAAC,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAAC,CAAC;IACtG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACvH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO;QACL,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,KAAK;QAChD,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,iBAAiB;QAClE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC9B,MAAM,EAAE,GAAI,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,GAAG,CAAC,OAAO,CAA0B,IAAI,IAAI,CAAC;IAC1G,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAChE,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC;QAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC;IAAC,CAAC;IACjH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,OAAe,EAAE,KAAa;IAC3E,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,qGAAqG,CACtG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAiD,CAAC;IACrH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACpE,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;QAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;IAAC,CAAC;IAC1G,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/transcripts/ingest.d.ts

@@ -0,0 +1,17 @@
+import { type EventRow } from './schema.js';
+export declare const PARSER_VERSION = 2;
+export type IngestStatus = 'indexed' | 'already_indexed' | 'not_found' | 'archive_missing' | 'session_mismatch' | 'error';
+export type IngestResult = {
+    status: IngestStatus;
+    events?: number;
+    secretsRedacted?: number;
+    reason?: string;
+};
+/** (Re)derive events for one archive. Best-effort: never throws. */
+export declare function ingestArchive(archiveId: string): IngestResult;
+/** Ensure an archive is indexed at the current parser version (lazy trigger for recall). */
+export declare function ensureIndexed(archiveId: string): IngestResult;
+/** Ingest by source session id (looks up its archive). */
+export declare function ingestSession(sourceSessionId: string, source?: string): IngestResult;
+export declare function getEvents(archiveId: string): EventRow[];
+//# sourceMappingURL=ingest.d.ts.map

package/dist/transcripts/ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.d.ts","sourceRoot":"","sources":["../../src/transcripts/ingest.ts"],"names":[],"mappings":"AAeA,OAAO,EAAqC,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAO/E,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC,MAAM,MAAM,YAAY,GACpB,SAAS,GAAG,iBAAiB,GAAG,WAAW,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,OAAO,CAAC;AAEnG,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAWF,oEAAoE;AACpE,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CAgF7D;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CAE7D;AAED,0DAA0D;AAC1D,wBAAgB,aAAa,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,YAAY,CAOtF;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,EAAE,CAGvD"}

package/dist/transcripts/ingest.js

@@ -0,0 +1,113 @@
+// Ingest: derive normalized events from an L0 archive (VERSION-3 item 6, Step 6).
+//
+// Idempotent + lazy via the archive's parser_version + indexed_through_seq
+// watermark: a fresh or grown archive (Step 5 resets both) gets (re)indexed; an
+// unchanged, already-indexed archive is a no-op; a parser upgrade re-derives.
+// Session-id verification (council/devil): if the archive's session id does not
+// appear anywhere in the parsed file, the mapping pointed at the wrong transcript
+// and we SKIP rather than index a mismatched file.
+import { readFileSync, existsSync } from 'node:fs';
+import { gunzipSync } from 'node:zlib';
+import { randomUUID } from 'node:crypto';
+import { getTranscriptsDb } from './store.js';
+import { parseClaudeTranscript } from './adapters/claude.js';
+import { tokenize } from './tokenize.js';
+import { SEARCHABLE_KINDS } from './schema.js';
+const SEARCHABLE = new Set(SEARCHABLE_KINDS);
+// Bump when the parser changes in a way that should re-derive existing archives.
+// v2: the portable search index replaced events_fts — archives ingested at v1
+// have events but no search_docs/postings rows, so they must re-derive.
+export const PARSER_VERSION = 2;
+function getArchiveById(archiveId) {
+    const db = getTranscriptsDb();
+    return db.prepare(`SELECT * FROM archives WHERE id = ?`).get(archiveId) ?? null;
+}
+function needsIndexing(row) {
+    return row.parser_version !== PARSER_VERSION;
+}
+/** (Re)derive events for one archive. Best-effort: never throws. */
+export function ingestArchive(archiveId) {
+    try {
+        const db = getTranscriptsDb();
+        const row = getArchiveById(archiveId);
+        if (!row)
+            return { status: 'not_found' };
+        if (!needsIndexing(row))
+            return { status: 'already_indexed', events: row.indexed_through_seq };
+        if (!existsSync(row.archive_path))
+            return { status: 'archive_missing' };
+        const buf = gunzipSync(readFileSync(row.archive_path));
+        const { events, sessionIds, secretsRedacted } = parseClaudeTranscript(buf);
+        if (sessionIds.size > 0 && !sessionIds.has(row.source_session_id)) {
+            return { status: 'session_mismatch', reason: 'archive session id not present in transcript' };
+        }
+        const ins = db.prepare(`INSERT INTO events (id, archive_id, source_session_id, seq, line_index, block_index, kind,
+         source_type, role, tool_name, text, secret_count, event_uuid, parent_uuid, is_sidechain,
+         ts_source, ts_utc, raw_offset, raw_length)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);
+        const insDoc = db.prepare(`INSERT INTO search_docs (event_id, archive_id, source_session_id, project_dir, seq, kind, len)
+       VALUES (?, ?, ?, ?, ?, ?, ?) RETURNING id`);
+        const insTerm = db.prepare(`INSERT INTO search_terms (term) VALUES (?)
+       ON CONFLICT(term) DO UPDATE SET term = term RETURNING id`);
+        const insPosting = db.prepare(`INSERT INTO search_postings (term_id, doc_id, tf) VALUES (?, ?, ?)`);
+        // Term ids are cached per ingest run — a session reuses its vocabulary
+        // heavily, so most lookups never hit the upsert.
+        const termIds = new Map();
+        const termId = (term) => {
+            let id = termIds.get(term);
+            if (id === undefined) {
+                id = Number(insTerm.get(term).id);
+                termIds.set(term, id);
+            }
+            return id;
+        };
+        db.exec('BEGIN');
+        try {
+            db.prepare(`DELETE FROM events WHERE archive_id = ?`).run(archiveId);
+            db.prepare(`DELETE FROM search_postings WHERE doc_id IN (SELECT id FROM search_docs WHERE archive_id = ?)`).run(archiveId);
+            db.prepare(`DELETE FROM search_docs WHERE archive_id = ?`).run(archiveId);
+            for (const e of events) {
+                const eventId = randomUUID();
+                ins.run(eventId, archiveId, row.source_session_id, e.seq, e.lineIndex, e.blockIndex, e.kind, e.sourceType, e.role, e.toolName, e.text, e.secretCount, e.eventUuid, e.parentUuid, e.isSidechain ? 1 : 0, e.tsSource, e.tsUtc, e.rawOffset, e.rawLength);
+                // Index the searchable, non-empty events (text is already masked).
+                if (SEARCHABLE.has(e.kind) && e.text && e.text.trim()) {
+                    const tokens = tokenize(e.text);
+                    const tf = new Map();
+                    for (const t of tokens)
+                        tf.set(t, (tf.get(t) ?? 0) + 1);
+                    const docId = Number(insDoc.get(eventId, archiveId, row.source_session_id, row.project_dir, e.seq, e.kind, tokens.length).id);
+                    for (const [term, count] of tf)
+                        insPosting.run(termId(term), docId, count);
+                }
+            }
+            db.prepare(`UPDATE archives SET indexed_through_seq = ?, parser_version = ? WHERE id = ?`)
+                .run(events.length, PARSER_VERSION, archiveId);
+            db.exec('COMMIT');
+        }
+        catch (e) {
+            db.exec('ROLLBACK');
+            throw e;
+        }
+        return { status: 'indexed', events: events.length, secretsRedacted };
+    }
+    catch (e) {
+        return { status: 'error', reason: e instanceof Error ? e.message : String(e) };
+    }
+}
+/** Ensure an archive is indexed at the current parser version (lazy trigger for recall). */
+export function ensureIndexed(archiveId) {
+    return ingestArchive(archiveId);
+}
+/** Ingest by source session id (looks up its archive). */
+export function ingestSession(sourceSessionId, source = 'claude') {
+    const db = getTranscriptsDb();
+    const row = db.prepare(`SELECT id FROM archives WHERE source = ? AND source_session_id = ?`).get(source, sourceSessionId) ?? null;
+    if (!row)
+        return { status: 'not_found' };
+    return ingestArchive(row.id);
+}
+export function getEvents(archiveId) {
+    const db = getTranscriptsDb();
+    return db.prepare(`SELECT * FROM events WHERE archive_id = ? ORDER BY seq`).all(archiveId);
+}
+//# sourceMappingURL=ingest.js.map

package/dist/transcripts/ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.js","sourceRoot":"","sources":["../../src/transcripts/ingest.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,kFAAkF;AAClF,mDAAmD;AAEnD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAkC,MAAM,aAAa,CAAC;AAE/E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,gBAAgB,CAAC,CAAC;AAErD,iFAAiF;AACjF,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAYhC,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC9B,OAAQ,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,SAAS,CAA4B,IAAI,IAAI,CAAC;AAC9G,CAAC;AAED,SAAS,aAAa,CAAC,GAAe;IACpC,OAAO,GAAG,CAAC,cAAc,KAAK,cAAc,CAAC;AAC/C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC/F,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAExE,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAE3E,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;QAChG,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CACpB;;;wEAGkE,CACnE,CAAC;QACF,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB;iDAC2C,CAC5C,CAAC;QACF,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CACxB;gEAC0D,CAC3D,CAAC;QACF,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAC3B,oEAAoE,CACrE,CAAC;QACF,uEAAuE;QACvE,iDAAiD;QACjD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE;YACtC,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,EAAE,GAAG,MAAM,CAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAA6B,CAAC,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrE,EAAE,CAAC,OAAO,CACR,+FAA+F,CAChG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjB,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1E,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;gBAC7B,GAAG,CAAC,GAAG,CACL,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,EACnF,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACzG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAC9C,CAAC;gBACF,mEAAmE;gBACnE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAChC,MAAM,EAAE,GAAG,IAAI,GAAG,EAAkB,CAAC;oBACrC,KAAK,MAAM,CAAC,IAAI,MAAM;wBAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACxD,MAAM,KAAK,GAAG,MAAM,CAAE,MAAM,CAAC,GAAG,CAC9B,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAC7D,CAAC,EAAE,CAAC,CAAC;oBAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;wBAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;YACD,EAAE,CAAC,OAAO,CAAC,8EAA8E,CAAC;iBACvF,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YACjD,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpB,MAAM,CAAC,CAAC;QACV,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;IACvE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,aAAa,CAAC,eAAuB,EAAE,MAAM,GAAG,QAAQ;IACtE,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAI,EAAE,CAAC,OAAO,CACrB,oEAAoE,CACrE,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAgC,IAAI,IAAI,CAAC;IACtE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACzC,OAAO,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,SAAiB;IACzC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC9B,OAAO,EAAE,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAe,CAAC;AAC3G,CAAC"}

package/dist/transcripts/manage.d.ts

@@ -0,0 +1,42 @@
+import { type Segment } from './toc.js';
+import { type SessionFacts } from './pyramid.js';
+export type ArchiveSummary = {
+    sourceSessionId: string;
+    source: string;
+    projectDir: string | null;
+    events: number;
+    sourceBytes: number;
+    archiveBytes: number;
+    capturedAt: string;
+    updatedAt: string;
+    indexed: boolean;
+};
+export declare function listArchives(opts?: {
+    projectDir?: string;
+    limit?: number;
+}): ArchiveSummary[];
+export type ArchiveDetail = {
+    summary: ArchiveSummary;
+    toc: Segment[];
+    facts: SessionFacts;
+} | null;
+export declare function showArchive(sourceSessionId: string, source?: string): ArchiveDetail;
+export type PurgeResult = {
+    archives: number;
+    events: number;
+    indexRows: number;
+    files: number;
+    mappings: number;
+};
+export declare function purgeSession(sourceSessionId: string, source?: string): PurgeResult;
+export declare function purgeProject(projectDir: string): PurgeResult;
+export declare function purgeAll(): PurgeResult;
+export type DiskUsage = {
+    archives: number;
+    archiveBytes: number;
+    dbBytes: number;
+    totalBytes: number;
+};
+export declare function transcriptsDiskUsage(): DiskUsage;
+export declare function fmtBytes(n: number): string;
+//# sourceMappingURL=manage.d.ts.map

package/dist/transcripts/manage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage.d.ts","sourceRoot":"","sources":["../../src/transcripts/manage.ts"],"names":[],"mappings":"AAWA,OAAO,EAAY,KAAK,OAAO,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAG7D,MAAM,MAAM,cAAc,GAAG;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAUF,wBAAgB,YAAY,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,cAAc,EAAE,CAOjG;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,OAAO,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,OAAO,EAAE,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAAG,IAAI,CAAC;AAEpG,wBAAgB,WAAW,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,aAAa,CAKrF;AAED,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAyCnH,wBAAgB,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,WAAW,CAUpF;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,WAAW,CAI5D;AAED,wBAAgB,QAAQ,IAAI,WAAW,CAQtC;AAED,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAExG,wBAAgB,oBAAoB,IAAI,SAAS,CAMhD;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAI1C"}

package/dist/transcripts/manage.js

@@ -0,0 +1,117 @@
+// Management: list / show / purge + disk usage (VERSION-3 item 6, Step 13).
+//
+// Purge is a TRUE cascading delete — for each archive it removes the events, the
+// search index rows (docs + postings), the archive row, the session mapping, and
+// the L0 file, leaving no orphan rows (Step 14 asserts zero orphans). Row deletes
+// run in one transaction; the L0 file is unlinked best-effort afterwards (a
+// leftover file is harmless disk, a dangling row is not).
+import { statSync, existsSync, rmSync } from 'node:fs';
+import { getTranscriptsDb, transcriptsDbPath } from './store.js';
+import { normalizeProjectDir } from '../memory/local.js';
+import { buildTOC } from './toc.js';
+import { buildFacts } from './pyramid.js';
+function toSummary(r) {
+    return {
+        sourceSessionId: r.source_session_id, source: r.source, projectDir: r.project_dir,
+        events: r.indexed_through_seq, sourceBytes: r.source_bytes, archiveBytes: r.archive_bytes,
+        capturedAt: r.captured_at, updatedAt: r.updated_at, indexed: r.parser_version > 0,
+    };
+}
+export function listArchives(opts = {}) {
+    const db = getTranscriptsDb();
+    const limit = Math.min(Math.max(opts.limit ?? 50, 1), 500);
+    const rows = opts.projectDir
+        ? db.prepare(`SELECT * FROM archives WHERE project_dir = ? ORDER BY updated_at DESC LIMIT ?`).all(normalizeProjectDir(opts.projectDir), limit)
+        : db.prepare(`SELECT * FROM archives ORDER BY updated_at DESC LIMIT ?`).all(limit);
+    return rows.map(toSummary);
+}
+export function showArchive(sourceSessionId, source = 'claude') {
+    const db = getTranscriptsDb();
+    const r = db.prepare(`SELECT * FROM archives WHERE source = ? AND source_session_id = ?`).get(source, sourceSessionId);
+    if (!r)
+        return null;
+    return { summary: toSummary(r), toc: buildTOC(r.id), facts: buildFacts(r.id) };
+}
+function purgeArchiveRows(archives) {
+    const db = getTranscriptsDb();
+    const res = { archives: 0, events: 0, indexRows: 0, files: 0, mappings: 0 };
+    const paths = [];
+    db.exec('BEGIN');
+    try {
+        for (const a of archives) {
+            res.events += db.prepare(`SELECT COUNT(*) n FROM events WHERE archive_id = ?`).get(a.id).n;
+            // Two plain queries, not one with a reused ?1 — node 22.13's sqlite
+            // binding doesn't dedupe numbered parameters (SQLITE_RANGE on CI).
+            res.indexRows += db.prepare(`SELECT COUNT(*) n FROM search_docs WHERE archive_id = ?`).get(a.id).n;
+            res.indexRows += db.prepare(`SELECT COUNT(*) n FROM search_postings WHERE doc_id IN (SELECT id FROM search_docs WHERE archive_id = ?)`).get(a.id).n;
+            db.prepare(`DELETE FROM events WHERE archive_id = ?`).run(a.id);
+            db.prepare(`DELETE FROM search_postings WHERE doc_id IN (SELECT id FROM search_docs WHERE archive_id = ?)`).run(a.id);
+            db.prepare(`DELETE FROM search_docs WHERE archive_id = ?`).run(a.id);
+            db.prepare(`DELETE FROM archives WHERE id = ?`).run(a.id);
+            const m = db.prepare(`DELETE FROM session_map WHERE source = ? AND source_session_id = ?`).run(a.source, a.source_session_id);
+            res.mappings += Number(m.changes ?? 0);
+            res.archives += 1;
+            if (a.archive_path)
+                paths.push(a.archive_path);
+        }
+        db.exec('COMMIT');
+    }
+    catch (e) {
+        db.exec('ROLLBACK');
+        throw e;
+    }
+    // Rows are gone and committed; remove the L0 files best-effort.
+    for (const p of paths) {
+        if (existsSync(p)) {
+            try {
+                rmSync(p);
+                res.files += 1;
+            }
+            catch { /* leftover file is harmless */ }
+        }
+    }
+    return res;
+}
+export function purgeSession(sourceSessionId, source = 'claude') {
+    const db = getTranscriptsDb();
+    const arch = db.prepare(`SELECT * FROM archives WHERE source = ? AND source_session_id = ?`).get(source, sourceSessionId);
+    const result = purgeArchiveRows(arch ? [arch] : []);
+    // Purge the mapping even if there was no archive yet (capture never ran).
+    if (!arch) {
+        const m = db.prepare(`DELETE FROM session_map WHERE source = ? AND source_session_id = ?`).run(source, sourceSessionId);
+        result.mappings += Number(m.changes ?? 0);
+    }
+    return result;
+}
+export function purgeProject(projectDir) {
+    const db = getTranscriptsDb();
+    const archives = db.prepare(`SELECT * FROM archives WHERE project_dir = ?`).all(normalizeProjectDir(projectDir));
+    return purgeArchiveRows(archives);
+}
+export function purgeAll() {
+    const db = getTranscriptsDb();
+    const archives = db.prepare(`SELECT * FROM archives`).all();
+    const res = purgeArchiveRows(archives);
+    // Sweep any orphan mappings left with no archive.
+    const m = db.prepare(`DELETE FROM session_map`).run();
+    res.mappings = Math.max(res.mappings, Number(m.changes ?? 0));
+    return res;
+}
+export function transcriptsDiskUsage() {
+    const db = getTranscriptsDb();
+    const agg = db.prepare(`SELECT COUNT(*) n, COALESCE(SUM(archive_bytes), 0) b FROM archives`).get();
+    let dbBytes = 0;
+    try {
+        dbBytes = statSync(transcriptsDbPath()).size;
+    }
+    catch { /* db not on disk (memory) */ }
+    return { archives: agg.n, archiveBytes: agg.b, dbBytes, totalBytes: dbBytes + agg.b };
+}
+export function fmtBytes(n) {
+    if (n < 1024)
+        return `${n} B`;
+    if (n < 1024 * 1024)
+        return `${(n / 1024).toFixed(1)} KB`;
+    return `${(n / (1024 * 1024)).toFixed(1)} MB`;
+}
+//# sourceMappingURL=manage.js.map