@kubun/store-p2p 0.19.0 → 0.20.0

package/lib/api.d.ts

@@ -1,3 +1,4 @@
+import type { StoreAPIContext } from '@kubun/db';
 import type { Adapter } from '@kubun/db-adapter';
 import { type Runtime } from '@sozai/runtime';
 import type { Kysely } from 'kysely';
@@ -17,6 +18,7 @@ import { type LogHandlerCompletionOps } from './ops/log-handler-completion.js';
 import { type MLSOps } from './ops/mls.js';
 import { type OwnAgentsOps } from './ops/own-agents.js';
 import { type SyncOps } from './ops/sync.js';
+import { type P2PScope } from './scope.js';
 import type { P2PStoreTables } from './tables.js';
 export type { AppLaneOps, OpenedAppFrameExpectedVersion, OpenedAppFrameRecord, SaveOpenedAppFrameParams, } from './ops/app-lane.js';
 export type { AppOutboxOps } from './ops/app-outbox.js';
@@ -39,8 +41,9 @@ export type { PruneBroadcastLogParams, SyncOps } from './ops/sync.js';
  * tables and its own helpers; this intersection is the only coupling between
  * them, so a caller still sees one flat API.
  */
-export type P2PStoreAPI = GroupOps & CatalogOfferOps & CatalogRouteOps & CatalogSyncOps & CircleOps & DelegationOps & MLSOps & SyncOps & ControlOps & AppLaneOps & AppOutboxOps & LogHandlerCompletionOps & HubOps & DiscoveryOps & DocumentSweepOps & OwnAgentsOps;
+export type P2PStoreAPI = P2PScope & GroupOps & CatalogOfferOps & CatalogRouteOps & CatalogSyncOps & CircleOps & DelegationOps & MLSOps & SyncOps & ControlOps & AppLaneOps & AppOutboxOps & LogHandlerCompletionOps & HubOps & DiscoveryOps & DocumentSweepOps & OwnAgentsOps;
 export type CreateP2PStoreOptions = {
+    context: StoreAPIContext;
     getRandomValues?: Runtime['getRandomValues'];
 };
-export declare function createP2PStore(db: Kysely<P2PStoreTables>, adapter: Adapter, options?: CreateP2PStoreOptions): P2PStoreAPI;
+export declare function createP2PStore(db: Kysely<P2PStoreTables>, adapter: Adapter, options: CreateP2PStoreOptions): P2PStoreAPI;

package/lib/api.js

@@ -15,20 +15,24 @@ import { createLogHandlerCompletionOps } from './ops/log-handler-completion.js';
 import { createMLSOps } from './ops/mls.js';
 import { createOwnAgentsOps } from './ops/own-agents.js';
 import { createSyncOps } from './ops/sync.js';
-export function createP2PStore(db, adapter, options = {}) {
+import { runP2PScope } from './scope.js';
+export function createP2PStore(db, adapter, options) {
     return {
-        ...createGroupOps(db, adapter),
-        ...createOwnAgentsOps(db, adapter),
+        async [runP2PScope] (run) {
+            return await run(db, options.context);
+        },
+        ...createGroupOps(db, adapter, options.context),
+        ...createOwnAgentsOps(db, adapter, options.context),
         ...createCatalogOfferOps(db),
         ...createCatalogRouteOps(db),
-        ...createCatalogSyncOps(db, adapter),
+        ...createCatalogSyncOps(db, adapter, options.context),
         ...createCircleOps(db, adapter),
-        ...createDelegationOps(db),
+        ...createDelegationOps(db, options.context),
         ...createMLSOps(db, adapter),
         ...createSyncOps(db, adapter),
         ...createControlOps(db, adapter),
         ...createAppLaneOps(db, adapter),
-        ...createAppOutboxOps(db, adapter, options.getRandomValues ?? createRuntime().getRandomValues),
+        ...createAppOutboxOps(db, adapter, options.getRandomValues ?? createRuntime().getRandomValues, options.context),
         ...createHubOps(db, adapter),
         ...createLogHandlerCompletionOps(db),
         ...createDiscoveryOps(db, adapter),

package/lib/definition.d.ts

@@ -1,4 +1,9 @@
-import type { StoreDefinition } from '@kubun/db';
+import type { StoreDefinition, StoreProvider } from '@kubun/db';
+import type { Runtime } from '@sozai/runtime';
 import type { P2PStoreAPI } from './api.js';
 import type { P2PStoreTables } from './tables.js';
+export declare class P2PStoreConfigurationError extends Error {
+    constructor(field: 'getRandomValues');
+}
+export declare function configureP2PStore(provider: StoreProvider, deps: Pick<Runtime, 'getRandomValues'>): void;
 export declare const p2pStoreDefinition: StoreDefinition<P2PStoreTables, P2PStoreAPI>;

package/lib/definition.js

@@ -1,7 +1,43 @@
+import { createRuntime } from '@sozai/runtime';
 import { createP2PStore } from './api.js';
 import { getP2PMigrations } from './migrations.js';
+const dependencies = new WeakMap();
+const fallbackRuntime = createRuntime();
+export class P2PStoreConfigurationError extends Error {
+    constructor(field){
+        super(`p2p: conflicting dependency ${field}`);
+        this.name = 'P2PStoreConfigurationError';
+    }
+}
+export function configureP2PStore(provider, deps) {
+    const existing = dependencies.get(provider);
+    if (existing != null) {
+        if (existing.getRandomValues !== deps.getRandomValues) {
+            throw new P2PStoreConfigurationError('getRandomValues');
+        }
+        return;
+    }
+    dependencies.set(provider, {
+        ...deps
+    });
+}
 export const p2pStoreDefinition = {
     name: 'p2p',
+    unprefixedTables: ()=>false,
     migrations: getP2PMigrations,
-    createAPI: (db, adapter)=>createP2PStore(db, adapter)
+    sync: {
+        p2p_own_agents_grants: {
+            key: [
+                'controller_did',
+                'kind'
+            ],
+            compare: [
+                'issued_at'
+            ]
+        }
+    },
+    createAPI: (db, adapter, context)=>createP2PStore(db, adapter, {
+            context,
+            getRandomValues: (array)=>(dependencies.get(context.root) ?? fallbackRuntime).getRandomValues(array)
+        })
 };

package/lib/index.d.ts

@@ -2,7 +2,7 @@ import type { StoreProvider } from '@kubun/db';
 import type { P2PStoreAPI } from './api.js';
 export type { BeginLogHandlerCompletionParams, BindingEvidence, CatalogCursorBounds, CatalogCursorState, CatalogOffer, CatalogRoute, CatalogSyncOps, ControlRequestKind, ControlRequestOutcome, CreateP2PStoreOptions, DocumentRepairAnswerKind, DocumentRepairRow, DueObservationRepairQuery, GetMemberRemovalsParams, LogHandlerCompletionKey, LogHandlerCompletionOps, ObservationRepairPosition, ObservationRepairSchedule, OpenedAppFrameExpectedVersion, OpenedAppFrameRecord, OwnAgentsGrant, OwnAgentsJoinCapability, OwnAgentsOps, OwnAgentsRecord, OwnAgentsRecordKey, P2PStoreAPI, PruneBroadcastLogParams, PutPendingJoinRequestParams, RecordDocumentRepairParams, ReserveSenderGenerationsParams, SaveOpenedAppFrameParams, SetLocalPeerProfileParams, UpsertPeerAnnouncementParams, } from './api.js';
 export { createP2PStore } from './api.js';
-export { p2pStoreDefinition } from './definition.js';
+export { configureP2PStore, P2PStoreConfigurationError, p2pStoreDefinition } from './definition.js';
 export { canonicalHubURL } from './hub-url.js';
 export { AppOutboxDecryptionError, type AppOutboxPortOptions, AppOutboxTransactionError, type ClearAppOutboxRowsOptions, PendingRevocationAdmissionError, UndeliveredRevocationsError, } from './ops/app-outbox.js';
 export { MAX_REPAIRS_PER_LISTER } from './ops/catalog-sync.js';

package/lib/index.js

@@ -1,5 +1,5 @@
 export { createP2PStore } from './api.js';
-export { p2pStoreDefinition } from './definition.js';
+export { configureP2PStore, P2PStoreConfigurationError, p2pStoreDefinition } from './definition.js';
 export { canonicalHubURL } from './hub-url.js';
 export { AppOutboxDecryptionError, AppOutboxTransactionError, PendingRevocationAdmissionError, UndeliveredRevocationsError } from './ops/app-outbox.js';
 export { MAX_REPAIRS_PER_LISTER } from './ops/catalog-sync.js';

package/lib/migrations.js

@@ -23,37 +23,37 @@ import { sql } from 'kysely';
     const now = ctx.functions.now;
     const init = {
         async up (db) {
-            await db.schema.createTable('kubun_p2p_access_default_revocations').ifNotExists().addColumn('controller_did', t.text, (col)=>col.notNull()).addColumn('device_did', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_access_default_revocations', [
+            await db.schema.createTable('p2p_access_default_revocations').ifNotExists().addColumn('controller_did', t.text, (col)=>col.notNull()).addColumn('device_did', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_access_default_revocations', [
                 'controller_did',
                 'device_did'
             ]).execute();
             // Every authenticated device binding this device has observed. Append-only:
             // ownership is historical, so revocation, removal or MLS state loss never
             // takes a row away.
-            await db.schema.createTable('kubun_p2p_binding_evidence').ifNotExists().addColumn('controller_did', t.text, (col)=>col.notNull()).addColumn('device_did', t.text, (col)=>col.notNull()).addColumn('first_seen_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_binding_evidence', [
+            await db.schema.createTable('p2p_binding_evidence').ifNotExists().addColumn('controller_did', t.text, (col)=>col.notNull()).addColumn('device_did', t.text, (col)=>col.notNull()).addColumn('first_seen_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_binding_evidence', [
                 'controller_did',
                 'device_did'
             ]).execute();
-            await db.schema.createIndex('idx_p2p_binding_evidence_device').ifNotExists().on('kubun_p2p_binding_evidence').column('device_did').execute();
+            await db.schema.createIndex('idx_p2p_binding_evidence_device').ifNotExists().on('p2p_binding_evidence').column('device_did').execute();
             // Groups
-            await db.schema.createTable('kubun_p2p_groups').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('name', t.text, (col)=>col.notNull()).addColumn('description', t.text, (col)=>col.notNull().defaultTo('')).addColumn('created_by', t.text, (col)=>col.notNull()).addColumn('hlc', t.text, (col)=>col.notNull()).addColumn('kind', t.text, (col)=>col.notNull().defaultTo('standard'))// A completed join or local create starts joined; see `GroupStatus`.
+            await db.schema.createTable('p2p_groups').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('name', t.text, (col)=>col.notNull()).addColumn('description', t.text, (col)=>col.notNull().defaultTo('')).addColumn('created_by', t.text, (col)=>col.notNull()).addColumn('hlc', t.text, (col)=>col.notNull()).addColumn('kind', t.text, (col)=>col.notNull().defaultTo('standard'))// A completed join or local create starts joined; see `GroupStatus`.
             .addColumn('status', t.text, (col)=>col.notNull().defaultTo('joined'))// Token of the last handle advance whose projections no reconcile has
             // caught up with yet; NULL when they match the current handle.
             .addColumn('projections_dirty', t.text)// Epoch the last successful reconcile caught the projections up to.
             .addColumn('projections_epoch', 'integer').addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addColumn('updated_at', t.timestamp).execute();
-            await db.schema.createTable('kubun_p2p_own_agents_records').ifNotExists().addColumn('type', t.text, (col)=>col.notNull()).addColumn('owner', t.text, (col)=>col.notNull()).addColumn('id', t.text, (col)=>col.notNull()).addColumn('hlc', t.text, (col)=>col.notNull()).addColumn('op_jwt', t.text, (col)=>col.notNull()).addColumn('op_hash', t.text, (col)=>col.notNull()).addColumn('payload', t.binary).addColumn('payload_digest', t.text).addColumn('deleted', 'integer', (col)=>col.notNull()).addColumn('meta', t.json, (col)=>col.notNull()).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_own_agents_records', [
+            await db.schema.createTable('p2p_own_agents_records').ifNotExists().addColumn('type', t.text, (col)=>col.notNull()).addColumn('owner', t.text, (col)=>col.notNull()).addColumn('id', t.text, (col)=>col.notNull()).addColumn('hlc', t.text, (col)=>col.notNull()).addColumn('op_jwt', t.text, (col)=>col.notNull()).addColumn('op_hash', t.text, (col)=>col.notNull()).addColumn('payload', t.binary).addColumn('payload_digest', t.text).addColumn('deleted', 'integer', (col)=>col.notNull()).addColumn('meta', t.json, (col)=>col.notNull()).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_own_agents_records', [
                 'type',
                 'owner',
                 'id',
                 'op_hash'
             ]).execute();
-            await db.schema.createTable('kubun_p2p_own_agents_grants').ifNotExists().addColumn('controller_did', t.text, (col)=>col.notNull()).addColumn('kind', t.text, (col)=>col.notNull()).addColumn('token', t.text, (col)=>col.notNull()).addColumn('issued_at', t.bigint, (col)=>col.notNull()).addColumn('expires_at', t.bigint, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_own_agents_grants', [
+            await db.schema.createTable('p2p_own_agents_grants').ifNotExists().addColumn('controller_did', t.text, (col)=>col.notNull()).addColumn('kind', t.text, (col)=>col.notNull()).addColumn('token', t.text, (col)=>col.notNull()).addColumn('issued_at', t.bigint, (col)=>col.notNull()).addColumn('expires_at', t.bigint, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_own_agents_grants', [
                 'controller_did',
                 'kind'
             ]).execute();
-            await db.schema.createTable('kubun_p2p_own_agents_join_capabilities').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull().primaryKey()).addColumn('recipient_did', t.text, (col)=>col.notNull()).addColumn('capability_id', t.text, (col)=>col.notNull()).addColumn('token', t.text, (col)=>col.notNull()).addColumn('expires_at', t.bigint, (col)=>col.notNull()).addColumn('signer_did', t.text).addColumn('signer_leaf_key', t.binary).addColumn('signer_capability', t.text).addColumn('signer_prefix', t.json).execute();
+            await db.schema.createTable('p2p_own_agents_join_capabilities').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull().primaryKey()).addColumn('recipient_did', t.text, (col)=>col.notNull()).addColumn('capability_id', t.text, (col)=>col.notNull()).addColumn('token', t.text, (col)=>col.notNull()).addColumn('expires_at', t.bigint, (col)=>col.notNull()).addColumn('signer_did', t.text).addColumn('signer_leaf_key', t.binary).addColumn('signer_capability', t.text).addColumn('signer_prefix', t.json).execute();
             // Group members
-            await db.schema.createTable('kubun_p2p_group_members').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('member_did', t.text, (col)=>col.notNull()).addColumn('role', t.text, (col)=>col.notNull().defaultTo('member'))// LWW version key for the row, set on insert and refreshed on re-add.
+            await db.schema.createTable('p2p_group_members').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('member_did', t.text, (col)=>col.notNull()).addColumn('role', t.text, (col)=>col.notNull().defaultTo('member'))// LWW version key for the row, set on insert and refreshed on re-add.
             .addColumn('hlc', t.text, (col)=>col.notNull())// HLC at which this peer learned the member was removed from the MLS
             // group. NULL means the member is active; a non-null value tombstones
             // the row so read-ACL / sync-scope queries exclude it while the
@@ -62,28 +62,28 @@ import { sql } from 'kysely';
                 'group_id',
                 'member_did'
             ]).execute();
-            await db.schema.createIndex('idx_p2p_group_members_did').ifNotExists().on('kubun_p2p_group_members').column('member_did').execute();
-            await db.schema.createTable('kubun_p2p_catalog_offers').ifNotExists().addColumn('owner', t.text, (col)=>col.notNull()).addColumn('exposure_id', t.text, (col)=>col.notNull()).addColumn('catalog_id', t.text, (col)=>col.notNull()).addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('circle_id', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_catalog_offers', [
+            await db.schema.createIndex('idx_p2p_group_members_did').ifNotExists().on('p2p_group_members').column('member_did').execute();
+            await db.schema.createTable('p2p_catalog_offers').ifNotExists().addColumn('owner', t.text, (col)=>col.notNull()).addColumn('exposure_id', t.text, (col)=>col.notNull()).addColumn('catalog_id', t.text, (col)=>col.notNull()).addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('circle_id', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_catalog_offers', [
                 'owner',
                 'exposure_id'
             ]).execute();
-            await db.schema.createIndex('idx_p2p_catalog_offers_group_circle').ifNotExists().on('kubun_p2p_catalog_offers').columns([
+            await db.schema.createIndex('idx_p2p_catalog_offers_group_circle').ifNotExists().on('p2p_catalog_offers').columns([
                 'group_id',
                 'circle_id'
             ]).execute();
-            await db.schema.createTable('kubun_p2p_catalog_routes').ifNotExists().addColumn('owner', t.text, (col)=>col.notNull()).addColumn('catalog_id', t.text, (col)=>col.notNull()).addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('pull', 'integer', (col)=>col.notNull().defaultTo(0)).addColumn('push', 'integer', (col)=>col.notNull().defaultTo(0)).addPrimaryKeyConstraint('pk_p2p_catalog_routes', [
+            await db.schema.createTable('p2p_catalog_routes').ifNotExists().addColumn('owner', t.text, (col)=>col.notNull()).addColumn('catalog_id', t.text, (col)=>col.notNull()).addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('pull', 'integer', (col)=>col.notNull().defaultTo(0)).addColumn('push', 'integer', (col)=>col.notNull().defaultTo(0)).addPrimaryKeyConstraint('pk_p2p_catalog_routes', [
                 'owner',
                 'catalog_id',
                 'group_id'
             ]).execute();
             // Groups whose document data this device does not serve; absence means served.
-            await db.schema.createTable('kubun_p2p_unserved_groups').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull().primaryKey()).execute();
+            await db.schema.createTable('p2p_unserved_groups').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull().primaryKey()).execute();
             // Document-sync progress with one peer in one group: the last resolved
             // document key, whether the current cycle's examined ranges were all clear,
             // the hash of the accepted rule set without absolute bounds, and the
             // absolute bounds in use until the cursor wraps.
-            await db.schema.createTable('kubun_p2p_catalog_cursors').ifNotExists().addColumn('peer_did', t.text, (col)=>col.notNull()).addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('rules_hash', t.text, (col)=>col.notNull()).addColumn('last_key', t.text)// The responder's sealed position for `last_key`; opaque here.
-            .addColumn('last_token', t.text).addColumn('cycle_clear', 'integer', (col)=>col.notNull().defaultTo(1)).addColumn('bounds', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_catalog_cursors', [
+            await db.schema.createTable('p2p_catalog_cursors').ifNotExists().addColumn('peer_did', t.text, (col)=>col.notNull()).addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('rules_hash', t.text, (col)=>col.notNull()).addColumn('last_key', t.text)// The responder's sealed position for `last_key`; opaque here.
+            .addColumn('last_token', t.text).addColumn('cycle_clear', 'integer', (col)=>col.notNull().defaultTo(1)).addColumn('bounds', t.json, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_catalog_cursors', [
                 'peer_did',
                 'group_id'
             ]).execute();
@@ -92,22 +92,22 @@ import { sql } from 'kysely';
             // retry; null when no peer listed it and the row only remembers answers.
             // Rows expire from `created_at`, so none outlives its window whoever
             // listed it.
-            await db.schema.createTable('kubun_p2p_document_repairs').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('document_id', t.text, (col)=>col.notNull()).addColumn('listed_by', t.text).addColumn('holdings_digest', t.text, (col)=>col.notNull()).addColumn('created_at', t.bigint, (col)=>col.notNull()).addColumn('attempted_at', t.bigint, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_document_repairs', [
+            await db.schema.createTable('p2p_document_repairs').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('document_id', t.text, (col)=>col.notNull()).addColumn('listed_by', t.text).addColumn('holdings_digest', t.text, (col)=>col.notNull()).addColumn('created_at', t.bigint, (col)=>col.notNull()).addColumn('attempted_at', t.bigint, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_document_repairs', [
                 'group_id',
                 'document_id'
             ]).execute();
-            await db.schema.createIndex('idx_p2p_document_repairs_lister').ifNotExists().on('kubun_p2p_document_repairs').columns([
+            await db.schema.createIndex('idx_p2p_document_repairs_lister').ifNotExists().on('p2p_document_repairs').columns([
                 'group_id',
                 'listed_by',
                 'attempted_at'
             ]).execute();
-            await db.schema.createIndex('idx_p2p_document_repairs_created').ifNotExists().on('kubun_p2p_document_repairs').columns([
+            await db.schema.createIndex('idx_p2p_document_repairs_created').ifNotExists().on('p2p_document_repairs').columns([
                 'group_id',
                 'created_at'
             ]).execute();
             // A peer's last answer, "unavailable" or "refused", for a repair row's
             // current holdings. A change of holdings removes the answers.
-            await db.schema.createTable('kubun_p2p_document_repair_answers').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('document_id', t.text, (col)=>col.notNull()).addColumn('peer_did', t.text, (col)=>col.notNull()).addColumn('answer', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_document_repair_answers', [
+            await db.schema.createTable('p2p_document_repair_answers').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('document_id', t.text, (col)=>col.notNull()).addColumn('peer_did', t.text, (col)=>col.notNull()).addColumn('answer', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_document_repair_answers', [
                 'group_id',
                 'document_id',
                 'peer_did'
@@ -115,13 +115,13 @@ import { sql } from 'kysely';
             // When this device next asks peers for an observed document's value, for
             // the obligation observed at `fetch_hlc`. The connector owns the
             // obligation; a row leaves only when it resolves.
-            await db.schema.createTable('kubun_p2p_observation_repairs').ifNotExists().addColumn('document_id', t.text, (col)=>col.notNull().primaryKey()).addColumn('fetch_hlc', t.text, (col)=>col.notNull()).addColumn('attempts', 'integer', (col)=>col.notNull()).addColumn('next_attempt_at', t.bigint, (col)=>col.notNull()).addColumn('tried_count', 'integer', (col)=>col.notNull()).execute();
-            await db.schema.createIndex('idx_p2p_observation_repairs_next').ifNotExists().on('kubun_p2p_observation_repairs').columns([
+            await db.schema.createTable('p2p_observation_repairs').ifNotExists().addColumn('document_id', t.text, (col)=>col.notNull().primaryKey()).addColumn('fetch_hlc', t.text, (col)=>col.notNull()).addColumn('attempts', 'integer', (col)=>col.notNull()).addColumn('next_attempt_at', t.bigint, (col)=>col.notNull()).addColumn('tried_count', 'integer', (col)=>col.notNull()).execute();
+            await db.schema.createIndex('idx_p2p_observation_repairs_next').ifNotExists().on('p2p_observation_repairs').columns([
                 'next_attempt_at',
                 'document_id'
             ]).execute();
             // The peers already asked for an obligation that answered without it.
-            await db.schema.createTable('kubun_p2p_observation_repair_peers').ifNotExists().addColumn('document_id', t.text, (col)=>col.notNull()).addColumn('peer_did', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_observation_repair_peers', [
+            await db.schema.createTable('p2p_observation_repair_peers').ifNotExists().addColumn('document_id', t.text, (col)=>col.notNull()).addColumn('peer_did', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_observation_repair_peers', [
                 'document_id',
                 'peer_did'
             ]).execute();
@@ -129,12 +129,12 @@ import { sql } from 'kysely';
             // or duplicate request is not surfaced again. Separate from the membership
             // row because it must outlive a removal: a re-added member's old requests
             // stay spent.
-            await db.schema.createTable('kubun_p2p_group_leave_requests').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('member_did', t.text, (col)=>col.notNull()).addColumn('hlc', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_group_leave_requests', [
+            await db.schema.createTable('p2p_group_leave_requests').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('member_did', t.text, (col)=>col.notNull()).addColumn('hlc', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_group_leave_requests', [
                 'group_id',
                 'member_did'
             ]).execute();
             // Circles
-            await db.schema.createTable('kubun_p2p_circles').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('name', t.text, (col)=>col.notNull()).addColumn('description', t.text, (col)=>col.notNull().defaultTo('')).addColumn('hlc', t.text, (col)=>col.notNull())// Projection of the group's current `openCircleIDs`: 1 marks the circle
+            await db.schema.createTable('p2p_circles').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('name', t.text, (col)=>col.notNull()).addColumn('description', t.text, (col)=>col.notNull().defaultTo('')).addColumn('hlc', t.text, (col)=>col.notNull())// Projection of the group's current `openCircleIDs`: 1 marks the circle
             // open (every group member has implicit access), 0 closed. Integer 0/1
             // mirrors the catalog `active` flag, keeping the read-back value uniform
             // across SQLite and Postgres. A circle is closed until a settings fold
@@ -142,38 +142,38 @@ import { sql } from 'kysely';
             .addColumn('open', 'integer', (col)=>col.notNull().defaultTo(0))// NULL means the circle is active; a non-null value tombstones the row
             // so reads exclude it while the removal HLC stays comparable.
             .addColumn('removed_at_hlc', t.text).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addColumn('updated_at', t.timestamp).execute();
-            await db.schema.createIndex('idx_p2p_circles_group').ifNotExists().on('kubun_p2p_circles').column('group_id').execute();
+            await db.schema.createIndex('idx_p2p_circles_group').ifNotExists().on('p2p_circles').column('group_id').execute();
             // Circle members
-            await db.schema.createTable('kubun_p2p_circle_members').ifNotExists().addColumn('circle_id', t.text, (col)=>col.notNull()).addColumn('member_did', t.text, (col)=>col.notNull()).addColumn('role', t.text, (col)=>col.notNull().defaultTo('member')).addColumn('hlc', t.text, (col)=>col.notNull())// NULL means the circle member is active; a non-null value tombstones
+            await db.schema.createTable('p2p_circle_members').ifNotExists().addColumn('circle_id', t.text, (col)=>col.notNull()).addColumn('member_did', t.text, (col)=>col.notNull()).addColumn('role', t.text, (col)=>col.notNull().defaultTo('member')).addColumn('hlc', t.text, (col)=>col.notNull())// NULL means the circle member is active; a non-null value tombstones
             // the row so reads exclude it while the removal HLC stays comparable.
             .addColumn('removed_at_hlc', t.text).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addColumn('updated_at', t.timestamp).addPrimaryKeyConstraint('pk_p2p_circle_members', [
                 'circle_id',
                 'member_did'
             ]).execute();
-            await db.schema.createIndex('idx_p2p_circle_members_did').ifNotExists().on('kubun_p2p_circle_members').column('member_did').execute();
+            await db.schema.createIndex('idx_p2p_circle_members_did').ifNotExists().on('p2p_circle_members').column('member_did').execute();
             // Group-delegation edge. The delegation token and revocation rows live in
             // the core delegation store (group-agnostic); this thin edge records the
             // one group a delegation `jti` was granted in, so the p2p layer can still
             // resolve a cap's group for revoke-broadcast targeting and listing
             // enrichment. One group per `jti`, so `jti` is the primary key.
-            await db.schema.createTable('kubun_p2p_group_delegation').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('jti', t.text, (col)=>col.notNull().primaryKey()).addColumn('pending_grant_hlc', t.text).addColumn('pending_grant_digest', t.text).addColumn('pending_revocation_hlc', t.text).addColumn('pending_revocation_digest', t.text).execute();
-            await db.schema.createIndex('idx_p2p_group_delegation_pending_grant').ifNotExists().on('kubun_p2p_group_delegation').columns([
+            await db.schema.createTable('p2p_group_delegation').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('jti', t.text, (col)=>col.notNull().primaryKey()).addColumn('pending_grant_hlc', t.text).addColumn('pending_grant_digest', t.text).addColumn('pending_revocation_hlc', t.text).addColumn('pending_revocation_digest', t.text).execute();
+            await db.schema.createIndex('idx_p2p_group_delegation_pending_grant').ifNotExists().on('p2p_group_delegation').columns([
                 'group_id',
                 'pending_grant_hlc'
             ]).execute();
-            await db.schema.createIndex('idx_p2p_group_delegation_pending_revocation').ifNotExists().on('kubun_p2p_group_delegation').columns([
+            await db.schema.createIndex('idx_p2p_group_delegation_pending_revocation').ifNotExists().on('p2p_group_delegation').columns([
                 'group_id',
                 'pending_revocation_hlc'
             ]).execute();
             // Group MLS state
-            await db.schema.createTable('kubun_p2p_group_mls_state').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('device_id', t.text, (col)=>col.notNull()).addColumn('mls_state', t.binary, (col)=>col.notNull()).addColumn('credential', t.text, (col)=>col.notNull()).addColumn('epoch', 'integer', (col)=>col.notNull())// Orders in-place secret-tree mutations within one epoch.
+            await db.schema.createTable('p2p_group_mls_state').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('device_id', t.text, (col)=>col.notNull()).addColumn('mls_state', t.binary, (col)=>col.notNull()).addColumn('credential', t.json, (col)=>col.notNull()).addColumn('epoch', 'integer', (col)=>col.notNull())// Orders in-place secret-tree mutations within one epoch.
             .addColumn('state_version', 'integer', (col)=>col.notNull().defaultTo(0)).addColumn('is_deleted', 'integer', (col)=>col.notNull().defaultTo(0))// Highest sender generation reserved at this epoch; restore skips past it.
-            .addColumn('sender_generation_hwm', 'integer', (col)=>col.notNull().defaultTo(0)).addColumn('ledger_entries', t.text, (col)=>col.notNull().defaultTo('[]')).addColumn('updated_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_group_mls_state', [
+            .addColumn('sender_generation_hwm', 'integer', (col)=>col.notNull().defaultTo(0)).addColumn('ledger_entries', t.json, (col)=>col.notNull().defaultTo(sql`'[]'`)).addColumn('updated_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_group_mls_state', [
                 'group_id',
                 'device_id'
             ]).execute();
             // Sync peers
-            await db.schema.createTable('kubun_p2p_sync_peers').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('peer_did', t.text, (col)=>col.notNull().unique()).addColumn('endpoint', t.text, (col)=>col.notNull())// No `trust_level`, `allowed_users`, `priority` or `mode`. They were
+            await db.schema.createTable('p2p_sync_peers').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('peer_did', t.text, (col)=>col.notNull().unique()).addColumn('endpoint', t.text, (col)=>col.notNull())// No `trust_level`, `allowed_users`, `priority` or `mode`. They were
             // stored and never read: what a peer may see is decided per document at
             // the far end, and a locally-written row is not a credential. `priority`
             // in particular looked like the ranking knob after ranking had moved to
@@ -183,27 +183,27 @@ import { sql } from 'kysely';
             // argument, per call.
             .addColumn('config', t.json, (col)=>col.notNull()).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addColumn('updated_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).execute();
             // Sync checkpoints
-            await db.schema.createTable('kubun_p2p_sync_checkpoints').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('peer_did', t.text, (col)=>col.notNull()).addColumn('scope', t.text, (col)=>col.notNull()).addColumn('checkpoint_hlc', t.text, (col)=>col.notNull()).addColumn('updated_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).execute();
+            await db.schema.createTable('p2p_sync_checkpoints').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('peer_did', t.text, (col)=>col.notNull()).addColumn('scope', t.text, (col)=>col.notNull()).addColumn('checkpoint_hlc', t.text, (col)=>col.notNull()).addColumn('updated_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).execute();
             // Broadcast log
-            await db.schema.createTable('kubun_p2p_broadcast_log').ifNotExists().addColumn('doc_id', t.text, (col)=>col.notNull()).addColumn('version', t.text, (col)=>col.notNull()).addColumn('mls_group_id', t.text, (col)=>col.notNull()).addColumn('broadcast_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_broadcast_log', [
+            await db.schema.createTable('p2p_broadcast_log').ifNotExists().addColumn('doc_id', t.text, (col)=>col.notNull()).addColumn('version', t.text, (col)=>col.notNull()).addColumn('mls_group_id', t.text, (col)=>col.notNull()).addColumn('broadcast_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_broadcast_log', [
                 'doc_id',
                 'version',
                 'mls_group_id'
             ]).execute();
-            await db.schema.createIndex('idx_p2p_broadcast_log_doc').ifNotExists().on('kubun_p2p_broadcast_log').column('doc_id').execute();
+            await db.schema.createIndex('idx_p2p_broadcast_log_doc').ifNotExists().on('p2p_broadcast_log').column('doc_id').execute();
             // The broadcast log is pruned by age.
-            await db.schema.createIndex('idx_p2p_broadcast_log_broadcast_at').ifNotExists().on('kubun_p2p_broadcast_log').column('broadcast_at').execute();
+            await db.schema.createIndex('idx_p2p_broadcast_log_broadcast_at').ifNotExists().on('p2p_broadcast_log').column('broadcast_at').execute();
             // Hubs (device-local, never synced — no hlc column)
-            await db.schema.createTable('kubun_p2p_hubs').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('label', t.text).addColumn('url', t.text, (col)=>col.notNull().unique()).addColumn('server_did', t.text).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addColumn('updated_at', t.timestamp).execute();
+            await db.schema.createTable('p2p_hubs').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('label', t.text).addColumn('url', t.text, (col)=>col.notNull().unique()).addColumn('server_did', t.text).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addColumn('updated_at', t.timestamp).execute();
             // Group hubs (join table, device-local — no hlc column). A group commits
             // through exactly one bound hub; `is_commit_hub` marks which. Integer 0/1
             // mirrors the circle `open` flag so the value reads back uniformly across
             // SQLite and Postgres.
-            await db.schema.createTable('kubun_p2p_group_hubs').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('hub_id', t.text, (col)=>col.notNull()).addColumn('is_commit_hub', 'integer', (col)=>col.notNull().defaultTo(0)).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_group_hubs', [
+            await db.schema.createTable('p2p_group_hubs').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('hub_id', t.text, (col)=>col.notNull()).addColumn('is_commit_hub', 'integer', (col)=>col.notNull().defaultTo(0)).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_group_hubs', [
                 'group_id',
                 'hub_id'
             ]).execute();
-            await db.schema.createIndex('idx_p2p_group_hubs_hub').ifNotExists().on('kubun_p2p_group_hubs').column('hub_id').execute();
+            await db.schema.createIndex('idx_p2p_group_hubs_hub').ifNotExists().on('p2p_group_hubs').column('hub_id').execute();
             // The single designation is a database constraint, not a convention a
             // writer upholds. A transaction alone cannot uphold it: two devices
             // binding their first hub concurrently touch DIFFERENT rows, so under
@@ -211,7 +211,7 @@ import { sql } from 'kysely';
             // both claim it — the group then commits to two logs, which is the fork
             // the designation exists to prevent. Partial unique indexes carry the
             // same meaning on both adapter families (SQLite >= 3.8, Postgres).
-            await db.schema.createIndex(COMMIT_HUB_UNIQUE_INDEX).ifNotExists().unique().on('kubun_p2p_group_hubs').column('group_id').where(sql.ref('is_commit_hub'), '=', 1).execute();
+            await db.schema.createIndex(COMMIT_HUB_UNIQUE_INDEX).ifNotExists().unique().on('p2p_group_hubs').column('group_id').where(sql.ref('is_commit_hub'), '=', 1).execute();
             // ControlRequest work queue: the client-visible record of a control-plane
             // request (a ledger write, an invite, a removal) from enqueue to
             // settlement, keyed by the same id the commit journal carries for the
@@ -220,39 +220,39 @@ import { sql } from 'kysely';
             // nullable because most requests produce nothing to hand back; it is
             // written on settle and deleted with the row on ack, so the retention of
             // whatever it holds is bounded by the request's own lifetime.
-            await db.schema.createTable('kubun_p2p_control_requests').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('kind', t.text, (col)=>col.notNull()).addColumn('status', t.text, (col)=>col.notNull().defaultTo('pending')).addColumn('error', t.text).addColumn('result', t.text).addColumn('enqueued_at', t.text, (col)=>col.notNull()).addColumn('settled_at', t.text)// Epoch of the advance that settled the request committed.
+            await db.schema.createTable('p2p_control_requests').ifNotExists().addColumn('id', t.text, (col)=>col.notNull().primaryKey()).addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('kind', t.text, (col)=>col.notNull()).addColumn('status', t.text, (col)=>col.notNull().defaultTo('pending')).addColumn('error', t.text).addColumn('result', t.text).addColumn('enqueued_at', t.text, (col)=>col.notNull()).addColumn('settled_at', t.text)// Epoch of the advance that settled the request committed.
             .addColumn('settled_epoch', 'integer').execute();
-            await db.schema.createIndex('idx_p2p_control_requests_group').ifNotExists().on('kubun_p2p_control_requests').columns([
+            await db.schema.createIndex('idx_p2p_control_requests_group').ifNotExists().on('p2p_control_requests').columns([
                 'group_id',
                 'enqueued_at'
             ]).execute();
             // CommitJournal store (backs the `@kumiai/rpc` CommitJournal port).
             // `group_id` is the primary key: a single slot per group, so a fresh `put`
             // upserts/replaces the whole row.
-            await db.schema.createTable('kubun_p2p_commit_journal').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull().primaryKey()).addColumn('publish_id', t.text, (col)=>col.notNull()).addColumn('expected_head', t.text).addColumn('epoch', t.bigint, (col)=>col.notNull()).addColumn('accepted_as', t.text).addColumn('commit', t.binary, (col)=>col.notNull()).addColumn('bodies', t.json, (col)=>col.notNull()).addColumn('kind', t.text, (col)=>col.notNull()).addColumn('journal', t.binary, (col)=>col.notNull()).addColumn('holds_log_sends', 'integer', (col)=>col.notNull().defaultTo(0)).execute();
+            await db.schema.createTable('p2p_commit_journal').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull().primaryKey()).addColumn('publish_id', t.text, (col)=>col.notNull()).addColumn('expected_head', t.text).addColumn('epoch', t.bigint, (col)=>col.notNull()).addColumn('accepted_as', t.text).addColumn('commit', t.binary, (col)=>col.notNull()).addColumn('bodies', t.json, (col)=>col.notNull()).addColumn('kind', t.text, (col)=>col.notNull()).addColumn('journal', t.binary, (col)=>col.notNull()).addColumn('holds_log_sends', 'integer', (col)=>col.notNull().defaultTo(0)).execute();
             // App-lane anchor + per-topic read positions (back the `@kumiai/rpc`
             // `AnchorStore` and `AppCursorStore` ports). The anchor table is a single
             // slot per group, so a rotation upserts and replaces the whole row;
             // cursors are keyed by (group, topic) so a deleted group takes its cursors
             // with it.
-            await db.schema.createTable('kubun_p2p_group_anchor').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull().primaryKey()).addColumn('secret', t.binary, (col)=>col.notNull()).addColumn('epoch', t.bigint, (col)=>col.notNull()).addColumn('pending', t.json).execute();
-            await db.schema.createTable('kubun_p2p_app_outbox_state').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull().primaryKey()).addColumn('key', t.binary).addColumn('commit_cursor', t.json).execute();
-            await db.schema.createTable('kubun_p2p_app_outbox').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('seq', t.bigint, (col)=>col.notNull()).addColumn('protocol', t.text, (col)=>col.notNull()).addColumn('prc', t.text, (col)=>col.notNull()).addColumn('data', t.binary, (col)=>col.notNull()).addColumn('iv', t.binary, (col)=>col.notNull()).addColumn('last_attempt', t.json).addPrimaryKeyConstraint('pk_p2p_app_outbox', [
+            await db.schema.createTable('p2p_group_anchor').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull().primaryKey()).addColumn('secret', t.binary, (col)=>col.notNull()).addColumn('epoch', t.bigint, (col)=>col.notNull()).addColumn('pending', t.json).execute();
+            await db.schema.createTable('p2p_app_outbox_state').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull().primaryKey()).addColumn('key', t.binary).addColumn('commit_cursor', t.json).execute();
+            await db.schema.createTable('p2p_app_outbox').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('seq', t.bigint, (col)=>col.notNull()).addColumn('protocol', t.text, (col)=>col.notNull()).addColumn('prc', t.text, (col)=>col.notNull()).addColumn('data', t.binary, (col)=>col.notNull()).addColumn('iv', t.binary, (col)=>col.notNull()).addColumn('last_attempt', t.json).addPrimaryKeyConstraint('pk_p2p_app_outbox', [
                 'group_id',
                 'seq'
             ]).execute();
-            await db.schema.createTable('kubun_p2p_app_cursor').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('topic_id', t.text, (col)=>col.notNull()).addColumn('position', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_app_cursor', [
+            await db.schema.createTable('p2p_app_cursor').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('topic_id', t.text, (col)=>col.notNull()).addColumn('position', t.text, (col)=>col.notNull()).addPrimaryKeyConstraint('pk_p2p_app_cursor', [
                 'group_id',
                 'topic_id'
             ]).execute();
             // Decrypted app frames awaiting application. The frame ID is stable across
             // redelivery, so the first staged record wins until it is completed.
-            await db.schema.createTable('kubun_p2p_app_pending').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('device_id', t.text, (col)=>col.notNull()).addColumn('frame_id', t.text, (col)=>col.notNull()).addColumn('topic_id', t.text, (col)=>col.notNull()).addColumn('protocol', t.text, (col)=>col.notNull()).addColumn('segment', 'integer', (col)=>col.notNull()).addColumn('position', t.text, (col)=>col.notNull()).addColumn('payload', t.binary, (col)=>col.notNull()).addColumn('sender_did', t.text, (col)=>col.notNull()).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_app_pending', [
+            await db.schema.createTable('p2p_app_pending').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('device_id', t.text, (col)=>col.notNull()).addColumn('frame_id', t.text, (col)=>col.notNull()).addColumn('topic_id', t.text, (col)=>col.notNull()).addColumn('protocol', t.text, (col)=>col.notNull()).addColumn('segment', 'integer', (col)=>col.notNull()).addColumn('position', t.text, (col)=>col.notNull()).addColumn('payload', t.binary, (col)=>col.notNull()).addColumn('sender_did', t.text, (col)=>col.notNull()).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addPrimaryKeyConstraint('pk_p2p_app_pending', [
                 'group_id',
                 'device_id',
                 'frame_id'
             ]).execute();
-            await db.schema.createTable('kubun_p2p_log_handler_completion').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('procedure', t.text, (col)=>col.notNull()).addColumn('entity', t.text, (col)=>col.notNull()).addColumn('hlc', t.text, (col)=>col.notNull()).addColumn('notify', 'integer', (col)=>col.notNull().defaultTo(0)).addColumn('completed', 'integer', (col)=>col.notNull().defaultTo(0)).addPrimaryKeyConstraint('pk_p2p_log_handler_completion', [
+            await db.schema.createTable('p2p_log_handler_completion').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('procedure', t.text, (col)=>col.notNull()).addColumn('entity', t.text, (col)=>col.notNull()).addColumn('hlc', t.text, (col)=>col.notNull()).addColumn('notify', 'integer', (col)=>col.notNull().defaultTo(0)).addColumn('completed', 'integer', (col)=>col.notNull().defaultTo(0)).addPrimaryKeyConstraint('pk_p2p_log_handler_completion', [
                 'group_id',
                 'procedure',
                 'entity',
@@ -262,65 +262,65 @@ import { sql } from 'kysely';
             // authenticated `peer/announce` frames. `peer_did` is the MLS-authenticated
             // announcer, which is why the primary key is (group, peer) and there is no
             // column for a body-supplied DID: nothing self-asserted may pick the row.
-            await db.schema.createTable('kubun_p2p_peer_announcements').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('peer_did', t.text, (col)=>col.notNull()).addColumn('label', t.text, (col)=>col.notNull().defaultTo('')).addColumn('availability', t.text, (col)=>col.notNull()).addColumn('capabilities', t.json, (col)=>col.notNull().defaultTo('[]')).addColumn('hlc', t.text, (col)=>col.notNull()).addColumn('announced_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addColumn('announced_epoch', 'integer', (col)=>col.notNull().defaultTo(0)).addPrimaryKeyConstraint('pk_p2p_peer_announcements', [
+            await db.schema.createTable('p2p_peer_announcements').ifNotExists().addColumn('group_id', t.text, (col)=>col.notNull()).addColumn('peer_did', t.text, (col)=>col.notNull()).addColumn('label', t.text, (col)=>col.notNull().defaultTo('')).addColumn('availability', t.text, (col)=>col.notNull()).addColumn('capabilities', t.json, (col)=>col.notNull().defaultTo('[]')).addColumn('hlc', t.text, (col)=>col.notNull()).addColumn('announced_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).addColumn('announced_epoch', 'integer', (col)=>col.notNull().defaultTo(0)).addPrimaryKeyConstraint('pk_p2p_peer_announcements', [
                 'group_id',
                 'peer_did'
             ]).execute();
             // Answers "which groups have I seen this device in", the read a roster
             // removal and a cross-group route lookup both need.
-            await db.schema.createIndex('idx_p2p_peer_announcements_peer').ifNotExists().on('kubun_p2p_peer_announcements').column('peer_did').execute();
+            await db.schema.createIndex('idx_p2p_peer_announcements_peer').ifNotExists().on('p2p_peer_announcements').column('peer_did').execute();
             // This device's own advertisement, device-wide. One row, keyed on the
             // device's DID rather than on a fixed sentinel, so a profile written under
             // one identity is never read back under another.
-            await db.schema.createTable('kubun_p2p_local_peer_profile').ifNotExists().addColumn('peer_did', t.text, (col)=>col.notNull().primaryKey()).addColumn('label', t.text, (col)=>col.notNull().defaultTo('')).addColumn('availability', t.text, (col)=>col.notNull()).addColumn('capabilities', t.json, (col)=>col.notNull().defaultTo('[]')).addColumn('updated_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).execute();
+            await db.schema.createTable('p2p_local_peer_profile').ifNotExists().addColumn('peer_did', t.text, (col)=>col.notNull().primaryKey()).addColumn('label', t.text, (col)=>col.notNull().defaultTo('')).addColumn('availability', t.text, (col)=>col.notNull()).addColumn('capabilities', t.json, (col)=>col.notNull().defaultTo('[]')).addColumn('updated_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).execute();
             // The private half of a join request, held between `prepareJoinRequest`
             // and `completeJoin`. The offline exchange spans a human round-trip, so
             // the two calls can be different processes — a CLI device is always two.
             // Keyed on the requesting DID: a second request replaces the first rather
             // than leaving dead key material behind, and the row is deleted the moment
             // it is consumed.
-            await db.schema.createTable('kubun_p2p_pending_join_requests').ifNotExists().addColumn('did', t.text, (col)=>col.notNull().primaryKey())// The caller's own encoding, opaque here: a key package holds BigInts
+            await db.schema.createTable('p2p_pending_join_requests').ifNotExists().addColumn('did', t.text, (col)=>col.notNull().primaryKey())// The caller's own encoding, opaque here: a key package holds BigInts
             // and binary, which plain JSON cannot carry.
             .addColumn('payload', t.text, (col)=>col.notNull()).addColumn('created_at', t.timestamp, (col)=>col.defaultTo(now).notNull()).execute();
         },
         async down (db) {
-            await db.schema.dropTable('kubun_p2p_access_default_revocations').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_binding_evidence').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_own_agents_join_capabilities').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_own_agents_grants').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_own_agents_records').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_observation_repair_peers').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_observation_repairs').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_document_repair_answers').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_document_repairs').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_catalog_cursors').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_catalog_routes').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_unserved_groups').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_catalog_offers').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_pending_join_requests').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_local_peer_profile').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_peer_announcements').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_app_pending').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_log_handler_completion').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_app_cursor').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_app_outbox').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_app_outbox_state').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_group_anchor').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_commit_journal').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_control_requests').ifExists().execute();
+            await db.schema.dropTable('p2p_access_default_revocations').ifExists().execute();
+            await db.schema.dropTable('p2p_binding_evidence').ifExists().execute();
+            await db.schema.dropTable('p2p_own_agents_join_capabilities').ifExists().execute();
+            await db.schema.dropTable('p2p_own_agents_grants').ifExists().execute();
+            await db.schema.dropTable('p2p_own_agents_records').ifExists().execute();
+            await db.schema.dropTable('p2p_observation_repair_peers').ifExists().execute();
+            await db.schema.dropTable('p2p_observation_repairs').ifExists().execute();
+            await db.schema.dropTable('p2p_document_repair_answers').ifExists().execute();
+            await db.schema.dropTable('p2p_document_repairs').ifExists().execute();
+            await db.schema.dropTable('p2p_catalog_cursors').ifExists().execute();
+            await db.schema.dropTable('p2p_catalog_routes').ifExists().execute();
+            await db.schema.dropTable('p2p_unserved_groups').ifExists().execute();
+            await db.schema.dropTable('p2p_catalog_offers').ifExists().execute();
+            await db.schema.dropTable('p2p_pending_join_requests').ifExists().execute();
+            await db.schema.dropTable('p2p_local_peer_profile').ifExists().execute();
+            await db.schema.dropTable('p2p_peer_announcements').ifExists().execute();
+            await db.schema.dropTable('p2p_app_pending').ifExists().execute();
+            await db.schema.dropTable('p2p_log_handler_completion').ifExists().execute();
+            await db.schema.dropTable('p2p_app_cursor').ifExists().execute();
+            await db.schema.dropTable('p2p_app_outbox').ifExists().execute();
+            await db.schema.dropTable('p2p_app_outbox_state').ifExists().execute();
+            await db.schema.dropTable('p2p_group_anchor').ifExists().execute();
+            await db.schema.dropTable('p2p_commit_journal').ifExists().execute();
+            await db.schema.dropTable('p2p_control_requests').ifExists().execute();
             await db.schema.dropIndex(COMMIT_HUB_UNIQUE_INDEX).ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_group_hubs').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_hubs').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_broadcast_log').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_sync_checkpoints').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_sync_peers').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_group_mls_state').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_group_delegation').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_circle_members').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_circles').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_group_leave_requests').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_group_members').ifExists().execute();
-            await db.schema.dropTable('kubun_p2p_groups').ifExists().execute();
+            await db.schema.dropTable('p2p_group_hubs').ifExists().execute();
+            await db.schema.dropTable('p2p_hubs').ifExists().execute();
+            await db.schema.dropTable('p2p_broadcast_log').ifExists().execute();
+            await db.schema.dropTable('p2p_sync_checkpoints').ifExists().execute();
+            await db.schema.dropTable('p2p_sync_peers').ifExists().execute();
+            await db.schema.dropTable('p2p_group_mls_state').ifExists().execute();
+            await db.schema.dropTable('p2p_group_delegation').ifExists().execute();
+            await db.schema.dropTable('p2p_circle_members').ifExists().execute();
+            await db.schema.dropTable('p2p_circles').ifExists().execute();
+            await db.schema.dropTable('p2p_group_leave_requests').ifExists().execute();
+            await db.schema.dropTable('p2p_group_members').ifExists().execute();
+            await db.schema.dropTable('p2p_groups').ifExists().execute();
         }
     };
     return {

package/lib/ops/app-lane.d.ts

@@ -1,4 +1,4 @@
-import type { Adapter } from '@kubun/db-adapter';
+import { type Adapter } from '@kubun/db-adapter';
 import { type AnchorSlot } from '@kumiai/rpc';
 import type { Kysely } from 'kysely';
 import type { AppCursor, GroupAnchor, InsertGroupMLSState, P2PStoreTables, PendingAppFrameRow } from '../tables.js';