@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/storage/migration-nine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-nine.js","sourceRoot":"","sources":["../../src/storage/migration-nine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,uCAAuC,EACvC,6CAA6C,EAC7C,4CAA4C,EAC5C,uBAAuB,EACvB,8BAA8B,EAC9B,sCAAsC,EACtC,6BAA6B,EAC7B,mCAAmC,EACnC,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,wCAAwC,GAAG,MAAM,CAAC;AACxD,MAAM,mCAAmC,GAAG,MAAM,CAAC;AAEnD,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;+BAKD,MAAM,CAAC,uBAAuB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;+BAyB/B,MAAM,CAAC,uBAAuB,CAAC;;;;;;;;;;;;;;;;;;;kCAmB5B,MAAM,CAAC,8BAA8B,CAAC;;;0CAG9B,MAAM,CAAC,sCAAsC,CAAC;;;;;mCAKrD,MAAM,CAAC,6BAA6B,CAAC;;;mCAGrC,MAAM,CAAC,6BAA6B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAiD/D,MAAM,CAAC,kBAAkB,CAAC;;;;;;;;;;WAUxB,MAAM,CAAC,+BAA+B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAyKzC,MAAM,CAAC,+BAA+B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAqLjB,MAAM,CAAC,uBAAuB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAiCrD,MAAM,CAAC,wCAAwC,CAAC;;;;;QAKjD,MAAM,CAAC,6BAA6B,CAAC;;;;;QAKrC,MAAM,CAAC,6BAA6B,CAAC;;;;0BAInB,MAAM,CAAC,4CAA4C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAiC/C,MAAM,CAAC,uBAAuB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAsCrD,MAAM,CAAC,wCAAwC,CAAC;;;;;;;;;;;;;;;;;;;;;;+BAsB1B,MAAM,CAAC,uBAAuB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;SAwBrD,MAAM,CAAC,6BAA6B,CAAC;;;;;SAKrC,MAAM,CAAC,mCAAmC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;+BAwBrB,MAAM,CAAC,uBAAuB,CAAC;;;;;;;;;;;;;;;;oDAgBV,MAAM,CAAC,6CAA6C,CAAC;;;;;;;;;;;;;;;;;;;;SAoBhG,MAAM,CAAC,uCAAuC,CAAC;;;;;SAK/C,MAAM,CAAC,6CAA6C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BA+B/B,MAAM,CAAC,uBAAuB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAgD/B,MAAM,CAAC,uBAAuB,CAAC;;;mFAGqB,MAAM,CAAC,uBAAuB,CAAC;;;;;;;sCAO5E,MAAM,CAAC,8BAA8B,CAAC;;;mFAGO,MAAM,CAAC,sCAAsC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA0GxG,MAAM,CAAC,uBAAuB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SA8M/C,MAAM,CAAC,mCAAmC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgHnD,CAAC"}

package/dist/storage/migration-ten.d.ts

@@ -0,0 +1,2 @@
+export declare const migrationTenSql = "\nCREATE INDEX command_receipts_recent\nON command_receipts (created_at, command_id);\n\nCREATE INDEX command_receipts_actor_recent\nON command_receipts (actor_id, created_at, command_id);\n\nCREATE INDEX command_receipts_method_recent\nON command_receipts (method, created_at, command_id);\n\nCREATE INDEX command_receipts_actor_method_recent\nON command_receipts (actor_id, method, created_at, command_id);\n";
+//# sourceMappingURL=migration-ten.d.ts.map

package/dist/storage/migration-ten.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-ten.d.ts","sourceRoot":"","sources":["../../src/storage/migration-ten.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,+ZAY3B,CAAC"}

package/dist/storage/migration-ten.js

@@ -0,0 +1,14 @@
+export const migrationTenSql = `
+CREATE INDEX command_receipts_recent
+ON command_receipts (created_at, command_id);
+
+CREATE INDEX command_receipts_actor_recent
+ON command_receipts (actor_id, created_at, command_id);
+
+CREATE INDEX command_receipts_method_recent
+ON command_receipts (method, created_at, command_id);
+
+CREATE INDEX command_receipts_actor_method_recent
+ON command_receipts (actor_id, method, created_at, command_id);
+`;
+//# sourceMappingURL=migration-ten.js.map

package/dist/storage/migration-ten.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-ten.js","sourceRoot":"","sources":["../../src/storage/migration-ten.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;CAY9B,CAAC"}

package/dist/storage/migration-thirteen.d.ts

@@ -0,0 +1,2 @@
+export declare const migrationThirteenSql = "\nCREATE TABLE pi_rpc_artifact_manifests (\n  closure_sha256 TEXT PRIMARY KEY NOT NULL CHECK (\n    length(closure_sha256) = 64 AND closure_sha256 NOT GLOB '*[^a-f0-9]*'\n  ),\n  package_root_path TEXT NOT NULL CHECK (\n    length(package_root_path) BETWEEN 1 AND 4096 AND\n    substr(package_root_path, 1, 1) = '/'\n  ),\n  package_root_device INTEGER NOT NULL CHECK (package_root_device >= 0),\n  package_root_inode INTEGER NOT NULL CHECK (package_root_inode >= 0),\n  package_name TEXT NOT NULL CHECK (length(package_name) BETWEEN 1 AND 214),\n  package_version TEXT NOT NULL CHECK (length(package_version) BETWEEN 1 AND 128),\n  package_manifest_sha256 TEXT NOT NULL CHECK (\n    length(package_manifest_sha256) = 64 AND\n    package_manifest_sha256 NOT GLOB '*[^a-f0-9]*'\n  ),\n  excluded_bin_entry_count INTEGER NOT NULL CHECK (\n    excluded_bin_entry_count BETWEEN 0 AND 256\n  ),\n  file_count INTEGER NOT NULL CHECK (file_count BETWEEN 1 AND 16384),\n  total_bytes INTEGER NOT NULL CHECK (total_bytes BETWEEN 1 AND 268435456),\n  manifest_bytes INTEGER NOT NULL CHECK (manifest_bytes BETWEEN 1 AND 8388608),\n  created_at TEXT NOT NULL\n) STRICT, WITHOUT ROWID;\n\nCREATE TABLE pi_rpc_artifact_manifest_entries (\n  closure_sha256 TEXT NOT NULL\n    REFERENCES pi_rpc_artifact_manifests(closure_sha256) ON DELETE RESTRICT,\n  ordinal INTEGER NOT NULL CHECK (ordinal BETWEEN 0 AND 16383),\n  relative_path TEXT NOT NULL CHECK (\n    length(relative_path) BETWEEN 1 AND 4096 AND\n    substr(relative_path, 1, 1) <> '/' AND\n    relative_path <> '..' AND\n    relative_path NOT LIKE '../%' AND\n    relative_path NOT LIKE '%/../%' AND\n    instr(relative_path, char(0)) = 0 AND\n    instr(relative_path, char(92)) = 0\n  ),\n  byte_count INTEGER NOT NULL CHECK (byte_count BETWEEN 0 AND 16777216),\n  sha256 TEXT NOT NULL CHECK (\n    length(sha256) = 64 AND sha256 NOT GLOB '*[^a-f0-9]*'\n  ),\n  executable INTEGER NOT NULL CHECK (executable IN (0, 1)),\n  PRIMARY KEY (closure_sha256, ordinal),\n  UNIQUE (closure_sha256, relative_path)\n) STRICT, WITHOUT ROWID;\n\nCREATE TABLE pi_rpc_authorization_plans (\n  plan_id TEXT PRIMARY KEY NOT NULL CHECK (\n    length(plan_id) BETWEEN 1 AND 128 AND\n    plan_id NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  integration TEXT NOT NULL CHECK (integration = 'pi-rpc'),\n  target_adapter TEXT NOT NULL CHECK (target_adapter = 'pi-rpc'),\n  interpreter_path TEXT NOT NULL CHECK (\n    length(interpreter_path) BETWEEN 1 AND 4096 AND\n    substr(interpreter_path, 1, 1) = '/'\n  ),\n  interpreter_device INTEGER NOT NULL CHECK (interpreter_device >= 0),\n  interpreter_inode INTEGER NOT NULL CHECK (interpreter_inode >= 0),\n  interpreter_size_bytes INTEGER NOT NULL CHECK (\n    interpreter_size_bytes BETWEEN 1 AND 268435456\n  ),\n  interpreter_sha256 TEXT NOT NULL CHECK (\n    length(interpreter_sha256) = 64 AND\n    interpreter_sha256 NOT GLOB '*[^a-f0-9]*'\n  ),\n  interpreter_architecture TEXT NOT NULL CHECK (\n    interpreter_architecture IN ('arm64', 'x64')\n  ),\n  interpreter_version TEXT NOT NULL CHECK (interpreter_version = '24.19.0'),\n  entry_path TEXT NOT NULL CHECK (\n    length(entry_path) BETWEEN 1 AND 4096 AND substr(entry_path, 1, 1) = '/'\n  ),\n  entry_device INTEGER NOT NULL CHECK (entry_device >= 0),\n  entry_inode INTEGER NOT NULL CHECK (entry_inode >= 0),\n  entry_size_bytes INTEGER NOT NULL CHECK (\n    entry_size_bytes BETWEEN 1 AND 16777216\n  ),\n  entry_sha256 TEXT NOT NULL CHECK (\n    length(entry_sha256) = 64 AND entry_sha256 NOT GLOB '*[^a-f0-9]*'\n  ),\n  package_root_path TEXT NOT NULL CHECK (\n    length(package_root_path) BETWEEN 1 AND 4096 AND\n    substr(package_root_path, 1, 1) = '/'\n  ),\n  package_root_device INTEGER NOT NULL CHECK (package_root_device >= 0),\n  package_root_inode INTEGER NOT NULL CHECK (package_root_inode >= 0),\n  closure_sha256 TEXT NOT NULL\n    REFERENCES pi_rpc_artifact_manifests(closure_sha256) ON DELETE RESTRICT,\n  adapter_version TEXT NOT NULL CHECK (\n    length(adapter_version) BETWEEN 1 AND 128 AND\n    adapter_version NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  owner_kinds_json TEXT NOT NULL CHECK (json_valid(owner_kinds_json)),\n  conversation_policy_revision TEXT NOT NULL CHECK (\n    length(conversation_policy_revision) BETWEEN 1 AND 128 AND\n    conversation_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  vouch_policy_revision TEXT NOT NULL CHECK (\n    length(vouch_policy_revision) BETWEEN 1 AND 128 AND\n    vouch_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  plan_json TEXT NOT NULL CHECK (json_valid(plan_json)),\n  plan_digest TEXT NOT NULL CHECK (\n    length(plan_digest) = 64 AND plan_digest NOT GLOB '*[^a-f0-9]*'\n  ),\n  plan_bytes INTEGER NOT NULL CHECK (plan_bytes BETWEEN 1 AND 16384),\n  created_at TEXT NOT NULL,\n  created_at_ms INTEGER NOT NULL CHECK (created_at_ms >= 0),\n  expires_at TEXT NOT NULL,\n  expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms = created_at_ms + 300000)\n) STRICT;\n\nCREATE INDEX pi_rpc_authorization_plans_expiry\nON pi_rpc_authorization_plans (integration, expires_at_ms);\n\nCREATE TABLE pi_rpc_authorization_revisions (\n  authorization_revision INTEGER PRIMARY KEY AUTOINCREMENT,\n  integration TEXT NOT NULL CHECK (integration = 'pi-rpc'),\n  state TEXT NOT NULL CHECK (\n    state IN ('active', 'replaced', 'revoking', 'revoked', 'cleanup_unknown')\n  ),\n  plan_id TEXT NOT NULL REFERENCES pi_rpc_authorization_plans(plan_id)\n    ON DELETE RESTRICT,\n  plan_digest TEXT NOT NULL CHECK (\n    length(plan_digest) = 64 AND plan_digest NOT GLOB '*[^a-f0-9]*'\n  ),\n  interpreter_path TEXT NOT NULL CHECK (\n    length(interpreter_path) BETWEEN 1 AND 4096 AND\n    substr(interpreter_path, 1, 1) = '/'\n  ),\n  interpreter_device INTEGER NOT NULL CHECK (interpreter_device >= 0),\n  interpreter_inode INTEGER NOT NULL CHECK (interpreter_inode >= 0),\n  interpreter_size_bytes INTEGER NOT NULL CHECK (\n    interpreter_size_bytes BETWEEN 1 AND 268435456\n  ),\n  interpreter_sha256 TEXT NOT NULL CHECK (\n    length(interpreter_sha256) = 64 AND\n    interpreter_sha256 NOT GLOB '*[^a-f0-9]*'\n  ),\n  interpreter_architecture TEXT NOT NULL CHECK (\n    interpreter_architecture IN ('arm64', 'x64')\n  ),\n  entry_path TEXT NOT NULL CHECK (\n    length(entry_path) BETWEEN 1 AND 4096 AND substr(entry_path, 1, 1) = '/'\n  ),\n  entry_device INTEGER NOT NULL CHECK (entry_device >= 0),\n  entry_inode INTEGER NOT NULL CHECK (entry_inode >= 0),\n  entry_size_bytes INTEGER NOT NULL CHECK (\n    entry_size_bytes BETWEEN 1 AND 16777216\n  ),\n  entry_sha256 TEXT NOT NULL CHECK (\n    length(entry_sha256) = 64 AND entry_sha256 NOT GLOB '*[^a-f0-9]*'\n  ),\n  package_root_path TEXT NOT NULL CHECK (\n    length(package_root_path) BETWEEN 1 AND 4096 AND\n    substr(package_root_path, 1, 1) = '/'\n  ),\n  package_root_device INTEGER NOT NULL CHECK (package_root_device >= 0),\n  package_root_inode INTEGER NOT NULL CHECK (package_root_inode >= 0),\n  closure_sha256 TEXT NOT NULL\n    REFERENCES pi_rpc_artifact_manifests(closure_sha256) ON DELETE RESTRICT,\n  adapter_version TEXT NOT NULL CHECK (\n    length(adapter_version) BETWEEN 1 AND 128 AND\n    adapter_version NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  owner_kinds_json TEXT NOT NULL CHECK (json_valid(owner_kinds_json)),\n  conversation_policy_revision TEXT NOT NULL CHECK (\n    length(conversation_policy_revision) BETWEEN 1 AND 128 AND\n    conversation_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  vouch_policy_revision TEXT NOT NULL CHECK (\n    length(vouch_policy_revision) BETWEEN 1 AND 128 AND\n    vouch_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  replaced_by_revision INTEGER\n    REFERENCES pi_rpc_authorization_revisions(authorization_revision)\n    ON DELETE RESTRICT DEFERRABLE INITIALLY DEFERRED,\n  revocation_started_at TEXT,\n  terminalized_at TEXT,\n  cleanup_unknown_at TEXT,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  CHECK (\n    (state = 'active' AND replaced_by_revision IS NULL AND\n      revocation_started_at IS NULL AND terminalized_at IS NULL AND\n      cleanup_unknown_at IS NULL) OR\n    (state = 'replaced' AND replaced_by_revision IS NOT NULL AND\n      revocation_started_at IS NULL AND terminalized_at IS NULL AND\n      cleanup_unknown_at IS NULL) OR\n    (state = 'revoking' AND replaced_by_revision IS NULL AND\n      revocation_started_at IS NOT NULL AND terminalized_at IS NULL AND\n      cleanup_unknown_at IS NULL) OR\n    (state = 'revoked' AND replaced_by_revision IS NULL AND\n      revocation_started_at IS NOT NULL AND terminalized_at IS NOT NULL AND\n      cleanup_unknown_at IS NULL) OR\n    (state = 'cleanup_unknown' AND replaced_by_revision IS NULL AND\n      revocation_started_at IS NOT NULL AND terminalized_at IS NULL AND\n      cleanup_unknown_at IS NOT NULL)\n  )\n) STRICT;\n\nCREATE UNIQUE INDEX pi_rpc_authorization_one_active\nON pi_rpc_authorization_revisions (integration) WHERE state = 'active';\n\nCREATE UNIQUE INDEX pi_rpc_authorization_one_revoking\nON pi_rpc_authorization_revisions (integration) WHERE state = 'revoking';\n\nCREATE TABLE pi_rpc_authorization_permits (\n  sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n  permit_id TEXT UNIQUE NOT NULL CHECK (\n    length(permit_id) BETWEEN 1 AND 128 AND\n    permit_id NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  integration TEXT NOT NULL CHECK (integration = 'pi-rpc'),\n  authorization_revision INTEGER NOT NULL\n    REFERENCES pi_rpc_authorization_revisions(authorization_revision)\n    ON DELETE RESTRICT,\n  owner_kind TEXT NOT NULL CHECK (owner_kind = 'pi-rpc-probe'),\n  scope_command_id TEXT NOT NULL CHECK (\n    length(scope_command_id) BETWEEN 1 AND 128 AND\n    scope_command_id NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  runtime_session_id TEXT NOT NULL CHECK (\n    length(runtime_session_id) BETWEEN 1 AND 128 AND\n    runtime_session_id NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  interpreter_sha256 TEXT NOT NULL CHECK (\n    length(interpreter_sha256) = 64 AND\n    interpreter_sha256 NOT GLOB '*[^a-f0-9]*'\n  ),\n  entry_sha256 TEXT NOT NULL CHECK (\n    length(entry_sha256) = 64 AND entry_sha256 NOT GLOB '*[^a-f0-9]*'\n  ),\n  closure_sha256 TEXT NOT NULL CHECK (\n    length(closure_sha256) = 64 AND closure_sha256 NOT GLOB '*[^a-f0-9]*'\n  ),\n  adapter_version TEXT NOT NULL CHECK (\n    length(adapter_version) BETWEEN 1 AND 128 AND\n    adapter_version NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  conversation_policy_revision TEXT NOT NULL CHECK (\n    length(conversation_policy_revision) BETWEEN 1 AND 128 AND\n    conversation_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  vouch_policy_revision TEXT NOT NULL CHECK (\n    length(vouch_policy_revision) BETWEEN 1 AND 128 AND\n    vouch_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  fence_id TEXT NOT NULL CHECK (\n    length(fence_id) BETWEEN 1 AND 128 AND\n    fence_id NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  state TEXT NOT NULL CHECK (\n    state IN ('issued', 'dispatching', 'started', 'terminal')\n  ),\n  issued_at TEXT NOT NULL,\n  issued_at_ms INTEGER NOT NULL CHECK (issued_at_ms >= 0),\n  expires_at TEXT NOT NULL,\n  expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms = issued_at_ms + 2000),\n  dispatching_at TEXT,\n  dispatching_at_ms INTEGER,\n  started_at TEXT,\n  started_at_ms INTEGER,\n  terminal_at TEXT,\n  terminal_at_ms INTEGER,\n  terminal_reason TEXT CHECK (\n    terminal_reason IS NULL OR terminal_reason IN (\n      'cleanup_unknown', 'completed', 'expired', 'failed',\n      'revoked_after_start', 'revoked_before_start', 'stale_policy',\n      'stale_revision'\n    )\n  ),\n  process_tree_id TEXT CHECK (\n    process_tree_id IS NULL OR\n    (length(process_tree_id) BETWEEN 1 AND 128 AND\n      process_tree_id NOT GLOB '*[^A-Za-z0-9._:-]*')\n  ),\n  CHECK (\n    (state = 'issued' AND dispatching_at IS NULL AND dispatching_at_ms IS NULL AND\n      started_at IS NULL AND started_at_ms IS NULL AND terminal_at IS NULL AND\n      terminal_at_ms IS NULL AND terminal_reason IS NULL AND\n      process_tree_id IS NULL) OR\n    (state = 'dispatching' AND dispatching_at IS NOT NULL AND\n      dispatching_at_ms IS NOT NULL AND dispatching_at_ms >= issued_at_ms AND\n      started_at IS NULL AND started_at_ms IS NULL AND terminal_at IS NULL AND\n      terminal_at_ms IS NULL AND terminal_reason IS NULL AND\n      process_tree_id IS NULL) OR\n    (state = 'started' AND dispatching_at IS NOT NULL AND\n      dispatching_at_ms IS NOT NULL AND started_at IS NOT NULL AND\n      started_at_ms IS NOT NULL AND started_at_ms >= dispatching_at_ms AND\n      terminal_at IS NULL AND terminal_at_ms IS NULL AND\n      terminal_reason IS NULL AND process_tree_id IS NOT NULL) OR\n    (state = 'terminal' AND terminal_at IS NOT NULL AND\n      terminal_at_ms IS NOT NULL AND terminal_reason IS NOT NULL AND\n      terminal_at_ms >= COALESCE(started_at_ms, dispatching_at_ms, issued_at_ms) AND\n      ((dispatching_at IS NULL AND dispatching_at_ms IS NULL) OR\n        (dispatching_at IS NOT NULL AND dispatching_at_ms IS NOT NULL)) AND\n      ((started_at IS NULL AND started_at_ms IS NULL AND process_tree_id IS NULL) OR\n        (started_at IS NOT NULL AND started_at_ms IS NOT NULL AND\n          process_tree_id IS NOT NULL)))\n  )\n) STRICT;\n\nCREATE INDEX pi_rpc_authorization_permits_unsettled\nON pi_rpc_authorization_permits (\n  authorization_revision, state, expires_at_ms, sequence\n);\n\nCREATE TABLE pi_rpc_authorization_permit_rollups (\n  authorization_revision INTEGER NOT NULL\n    REFERENCES pi_rpc_authorization_revisions(authorization_revision)\n    ON DELETE RESTRICT,\n  terminal_reason TEXT NOT NULL CHECK (terminal_reason IN (\n    'cleanup_unknown', 'completed', 'expired', 'failed',\n    'revoked_after_start', 'revoked_before_start', 'stale_policy',\n    'stale_revision'\n  )),\n  count INTEGER NOT NULL CHECK (count >= 1),\n  PRIMARY KEY (authorization_revision, terminal_reason)\n) STRICT, WITHOUT ROWID;\n\nCREATE TABLE pi_rpc_authorization_command_replays (\n  command_id TEXT PRIMARY KEY NOT NULL CHECK (\n    length(command_id) BETWEEN 1 AND 128 AND\n    command_id NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  method TEXT NOT NULL CHECK (method IN (\n    'integration.apply.pi-rpc', 'integration.permit.dispatch.pi-rpc',\n    'integration.permit.issue.pi-rpc', 'integration.permit.settle.pi-rpc',\n    'integration.permit.start.pi-rpc', 'integration.plan.pi-rpc',\n    'integration.remove.pi-rpc', 'integration.remove.settle.pi-rpc'\n  )),\n  request_digest TEXT NOT NULL CHECK (\n    length(request_digest) BETWEEN 1 AND 128 AND\n    request_digest NOT GLOB '*[^A-Za-z0-9._:-]*'\n  ),\n  result_json TEXT NOT NULL CHECK (json_valid(result_json)),\n  created_at TEXT NOT NULL\n) STRICT;\n\nCREATE TRIGGER pi_rpc_artifact_manifests_immutable_update\nBEFORE UPDATE ON pi_rpc_artifact_manifests\nBEGIN\n  SELECT RAISE(ABORT, 'Pi RPC artifact manifests are immutable');\nEND;\n\nCREATE TRIGGER pi_rpc_artifact_manifests_immutable_delete\nBEFORE DELETE ON pi_rpc_artifact_manifests\nBEGIN\n  SELECT RAISE(ABORT, 'Pi RPC artifact manifests are immutable');\nEND;\n\nCREATE TRIGGER pi_rpc_artifact_entries_immutable_update\nBEFORE UPDATE ON pi_rpc_artifact_manifest_entries\nBEGIN\n  SELECT RAISE(ABORT, 'Pi RPC artifact manifest entries are immutable');\nEND;\n\nCREATE TRIGGER pi_rpc_artifact_entries_immutable_delete\nBEFORE DELETE ON pi_rpc_artifact_manifest_entries\nBEGIN\n  SELECT RAISE(ABORT, 'Pi RPC artifact manifest entries are immutable');\nEND;\n\nCREATE TRIGGER pi_rpc_authorization_plans_immutable_update\nBEFORE UPDATE ON pi_rpc_authorization_plans\nBEGIN\n  SELECT RAISE(ABORT, 'Pi RPC authorization plans are immutable');\nEND;\n\nCREATE TRIGGER pi_rpc_authorization_plans_immutable_delete\nBEFORE DELETE ON pi_rpc_authorization_plans\nBEGIN\n  SELECT RAISE(ABORT, 'Pi RPC authorization plans are immutable');\nEND;\n";
+//# sourceMappingURL=migration-thirteen.d.ts.map

package/dist/storage/migration-thirteen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-thirteen.d.ts","sourceRoot":"","sources":["../../src/storage/migration-thirteen.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,yhfA0XhC,CAAC"}

package/dist/storage/migration-thirteen.js

@@ -0,0 +1,380 @@
+export const migrationThirteenSql = `
+CREATE TABLE pi_rpc_artifact_manifests (
+  closure_sha256 TEXT PRIMARY KEY NOT NULL CHECK (
+    length(closure_sha256) = 64 AND closure_sha256 NOT GLOB '*[^a-f0-9]*'
+  ),
+  package_root_path TEXT NOT NULL CHECK (
+    length(package_root_path) BETWEEN 1 AND 4096 AND
+    substr(package_root_path, 1, 1) = '/'
+  ),
+  package_root_device INTEGER NOT NULL CHECK (package_root_device >= 0),
+  package_root_inode INTEGER NOT NULL CHECK (package_root_inode >= 0),
+  package_name TEXT NOT NULL CHECK (length(package_name) BETWEEN 1 AND 214),
+  package_version TEXT NOT NULL CHECK (length(package_version) BETWEEN 1 AND 128),
+  package_manifest_sha256 TEXT NOT NULL CHECK (
+    length(package_manifest_sha256) = 64 AND
+    package_manifest_sha256 NOT GLOB '*[^a-f0-9]*'
+  ),
+  excluded_bin_entry_count INTEGER NOT NULL CHECK (
+    excluded_bin_entry_count BETWEEN 0 AND 256
+  ),
+  file_count INTEGER NOT NULL CHECK (file_count BETWEEN 1 AND 16384),
+  total_bytes INTEGER NOT NULL CHECK (total_bytes BETWEEN 1 AND 268435456),
+  manifest_bytes INTEGER NOT NULL CHECK (manifest_bytes BETWEEN 1 AND 8388608),
+  created_at TEXT NOT NULL
+) STRICT, WITHOUT ROWID;
+
+CREATE TABLE pi_rpc_artifact_manifest_entries (
+  closure_sha256 TEXT NOT NULL
+    REFERENCES pi_rpc_artifact_manifests(closure_sha256) ON DELETE RESTRICT,
+  ordinal INTEGER NOT NULL CHECK (ordinal BETWEEN 0 AND 16383),
+  relative_path TEXT NOT NULL CHECK (
+    length(relative_path) BETWEEN 1 AND 4096 AND
+    substr(relative_path, 1, 1) <> '/' AND
+    relative_path <> '..' AND
+    relative_path NOT LIKE '../%' AND
+    relative_path NOT LIKE '%/../%' AND
+    instr(relative_path, char(0)) = 0 AND
+    instr(relative_path, char(92)) = 0
+  ),
+  byte_count INTEGER NOT NULL CHECK (byte_count BETWEEN 0 AND 16777216),
+  sha256 TEXT NOT NULL CHECK (
+    length(sha256) = 64 AND sha256 NOT GLOB '*[^a-f0-9]*'
+  ),
+  executable INTEGER NOT NULL CHECK (executable IN (0, 1)),
+  PRIMARY KEY (closure_sha256, ordinal),
+  UNIQUE (closure_sha256, relative_path)
+) STRICT, WITHOUT ROWID;
+
+CREATE TABLE pi_rpc_authorization_plans (
+  plan_id TEXT PRIMARY KEY NOT NULL CHECK (
+    length(plan_id) BETWEEN 1 AND 128 AND
+    plan_id NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  integration TEXT NOT NULL CHECK (integration = 'pi-rpc'),
+  target_adapter TEXT NOT NULL CHECK (target_adapter = 'pi-rpc'),
+  interpreter_path TEXT NOT NULL CHECK (
+    length(interpreter_path) BETWEEN 1 AND 4096 AND
+    substr(interpreter_path, 1, 1) = '/'
+  ),
+  interpreter_device INTEGER NOT NULL CHECK (interpreter_device >= 0),
+  interpreter_inode INTEGER NOT NULL CHECK (interpreter_inode >= 0),
+  interpreter_size_bytes INTEGER NOT NULL CHECK (
+    interpreter_size_bytes BETWEEN 1 AND 268435456
+  ),
+  interpreter_sha256 TEXT NOT NULL CHECK (
+    length(interpreter_sha256) = 64 AND
+    interpreter_sha256 NOT GLOB '*[^a-f0-9]*'
+  ),
+  interpreter_architecture TEXT NOT NULL CHECK (
+    interpreter_architecture IN ('arm64', 'x64')
+  ),
+  interpreter_version TEXT NOT NULL CHECK (interpreter_version = '24.19.0'),
+  entry_path TEXT NOT NULL CHECK (
+    length(entry_path) BETWEEN 1 AND 4096 AND substr(entry_path, 1, 1) = '/'
+  ),
+  entry_device INTEGER NOT NULL CHECK (entry_device >= 0),
+  entry_inode INTEGER NOT NULL CHECK (entry_inode >= 0),
+  entry_size_bytes INTEGER NOT NULL CHECK (
+    entry_size_bytes BETWEEN 1 AND 16777216
+  ),
+  entry_sha256 TEXT NOT NULL CHECK (
+    length(entry_sha256) = 64 AND entry_sha256 NOT GLOB '*[^a-f0-9]*'
+  ),
+  package_root_path TEXT NOT NULL CHECK (
+    length(package_root_path) BETWEEN 1 AND 4096 AND
+    substr(package_root_path, 1, 1) = '/'
+  ),
+  package_root_device INTEGER NOT NULL CHECK (package_root_device >= 0),
+  package_root_inode INTEGER NOT NULL CHECK (package_root_inode >= 0),
+  closure_sha256 TEXT NOT NULL
+    REFERENCES pi_rpc_artifact_manifests(closure_sha256) ON DELETE RESTRICT,
+  adapter_version TEXT NOT NULL CHECK (
+    length(adapter_version) BETWEEN 1 AND 128 AND
+    adapter_version NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  owner_kinds_json TEXT NOT NULL CHECK (json_valid(owner_kinds_json)),
+  conversation_policy_revision TEXT NOT NULL CHECK (
+    length(conversation_policy_revision) BETWEEN 1 AND 128 AND
+    conversation_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  vouch_policy_revision TEXT NOT NULL CHECK (
+    length(vouch_policy_revision) BETWEEN 1 AND 128 AND
+    vouch_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  plan_json TEXT NOT NULL CHECK (json_valid(plan_json)),
+  plan_digest TEXT NOT NULL CHECK (
+    length(plan_digest) = 64 AND plan_digest NOT GLOB '*[^a-f0-9]*'
+  ),
+  plan_bytes INTEGER NOT NULL CHECK (plan_bytes BETWEEN 1 AND 16384),
+  created_at TEXT NOT NULL,
+  created_at_ms INTEGER NOT NULL CHECK (created_at_ms >= 0),
+  expires_at TEXT NOT NULL,
+  expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms = created_at_ms + 300000)
+) STRICT;
+
+CREATE INDEX pi_rpc_authorization_plans_expiry
+ON pi_rpc_authorization_plans (integration, expires_at_ms);
+
+CREATE TABLE pi_rpc_authorization_revisions (
+  authorization_revision INTEGER PRIMARY KEY AUTOINCREMENT,
+  integration TEXT NOT NULL CHECK (integration = 'pi-rpc'),
+  state TEXT NOT NULL CHECK (
+    state IN ('active', 'replaced', 'revoking', 'revoked', 'cleanup_unknown')
+  ),
+  plan_id TEXT NOT NULL REFERENCES pi_rpc_authorization_plans(plan_id)
+    ON DELETE RESTRICT,
+  plan_digest TEXT NOT NULL CHECK (
+    length(plan_digest) = 64 AND plan_digest NOT GLOB '*[^a-f0-9]*'
+  ),
+  interpreter_path TEXT NOT NULL CHECK (
+    length(interpreter_path) BETWEEN 1 AND 4096 AND
+    substr(interpreter_path, 1, 1) = '/'
+  ),
+  interpreter_device INTEGER NOT NULL CHECK (interpreter_device >= 0),
+  interpreter_inode INTEGER NOT NULL CHECK (interpreter_inode >= 0),
+  interpreter_size_bytes INTEGER NOT NULL CHECK (
+    interpreter_size_bytes BETWEEN 1 AND 268435456
+  ),
+  interpreter_sha256 TEXT NOT NULL CHECK (
+    length(interpreter_sha256) = 64 AND
+    interpreter_sha256 NOT GLOB '*[^a-f0-9]*'
+  ),
+  interpreter_architecture TEXT NOT NULL CHECK (
+    interpreter_architecture IN ('arm64', 'x64')
+  ),
+  entry_path TEXT NOT NULL CHECK (
+    length(entry_path) BETWEEN 1 AND 4096 AND substr(entry_path, 1, 1) = '/'
+  ),
+  entry_device INTEGER NOT NULL CHECK (entry_device >= 0),
+  entry_inode INTEGER NOT NULL CHECK (entry_inode >= 0),
+  entry_size_bytes INTEGER NOT NULL CHECK (
+    entry_size_bytes BETWEEN 1 AND 16777216
+  ),
+  entry_sha256 TEXT NOT NULL CHECK (
+    length(entry_sha256) = 64 AND entry_sha256 NOT GLOB '*[^a-f0-9]*'
+  ),
+  package_root_path TEXT NOT NULL CHECK (
+    length(package_root_path) BETWEEN 1 AND 4096 AND
+    substr(package_root_path, 1, 1) = '/'
+  ),
+  package_root_device INTEGER NOT NULL CHECK (package_root_device >= 0),
+  package_root_inode INTEGER NOT NULL CHECK (package_root_inode >= 0),
+  closure_sha256 TEXT NOT NULL
+    REFERENCES pi_rpc_artifact_manifests(closure_sha256) ON DELETE RESTRICT,
+  adapter_version TEXT NOT NULL CHECK (
+    length(adapter_version) BETWEEN 1 AND 128 AND
+    adapter_version NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  owner_kinds_json TEXT NOT NULL CHECK (json_valid(owner_kinds_json)),
+  conversation_policy_revision TEXT NOT NULL CHECK (
+    length(conversation_policy_revision) BETWEEN 1 AND 128 AND
+    conversation_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  vouch_policy_revision TEXT NOT NULL CHECK (
+    length(vouch_policy_revision) BETWEEN 1 AND 128 AND
+    vouch_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  replaced_by_revision INTEGER
+    REFERENCES pi_rpc_authorization_revisions(authorization_revision)
+    ON DELETE RESTRICT DEFERRABLE INITIALLY DEFERRED,
+  revocation_started_at TEXT,
+  terminalized_at TEXT,
+  cleanup_unknown_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  CHECK (
+    (state = 'active' AND replaced_by_revision IS NULL AND
+      revocation_started_at IS NULL AND terminalized_at IS NULL AND
+      cleanup_unknown_at IS NULL) OR
+    (state = 'replaced' AND replaced_by_revision IS NOT NULL AND
+      revocation_started_at IS NULL AND terminalized_at IS NULL AND
+      cleanup_unknown_at IS NULL) OR
+    (state = 'revoking' AND replaced_by_revision IS NULL AND
+      revocation_started_at IS NOT NULL AND terminalized_at IS NULL AND
+      cleanup_unknown_at IS NULL) OR
+    (state = 'revoked' AND replaced_by_revision IS NULL AND
+      revocation_started_at IS NOT NULL AND terminalized_at IS NOT NULL AND
+      cleanup_unknown_at IS NULL) OR
+    (state = 'cleanup_unknown' AND replaced_by_revision IS NULL AND
+      revocation_started_at IS NOT NULL AND terminalized_at IS NULL AND
+      cleanup_unknown_at IS NOT NULL)
+  )
+) STRICT;
+
+CREATE UNIQUE INDEX pi_rpc_authorization_one_active
+ON pi_rpc_authorization_revisions (integration) WHERE state = 'active';
+
+CREATE UNIQUE INDEX pi_rpc_authorization_one_revoking
+ON pi_rpc_authorization_revisions (integration) WHERE state = 'revoking';
+
+CREATE TABLE pi_rpc_authorization_permits (
+  sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+  permit_id TEXT UNIQUE NOT NULL CHECK (
+    length(permit_id) BETWEEN 1 AND 128 AND
+    permit_id NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  integration TEXT NOT NULL CHECK (integration = 'pi-rpc'),
+  authorization_revision INTEGER NOT NULL
+    REFERENCES pi_rpc_authorization_revisions(authorization_revision)
+    ON DELETE RESTRICT,
+  owner_kind TEXT NOT NULL CHECK (owner_kind = 'pi-rpc-probe'),
+  scope_command_id TEXT NOT NULL CHECK (
+    length(scope_command_id) BETWEEN 1 AND 128 AND
+    scope_command_id NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  runtime_session_id TEXT NOT NULL CHECK (
+    length(runtime_session_id) BETWEEN 1 AND 128 AND
+    runtime_session_id NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  interpreter_sha256 TEXT NOT NULL CHECK (
+    length(interpreter_sha256) = 64 AND
+    interpreter_sha256 NOT GLOB '*[^a-f0-9]*'
+  ),
+  entry_sha256 TEXT NOT NULL CHECK (
+    length(entry_sha256) = 64 AND entry_sha256 NOT GLOB '*[^a-f0-9]*'
+  ),
+  closure_sha256 TEXT NOT NULL CHECK (
+    length(closure_sha256) = 64 AND closure_sha256 NOT GLOB '*[^a-f0-9]*'
+  ),
+  adapter_version TEXT NOT NULL CHECK (
+    length(adapter_version) BETWEEN 1 AND 128 AND
+    adapter_version NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  conversation_policy_revision TEXT NOT NULL CHECK (
+    length(conversation_policy_revision) BETWEEN 1 AND 128 AND
+    conversation_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  vouch_policy_revision TEXT NOT NULL CHECK (
+    length(vouch_policy_revision) BETWEEN 1 AND 128 AND
+    vouch_policy_revision NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  fence_id TEXT NOT NULL CHECK (
+    length(fence_id) BETWEEN 1 AND 128 AND
+    fence_id NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  state TEXT NOT NULL CHECK (
+    state IN ('issued', 'dispatching', 'started', 'terminal')
+  ),
+  issued_at TEXT NOT NULL,
+  issued_at_ms INTEGER NOT NULL CHECK (issued_at_ms >= 0),
+  expires_at TEXT NOT NULL,
+  expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms = issued_at_ms + 2000),
+  dispatching_at TEXT,
+  dispatching_at_ms INTEGER,
+  started_at TEXT,
+  started_at_ms INTEGER,
+  terminal_at TEXT,
+  terminal_at_ms INTEGER,
+  terminal_reason TEXT CHECK (
+    terminal_reason IS NULL OR terminal_reason IN (
+      'cleanup_unknown', 'completed', 'expired', 'failed',
+      'revoked_after_start', 'revoked_before_start', 'stale_policy',
+      'stale_revision'
+    )
+  ),
+  process_tree_id TEXT CHECK (
+    process_tree_id IS NULL OR
+    (length(process_tree_id) BETWEEN 1 AND 128 AND
+      process_tree_id NOT GLOB '*[^A-Za-z0-9._:-]*')
+  ),
+  CHECK (
+    (state = 'issued' AND dispatching_at IS NULL AND dispatching_at_ms IS NULL AND
+      started_at IS NULL AND started_at_ms IS NULL AND terminal_at IS NULL AND
+      terminal_at_ms IS NULL AND terminal_reason IS NULL AND
+      process_tree_id IS NULL) OR
+    (state = 'dispatching' AND dispatching_at IS NOT NULL AND
+      dispatching_at_ms IS NOT NULL AND dispatching_at_ms >= issued_at_ms AND
+      started_at IS NULL AND started_at_ms IS NULL AND terminal_at IS NULL AND
+      terminal_at_ms IS NULL AND terminal_reason IS NULL AND
+      process_tree_id IS NULL) OR
+    (state = 'started' AND dispatching_at IS NOT NULL AND
+      dispatching_at_ms IS NOT NULL AND started_at IS NOT NULL AND
+      started_at_ms IS NOT NULL AND started_at_ms >= dispatching_at_ms AND
+      terminal_at IS NULL AND terminal_at_ms IS NULL AND
+      terminal_reason IS NULL AND process_tree_id IS NOT NULL) OR
+    (state = 'terminal' AND terminal_at IS NOT NULL AND
+      terminal_at_ms IS NOT NULL AND terminal_reason IS NOT NULL AND
+      terminal_at_ms >= COALESCE(started_at_ms, dispatching_at_ms, issued_at_ms) AND
+      ((dispatching_at IS NULL AND dispatching_at_ms IS NULL) OR
+        (dispatching_at IS NOT NULL AND dispatching_at_ms IS NOT NULL)) AND
+      ((started_at IS NULL AND started_at_ms IS NULL AND process_tree_id IS NULL) OR
+        (started_at IS NOT NULL AND started_at_ms IS NOT NULL AND
+          process_tree_id IS NOT NULL)))
+  )
+) STRICT;
+
+CREATE INDEX pi_rpc_authorization_permits_unsettled
+ON pi_rpc_authorization_permits (
+  authorization_revision, state, expires_at_ms, sequence
+);
+
+CREATE TABLE pi_rpc_authorization_permit_rollups (
+  authorization_revision INTEGER NOT NULL
+    REFERENCES pi_rpc_authorization_revisions(authorization_revision)
+    ON DELETE RESTRICT,
+  terminal_reason TEXT NOT NULL CHECK (terminal_reason IN (
+    'cleanup_unknown', 'completed', 'expired', 'failed',
+    'revoked_after_start', 'revoked_before_start', 'stale_policy',
+    'stale_revision'
+  )),
+  count INTEGER NOT NULL CHECK (count >= 1),
+  PRIMARY KEY (authorization_revision, terminal_reason)
+) STRICT, WITHOUT ROWID;
+
+CREATE TABLE pi_rpc_authorization_command_replays (
+  command_id TEXT PRIMARY KEY NOT NULL CHECK (
+    length(command_id) BETWEEN 1 AND 128 AND
+    command_id NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  method TEXT NOT NULL CHECK (method IN (
+    'integration.apply.pi-rpc', 'integration.permit.dispatch.pi-rpc',
+    'integration.permit.issue.pi-rpc', 'integration.permit.settle.pi-rpc',
+    'integration.permit.start.pi-rpc', 'integration.plan.pi-rpc',
+    'integration.remove.pi-rpc', 'integration.remove.settle.pi-rpc'
+  )),
+  request_digest TEXT NOT NULL CHECK (
+    length(request_digest) BETWEEN 1 AND 128 AND
+    request_digest NOT GLOB '*[^A-Za-z0-9._:-]*'
+  ),
+  result_json TEXT NOT NULL CHECK (json_valid(result_json)),
+  created_at TEXT NOT NULL
+) STRICT;
+
+CREATE TRIGGER pi_rpc_artifact_manifests_immutable_update
+BEFORE UPDATE ON pi_rpc_artifact_manifests
+BEGIN
+  SELECT RAISE(ABORT, 'Pi RPC artifact manifests are immutable');
+END;
+
+CREATE TRIGGER pi_rpc_artifact_manifests_immutable_delete
+BEFORE DELETE ON pi_rpc_artifact_manifests
+BEGIN
+  SELECT RAISE(ABORT, 'Pi RPC artifact manifests are immutable');
+END;
+
+CREATE TRIGGER pi_rpc_artifact_entries_immutable_update
+BEFORE UPDATE ON pi_rpc_artifact_manifest_entries
+BEGIN
+  SELECT RAISE(ABORT, 'Pi RPC artifact manifest entries are immutable');
+END;
+
+CREATE TRIGGER pi_rpc_artifact_entries_immutable_delete
+BEFORE DELETE ON pi_rpc_artifact_manifest_entries
+BEGIN
+  SELECT RAISE(ABORT, 'Pi RPC artifact manifest entries are immutable');
+END;
+
+CREATE TRIGGER pi_rpc_authorization_plans_immutable_update
+BEFORE UPDATE ON pi_rpc_authorization_plans
+BEGIN
+  SELECT RAISE(ABORT, 'Pi RPC authorization plans are immutable');
+END;
+
+CREATE TRIGGER pi_rpc_authorization_plans_immutable_delete
+BEFORE DELETE ON pi_rpc_authorization_plans
+BEGIN
+  SELECT RAISE(ABORT, 'Pi RPC authorization plans are immutable');
+END;
+`;
+//# sourceMappingURL=migration-thirteen.js.map

package/dist/storage/migration-thirteen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-thirteen.js","sourceRoot":"","sources":["../../src/storage/migration-thirteen.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0XnC,CAAC"}

package/dist/storage/migration-twelve.d.ts

@@ -0,0 +1,2 @@
+export declare const migrationTwelveSql = "\nCREATE TABLE execution_provider_descriptors (\n  provider_id TEXT PRIMARY KEY NOT NULL,\n  provider_kind TEXT NOT NULL CHECK (provider_kind = 'local-host'),\n  deployment_mode TEXT NOT NULL CHECK (deployment_mode = 'agentless'),\n  trust_class TEXT NOT NULL CHECK (trust_class = 'trusted_host'),\n  binding_state TEXT NOT NULL CHECK (binding_state = 'unavailable'),\n  unavailable_reason TEXT NOT NULL CHECK (\n    unavailable_reason = 'local_provider_unbound'\n  ),\n  built_in INTEGER NOT NULL CHECK (built_in = 1),\n  release_qualified INTEGER NOT NULL CHECK (release_qualified = 0),\n  revision INTEGER NOT NULL CHECK (revision = 1)\n) STRICT, WITHOUT ROWID;\n\nCREATE TABLE execution_profiles (\n  profile_id TEXT PRIMARY KEY NOT NULL,\n  name TEXT NOT NULL,\n  provider_id TEXT NOT NULL REFERENCES execution_provider_descriptors(provider_id)\n    ON DELETE RESTRICT,\n  built_in INTEGER NOT NULL CHECK (built_in = 1),\n  revision INTEGER NOT NULL CHECK (revision = 1)\n) STRICT, WITHOUT ROWID;\n\nCREATE TABLE execution_placement_policies (\n  policy_id TEXT PRIMARY KEY NOT NULL,\n  name TEXT NOT NULL,\n  is_node_default INTEGER NOT NULL CHECK (is_node_default IN (0, 1)),\n  built_in INTEGER NOT NULL CHECK (built_in = 1),\n  revision INTEGER NOT NULL CHECK (revision = 1)\n) STRICT, WITHOUT ROWID;\n\nCREATE UNIQUE INDEX execution_placement_policies_one_default\nON execution_placement_policies(is_node_default) WHERE is_node_default = 1;\n\nCREATE TABLE execution_placement_policy_profiles (\n  policy_id TEXT NOT NULL REFERENCES execution_placement_policies(policy_id)\n    ON DELETE RESTRICT,\n  profile_id TEXT NOT NULL REFERENCES execution_profiles(profile_id)\n    ON DELETE RESTRICT,\n  ordinal INTEGER NOT NULL CHECK (ordinal BETWEEN 0 AND 15),\n  PRIMARY KEY (policy_id, profile_id),\n  UNIQUE (policy_id, ordinal)\n) STRICT, WITHOUT ROWID;\n\nCREATE TABLE workspace_execution_bindings (\n  workspace_id TEXT PRIMARY KEY NOT NULL REFERENCES workspaces(workspace_id)\n    ON DELETE RESTRICT,\n  profile_id TEXT REFERENCES execution_profiles(profile_id) ON DELETE RESTRICT,\n  policy_id TEXT REFERENCES execution_placement_policies(policy_id)\n    ON DELETE RESTRICT,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  CHECK (\n    (profile_id IS NOT NULL AND policy_id IS NULL) OR\n    (profile_id IS NULL AND policy_id IS NOT NULL)\n  )\n) STRICT, WITHOUT ROWID;\n\nINSERT INTO execution_provider_descriptors(\n  provider_id, provider_kind, deployment_mode, trust_class, binding_state,\n  unavailable_reason, built_in, release_qualified, revision\n) VALUES (\n  'provider_local_host', 'local-host', 'agentless', 'trusted_host',\n  'unavailable', 'local_provider_unbound', 1, 0, 1\n);\n\nINSERT INTO execution_profiles(\n  profile_id, name, provider_id, built_in, revision\n) VALUES (\n  'execution_profile_local_host', 'Local host', 'provider_local_host', 1, 1\n);\n\nINSERT INTO execution_placement_policies(\n  policy_id, name, is_node_default, built_in, revision\n) VALUES (\n  'placement_policy_local_default', 'Local default', 1, 1, 1\n);\n\nINSERT INTO execution_placement_policy_profiles(policy_id, profile_id, ordinal)\nVALUES (\n  'placement_policy_local_default', 'execution_profile_local_host', 0\n);\n";
+//# sourceMappingURL=migration-twelve.d.ts.map

package/dist/storage/migration-twelve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-twelve.d.ts","sourceRoot":"","sources":["../../src/storage/migration-twelve.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,irGAmF9B,CAAC"}

package/dist/storage/migration-twelve.js

@@ -0,0 +1,85 @@
+export const migrationTwelveSql = `
+CREATE TABLE execution_provider_descriptors (
+  provider_id TEXT PRIMARY KEY NOT NULL,
+  provider_kind TEXT NOT NULL CHECK (provider_kind = 'local-host'),
+  deployment_mode TEXT NOT NULL CHECK (deployment_mode = 'agentless'),
+  trust_class TEXT NOT NULL CHECK (trust_class = 'trusted_host'),
+  binding_state TEXT NOT NULL CHECK (binding_state = 'unavailable'),
+  unavailable_reason TEXT NOT NULL CHECK (
+    unavailable_reason = 'local_provider_unbound'
+  ),
+  built_in INTEGER NOT NULL CHECK (built_in = 1),
+  release_qualified INTEGER NOT NULL CHECK (release_qualified = 0),
+  revision INTEGER NOT NULL CHECK (revision = 1)
+) STRICT, WITHOUT ROWID;
+
+CREATE TABLE execution_profiles (
+  profile_id TEXT PRIMARY KEY NOT NULL,
+  name TEXT NOT NULL,
+  provider_id TEXT NOT NULL REFERENCES execution_provider_descriptors(provider_id)
+    ON DELETE RESTRICT,
+  built_in INTEGER NOT NULL CHECK (built_in = 1),
+  revision INTEGER NOT NULL CHECK (revision = 1)
+) STRICT, WITHOUT ROWID;
+
+CREATE TABLE execution_placement_policies (
+  policy_id TEXT PRIMARY KEY NOT NULL,
+  name TEXT NOT NULL,
+  is_node_default INTEGER NOT NULL CHECK (is_node_default IN (0, 1)),
+  built_in INTEGER NOT NULL CHECK (built_in = 1),
+  revision INTEGER NOT NULL CHECK (revision = 1)
+) STRICT, WITHOUT ROWID;
+
+CREATE UNIQUE INDEX execution_placement_policies_one_default
+ON execution_placement_policies(is_node_default) WHERE is_node_default = 1;
+
+CREATE TABLE execution_placement_policy_profiles (
+  policy_id TEXT NOT NULL REFERENCES execution_placement_policies(policy_id)
+    ON DELETE RESTRICT,
+  profile_id TEXT NOT NULL REFERENCES execution_profiles(profile_id)
+    ON DELETE RESTRICT,
+  ordinal INTEGER NOT NULL CHECK (ordinal BETWEEN 0 AND 15),
+  PRIMARY KEY (policy_id, profile_id),
+  UNIQUE (policy_id, ordinal)
+) STRICT, WITHOUT ROWID;
+
+CREATE TABLE workspace_execution_bindings (
+  workspace_id TEXT PRIMARY KEY NOT NULL REFERENCES workspaces(workspace_id)
+    ON DELETE RESTRICT,
+  profile_id TEXT REFERENCES execution_profiles(profile_id) ON DELETE RESTRICT,
+  policy_id TEXT REFERENCES execution_placement_policies(policy_id)
+    ON DELETE RESTRICT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  CHECK (
+    (profile_id IS NOT NULL AND policy_id IS NULL) OR
+    (profile_id IS NULL AND policy_id IS NOT NULL)
+  )
+) STRICT, WITHOUT ROWID;
+
+INSERT INTO execution_provider_descriptors(
+  provider_id, provider_kind, deployment_mode, trust_class, binding_state,
+  unavailable_reason, built_in, release_qualified, revision
+) VALUES (
+  'provider_local_host', 'local-host', 'agentless', 'trusted_host',
+  'unavailable', 'local_provider_unbound', 1, 0, 1
+);
+
+INSERT INTO execution_profiles(
+  profile_id, name, provider_id, built_in, revision
+) VALUES (
+  'execution_profile_local_host', 'Local host', 'provider_local_host', 1, 1
+);
+
+INSERT INTO execution_placement_policies(
+  policy_id, name, is_node_default, built_in, revision
+) VALUES (
+  'placement_policy_local_default', 'Local default', 1, 1, 1
+);
+
+INSERT INTO execution_placement_policy_profiles(policy_id, profile_id, ordinal)
+VALUES (
+  'placement_policy_local_default', 'execution_profile_local_host', 0
+);
+`;
+//# sourceMappingURL=migration-twelve.js.map

package/dist/storage/migration-twelve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-twelve.js","sourceRoot":"","sources":["../../src/storage/migration-twelve.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmFjC,CAAC"}

package/dist/storage/migrations.d.ts

@@ -0,0 +1,20 @@
+import type { DatabaseSync } from "node:sqlite";
+export declare const LATEST_SCHEMA_VERSION: number;
+export declare const schemaTagForVersion: (version: number) => string;
+export declare const readPragmaNumber: (database: DatabaseSync, sql: string) => number;
+export declare const readPragmaString: (database: DatabaseSync, sql: string) => string;
+export declare const verifyIntegrity: (database: DatabaseSync) => void;
+export declare const configureDatabase: (database: DatabaseSync) => void;
+export declare const readSchemaTag: (database: DatabaseSync) => string | undefined;
+type MigrationBatchInput = {
+    readonly afterMigration?: (version: number) => void;
+    readonly appliedAt: string;
+    readonly database: DatabaseSync;
+    readonly targetVersion: number;
+};
+export declare const applyMigrations: (database: DatabaseSync, targetVersion: number, appliedAt: string) => void;
+export declare const migrationInternals: {
+    readonly applyMigrationBatch: (input: MigrationBatchInput) => void;
+};
+export {};
+//# sourceMappingURL=migrations.d.ts.map

package/dist/storage/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/storage/migrations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAgvBhD,eAAO,MAAM,qBAAqB,QAAoB,CAAC;AAEvD,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,KAAG,MACb,CAAC;AAe1C,eAAO,MAAM,gBAAgB,GAC3B,UAAU,YAAY,EACtB,KAAK,MAAM,KACV,MAMF,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,UAAU,YAAY,EACtB,KAAK,MAAM,KACV,MAMF,CAAC;AAEF,eAAO,MAAM,eAAe,GAAI,UAAU,YAAY,KAAG,IAUxD,CAAC;AAiEF,eAAO,MAAM,iBAAiB,GAAI,UAAU,YAAY,KAAG,IAI1D,CAAC;AAwEF,eAAO,MAAM,aAAa,GAAI,UAAU,YAAY,KAAG,MAAM,GAAG,SAK/D,CAAC;AA2EF,KAAK,mBAAmB,GAAG;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AA8BF,eAAO,MAAM,eAAe,GAC1B,UAAU,YAAY,EACtB,eAAe,MAAM,EACrB,WAAW,MAAM,KAChB,IAEF,CAAC;AAEF,eAAO,MAAM,kBAAkB;0CApCK,mBAAmB,KAAG,IAAI;CAsCpD,CAAC"}