@juli-os/ledger 0.1.6 → 0.2.0

package/README.md

@@ -8,7 +8,7 @@ The L1 layer of the juli open-source ladder: **the append-only ledger of record
 |---|---|---|
 | Workflow lifecycle | `createLedgerStore(path)` → `createWorkflow / getWorkflow / listWorkflows / setWorkflowStatus / createStep / insertStepsAt …` | Durable jobs + steps + statuses in SQLite, with dynamic mid-flight step insertion (single transaction, tail renumbered) |
 | Conversation threading | `latestByMessageId(msgId)` / `recentBySender(from, since)` | Reply-chain matching for email bots and support inboxes — message-id causal anchor + sender/time-window candidate narrowing |
-| Case files | `emptyCaseFile() / loadCaseFile / saveCaseFile` | A per-job audit dossier: original → extract → executions → draft → decisions → artifacts |
+| Case files | `emptyCaseFile(now) / loadCaseFile / saveCaseFile` | A per-job audit dossier: original → extract → executions → draft → decisions → artifacts |
 | Usage & cost | `createUsageStore(path)` → `record / stats / timeline / byLocalDay`, `priceUsage()` | Token accounting per model / day / session with built-in pricing |
 
 ## Peel boundary

package/dist/contracts/entities.d.ts

@@ -16,6 +16,7 @@ export interface Workflow {
     readonly project: string;
     readonly path: string;
     readonly threadId: string | null;
+    readonly tenant: string;
     readonly meta: JsonRecord;
     readonly createdAt: string;
     readonly updatedAt: string;

package/dist/index.js

@@ -110,7 +110,7 @@ var parseCaseFile = (raw, now) => {
     decisions: pick(arr("decisions"), (d) => "action" in d),
     references: arr("references").filter((x) => typeof x === "string"),
     artifacts: pick(arr("artifacts"), (a) => "id" in a),
-    updatedAt: str2("updated_at") || base.updatedAt
+    updatedAt: str2("updatedAt") || str2("updated_at") || base.updatedAt
   };
 };
 var serializeCaseFile = (cf) => JSON.stringify(cf);
@@ -240,7 +240,8 @@ var rowToWorkflow = (r) => ({
   session: str(r["session"]),
   project: str(r["project"]),
   path: str(r["path"]),
-  threadId: r["thread_id"] === null || r["thread_id"] === void 0 ? null : str(r["thread_id"]),
+  threadId: r["thread_id"] === null ? null : str(r["thread_id"]),
+  tenant: str(r["tenant"]) || "internal",
   meta: asRecord(safeParse(str(r["meta"]))),
   createdAt: str(r["created_at"]),
   updatedAt: str(r["updated_at"])
@@ -280,6 +281,8 @@ var pruneImpl = (db, retentionDays, nowIso) => {
     try {
       db.prepare("DELETE FROM workflow_steps WHERE workflow_id=?").run(r.id);
       db.prepare("DELETE FROM relays WHERE workflow_id=?").run(r.id);
+      db.prepare("DELETE FROM prompts WHERE run_id IN (SELECT id FROM runs WHERE workflow_id=?)").run(r.id);
+      db.prepare("DELETE FROM runs WHERE workflow_id=?").run(r.id);
       db.prepare("DELETE FROM workflows WHERE id=?").run(r.id);
       db.exec("COMMIT");
     } catch (e) {
@@ -305,7 +308,11 @@ var createLedgerStore = (dbPath, deps = {}) => {
   if (!wfCols.includes("thread_id")) {
     db.exec("ALTER TABLE workflows ADD COLUMN thread_id TEXT");
   }
+  if (!wfCols.includes("tenant")) {
+    db.exec("ALTER TABLE workflows ADD COLUMN tenant TEXT NOT NULL DEFAULT 'internal'");
+  }
   db.exec("CREATE INDEX IF NOT EXISTS idx_workflows_thread ON workflows(thread_id)");
+  db.exec("CREATE INDEX IF NOT EXISTS idx_workflows_tenant ON workflows(tenant, created_at)");
   const stepCols = db.prepare("PRAGMA table_info(workflow_steps)").all().map((c) => c.name);
   if (!stepCols.includes("started_at")) db.exec("ALTER TABLE workflow_steps ADD COLUMN started_at TEXT");
   if (!stepCols.includes("completed_at")) db.exec("ALTER TABLE workflow_steps ADD COLUMN completed_at TEXT");
@@ -327,7 +334,7 @@ var createLedgerStore = (dbPath, deps = {}) => {
   const activeRunOf = (session) => {
     const r = db.prepare(
       `SELECT r.id AS id, r.workflow_id AS workflow_id, r.session AS session,
-              r.status AS status, r.created_at AS created_at FROM runs r
+              r.created_at AS created_at FROM runs r
        JOIN workflows w ON w.id = r.workflow_id
        WHERE r.session=? AND r.status IN ('running','idle') AND w.status='running'
        ORDER BY r.created_at DESC, r.rowid DESC LIMIT 1`
@@ -347,19 +354,36 @@ var createLedgerStore = (dbPath, deps = {}) => {
       const id = ids.newId("wf");
       const ts = now();
       db.prepare(
-        `INSERT INTO workflows (id, parent_id, kind, title, status, owner, meta, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
-      ).run(id, w.parentId ?? null, w.kind, w.title, w.status ?? "running", w.owner ?? null, JSON.stringify(w.meta ?? {}), ts, ts);
+        `INSERT INTO workflows (id, parent_id, kind, title, status, owner, tenant, meta, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+      ).run(id, w.parentId ?? null, w.kind, w.title, w.status ?? "running", w.owner ?? null, w.tenant || "internal", JSON.stringify(w.meta ?? {}), ts, ts);
       return getWorkflowById(id);
     },
     getWorkflow(id) {
       return getWorkflowById(id);
     },
-    listWorkflows(limit = 100, status) {
+    listWorkflows(limit = 100, status, tenant) {
+      const where = [];
+      const params = [];
       if (status !== void 0 && status !== "") {
-        return db.prepare("SELECT * FROM workflows WHERE status=? ORDER BY created_at DESC, rowid DESC LIMIT ?").all(status, limit).map(rowToWorkflow);
+        where.push("status=?");
+        params.push(status);
+      }
+      if (tenant !== void 0 && tenant !== "") {
+        where.push("tenant=?");
+        params.push(tenant);
       }
-      return db.prepare("SELECT * FROM workflows ORDER BY created_at DESC, rowid DESC LIMIT ?").all(limit).map(rowToWorkflow);
+      const sql = where.length > 0 ? `SELECT * FROM workflows WHERE ${where.join(" AND ")} ORDER BY created_at DESC, rowid DESC LIMIT ?` : "SELECT * FROM workflows ORDER BY created_at DESC, rowid DESC LIMIT ?";
+      return db.prepare(sql).all(...params, limit).map(rowToWorkflow);
+    },
+    setWorkflowTenant(id, tenant) {
+      const next = tenant === "" ? "internal" : tenant;
+      const cur = getWorkflowById(id);
+      if (cur === null || cur.tenant === next) return;
+      db.prepare("UPDATE workflows SET tenant=?, updated_at=? WHERE id=?").run(next, now(), id);
+      db.prepare(
+        "INSERT INTO events (entity_type, entity_id, type, payload, ts) VALUES ('workflow', ?, 'tenant_changed', ?, ?)"
+      ).run(id, JSON.stringify({ from: cur.tenant, to: next }), now());
     },
     setWorkflowSession(id, session) {
       db.prepare("UPDATE workflows SET session=?, updated_at=? WHERE id=?").run(session, now(), id);
@@ -521,7 +545,18 @@ var createLedgerStore = (dbPath, deps = {}) => {
       ).run(now(), now(), id);
       return Number(res.changes) === 1;
     },
-    listSteps(status, limit = 100) {
+    listSteps(status, limit = 100, tenant) {
+      if (tenant !== void 0 && tenant !== "") {
+        return db.prepare(
+          `SELECT st.id AS id, st.workflow_id AS workflow_id, st.seq AS seq, st.kind AS kind,
+                  st.title AS title, st.status AS status,
+                  COALESCE(st.input,'') AS input, COALESCE(st.output,'') AS output,
+                  COALESCE(st.summary,'') AS summary, st.updated_at AS updated_at,
+                  st.started_at AS started_at, st.completed_at AS completed_at
+           FROM workflow_steps st JOIN workflows w ON w.id = st.workflow_id
+           WHERE st.status=? AND w.tenant=? ORDER BY st.updated_at DESC LIMIT ?`
+        ).all(status, tenant, limit).map(rowToStep);
+      }
       return db.prepare(
         `SELECT ${STEP_COLS} FROM workflow_steps WHERE status=? ORDER BY updated_at DESC LIMIT ?`
       ).all(status, limit).map(rowToStep);
@@ -551,8 +586,9 @@ var createLedgerStore = (dbPath, deps = {}) => {
     sessionHasOpenWork(session, excludeWorkflowId) {
       const anchor = "(session=?1 OR COALESCE(json_extract(meta,'$.assigned_session'),'')=?1 OR id IN (SELECT workflow_id FROM runs WHERE session=?1))";
       const openFilter = `status IN (${sqlInList(ACTIVE_WORKFLOW_STATUSES)})`;
-      const sql = excludeWorkflowId !== void 0 && excludeWorkflowId !== "" ? `SELECT COUNT(*) AS n FROM workflows WHERE ${openFilter} AND ${anchor} AND id != ?2` : `SELECT COUNT(*) AS n FROM workflows WHERE ${openFilter} AND ${anchor}`;
-      const row = excludeWorkflowId !== void 0 && excludeWorkflowId !== "" ? db.prepare(sql).get(session, excludeWorkflowId) : db.prepare(sql).get(session);
+      const exclude = excludeWorkflowId !== void 0 && excludeWorkflowId !== "";
+      const sql = `SELECT COUNT(*) AS n FROM workflows WHERE ${openFilter} AND ${anchor}${exclude ? " AND id != ?2" : ""}`;
+      const row = exclude ? db.prepare(sql).get(session, excludeWorkflowId) : db.prepare(sql).get(session);
       return Number(row["n"]) > 0;
     },
     appendEvent(entityType, entityId, type, payload = {}) {
@@ -593,14 +629,15 @@ var createLedgerStore = (dbPath, deps = {}) => {
     },
     createRun(workflowId, session) {
       const id = ids.newId("run");
+      const ts = now();
       db.prepare(`INSERT INTO runs (id, workflow_id, session, status, created_at)
-        VALUES (?, ?, ?, 'running', ?)`).run(id, workflowId, session, now());
+        VALUES (?, ?, ?, 'running', ?)`).run(id, workflowId, session, ts);
       return {
         id,
         workflowId,
         session,
         status: "running",
-        createdAt: now()
+        createdAt: ts
       };
     },
     activeRunForSession: (session) => activeRunOf(session),
@@ -623,17 +660,20 @@ var createLedgerStore = (dbPath, deps = {}) => {
       ).get(dedupPattern(key));
       return r !== void 0;
     },
-    /** 自回环守卫查询（2026-09-20 断点十三）：message_id 是否命中本引擎已
-     * 发送记录——completed send 步的 output.message_id（email_sent 事件同源
-     * 落账）。进件层据此丢弃投递副本回灌（引擎给轮询邮箱自己发信的 echo）。
-     * LIKE 预筛 + 精确比对：JSON 编码取实际存储字节，%/_/\ 照 jsonFieldPattern
-     * 成对转义（message-id 几乎必含 `_`）。 */
+    /** 全量出站邮件登记（2026-09-20 幽灵单缺口）：send 步之外，通知邮件
+     * （emailNotifier）等所有出站信的 message_id 也落 email_sent 事件——
+     * 发给轮询邮箱自身的告警信不再被当新来信建单（[juli] 待审批 幽灵单）。 */
     recordSentMessageId(messageId, meta) {
       if (messageId === "") return;
       db.prepare(
         `INSERT INTO events (entity_type, entity_id, type, payload, ts) VALUES ('email', ?, 'email_sent', ?, ?)`
       ).run(messageId, JSON.stringify(meta ?? {}), now());
     },
+    /** 自回环守卫查询（2026-09-20 断点十三）：message_id 是否命中本引擎已
+     * 发送记录——completed send 步的 output.message_id（email_sent 事件同源
+     * 落账）。进件层据此丢弃投递副本回灌（引擎给轮询邮箱自己发信的 echo）。
+     * LIKE 预筛 + 精确比对：JSON 编码取实际存储字节，%/_/\ 照 jsonFieldPattern
+     * 成对转义（message-id 几乎必含 `_`）。 */
     sentMessageIdExists(messageId) {
       if (messageId === "") return false;
       const registered = db.prepare(
@@ -652,9 +692,10 @@ var createLedgerStore = (dbPath, deps = {}) => {
     },
     createPrompt(runId, content, source) {
       const id = ids.newId("pr");
+      const ts = now();
       db.prepare(`INSERT INTO prompts (id, run_id, content, source, status, created_at)
-        VALUES (?, ?, ?, ?, 'submitted', ?)`).run(id, runId, content, source, now());
-      return { id, runId, content, status: "submitted", createdAt: now() };
+        VALUES (?, ?, ?, ?, 'submitted', ?)`).run(id, runId, content, source, ts);
+      return { id, runId, content, status: "submitted", createdAt: ts };
     },
     prune(retentionDays) {
       return pruneImpl(db, retentionDays, now());
@@ -698,9 +739,9 @@ var createLedgerStore = (dbPath, deps = {}) => {
         if (arr === void 0) members.set(root, [w.id]);
         else arr.push(w.id);
       }
-      const views = [...members.entries()].map(([taskId, ids2]) => {
+      const views = [...members.entries()].map(([taskId, memberIds]) => {
         const card = byId.get(taskId);
-        return { taskId, title: card.title, status: card.status, workflowIds: ids2 };
+        return { taskId, title: card.title, status: card.status, workflowIds: memberIds };
       }).sort((a, b) => {
         const ca = byId.get(a.taskId)?.createdAt ?? "";
         const cb = byId.get(b.taskId)?.createdAt ?? "";
@@ -1043,9 +1084,9 @@ var createUsageStore = (dbPath, now = () => /* @__PURE__ */ new Date()) => {
         outputTokens: n(r["o"])
       }));
       return {
-        totalCalls: n(total?.["c"]),
-        totalInputTokens: n(total?.["i"]),
-        totalOutputTokens: n(total?.["o"]),
+        totalCalls: n(total["c"]),
+        totalInputTokens: n(total["i"]),
+        totalOutputTokens: n(total["o"]),
         byModel
       };
     },
@@ -1088,7 +1129,6 @@ var createUsageStore = (dbPath, now = () => /* @__PURE__ */ new Date()) => {
       return windowUsageRows(db, tmuxSession, windows);
     },
     sessionWindowsPriced(sessions, windows) {
-      if (sessions.length === 0 || windows.length === 0) return priceUsage([]);
       return priceUsage(sessions.flatMap((s) => windowUsageRows(db, s, windows)));
     },
     byLocalDay(days = 7) {
@@ -1122,10 +1162,17 @@ var createUsageStore = (dbPath, now = () => /* @__PURE__ */ new Date()) => {
       return mapped > 0 && total > 0 && filled * 2 < total;
     },
     resetClaudeIngest() {
-      db.exec("DELETE FROM prompt_usage WHERE source='claude_code'");
-      db.exec("DELETE FROM claude_ingest_offset");
-      db.prepare(`INSERT INTO usage_meta (key, value) VALUES ('last_claude_replay_at', ?)
-        ON CONFLICT(key) DO UPDATE SET value=excluded.value`).run(now().toISOString());
+      db.exec("BEGIN");
+      try {
+        db.exec("DELETE FROM prompt_usage WHERE source='claude_code'");
+        db.exec("DELETE FROM claude_ingest_offset");
+        db.prepare(`INSERT INTO usage_meta (key, value) VALUES ('last_claude_replay_at', ?)
+          ON CONFLICT(key) DO UPDATE SET value=excluded.value`).run(now().toISOString());
+        db.exec("COMMIT");
+      } catch (e) {
+        db.exec("ROLLBACK");
+        throw e;
+      }
     },
     recent(limit = 100) {
       return db.prepare("SELECT * FROM prompt_usage ORDER BY id DESC LIMIT ?").all(limit).map((r) => ({
@@ -1171,7 +1218,7 @@ var createUsageStore = (dbPath, now = () => /* @__PURE__ */ new Date()) => {
           }
           for (const f of files) {
             const stem = f.replace(/\.jsonl$/, "");
-            count += ingestFile(db, stem, join(dir, f));
+            count += ingestFile(db, stem, join(dir, f), now);
           }
         }
       } catch {
@@ -1185,7 +1232,7 @@ var tmuxOf = (db, claudeId) => {
   const r = db.prepare("SELECT tmux_session FROM claude_sessions WHERE claude_session_id=?").get(claudeId);
   return r?.["tmux_session"] ?? "";
 };
-var ingestFile = (db, claudeId, transcriptPath) => {
+var ingestFile = (db, claudeId, transcriptPath, now) => {
   let fd;
   try {
     fd = openSync(transcriptPath, "r");
@@ -1215,7 +1262,7 @@ var ingestFile = (db, claudeId, transcriptPath) => {
       const sess = tmuxOf(db, claudeId);
       for (const line of complete.split("\n")) {
         if (line === "") continue;
-        const rec = parseAssistantLine(line);
+        const rec = parseAssistantLine(line, now);
         if (!rec) continue;
         db.prepare(`INSERT INTO prompt_usage (source, note, model, input_tokens, output_tokens, cached_tokens, duration_ms, error, created_at, tmux_session)
           VALUES ('claude_code', ?, ?, ?, ?, ?, 0, '', ?, ?)`).run(
@@ -1231,7 +1278,7 @@ var ingestFile = (db, claudeId, transcriptPath) => {
       }
       db.prepare(`INSERT INTO claude_ingest_offset (claude_session_id, byte_offset, last_ingested_at)
         VALUES (?, ?, ?)
-        ON CONFLICT(claude_session_id) DO UPDATE SET byte_offset=excluded.byte_offset, last_ingested_at=excluded.last_ingested_at`).run(claudeId, newOffset, (/* @__PURE__ */ new Date()).toISOString());
+        ON CONFLICT(claude_session_id) DO UPDATE SET byte_offset=excluded.byte_offset, last_ingested_at=excluded.last_ingested_at`).run(claudeId, newOffset, now().toISOString());
       db.exec("COMMIT");
     } catch (e) {
       db.exec("ROLLBACK");
@@ -1242,7 +1289,7 @@ var ingestFile = (db, claudeId, transcriptPath) => {
     closeSync(fd);
   }
 };
-var parseAssistantLine = (line) => {
+var parseAssistantLine = (line, now) => {
   try {
     const v = JSON.parse(line);
     if (v.type !== "assistant") return null;
@@ -1257,7 +1304,7 @@ var parseAssistantLine = (line) => {
       inputTokens: input,
       outputTokens: output,
       cacheRead,
-      timestamp: typeof v.timestamp === "string" ? v.timestamp : (/* @__PURE__ */ new Date()).toISOString(),
+      timestamp: typeof v.timestamp === "string" ? v.timestamp : now().toISOString(),
       callContext: v.uuid ?? ""
     };
   } catch {

package/dist/juli-ledger.js

@@ -105,7 +105,7 @@ var parseCaseFile = (raw, now) => {
     decisions: pick(arr("decisions"), (d) => "action" in d),
     references: arr("references").filter((x) => typeof x === "string"),
     artifacts: pick(arr("artifacts"), (a) => "id" in a),
-    updatedAt: str2("updated_at") || base.updatedAt
+    updatedAt: str2("updatedAt") || str2("updated_at") || base.updatedAt
   };
 };
 var serializeCaseFile = (cf) => JSON.stringify(cf);
@@ -198,7 +198,8 @@ var rowToWorkflow = (r) => ({
   session: str(r["session"]),
   project: str(r["project"]),
   path: str(r["path"]),
-  threadId: r["thread_id"] === null || r["thread_id"] === void 0 ? null : str(r["thread_id"]),
+  threadId: r["thread_id"] === null ? null : str(r["thread_id"]),
+  tenant: str(r["tenant"]) || "internal",
   meta: asRecord(safeParse(str(r["meta"]))),
   createdAt: str(r["created_at"]),
   updatedAt: str(r["updated_at"])
@@ -238,6 +239,8 @@ var pruneImpl = (db, retentionDays, nowIso) => {
     try {
       db.prepare("DELETE FROM workflow_steps WHERE workflow_id=?").run(r.id);
       db.prepare("DELETE FROM relays WHERE workflow_id=?").run(r.id);
+      db.prepare("DELETE FROM prompts WHERE run_id IN (SELECT id FROM runs WHERE workflow_id=?)").run(r.id);
+      db.prepare("DELETE FROM runs WHERE workflow_id=?").run(r.id);
       db.prepare("DELETE FROM workflows WHERE id=?").run(r.id);
       db.exec("COMMIT");
     } catch (e) {
@@ -263,7 +266,11 @@ var createLedgerStore = (dbPath, deps = {}) => {
   if (!wfCols.includes("thread_id")) {
     db.exec("ALTER TABLE workflows ADD COLUMN thread_id TEXT");
   }
+  if (!wfCols.includes("tenant")) {
+    db.exec("ALTER TABLE workflows ADD COLUMN tenant TEXT NOT NULL DEFAULT 'internal'");
+  }
   db.exec("CREATE INDEX IF NOT EXISTS idx_workflows_thread ON workflows(thread_id)");
+  db.exec("CREATE INDEX IF NOT EXISTS idx_workflows_tenant ON workflows(tenant, created_at)");
   const stepCols = db.prepare("PRAGMA table_info(workflow_steps)").all().map((c) => c.name);
   if (!stepCols.includes("started_at")) db.exec("ALTER TABLE workflow_steps ADD COLUMN started_at TEXT");
   if (!stepCols.includes("completed_at")) db.exec("ALTER TABLE workflow_steps ADD COLUMN completed_at TEXT");
@@ -285,7 +292,7 @@ var createLedgerStore = (dbPath, deps = {}) => {
   const activeRunOf = (session) => {
     const r = db.prepare(
       `SELECT r.id AS id, r.workflow_id AS workflow_id, r.session AS session,
-              r.status AS status, r.created_at AS created_at FROM runs r
+              r.created_at AS created_at FROM runs r
        JOIN workflows w ON w.id = r.workflow_id
        WHERE r.session=? AND r.status IN ('running','idle') AND w.status='running'
        ORDER BY r.created_at DESC, r.rowid DESC LIMIT 1`
@@ -305,19 +312,36 @@ var createLedgerStore = (dbPath, deps = {}) => {
       const id = ids.newId("wf");
       const ts = now();
       db.prepare(
-        `INSERT INTO workflows (id, parent_id, kind, title, status, owner, meta, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
-      ).run(id, w.parentId ?? null, w.kind, w.title, w.status ?? "running", w.owner ?? null, JSON.stringify(w.meta ?? {}), ts, ts);
+        `INSERT INTO workflows (id, parent_id, kind, title, status, owner, tenant, meta, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+      ).run(id, w.parentId ?? null, w.kind, w.title, w.status ?? "running", w.owner ?? null, w.tenant || "internal", JSON.stringify(w.meta ?? {}), ts, ts);
       return getWorkflowById(id);
     },
     getWorkflow(id) {
       return getWorkflowById(id);
     },
-    listWorkflows(limit = 100, status) {
+    listWorkflows(limit = 100, status, tenant) {
+      const where = [];
+      const params = [];
       if (status !== void 0 && status !== "") {
-        return db.prepare("SELECT * FROM workflows WHERE status=? ORDER BY created_at DESC, rowid DESC LIMIT ?").all(status, limit).map(rowToWorkflow);
+        where.push("status=?");
+        params.push(status);
+      }
+      if (tenant !== void 0 && tenant !== "") {
+        where.push("tenant=?");
+        params.push(tenant);
       }
-      return db.prepare("SELECT * FROM workflows ORDER BY created_at DESC, rowid DESC LIMIT ?").all(limit).map(rowToWorkflow);
+      const sql = where.length > 0 ? `SELECT * FROM workflows WHERE ${where.join(" AND ")} ORDER BY created_at DESC, rowid DESC LIMIT ?` : "SELECT * FROM workflows ORDER BY created_at DESC, rowid DESC LIMIT ?";
+      return db.prepare(sql).all(...params, limit).map(rowToWorkflow);
+    },
+    setWorkflowTenant(id, tenant) {
+      const next = tenant === "" ? "internal" : tenant;
+      const cur = getWorkflowById(id);
+      if (cur === null || cur.tenant === next) return;
+      db.prepare("UPDATE workflows SET tenant=?, updated_at=? WHERE id=?").run(next, now(), id);
+      db.prepare(
+        "INSERT INTO events (entity_type, entity_id, type, payload, ts) VALUES ('workflow', ?, 'tenant_changed', ?, ?)"
+      ).run(id, JSON.stringify({ from: cur.tenant, to: next }), now());
     },
     setWorkflowSession(id, session) {
       db.prepare("UPDATE workflows SET session=?, updated_at=? WHERE id=?").run(session, now(), id);
@@ -479,7 +503,18 @@ var createLedgerStore = (dbPath, deps = {}) => {
       ).run(now(), now(), id);
       return Number(res.changes) === 1;
     },
-    listSteps(status, limit = 100) {
+    listSteps(status, limit = 100, tenant) {
+      if (tenant !== void 0 && tenant !== "") {
+        return db.prepare(
+          `SELECT st.id AS id, st.workflow_id AS workflow_id, st.seq AS seq, st.kind AS kind,
+                  st.title AS title, st.status AS status,
+                  COALESCE(st.input,'') AS input, COALESCE(st.output,'') AS output,
+                  COALESCE(st.summary,'') AS summary, st.updated_at AS updated_at,
+                  st.started_at AS started_at, st.completed_at AS completed_at
+           FROM workflow_steps st JOIN workflows w ON w.id = st.workflow_id
+           WHERE st.status=? AND w.tenant=? ORDER BY st.updated_at DESC LIMIT ?`
+        ).all(status, tenant, limit).map(rowToStep);
+      }
       return db.prepare(
         `SELECT ${STEP_COLS} FROM workflow_steps WHERE status=? ORDER BY updated_at DESC LIMIT ?`
       ).all(status, limit).map(rowToStep);
@@ -509,8 +544,9 @@ var createLedgerStore = (dbPath, deps = {}) => {
     sessionHasOpenWork(session, excludeWorkflowId) {
       const anchor = "(session=?1 OR COALESCE(json_extract(meta,'$.assigned_session'),'')=?1 OR id IN (SELECT workflow_id FROM runs WHERE session=?1))";
       const openFilter = `status IN (${sqlInList(ACTIVE_WORKFLOW_STATUSES)})`;
-      const sql = excludeWorkflowId !== void 0 && excludeWorkflowId !== "" ? `SELECT COUNT(*) AS n FROM workflows WHERE ${openFilter} AND ${anchor} AND id != ?2` : `SELECT COUNT(*) AS n FROM workflows WHERE ${openFilter} AND ${anchor}`;
-      const row = excludeWorkflowId !== void 0 && excludeWorkflowId !== "" ? db.prepare(sql).get(session, excludeWorkflowId) : db.prepare(sql).get(session);
+      const exclude = excludeWorkflowId !== void 0 && excludeWorkflowId !== "";
+      const sql = `SELECT COUNT(*) AS n FROM workflows WHERE ${openFilter} AND ${anchor}${exclude ? " AND id != ?2" : ""}`;
+      const row = exclude ? db.prepare(sql).get(session, excludeWorkflowId) : db.prepare(sql).get(session);
       return Number(row["n"]) > 0;
     },
     appendEvent(entityType, entityId, type, payload = {}) {
@@ -551,14 +587,15 @@ var createLedgerStore = (dbPath, deps = {}) => {
     },
     createRun(workflowId, session) {
       const id = ids.newId("run");
+      const ts = now();
       db.prepare(`INSERT INTO runs (id, workflow_id, session, status, created_at)
-        VALUES (?, ?, ?, 'running', ?)`).run(id, workflowId, session, now());
+        VALUES (?, ?, ?, 'running', ?)`).run(id, workflowId, session, ts);
       return {
         id,
         workflowId,
         session,
         status: "running",
-        createdAt: now()
+        createdAt: ts
       };
     },
     activeRunForSession: (session) => activeRunOf(session),
@@ -581,17 +618,20 @@ var createLedgerStore = (dbPath, deps = {}) => {
       ).get(dedupPattern(key));
       return r !== void 0;
     },
-    /** 自回环守卫查询（2026-09-20 断点十三）：message_id 是否命中本引擎已
-     * 发送记录——completed send 步的 output.message_id（email_sent 事件同源
-     * 落账）。进件层据此丢弃投递副本回灌（引擎给轮询邮箱自己发信的 echo）。
-     * LIKE 预筛 + 精确比对：JSON 编码取实际存储字节，%/_/\ 照 jsonFieldPattern
-     * 成对转义（message-id 几乎必含 `_`）。 */
+    /** 全量出站邮件登记（2026-09-20 幽灵单缺口）：send 步之外，通知邮件
+     * （emailNotifier）等所有出站信的 message_id 也落 email_sent 事件——
+     * 发给轮询邮箱自身的告警信不再被当新来信建单（[juli] 待审批 幽灵单）。 */
     recordSentMessageId(messageId, meta) {
       if (messageId === "") return;
       db.prepare(
         `INSERT INTO events (entity_type, entity_id, type, payload, ts) VALUES ('email', ?, 'email_sent', ?, ?)`
       ).run(messageId, JSON.stringify(meta ?? {}), now());
     },
+    /** 自回环守卫查询（2026-09-20 断点十三）：message_id 是否命中本引擎已
+     * 发送记录——completed send 步的 output.message_id（email_sent 事件同源
+     * 落账）。进件层据此丢弃投递副本回灌（引擎给轮询邮箱自己发信的 echo）。
+     * LIKE 预筛 + 精确比对：JSON 编码取实际存储字节，%/_/\ 照 jsonFieldPattern
+     * 成对转义（message-id 几乎必含 `_`）。 */
     sentMessageIdExists(messageId) {
       if (messageId === "") return false;
       const registered = db.prepare(
@@ -610,9 +650,10 @@ var createLedgerStore = (dbPath, deps = {}) => {
     },
     createPrompt(runId, content, source) {
       const id = ids.newId("pr");
+      const ts = now();
       db.prepare(`INSERT INTO prompts (id, run_id, content, source, status, created_at)
-        VALUES (?, ?, ?, ?, 'submitted', ?)`).run(id, runId, content, source, now());
-      return { id, runId, content, status: "submitted", createdAt: now() };
+        VALUES (?, ?, ?, ?, 'submitted', ?)`).run(id, runId, content, source, ts);
+      return { id, runId, content, status: "submitted", createdAt: ts };
     },
     prune(retentionDays) {
       return pruneImpl(db, retentionDays, now());
@@ -656,9 +697,9 @@ var createLedgerStore = (dbPath, deps = {}) => {
         if (arr === void 0) members.set(root, [w.id]);
         else arr.push(w.id);
       }
-      const views = [...members.entries()].map(([taskId, ids2]) => {
+      const views = [...members.entries()].map(([taskId, memberIds]) => {
         const card = byId.get(taskId);
-        return { taskId, title: card.title, status: card.status, workflowIds: ids2 };
+        return { taskId, title: card.title, status: card.status, workflowIds: memberIds };
       }).sort((a, b) => {
         const ca = byId.get(a.taskId)?.createdAt ?? "";
         const cb = byId.get(b.taskId)?.createdAt ?? "";
@@ -1001,9 +1042,9 @@ var createUsageStore = (dbPath, now = () => /* @__PURE__ */ new Date()) => {
         outputTokens: n(r["o"])
       }));
       return {
-        totalCalls: n(total?.["c"]),
-        totalInputTokens: n(total?.["i"]),
-        totalOutputTokens: n(total?.["o"]),
+        totalCalls: n(total["c"]),
+        totalInputTokens: n(total["i"]),
+        totalOutputTokens: n(total["o"]),
         byModel
       };
     },
@@ -1046,7 +1087,6 @@ var createUsageStore = (dbPath, now = () => /* @__PURE__ */ new Date()) => {
       return windowUsageRows(db, tmuxSession, windows);
     },
     sessionWindowsPriced(sessions, windows) {
-      if (sessions.length === 0 || windows.length === 0) return priceUsage([]);
       return priceUsage(sessions.flatMap((s) => windowUsageRows(db, s, windows)));
     },
     byLocalDay(days = 7) {
@@ -1080,10 +1120,17 @@ var createUsageStore = (dbPath, now = () => /* @__PURE__ */ new Date()) => {
       return mapped > 0 && total > 0 && filled * 2 < total;
     },
     resetClaudeIngest() {
-      db.exec("DELETE FROM prompt_usage WHERE source='claude_code'");
-      db.exec("DELETE FROM claude_ingest_offset");
-      db.prepare(`INSERT INTO usage_meta (key, value) VALUES ('last_claude_replay_at', ?)
-        ON CONFLICT(key) DO UPDATE SET value=excluded.value`).run(now().toISOString());
+      db.exec("BEGIN");
+      try {
+        db.exec("DELETE FROM prompt_usage WHERE source='claude_code'");
+        db.exec("DELETE FROM claude_ingest_offset");
+        db.prepare(`INSERT INTO usage_meta (key, value) VALUES ('last_claude_replay_at', ?)
+          ON CONFLICT(key) DO UPDATE SET value=excluded.value`).run(now().toISOString());
+        db.exec("COMMIT");
+      } catch (e) {
+        db.exec("ROLLBACK");
+        throw e;
+      }
     },
     recent(limit = 100) {
       return db.prepare("SELECT * FROM prompt_usage ORDER BY id DESC LIMIT ?").all(limit).map((r) => ({
@@ -1129,7 +1176,7 @@ var createUsageStore = (dbPath, now = () => /* @__PURE__ */ new Date()) => {
           }
           for (const f of files) {
             const stem = f.replace(/\.jsonl$/, "");
-            count += ingestFile(db, stem, join(dir2, f));
+            count += ingestFile(db, stem, join(dir2, f), now);
           }
         }
       } catch {
@@ -1143,7 +1190,7 @@ var tmuxOf = (db, claudeId) => {
   const r = db.prepare("SELECT tmux_session FROM claude_sessions WHERE claude_session_id=?").get(claudeId);
   return r?.["tmux_session"] ?? "";
 };
-var ingestFile = (db, claudeId, transcriptPath) => {
+var ingestFile = (db, claudeId, transcriptPath, now) => {
   let fd;
   try {
     fd = openSync(transcriptPath, "r");
@@ -1173,7 +1220,7 @@ var ingestFile = (db, claudeId, transcriptPath) => {
       const sess = tmuxOf(db, claudeId);
       for (const line of complete.split("\n")) {
         if (line === "") continue;
-        const rec = parseAssistantLine(line);
+        const rec = parseAssistantLine(line, now);
         if (!rec) continue;
         db.prepare(`INSERT INTO prompt_usage (source, note, model, input_tokens, output_tokens, cached_tokens, duration_ms, error, created_at, tmux_session)
           VALUES ('claude_code', ?, ?, ?, ?, ?, 0, '', ?, ?)`).run(
@@ -1189,7 +1236,7 @@ var ingestFile = (db, claudeId, transcriptPath) => {
       }
       db.prepare(`INSERT INTO claude_ingest_offset (claude_session_id, byte_offset, last_ingested_at)
         VALUES (?, ?, ?)
-        ON CONFLICT(claude_session_id) DO UPDATE SET byte_offset=excluded.byte_offset, last_ingested_at=excluded.last_ingested_at`).run(claudeId, newOffset, (/* @__PURE__ */ new Date()).toISOString());
+        ON CONFLICT(claude_session_id) DO UPDATE SET byte_offset=excluded.byte_offset, last_ingested_at=excluded.last_ingested_at`).run(claudeId, newOffset, now().toISOString());
       db.exec("COMMIT");
     } catch (e) {
       db.exec("ROLLBACK");
@@ -1200,7 +1247,7 @@ var ingestFile = (db, claudeId, transcriptPath) => {
     closeSync(fd);
   }
 };
-var parseAssistantLine = (line) => {
+var parseAssistantLine = (line, now) => {
   try {
     const v = JSON.parse(line);
     if (v.type !== "assistant") return null;
@@ -1215,7 +1262,7 @@ var parseAssistantLine = (line) => {
       inputTokens: input,
       outputTokens: output,
       cacheRead,
-      timestamp: typeof v.timestamp === "string" ? v.timestamp : (/* @__PURE__ */ new Date()).toISOString(),
+      timestamp: typeof v.timestamp === "string" ? v.timestamp : now().toISOString(),
       callContext: v.uuid ?? ""
     };
   } catch {

package/dist/platform/ledger/store.d.ts

@@ -12,11 +12,13 @@ export interface LifecycleStore {
         parentId?: string;
         status?: WorkflowStatus;
         owner?: string;
+        tenant?: string;
     }): Workflow;
     getWorkflow(id: string): Workflow | null;
-    listWorkflows(limit?: number, status?: string): readonly Workflow[];
+    listWorkflows(limit?: number, status?: string, tenant?: string): readonly Workflow[];
     setWorkflowStatus(id: string, status: WorkflowStatus): void;
     setWorkflowSession(id: string, session: string): void;
+    setWorkflowTenant(id: string, tenant: string): void;
     updateWorkflowMeta(id: string, patch: JsonRecord): JsonRecord;
     setWorkflowRouting(id: string, session: string, project: string): void;
     assignThread(workflowId: string, threadId: string): void;
@@ -64,7 +66,7 @@ export interface LifecycleStore {
     setStepOutput(id: string, patch: JsonRecord): void;
     appendStepOutputItem(id: string, key: string, entry: JsonValue, cap: number): void;
     claimRunningStep(id: string): boolean;
-    listSteps(status: StepStatus, limit?: number): readonly Step[];
+    listSteps(status: StepStatus, limit?: number, tenant?: string): readonly Step[];
     runningAgentStepForSession(session: string): Step | null;
     sessionHasOpenWork(session: string, excludeWorkflowId?: string): boolean;
     appendEvent(entityType: 'workflow' | 'step' | 'judgment' | 'agent', entityId: string, type: string, payload?: JsonRecord): LedgerEvent;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juli-os/ledger",
-  "version": "0.1.6",
+  "version": "0.2.0",
   "description": "juli-os L1 layer: the ledger of record for agent work — workflows, steps, case files, and token usage in one zero-dependency SQLite layer.",
   "type": "module",
   "main": "./dist/index.js",
@@ -27,11 +27,15 @@
     "build": "tsc -p tsconfig.build.json && esbuild src/index.ts --bundle --platform=node --format=esm --target=node22 --outfile=dist/index.js && esbuild bin/juli-ledger.ts --bundle --platform=node --format=esm --target=node22 --outfile=dist/juli-ledger.js && chmod +x dist/juli-ledger.js && python3 scripts/postbuild.py",
     "test": "node --test \"test/*.test.ts\"",
     "smoke:dist": "node --input-type=module -e \"import('./dist/index.js').then(async m => { const { join } = await import('node:path'); const { tmpdir } = await import('node:os'); const s = m.createLedgerStore(join(tmpdir(), 'peel-dist-' + Date.now() + '.db')); const wf = s.createWorkflow({kind:'case',title:'dist smoke'}); if (!s.getWorkflow(wf.id)) process.exit(1); console.log('DIST SMOKE OK'); })\"",
+    "docs:gen": "node scripts/gen-docs.mjs && typedoc",
+    "docs:build": "npm run docs:gen && mkdocs build --strict",
     "prepublishOnly": "npm run build"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "esbuild": "^0.24.0",
+    "typedoc": "^0.28.20",
+    "typedoc-plugin-markdown": "^4.14.1",
     "typescript": "^5.6.0"
   },
   "publishConfig": {