@maudecode/talaria-web 1.18.0 → 1.19.0

package/dist/sessions/state-db-identity.js

@@ -0,0 +1,67 @@
+import { createHash } from 'node:crypto';
+/** The database row identity, including an archive-proven compaction copy's original id. */
+export function stateDbRowId(message) {
+    const id = message._state_db_row_id;
+    return typeof id === 'number' && Number.isFinite(id) ? id : null;
+}
+/** Direct and absorbed durable identities; text and timestamps are never absorption witnesses. */
+export function stateDbIdentityKeys(message, includeUids = true, fallbackGeneration = null, includeAbsorbed = true) {
+    const keys = [];
+    const generation = '_state_db_generation' in message ? message._state_db_generation : fallbackGeneration;
+    const numericKey = (id) => `id:${JSON.stringify([typeof generation === 'string' ? generation : null, id])}`;
+    const id = stateDbRowId(message);
+    if (id !== null)
+        keys.push(numericKey(id));
+    for (const absorbed of includeAbsorbed && Array.isArray(message._absorbed_row_ids) ? message._absorbed_row_ids : []) {
+        if (typeof absorbed === 'number' && Number.isFinite(absorbed))
+            keys.push(numericKey(absorbed));
+    }
+    // A reused UID does not vouch for an authored edit: the archive reader gives that generation its own row id.
+    if (includeUids && message.role !== 'tool') {
+        const own = message._state_db_authored_change === true ? [] : [message.message_uid, message._state_db_message_uid];
+        const absorbed = includeAbsorbed && Array.isArray(message._absorbed_message_uids) ? message._absorbed_message_uids : [];
+        for (const uid of [...own, ...absorbed]) {
+            if (typeof uid === 'string' && uid.length)
+                keys.push(`uid:${uid}`);
+        }
+    }
+    return keys;
+}
+/** A carrier is covered only by its own identity and every constituent it declares; partial overlap is new work. */
+export function stateDbMessageRepresented(message, represented, includeUids = true, generation = null) {
+    const own = stateDbIdentityKeys(message, includeUids, generation, false);
+    return own.some((id) => represented.has(id)) && stateDbIdentityKeys(message, includeUids, generation).every((id) => own.includes(id) || represented.has(id));
+}
+/** Bind newly observed numeric provenance once; even an unknown generation must never be rebound to a new database. */
+export function stampStateDbGeneration(rows, generation) {
+    for (const message of rows) {
+        if (!('_state_db_generation' in message) && stateDbIdentityKeys(message, false).length)
+            message._state_db_generation = generation;
+    }
+}
+/** The append-only merge's role/timestamp/content comparison, shared with archived-source matching. */
+export function stateDbMessageKey(message) {
+    const timestamp = Number(message.timestamp);
+    const content = typeof message.content === 'string' ? message.content : JSON.stringify(message.content ?? null);
+    return `${String(message.role)}\0${String(Number.isFinite(timestamp) ? timestamp : '')}\0${content}`;
+}
+/** Fixed-width replay metadata; UTF-16 preserves JavaScript string equality, including lone surrogates. */
+export function stateDbMessageFingerprint(message) {
+    return createHash('sha256').update(stateDbMessageKey(message), 'utf16le').digest('hex');
+}
+/** The last recorded database generation remains the numeric identity's owner when a marker becomes stale. */
+export function markedStateDbGeneration(s) {
+    if (!s.state_db_seen_boundary)
+        return null;
+    try {
+        const boundary = JSON.parse(s.state_db_seen_boundary);
+        if (!Array.isArray(boundary) || !Array.isArray(boundary[4]))
+            return null;
+        const anchor = boundary[4];
+        return typeof anchor[2] === 'string' ? anchor[2] : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=state-db-identity.js.map

package/dist/sessions/state-db-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-db-identity.js","sourceRoot":"","sources":["../../src/sessions/state-db-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAIxC,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAA;IACnC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAClE,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,WAAW,GAAG,IAAI,EAAE,qBAAoC,IAAI,EAAE,eAAe,GAAG,IAAI;IACxI,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,sBAAsB,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,kBAAkB,CAAA;IACxG,MAAM,UAAU,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAA;IAC3H,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,EAAE,KAAK,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1C,KAAK,MAAM,QAAQ,IAAI,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpH,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;IAChG,CAAC;IACD,6GAA6G;IAC7G,IAAI,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,yBAAyB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;QAClH,MAAM,QAAQ,GAAc,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAA;QAClI,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;YACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,oHAAoH;AACpH,MAAM,UAAU,yBAAyB,CAAC,OAAgB,EAAE,WAA6C,EAAE,WAAW,GAAG,IAAI,EAAE,aAA4B,IAAI;IAC7J,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IACxE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9J,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,sBAAsB,CAAC,IAAe,EAAE,UAAyB;IAC/E,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,sBAAsB,IAAI,OAAO,CAAC,IAAI,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,oBAAoB,GAAG,UAAU,CAAA;IACnI,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAA;IAC/G,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,OAAO,EAAE,CAAA;AACtG,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzF,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,uBAAuB,CAAC,CAA4C;IAClF,IAAI,CAAC,CAAC,CAAC,sBAAsB;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAA;QAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QACxE,MAAM,MAAM,GAAc,QAAQ,CAAC,CAAC,CAAC,CAAA;QACrC,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AACzB,CAAC"}

package/dist/sessions/state-db-worker.js

@@ -7,7 +7,7 @@ import { parentPort } from 'node:worker_threads';
 // Source runs (vitest) start this file as TypeScript; map its `.js` imports back to the sources first.
 if (import.meta.url.endsWith('.ts'))
     await import(new URL('../test/ts-worker-hooks.ts', import.meta.url).href);
-const { agentSessionRowsExisting, cheapChangeFingerprint, readImportableAgentSessionRows, stateDbSessionSources } = await import('./state-db.js');
+const { agentSessionRowsExisting, cheapChangeFingerprint, readImportableAgentSessionRows, stateDbSessionSources, stateDbStorage } = await import('./state-db.js');
 parentPort?.on('message', (request) => {
     const reply = { id: request.id, logs: [], failures: [] };
     // The test read delay holds every request here, standing in for a slow state.db.
@@ -20,6 +20,8 @@ parentPort?.on('message', (request) => {
             reply.value = readImportableAgentSessionRows(request.dbPath, { ...request.opts, log: (line) => { reply.logs.push(line); } });
         else if (request.op === 'fingerprint')
             reply.value = cheapChangeFingerprint(request.dbPath, (reason, error) => { reply.failures.push([reason, error.message]); });
+        else if (request.op === 'storage')
+            reply.value = stateDbStorage(request.dbPath);
         else if (request.op === 'sources')
             reply.value = stateDbSessionSources(request.dbPath, request.ids);
         else

package/dist/sessions/state-db-worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"state-db-worker.js","sourceRoot":"","sources":["../../src/sessions/state-db-worker.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,uGAAuG;AACvG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;IAAE,MAAM,MAAM,CAAC,IAAI,GAAG,CAAC,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;AAC9G,MAAM,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;AAEjJ,UAAU,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,OAA6B,EAAE,EAAE;IAC1D,MAAM,KAAK,GAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAC5E,iFAAiF;IACjF,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACtG,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;aACtC,IAAI,OAAO,CAAC,EAAE,KAAK,MAAM;YAAE,KAAK,CAAC,KAAK,GAAG,8BAA8B,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,EAAE,CAAC,CAAA;aACtJ,IAAI,OAAO,CAAC,EAAE,KAAK,aAAa;YAAE,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;aACtK,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;;YAC9F,KAAK,CAAC,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,KAAK,GAAI,KAAe,CAAC,OAAO,CAAA;IACxC,CAAC;IACD,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;AAChC,CAAC,CAAC,CAAA"}
+{"version":3,"file":"state-db-worker.js","sourceRoot":"","sources":["../../src/sessions/state-db-worker.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,uGAAuG;AACvG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;IAAE,MAAM,MAAM,CAAC,IAAI,GAAG,CAAC,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;AAC9G,MAAM,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;AAEjK,UAAU,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,OAA6B,EAAE,EAAE;IAC1D,MAAM,KAAK,GAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAC5E,iFAAiF;IACjF,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACtG,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;aACtC,IAAI,OAAO,CAAC,EAAE,KAAK,MAAM;YAAE,KAAK,CAAC,KAAK,GAAG,8BAA8B,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,EAAE,CAAC,CAAA;aACtJ,IAAI,OAAO,CAAC,EAAE,KAAK,aAAa;YAAE,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;aACtK,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;aAC1E,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;;YAC9F,KAAK,CAAC,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,KAAK,GAAI,KAAe,CAAC,OAAO,CAAA;IACxC,CAAC;IACD,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;AAChC,CAAC,CAAC,CAAA"}

package/dist/sessions/state-db.d.ts

@@ -1,4 +1,5 @@
 import { DatabaseSync } from 'node:sqlite';
+import type { AgentStorage } from '@maudecode/talaria-web-contracts';
 export type Dict = Record<string, unknown>;
 export declare const CLI_MIN_UNTITLED_USER_MESSAGE_COUNT = 2;
 /** Python `normalize_agent_session_source`: the durable `{raw_source, session_source, source_label}` contract. */
@@ -15,8 +16,30 @@ export declare function isCliSessionRowVisible(row: Dict): boolean;
 export declare function projectAgentSessionRows(rows: Dict[]): Dict[];
 /** Python `open_state_db_readonly`: read-only URI open with a bounded busy timeout; the caller closes it. */
 export declare function openStateDbReadonly(dbPath: string, busyTimeoutMs?: number): DatabaseSync;
+/** The validated receipt's current physical target, or the original id on old Agents / unproven metadata. */
+export declare function stateDbLocalTarget(dbPath: string, sid: string, opts?: {
+    onRead?: (target: string) => void;
+}): string;
+export declare const AGENT_STORAGE_OK: AgentStorage;
+/**
+ * The corrupt-storage reason when `error` is SQLite's `SQLITE_CORRUPT` or `SQLITE_NOTADB` (the Agent's
+ * `hermes_state_health`), else null. The message is matched too, since a listing worker failure crosses the thread
+ * boundary as its message alone.
+ */
+export declare function stateDbCorruptReason(error: unknown): string | null;
+/** The storage state a failed `state.db` read reports: `corrupt` when SQLite says the file is damaged, else `unavailable`. */
+export declare function stateDbReadFailure(error: unknown): AgentStorage;
+/**
+ * TAL-785: whether `state.db` can serve the session list: `corrupt` when SQLite reports the file damaged, `unavailable`
+ * when it cannot be read for another reason (permissions, a lock, an I/O error), `outdated` when a readable database
+ * has no `sessions.source` column. A missing file is `ok`. Full-text index damage is never probed, so it stays `ok`, as
+ * the Agent treats it.
+ */
+export declare function stateDbStorage(dbPath: string): AgentStorage;
 export interface ReadRowsOptions {
     limit?: number | null;
+    /** A direct metadata lookup uses the same projection without the sidebar's recency window. */
+    sessionIds?: readonly string[];
     excludeSources?: readonly string[] | null;
     includeSources?: readonly string[] | null;
     log?: (line: string) => void;
@@ -44,11 +67,17 @@ export interface CronSessionInfo {
  * missing, locked, or unrecognized state.db answers an empty map; callers send no enrichment.
  */
 export declare function latestCronSessionInfo(dbPath: string, jobIds: Iterable<string>, completedIds: Iterable<string>): Map<string, CronSessionInfo>;
-/**
- * TAL-358: the `sessions.source` owner of each present id, in one chunked read. A missing state.db (or one without a
- * `source` column) owns nothing; an unreadable one answers null, so callers fail closed on an unknown owner.
- */
-export declare function stateDbSessionSources(dbPath: string, sessionIds: Iterable<string>): Map<string, string> | null;
+/** A source label remains display metadata; canonical receipts and ledgers independently retain write ownership. */
+export declare const CANONICAL_READ_ONLY_REASON = "This session is owned by the Agent gateway and is display-only in Talaria.";
+export declare const OWNERSHIP_UNAVAILABLE_REASON = "Agent session ownership could not be verified. The session is read-only until storage is readable.";
+export declare const RETIRED_READ_ONLY_REASON = "The Agent has retired this session identity. Open or import a new conversation to continue.";
+export type StateDbSessionSource = string | {
+    source: string;
+    canonical: true;
+    reason?: string;
+};
+/** Batched source/ownership probe. An unreadable authority answers null so callers fail closed. */
+export declare function stateDbSessionSources(dbPath: string, sessionIds: Iterable<string>): Map<string, StateDbSessionSource> | null;
 /** Python `state_db_has_session`: true only when `sid` is a row of the sessions table; a missing or unreadable db is false. */
 export declare function stateDbHasSession(dbPath: string, sid: string): boolean;
 /**
@@ -64,6 +93,9 @@ type ListingCall = {
 } | {
     op: 'fingerprint';
     dbPath: string;
+} | {
+    op: 'storage';
+    dbPath: string;
 } | {
     op: 'sources' | 'existing';
     dbPath: string;
@@ -88,18 +120,23 @@ export interface StateDbWorkerReply {
 export declare function readImportableAgentSessionRowsAsync(dbPath: string, opts?: ReadRowsOptions): Promise<Dict[]>;
 /** `cheapChangeFingerprint` on the listing worker; a worker failure reports as a failed change check. */
 export declare function cheapChangeFingerprintAsync(dbPath: string, onError?: (reason: string, error: unknown) => void): Promise<string | null>;
+/** `stateDbStorage` on the listing worker; a worker failure is `unavailable`. */
+export declare function stateDbStorageAsync(dbPath: string): Promise<AgentStorage>;
 /** `stateDbSessionSources` on the listing worker; a worker failure is an unreadable state.db (null), so owners stay locked. */
-export declare function stateDbSessionSourcesAsync(dbPath: string, sessionIds: Iterable<string>): Promise<Map<string, string> | null>;
+export declare function stateDbSessionSourcesAsync(dbPath: string, sessionIds: Iterable<string>): Promise<Map<string, StateDbSessionSource> | null>;
 /** `agentSessionRowsExisting` on the listing worker; a worker failure assumes every row present, so nothing is pruned. */
 export declare function agentSessionRowsExistingAsync(dbPath: string, sessionIds: Iterable<string>): Promise<Set<string>>;
 /** Test hook: the listing worker exits abruptly while this call is in flight. */
 export declare function crashStateDbWorkerForTests(): Promise<unknown>;
 /** Stop the listing worker (server shutdown). Calls in flight reject; a later call starts a new worker. */
 export declare function stopStateDbWorker(): Promise<void>;
+/** `reason`: why a failed read failed (TAL-785). */
 export interface StateDbRead {
     rows: Dict[];
     idCapable: boolean;
     ok: boolean;
+    reason: string | null;
+    generation: string | null;
 }
 export declare function stateDbSessionMessages(dbPath: string, sid: string, opts?: {
     stitch?: boolean;
@@ -112,10 +149,18 @@ export declare function stateDbSessionRead(dbPath: string, sid: string, opts?: {
     stitch?: boolean;
     lineage?: string[] | null;
 }): StateDbRead;
+/** The same snapshot and provenance projection, restricted to physical rows past the seen marker. */
+export declare function stateDbSessionTailRead(dbPath: string, sid: string, afterId: number, opts?: {
+    lineage?: string[] | null;
+    unidentified?: readonly ReadonlyMap<string, number>[];
+}): StateDbRead & {
+    anchor?: Dict;
+    requiresFullRead?: boolean;
+};
 /**
  * TAL-529: `sid` and each compression continuation the Agent rotated it to, down to the live tip (Python
- * `resolve_live_compression_tip`). The walk stops at the last unambiguous row: no continuation, several, a cycle, or 20
- * hops. A missing or unreadable database is `[sid]`.
+ * `resolve_live_compression_tip`). The walk stops at the last unambiguous row: no continuation, several, a cycle, or
+ * `COMPRESSION_CHAIN_CAP` hops. A missing or unreadable database is `[sid]`.
  */
 export declare function stateDbCompressionLineage(dbPath: string, sid: string): string[];
 /**