@jini-ai/sqlite 0.1.1 → 0.3.0

package/README.md

@@ -0,0 +1,110 @@
+# `@jini-ai/sqlite`
+
+The durable SQLite adapter layer for a Jini host. Its headline export is `createSqliteEventLog`, a
+real on-disk implementation of `@jini-ai/protocol`'s `EventLog` port (the dedupe-aware,
+gap-detecting run-event log that `@jini-ai/daemon` also implements in memory) — swap one for the
+other and runs survive a process restart. Alongside it sits the application schema and typed query
+helpers a chat/agent host needs: projects, conversations, messages, agent sessions, a searchable
+tool catalog, plus migration and integrity-inspection utilities. This package depends only on
+`@jini-ai/protocol` and `better-sqlite3`; it does **not** depend on `@jini-ai/daemon`.
+
+## Install
+
+```sh
+npm install @jini-ai/sqlite
+```
+
+`better-sqlite3` is a regular dependency (not an optional peer) because opening the database is this
+package's entire job. It is a **native compiled addon**, so it needs a prebuild matching the exact
+Node ABI it runs under — inside an Electron/Tauri shell that means an `electron-rebuild` step
+whenever the shell's bundled Node/Electron version changes, not just a plain install.
+
+## What you get
+
+**Durable event log** — `createSqliteEventLog(dbPath, { maxEntriesPerRun })` returning a
+`SqliteEventLog` (an `EventLog` plus its own close/lifecycle surface), and
+`DEFAULT_MAX_ENTRIES_PER_RUN` (2000). Unlike the in-memory reference log, a durable store defaults
+to a *bounded* retention window per run, because unbounded on-disk growth is a real unattended
+operational risk; pass an explicit cap (larger, smaller, or `0`) to own that tradeoff yourself.
+
+**Connection and migration** — `openDatabase(projectRoot, { dataDir })` (opens/creates
+`<dataDir ?? projectRoot/.jini>/app.sqlite` and memoizes the handle), `closeDatabase()`, and
+`migrate(db)`. Core types: `SqliteDb`, `DbRow`, `JsonObject`, `ChatSessionMode`.
+
+**Backend selection** — `resolveSqliteBackendConfig(env)` → `SqliteBackendConfig`
+(`kind: 'sqlite' | 'postgres'` plus Postgres resolution metadata a future adapter will read, with
+secrets deliberately never read through env at this layer), and `SqliteBackendConfigError`.
+
+**Application queries** — plain functions over a `SqliteDb`, grouped by table:
+- projects: `listProjects`, `getProject`, `insertProject`, `updateProject`, `deleteProject`, and the
+  run-status rollups (`listLatestRunStatuses`, `listLatestProjectRunStatuses`,
+  `listLatestConversationRunStatuses`, `listFirstConversationRunStatuses`,
+  `listProjectsAwaitingInput`, `listConversationsAwaitingInput`)
+- conversations: `listConversations`, `getConversation`, `insertConversation`, `updateConversation`,
+  `deleteConversation`, `normalizeConversationSessionMode`
+- messages: `listMessages`, `upsertMessage`, `deleteMessage`, `appendMessageStatusEvent`,
+  `appendMessageAgentEvent`, `getMessageTelemetryFinalizationState`, and
+  `MessageConversationMismatchError`
+- agent sessions: `getAgentSession`, `getAgentSessionRecord`, `upsertAgentSession`,
+  `clearAgentSession`, `updateAgentSessionStableHash`, `latestCompletedAssistantMessageId`
+
+**Tool catalog** — `ensureToolCatalogTables`, `reseedToolCatalog`, `getToolCatalogEntry`,
+`searchToolCatalog` (FTS-backed), with `ToolCatalogEntry` / `ToolCatalogSearchHit`.
+
+**Inspection** — `inspectSqliteDatabase({ db, file })` → `DaemonDbStatusReport` (table/row
+inventory) and `verifySqliteIntegrity(opts)` → `DbIntegrityReport` (`PRAGMA integrity_check` plus
+foreign-key violations).
+
+**Row utilities** — `row`, `rows`, `parseJsonOrUndef`.
+
+## Usage
+
+```ts
+import {
+  createSqliteEventLog,
+  openDatabase,
+  migrate,
+  listProjects,
+  searchToolCatalog,
+  verifySqliteIntegrity,
+} from '@jini-ai/sqlite';
+import type { EventLog } from '@jini-ai/protocol';
+
+// The durable EventLog port — drop-in for @jini-ai/daemon's in-memory log.
+const eventLog: EventLog = createSqliteEventLog('/var/lib/example/events.sqlite', {
+  maxEntriesPerRun: 5000,
+});
+
+await eventLog.append({ runId: 'run_123', event: 'stdout', data: { text: 'hello' } });
+const replay = await eventLog.replay('run_123', null);
+if (replay.kind === 'replay-gap') {
+  // The requested cursor was already evicted — resync rather than trusting a hole.
+}
+
+// The application database.
+const db = openDatabase('/srv/workspace');
+migrate(db);
+
+const projects = listProjects(db);
+const hits = searchToolCatalog(db, 'deploy', 5);
+const integrity = verifySqliteIntegrity({ db });
+```
+
+## What's swappable
+
+This package *is* an adapter — it implements `@jini-ai/protocol`'s `EventLog` so a host can bind
+either it or an in-memory log behind the same token. Going the other way, very little inside is
+injectable: `createSqliteEventLog` takes only a path plus the retention cap, and the query helpers
+take an already-open `SqliteDb` handle (so you control connection lifetime, and can pass a
+`:memory:` database in tests) but the SQL and schema themselves are fixed.
+`resolveSqliteBackendConfig` reads a caller-supplied `env` record rather than `process.env` directly.
+
+## Runtime
+
+`jini.runtime: "node"` — `better-sqlite3` plus `node:fs`/`node:path`.
+ESM only — ships `"type": "module"` with no CommonJS `require` build.
+
+## Provenance
+
+See [source-map.md](./source-map.md) for per-file provenance and scope decisions. Apache-2.0,
+inherited from Open Design — see the repo `NOTICE`.

package/dist/db/chat-history/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @module db/chat-history
+ *
+ * Durable, owner-scoped chat history — the SQLite side of `@jini-ai/chat/core`'s
+ * `ChatHistoryStore`. Takes an injected handle and never opens a database of its own, so a host
+ * with its own file (and its own migration tooling) can use it without adopting this package's
+ * `app.sqlite`.
+ *
+ * Distinct from the older `db/conversations` module, which is `project_id`-scoped with no owner
+ * predicate at all — correct for a single-user local app, unsafe for a shared one. See
+ * `store.ts`'s header.
+ */
+export * from './schema.js';
+export * from './store.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/db/chat-history/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/db/chat-history/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/db/chat-history/index.js

@@ -0,0 +1,15 @@
+/**
+ * @module db/chat-history
+ *
+ * Durable, owner-scoped chat history — the SQLite side of `@jini-ai/chat/core`'s
+ * `ChatHistoryStore`. Takes an injected handle and never opens a database of its own, so a host
+ * with its own file (and its own migration tooling) can use it without adopting this package's
+ * `app.sqlite`.
+ *
+ * Distinct from the older `db/conversations` module, which is `project_id`-scoped with no owner
+ * predicate at all — correct for a single-user local app, unsafe for a shared one. See
+ * `store.ts`'s header.
+ */
+export * from './schema.js';
+export * from './store.js';
+//# sourceMappingURL=index.js.map

package/dist/db/chat-history/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/db/chat-history/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/db/chat-history/schema.d.ts

@@ -0,0 +1,61 @@
+/**
+ * @module db/chat-history/schema
+ *
+ * DDL for durable chat history (`ai_chats` + `ai_chat_messages`), exported as a constant so a
+ * host that owns its own migration tooling applies the *same* statements this package's
+ * {@link ensureChatHistoryTables} would — the schema is defined once and cannot drift between
+ * the two paths.
+ *
+ * Deliberately NOT wired into `schema/migrate.ts`, following `tool-catalog.ts`'s precedent and
+ * for its stated reason: `migrate()` opens and owns `<dataDir>/app.sqlite`, so anything it
+ * creates lands in *this package's* database. A host with its own database (the reference
+ * implementation's `content.db`)
+ * must not have a second migrator writing DDL into it behind its backup and snapshot tooling.
+ * Such a host copies {@link CHAT_HISTORY_DDL} into its own numbered migration and never calls
+ * `ensureChatHistoryTables`; a host with no migration system of its own calls the function.
+ * Both end up at the same schema.
+ *
+ * Two tables, not one. `session_key_hash` is a bearer credential and must not repeat on every
+ * message row; retention becomes one cascading `DELETE`; an empty conversation has to be
+ * representable so "New chat" can exist before the first message; and a list view needs a row
+ * to list without touching message storage at all.
+ */
+import type { SqliteDb } from '../core/types.js';
+/**
+ * The canonical chat-history schema.
+ *
+ * Notes on the parts that are easy to get wrong:
+ *
+ * - **`scope_id`** is the host's partition key (workspace/tenant/project). It is `NOT NULL` from
+ *   the first migration on purpose: adding it later is trivial, but *backfilling* it is not —
+ *   pre-existing rows carry no evidence of which partition they belonged to, so a late addition
+ *   forces a choice between deleting history and guessing.
+ * - **`owner_kind` + the CHECK pair** make "a guest row with a `user_id`" unrepresentable rather
+ *   than merely discouraged.
+ * - **`owner_id`** holds a user id for `user`, and a *hash* of the session key for `guest`. The
+ *   raw token never reaches this table.
+ * - **`title_source`** exists so an agent-generated title cannot clobber a manual rename. That
+ *   rule is enforced in the store, but it needs a column to be enforceable at all.
+ * - **`position`** orders messages, not `created_at`: two inserts inside the same millisecond
+ *   are ordinary under concurrent writers, and a tie there corrupts replay order permanently.
+ *   `UNIQUE (conversation_id, position)` turns a position-assignment bug into a loud constraint
+ *   violation instead of a silently scrambled transcript.
+ * - **`expires_at NULL`** means "never expires". The retention sweep filters on
+ *   `expires_at IS NOT NULL`, so authenticated history is out of its reach by construction, not
+ *   by a predicate that could drift.
+ */
+export declare const CHAT_HISTORY_DDL = "\nCREATE TABLE IF NOT EXISTS ai_chats (\n  id            TEXT PRIMARY KEY,\n  scope_id      TEXT NOT NULL,\n  owner_kind    TEXT NOT NULL CHECK (owner_kind IN ('user','guest')),\n  owner_id      TEXT NOT NULL,\n  title         TEXT,\n  title_source  TEXT NOT NULL DEFAULT 'fallback'\n                CHECK (title_source IN ('fallback','generated','manual')),\n  created_at    INTEGER NOT NULL,\n  updated_at    INTEGER NOT NULL,\n  expires_at    INTEGER\n);\n\nCREATE INDEX IF NOT EXISTS idx_ai_chats_owner\n  ON ai_chats(scope_id, owner_kind, owner_id, updated_at DESC);\n\nCREATE INDEX IF NOT EXISTS idx_ai_chats_expiry\n  ON ai_chats(expires_at) WHERE expires_at IS NOT NULL;\n\nCREATE TABLE IF NOT EXISTS ai_chat_messages (\n  id              TEXT PRIMARY KEY,\n  conversation_id TEXT NOT NULL REFERENCES ai_chats(id) ON DELETE CASCADE,\n  role            TEXT NOT NULL CHECK (role IN ('user','assistant')),\n  content         TEXT NOT NULL,\n  agent_id        TEXT,\n  agent_name      TEXT,\n  events_json     TEXT,\n  attachments_json TEXT,\n  run_id          TEXT,\n  run_status      TEXT,\n  position        INTEGER NOT NULL,\n  created_at      INTEGER NOT NULL,\n  started_at      INTEGER,\n  ended_at        INTEGER,\n  UNIQUE (conversation_id, position)\n);\n\nCREATE INDEX IF NOT EXISTS idx_ai_chat_messages_order\n  ON ai_chat_messages(conversation_id, position);\n";
+/**
+ * Creates the chat-history tables in the given database if they are absent.
+ *
+ * Idempotent, matching `ensureToolCatalogTables`'s convention. For a host whose database is
+ * managed by its own migration system, prefer copying {@link CHAT_HISTORY_DDL} into a numbered
+ * migration instead — see this module's header for why two migrators over one file is a hazard.
+ *
+ * The caller is responsible for `PRAGMA foreign_keys = ON`; without it the `ON DELETE CASCADE`
+ * above is silently inert and deleting a conversation orphans its messages. This function does
+ * not set it, because pragmas are connection-wide and a library has no business reconfiguring a
+ * handle it was merely lent.
+ */
+export declare function ensureChatHistoryTables(db: SqliteDb): void;
+//# sourceMappingURL=schema.d.ts.map

package/dist/db/chat-history/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/db/chat-history/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,gBAAgB,u2CAwC5B,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAE1D"}

package/dist/db/chat-history/schema.js

@@ -0,0 +1,80 @@
+/**
+ * The canonical chat-history schema.
+ *
+ * Notes on the parts that are easy to get wrong:
+ *
+ * - **`scope_id`** is the host's partition key (workspace/tenant/project). It is `NOT NULL` from
+ *   the first migration on purpose: adding it later is trivial, but *backfilling* it is not —
+ *   pre-existing rows carry no evidence of which partition they belonged to, so a late addition
+ *   forces a choice between deleting history and guessing.
+ * - **`owner_kind` + the CHECK pair** make "a guest row with a `user_id`" unrepresentable rather
+ *   than merely discouraged.
+ * - **`owner_id`** holds a user id for `user`, and a *hash* of the session key for `guest`. The
+ *   raw token never reaches this table.
+ * - **`title_source`** exists so an agent-generated title cannot clobber a manual rename. That
+ *   rule is enforced in the store, but it needs a column to be enforceable at all.
+ * - **`position`** orders messages, not `created_at`: two inserts inside the same millisecond
+ *   are ordinary under concurrent writers, and a tie there corrupts replay order permanently.
+ *   `UNIQUE (conversation_id, position)` turns a position-assignment bug into a loud constraint
+ *   violation instead of a silently scrambled transcript.
+ * - **`expires_at NULL`** means "never expires". The retention sweep filters on
+ *   `expires_at IS NOT NULL`, so authenticated history is out of its reach by construction, not
+ *   by a predicate that could drift.
+ */
+export const CHAT_HISTORY_DDL = `
+CREATE TABLE IF NOT EXISTS ai_chats (
+  id            TEXT PRIMARY KEY,
+  scope_id      TEXT NOT NULL,
+  owner_kind    TEXT NOT NULL CHECK (owner_kind IN ('user','guest')),
+  owner_id      TEXT NOT NULL,
+  title         TEXT,
+  title_source  TEXT NOT NULL DEFAULT 'fallback'
+                CHECK (title_source IN ('fallback','generated','manual')),
+  created_at    INTEGER NOT NULL,
+  updated_at    INTEGER NOT NULL,
+  expires_at    INTEGER
+);
+
+CREATE INDEX IF NOT EXISTS idx_ai_chats_owner
+  ON ai_chats(scope_id, owner_kind, owner_id, updated_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_ai_chats_expiry
+  ON ai_chats(expires_at) WHERE expires_at IS NOT NULL;
+
+CREATE TABLE IF NOT EXISTS ai_chat_messages (
+  id              TEXT PRIMARY KEY,
+  conversation_id TEXT NOT NULL REFERENCES ai_chats(id) ON DELETE CASCADE,
+  role            TEXT NOT NULL CHECK (role IN ('user','assistant')),
+  content         TEXT NOT NULL,
+  agent_id        TEXT,
+  agent_name      TEXT,
+  events_json     TEXT,
+  attachments_json TEXT,
+  run_id          TEXT,
+  run_status      TEXT,
+  position        INTEGER NOT NULL,
+  created_at      INTEGER NOT NULL,
+  started_at      INTEGER,
+  ended_at        INTEGER,
+  UNIQUE (conversation_id, position)
+);
+
+CREATE INDEX IF NOT EXISTS idx_ai_chat_messages_order
+  ON ai_chat_messages(conversation_id, position);
+`;
+/**
+ * Creates the chat-history tables in the given database if they are absent.
+ *
+ * Idempotent, matching `ensureToolCatalogTables`'s convention. For a host whose database is
+ * managed by its own migration system, prefer copying {@link CHAT_HISTORY_DDL} into a numbered
+ * migration instead — see this module's header for why two migrators over one file is a hazard.
+ *
+ * The caller is responsible for `PRAGMA foreign_keys = ON`; without it the `ON DELETE CASCADE`
+ * above is silently inert and deleting a conversation orphans its messages. This function does
+ * not set it, because pragmas are connection-wide and a library has no business reconfiguring a
+ * handle it was merely lent.
+ */
+export function ensureChatHistoryTables(db) {
+    db.exec(CHAT_HISTORY_DDL);
+}
+//# sourceMappingURL=schema.js.map

package/dist/db/chat-history/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/db/chat-history/schema.ts"],"names":[],"mappings":"AAwBA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwC/B,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAY;IAClD,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAC5B,CAAC"}

package/dist/db/chat-history/store.d.ts

@@ -0,0 +1,41 @@
+/**
+ * @module db/chat-history/store
+ *
+ * The SQLite implementation of `@jini-ai/chat/core`'s `ChatHistoryStore`, bound to one owner.
+ *
+ * The load-bearing property of this file is that **there is no way to obtain an unscoped store**.
+ * {@link createChatHistoryStore} takes the scope up front and closes over it; every statement
+ * below carries `scope_id = ? AND owner_kind = ? AND owner_id = ?` in its `WHERE` clause, and no
+ * exported function accepts a bare conversation id without one. A route handler that forgets the
+ * predicate cannot compile, because it never holds the pieces to write the query itself.
+ *
+ * This is a deliberate departure from this package's older `db/conversations` module, whose
+ * `getConversation(db, id)` / `deleteConversation(db, id)` / `listMessages(db, conversationId)`
+ * take no owner at all. That module's trust boundary is "you can open this local SQLite file",
+ * which is correct for a single-user desktop app and unusable for a shared multi-tenant one.
+ * Both exist; pick by trust model, not by convenience.
+ *
+ * The handle is **injected, never opened here**. `connection.ts`'s `openDatabase` owns
+ * `<dataDir>/app.sqlite`; a host with its own database passes its own handle and this module
+ * writes into it without ever knowing its path. That injection is what lets the same adapter
+ * serve this package's daemon and a host CMS without either one adopting the other's file.
+ */
+import type { ChatHistoryMaintenance, ChatHistoryStore, ChatOwnerScope } from '@jini-ai/chat';
+import type { SqliteDb } from '../core/types.js';
+/**
+ * Returns a {@link ChatHistoryStore} that can only ever see `scope`'s own conversations.
+ *
+ * @param db an open `better-sqlite3` handle owned by the caller. This function neither opens nor
+ *   closes it, and does not set pragmas on it — see `schema.ts` on `foreign_keys`.
+ * @param scope the isolation predicate, resolved from the host's authentication. For a `guest`,
+ *   `ownerId` must already be a hash of the session key; this module never hashes and never
+ *   verifies that it was hashed.
+ * @param now injectable clock, for tests that need deterministic timestamps.
+ */
+export declare function createChatHistoryStore(db: SqliteDb, scope: ChatOwnerScope, now?: () => number): ChatHistoryStore;
+/**
+ * Retention, across every owner — which is why it is a separate factory rather than a method on
+ * a scoped store. Handing this to a store would mean an unscoped store had to exist.
+ */
+export declare function createChatHistoryMaintenance(db: SqliteDb): ChatHistoryMaintenance;
+//# sourceMappingURL=store.d.ts.map

package/dist/db/chat-history/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/db/chat-history/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAEV,sBAAsB,EACtB,gBAAgB,EAEhB,cAAc,EAGf,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAS,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AA0FxD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,cAAc,EACrB,GAAG,GAAE,MAAM,MAAiB,GAC3B,gBAAgB,CAgLlB;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,QAAQ,GAAG,sBAAsB,CAmBjF"}

package/dist/db/chat-history/store.js

@@ -0,0 +1,254 @@
+/** Columns that make up a `ChatConversation`, aliased once so every read projects identically. */
+const CONVERSATION_COLUMNS = `
+  c.id            AS id,
+  c.title         AS title,
+  c.title_source  AS titleSource,
+  c.created_at    AS createdAt,
+  c.updated_at    AS updatedAt,
+  c.expires_at    AS expiresAt,
+  (SELECT COUNT(*) FROM ai_chat_messages m WHERE m.conversation_id = c.id) AS messageCount
+`;
+/** The isolation predicate. Every statement in this file uses this exact clause. */
+const OWNER_PREDICATE = `c.scope_id = ? AND c.owner_kind = ? AND c.owner_id = ?`;
+function toConversation(row) {
+    return {
+        id: row.id,
+        title: row.title ?? null,
+        titleSource: (row.titleSource ?? 'fallback'),
+        messageCount: Number(row.messageCount ?? 0),
+        createdAt: Number(row.createdAt),
+        updatedAt: Number(row.updatedAt),
+        ...(row.expiresAt === null || row.expiresAt === undefined ? {} : { expiresAt: Number(row.expiresAt) }),
+    };
+}
+/**
+ * KNOWN GAP — `resumable` and `lastRunEventId` are dropped, deliberately, and adding columns is
+ * NOT the fix.
+ *
+ * `ChatMessage` declares both (`@jini-ai/chat/core`'s `messages.ts`): `resumable` marks a failed run
+ * recoverable by resuming the agent's existing session rather than restarting it, and
+ * `lastRunEventId` is the cursor to resume from. Neither the projection below, nor `appendMessage`'s
+ * insert, nor `CHAT_HISTORY_DDL` carries them, so a message round-tripped through this store comes
+ * back with both `undefined` and a failed run cannot be resumed at its cursor. It fails silently —
+ * `toMessage` omits absent keys rather than throwing, so the caller gets a well-formed `ChatMessage`.
+ *
+ * Why the obvious fix is wrong. Both fields describe a RUN, and the daemon owns run state
+ * (`@jini-ai/daemon`'s `run-lifecycle.ts` is what decides `resumable` from the terminal event). The
+ * component writing through this store today is the host's BROWSER, which knows only what its chat
+ * pane handed it. Adding the columns would ask the component that does not own the data to persist
+ * it — the values would be as trustworthy as whatever the client happened to send. The ordering that
+ * actually works is: associate a run with a conversation id first, then let the daemon persist
+ * run-linked state as it streams, and only then add storage for it, at which point there is a
+ * consumer to validate the shape against.
+ *
+ * Two further facts worth having before touching this. First, this is the multi-tenant store; its
+ * sibling `db/messages/messages.ts` DOES carry `last_run_event_id`, so the two message stores in
+ * this package genuinely disagree and neither is evidence about the other. Second,
+ * `CHAT_HISTORY_DDL` is copied verbatim into the reference implementation's
+ * `0023_ai_chat_history.sql` and guarded by a
+ * structural parity test there; that migration is already applied, so any column added here also
+ * needs a follow-up `ALTER TABLE` on the host side and a parity test taught to compare the pair
+ * against this constant.
+ */
+function toMessage(row) {
+    return {
+        id: row.id,
+        role: row.role,
+        content: row.content,
+        ...(row.agentId ? { agentId: row.agentId } : {}),
+        ...(row.agentName ? { agentName: row.agentName } : {}),
+        ...(row.eventsJson ? { events: safeParse(row.eventsJson) } : {}),
+        ...(row.attachmentsJson ? { attachments: safeParse(row.attachmentsJson) } : {}),
+        ...(row.runId ? { runId: row.runId } : {}),
+        ...(row.runStatus ? { runStatus: row.runStatus } : {}),
+        ...(row.createdAt === null || row.createdAt === undefined ? {} : { createdAt: Number(row.createdAt) }),
+        ...(row.startedAt === null || row.startedAt === undefined ? {} : { startedAt: Number(row.startedAt) }),
+        ...(row.endedAt === null || row.endedAt === undefined ? {} : { endedAt: Number(row.endedAt) }),
+    };
+}
+/**
+ * A malformed JSON column yields `undefined` rather than throwing.
+ *
+ * A single corrupt `events_json` — a half-written row from a crash mid-stream, say — must not
+ * make an entire conversation unreadable. The message's text lives in its own column and is
+ * still recoverable; losing the event timeline for one turn is a far better outcome than a list
+ * view that throws.
+ */
+function safeParse(value) {
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Returns a {@link ChatHistoryStore} that can only ever see `scope`'s own conversations.
+ *
+ * @param db an open `better-sqlite3` handle owned by the caller. This function neither opens nor
+ *   closes it, and does not set pragmas on it — see `schema.ts` on `foreign_keys`.
+ * @param scope the isolation predicate, resolved from the host's authentication. For a `guest`,
+ *   `ownerId` must already be a hash of the session key; this module never hashes and never
+ *   verifies that it was hashed.
+ * @param now injectable clock, for tests that need deterministic timestamps.
+ */
+export function createChatHistoryStore(db, scope, now = Date.now) {
+    const owner = [scope.scopeId, scope.ownerKind, scope.ownerId];
+    /** `true` only when this scope owns the conversation — the gate every message write passes. */
+    function owns(conversationId) {
+        const row = db
+            .prepare(`SELECT 1 FROM ai_chats c WHERE c.id = ? AND ${OWNER_PREDICATE}`)
+            .get(conversationId, ...owner);
+        return row !== undefined;
+    }
+    return {
+        async list() {
+            const rows = db
+                .prepare(`SELECT ${CONVERSATION_COLUMNS} FROM ai_chats c
+            WHERE ${OWNER_PREDICATE}
+            ORDER BY c.updated_at DESC`)
+                .all(...owner);
+            return rows.map(toConversation);
+        },
+        async get(id) {
+            const row = db
+                .prepare(`SELECT ${CONVERSATION_COLUMNS} FROM ai_chats c
+            WHERE c.id = ? AND ${OWNER_PREDICATE}`)
+                .get(id, ...owner);
+            return row ? toConversation(row) : null;
+        },
+        async create(input) {
+            const ts = now();
+            db.prepare(`INSERT INTO ai_chats
+           (id, scope_id, owner_kind, owner_id, title, title_source, created_at, updated_at, expires_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(input.id, scope.scopeId, scope.ownerKind, scope.ownerId, input.title ?? null, input.titleSource ?? 'fallback', ts, ts, input.expiresAt ?? null);
+            const created = await this.get(input.id);
+            // Unreachable in practice: the INSERT above used this exact scope, so the scoped read
+            // that follows cannot miss it. Asserted rather than `!`-ed so a future change to either
+            // statement fails loudly here instead of returning a malformed conversation.
+            if (!created)
+                throw new Error(`ai_chats: created conversation ${input.id} was not readable in its own scope`);
+            return created;
+        },
+        async rename(id, title, source = 'manual') {
+            // A generated title never overwrites one the user typed. Expressed in the WHERE clause
+            // rather than a read-then-write so a concurrent rename cannot slip between the two.
+            const guard = source === 'generated' ? ` AND c.title_source <> 'manual'` : '';
+            db.prepare(`UPDATE ai_chats AS c
+            SET title = ?, title_source = ?, updated_at = ?
+          WHERE c.id = ? AND ${OWNER_PREDICATE}${guard}`).run(title, source, now(), id, ...owner);
+            return this.get(id);
+        },
+        async touch(id, options) {
+            const ts = now();
+            if (options?.expiresAt === undefined) {
+                db.prepare(`UPDATE ai_chats AS c SET updated_at = ? WHERE c.id = ? AND ${OWNER_PREDICATE}`)
+                    .run(ts, id, ...owner);
+                return;
+            }
+            db.prepare(`UPDATE ai_chats AS c SET updated_at = ?, expires_at = ? WHERE c.id = ? AND ${OWNER_PREDICATE}`).run(ts, options.expiresAt, id, ...owner);
+        },
+        async delete(id) {
+            // Messages go via `ON DELETE CASCADE`, which requires `PRAGMA foreign_keys = ON` on this
+            // connection. See `schema.ts` — a library setting connection-wide pragmas on a borrowed
+            // handle would be worse than documenting the requirement.
+            db.prepare(`DELETE FROM ai_chats AS c WHERE c.id = ? AND ${OWNER_PREDICATE}`).run(id, ...owner);
+        },
+        async messages(conversationId) {
+            const rows = db
+                .prepare(`SELECT m.id, m.role, m.content, m.agent_id AS agentId, m.agent_name AS agentName,
+                  m.events_json AS eventsJson, m.attachments_json AS attachmentsJson,
+                  m.run_id AS runId, m.run_status AS runStatus, m.created_at AS createdAt,
+                  m.started_at AS startedAt, m.ended_at AS endedAt
+             FROM ai_chat_messages m
+             JOIN ai_chats c ON c.id = m.conversation_id
+            WHERE m.conversation_id = ? AND ${OWNER_PREDICATE}
+            ORDER BY m.position`)
+                .all(conversationId, ...owner);
+            return rows.map(toMessage);
+        },
+        async appendMessage(conversationId, message) {
+            if (!owns(conversationId))
+                return null;
+            // One `BEGIN IMMEDIATE` around read-then-write: `MAX(position) + 1` computed outside a
+            // write transaction is the classic way two concurrent turns claim the same slot. The
+            // `UNIQUE (conversation_id, position)` constraint is the backstop if this is ever bypassed.
+            //
+            // `owns()` above is NOT sufficient on its own, which is why the upsert below carries its own
+            // conversation predicate. `owns()` authorizes the *conversation* being written to; the upsert's
+            // conflict target is `id`, the GLOBAL primary key on messages. Without the `WHERE`, appending a
+            // message id that already exists in someone else's conversation updated THAT row — the caller
+            // legitimately owned the conversation it named, so nothing here refused it, and it then got
+            // `null` back (a 404 at the route) after the write had landed. See the
+            // "colliding id to its OWN chat" case in `__tests__/isolation.test.ts`.
+            const write = db.transaction((m) => {
+                const existing = db
+                    .prepare(`SELECT position FROM ai_chat_messages WHERE id = ? AND conversation_id = ?`)
+                    .get(m.id, conversationId);
+                const position = existing
+                    ? Number(existing.position)
+                    : Number(db
+                        .prepare(`SELECT COALESCE(MAX(position), -1) + 1 AS next FROM ai_chat_messages WHERE conversation_id = ?`)
+                        .get(conversationId).next);
+                db.prepare(`INSERT INTO ai_chat_messages
+             (id, conversation_id, role, content, agent_id, agent_name, events_json,
+              attachments_json, run_id, run_status, position, created_at, started_at, ended_at)
+           VALUES (@id, @conversationId, @role, @content, @agentId, @agentName, @eventsJson,
+                   @attachmentsJson, @runId, @runStatus, @position, @createdAt, @startedAt, @endedAt)
+           ON CONFLICT(id) DO UPDATE SET
+             content          = excluded.content,
+             events_json      = excluded.events_json,
+             attachments_json = excluded.attachments_json,
+             run_id           = excluded.run_id,
+             run_status       = excluded.run_status,
+             started_at       = excluded.started_at,
+             ended_at         = excluded.ended_at
+           WHERE ai_chat_messages.conversation_id = excluded.conversation_id`).run({
+                    id: m.id,
+                    conversationId,
+                    role: m.role,
+                    content: m.content,
+                    agentId: m.agentId ?? null,
+                    agentName: m.agentName ?? null,
+                    eventsJson: m.events ? JSON.stringify(m.events) : null,
+                    attachmentsJson: m.attachments ? JSON.stringify(m.attachments) : null,
+                    runId: m.runId ?? null,
+                    runStatus: m.runStatus ?? null,
+                    position,
+                    createdAt: m.createdAt ?? now(),
+                    startedAt: m.startedAt ?? null,
+                    endedAt: m.endedAt ?? null,
+                });
+                // A new message is activity on the conversation; the list orders by `updated_at`, so
+                // skipping this would leave an actively-used chat sinking down the list.
+                db.prepare(`UPDATE ai_chats SET updated_at = ? WHERE id = ?`).run(now(), conversationId);
+            });
+            write(message);
+            const saved = await this.messages(conversationId);
+            return saved.find((m) => m.id === message.id) ?? null;
+        },
+    };
+}
+/**
+ * Retention, across every owner — which is why it is a separate factory rather than a method on
+ * a scoped store. Handing this to a store would mean an unscoped store had to exist.
+ */
+export function createChatHistoryMaintenance(db) {
+    return {
+        async sweepExpired(now, limit = 500) {
+            // Bounded by `limit` so a large backlog drains in chunks. An unbounded `DELETE` holds the
+            // write lock long enough that concurrent inserts exhaust `busy_timeout` and fail outright.
+            // `expires_at IS NOT NULL` keeps never-expiring history structurally out of reach.
+            const result = db
+                .prepare(`DELETE FROM ai_chats
+             WHERE id IN (
+               SELECT id FROM ai_chats
+                WHERE expires_at IS NOT NULL AND expires_at <= ?
+                LIMIT ?
+             )`)
+                .run(now, limit);
+            return result.changes;
+        },
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/db/chat-history/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/db/chat-history/store.ts"],"names":[],"mappings":"AAkCA,kGAAkG;AAClG,MAAM,oBAAoB,GAAG;;;;;;;;CAQ5B,CAAC;AAEF,oFAAoF;AACpF,MAAM,eAAe,GAAG,wDAAwD,CAAC;AAEjF,SAAS,cAAc,CAAC,GAAU;IAChC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI;QACxB,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,UAAU,CAAoB;QAC/D,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QAChC,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;KACvG,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,SAAS,SAAS,CAAC,GAAU;IAC3B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACtG,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACtG,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,EAAY,EACZ,KAAqB,EACrB,MAAoB,IAAI,CAAC,GAAG;IAE5B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAU,CAAC;IAEvE,+FAA+F;IAC/F,SAAS,IAAI,CAAC,cAAsB;QAClC,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,+CAA+C,eAAe,EAAE,CAAC;aACzE,GAAG,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC;QACjC,OAAO,GAAG,KAAK,SAAS,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CACN,UAAU,oBAAoB;oBACpB,eAAe;uCACI,CAC9B;iBACA,GAAG,CAAC,GAAG,KAAK,CAAY,CAAC;YAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,EAAU;YAClB,MAAM,GAAG,GAAG,EAAE;iBACX,OAAO,CACN,UAAU,oBAAoB;iCACP,eAAe,EAAE,CACzC;iBACA,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAsB,CAAC;YAC1C,OAAO,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAkC;YAC7C,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACjB,EAAE,CAAC,OAAO,CACR;;4CAEoC,CACrC,CAAC,GAAG,CACH,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,KAAK,CAAC,WAAW,IAAI,UAAU,EAC/B,EAAE,EACF,EAAE,EACF,KAAK,CAAC,SAAS,IAAI,IAAI,CACxB,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzC,sFAAsF;YACtF,wFAAwF;YACxF,6EAA6E;YAC7E,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,CAAC,EAAE,oCAAoC,CAAC,CAAC;YAC9G,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAa,EAAE,SAA0B,QAAQ;YACxE,uFAAuF;YACvF,oFAAoF;YACpF,MAAM,KAAK,GAAG,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,EAAE,CAAC,OAAO,CACR;;+BAEuB,eAAe,GAAG,KAAK,EAAE,CACjD,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,OAAgC;YACtD,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACjB,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrC,EAAE,CAAC,OAAO,CAAC,8DAA8D,eAAe,EAAE,CAAC;qBACxF,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,EAAE,CAAC,OAAO,CACR,8EAA8E,eAAe,EAAE,CAChG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAU;YACrB,yFAAyF;YACzF,wFAAwF;YACxF,0DAA0D;YAC1D,EAAE,CAAC,OAAO,CAAC,gDAAgD,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC;QAClG,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,cAAsB;YACnC,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CACN;;;;;;8CAMoC,eAAe;gCAC7B,CACvB;iBACA,GAAG,CAAC,cAAc,EAAE,GAAG,KAAK,CAAY,CAAC;YAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,cAAsB,EAAE,OAAoB;YAC9D,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEvC,uFAAuF;YACvF,qFAAqF;YACrF,4FAA4F;YAC5F,EAAE;YACF,6FAA6F;YAC7F,gGAAgG;YAChG,gGAAgG;YAChG,8FAA8F;YAC9F,4FAA4F;YAC5F,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAc,EAAE,EAAE;gBAC9C,MAAM,QAAQ,GAAG,EAAE;qBAChB,OAAO,CAAC,4EAA4E,CAAC;qBACrF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAsB,CAAC;gBAElD,MAAM,QAAQ,GAAG,QAAQ;oBACvB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC3B,CAAC,CAAC,MAAM,CAEF,EAAE;yBACC,OAAO,CAAC,gGAAgG,CAAC;yBACzG,GAAG,CAAC,cAAc,CACtB,CAAC,IAAI,CACP,CAAC;gBAEN,EAAE,CAAC,OAAO,CACR;;;;;;;;;;;;;6EAamE,CACpE,CAAC,GAAG,CAAC;oBACJ,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,cAAc;oBACd,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;oBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;oBAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;oBACtD,eAAe,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;oBACrE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;oBACtB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;oBAC9B,QAAQ;oBACR,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE;oBAC/B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;oBAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;iBAC3B,CAAC,CAAC;gBAEH,qFAAqF;gBACrF,yEAAyE;gBACzE,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;YAC3F,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,OAAO,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,EAAY;IACvD,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAK,GAAG,GAAG;YACzC,0FAA0F;YAC1F,2FAA2F;YAC3F,mFAAmF;YACnF,MAAM,MAAM,GAAG,EAAE;iBACd,OAAO,CACN;;;;;eAKK,CACN;iBACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnB,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/db/index.d.ts

@@ -15,4 +15,10 @@ export { parseJsonOrUndef, row, rows } from './core/index.js';
 export { migrate } from './schema/index.js';
 export type { ToolCatalogEntry, ToolCatalogSearchHit } from './tool-catalog/index.js';
 export { ensureToolCatalogTables, reseedToolCatalog, getToolCatalogEntry, searchToolCatalog } from './tool-catalog/index.js';
+/**
+ * Owner-scoped chat history. Not to be confused with `./conversations/index.js` above: that one
+ * is `project_id`-scoped with no owner predicate (single-user local trust model), this one binds
+ * an owner into the store so no query can read across tenants. Pick by trust model.
+ */
+export { CHAT_HISTORY_DDL, ensureChatHistoryTables, createChatHistoryStore, createChatHistoryMaintenance } from './chat-history/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/db/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,gCAAgC,EAChC,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,oCAAoC,EACpC,wBAAwB,EACxB,uBAAuB,EACvB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,4BAA4B,EAC5B,iCAAiC,EACjC,gCAAgC,EAChC,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,EAC9B,UAAU,EACV,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,iCAAiC,EACjC,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,gCAAgC,EAChC,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,oCAAoC,EACpC,wBAAwB,EACxB,uBAAuB,EACvB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,4BAA4B,EAC5B,iCAAiC,EACjC,gCAAgC,EAChC,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,EAC9B,UAAU,EACV,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,iCAAiC,EACjC,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC7H;;;;GAIG;AACH,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/db/index.js

@@ -13,4 +13,10 @@ export { getAgentSession, upsertAgentSession, getAgentSessionRecord, latestCompl
 export { parseJsonOrUndef, row, rows } from './core/index.js';
 export { migrate } from './schema/index.js';
 export { ensureToolCatalogTables, reseedToolCatalog, getToolCatalogEntry, searchToolCatalog } from './tool-catalog/index.js';
+/**
+ * Owner-scoped chat history. Not to be confused with `./conversations/index.js` above: that one
+ * is `project_id`-scoped with no owner predicate (single-user local trust model), this one binds
+ * an owner into the store so no query can read across tenants. Pick by trust model.
+ */
+export { CHAT_HISTORY_DDL, ensureChatHistoryTables, createChatHistoryStore, createChatHistoryMaintenance } from './chat-history/index.js';
 //# sourceMappingURL=index.js.map

package/dist/db/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,gCAAgC,EAChC,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,oCAAoC,EACpC,wBAAwB,EACxB,uBAAuB,EACvB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,4BAA4B,EAC5B,iCAAiC,EACjC,gCAAgC,EAChC,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,EAC9B,UAAU,EACV,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,iCAAiC,EACjC,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,gCAAgC,EAChC,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,oCAAoC,EACpC,wBAAwB,EACxB,uBAAuB,EACvB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,4BAA4B,EAC5B,iCAAiC,EACjC,gCAAgC,EAChC,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,EAC9B,UAAU,EACV,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,iCAAiC,EACjC,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC7H;;;;GAIG;AACH,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/event-log.d.ts

@@ -1,4 +1,4 @@
-import type { EventLog } from '@jini-ai/daemon';
+import type { EventLog } from '@jini-ai/protocol';
 /**
  * Default per-run retention cap applied when `SqliteEventLogOptions.maxEntriesPerRun` is
  * omitted — see that option's doc for why a durable adapter defaults to a bound instead of

package/dist/event-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-log.d.ts","sourceRoot":"","sources":["../src/event-log.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EACV,QAAQ,EAIT,MAAM,iBAAiB,CAAC;AAEzB;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAwBD,yHAAyH;AACzH,MAAM,WAAW,cAAe,SAAQ,QAAQ;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAyBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,qBAA0B,GAClC,cAAc,CAuKhB"}
+{"version":3,"file":"event-log.d.ts","sourceRoot":"","sources":["../src/event-log.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EACV,QAAQ,EAIT,MAAM,mBAAmB,CAAC;AAE3B;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAwBD,yHAAyH;AACzH,MAAM,WAAW,cAAe,SAAQ,QAAQ;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAyBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,qBAA0B,GAClC,cAAc,CAuKhB"}

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@jini-ai/sqlite",
-  "version": "0.1.1",
+  "version": "0.3.0",
+  "description": "better-sqlite3-backed persistence adapters for @jini-ai/daemon’s ports: durable event log, backend selection, schema migration, and database inspection.",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -10,10 +11,12 @@
   "jini": {
     "domain": "server",
     "kind": "persistence-adapter",
-    "runtime": "node",
-    "admission": "locked"
+    "runtime": "node"
   },
   "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -34,8 +37,9 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "better-sqlite3": "^11.10.0",
-    "@jini-ai/daemon": "0.2.0"
+    "better-sqlite3": "^13.0.0",
+    "@jini-ai/chat": "0.3.0",
+    "@jini-ai/protocol": "0.3.0"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.11",