@maudecode/talaria-web 1.18.0 → 1.20.0

package/dist/sessions/state-db-identity.js

@@ -0,0 +1,67 @@
+import { createHash } from 'node:crypto';
+/** The database row identity, including an archive-proven compaction copy's original id. */
+export function stateDbRowId(message) {
+    const id = message._state_db_row_id;
+    return typeof id === 'number' && Number.isFinite(id) ? id : null;
+}
+/** Direct and absorbed durable identities; text and timestamps are never absorption witnesses. */
+export function stateDbIdentityKeys(message, includeUids = true, fallbackGeneration = null, includeAbsorbed = true) {
+    const keys = [];
+    const generation = '_state_db_generation' in message ? message._state_db_generation : fallbackGeneration;
+    const numericKey = (id) => `id:${JSON.stringify([typeof generation === 'string' ? generation : null, id])}`;
+    const id = stateDbRowId(message);
+    if (id !== null)
+        keys.push(numericKey(id));
+    for (const absorbed of includeAbsorbed && Array.isArray(message._absorbed_row_ids) ? message._absorbed_row_ids : []) {
+        if (typeof absorbed === 'number' && Number.isFinite(absorbed))
+            keys.push(numericKey(absorbed));
+    }
+    // A reused UID does not vouch for an authored edit: the archive reader gives that generation its own row id.
+    if (includeUids && message.role !== 'tool') {
+        const own = message._state_db_authored_change === true ? [] : [message.message_uid, message._state_db_message_uid];
+        const absorbed = includeAbsorbed && Array.isArray(message._absorbed_message_uids) ? message._absorbed_message_uids : [];
+        for (const uid of [...own, ...absorbed]) {
+            if (typeof uid === 'string' && uid.length)
+                keys.push(`uid:${uid}`);
+        }
+    }
+    return keys;
+}
+/** A carrier is covered only by its own identity and every constituent it declares; partial overlap is new work. */
+export function stateDbMessageRepresented(message, represented, includeUids = true, generation = null) {
+    const own = stateDbIdentityKeys(message, includeUids, generation, false);
+    return own.some((id) => represented.has(id)) && stateDbIdentityKeys(message, includeUids, generation).every((id) => own.includes(id) || represented.has(id));
+}
+/** Bind newly observed numeric provenance once; even an unknown generation must never be rebound to a new database. */
+export function stampStateDbGeneration(rows, generation) {
+    for (const message of rows) {
+        if (!('_state_db_generation' in message) && stateDbIdentityKeys(message, false).length)
+            message._state_db_generation = generation;
+    }
+}
+/** The append-only merge's role/timestamp/content comparison, shared with archived-source matching. */
+export function stateDbMessageKey(message) {
+    const timestamp = Number(message.timestamp);
+    const content = typeof message.content === 'string' ? message.content : JSON.stringify(message.content ?? null);
+    return `${String(message.role)}\0${String(Number.isFinite(timestamp) ? timestamp : '')}\0${content}`;
+}
+/** Fixed-width replay metadata; UTF-16 preserves JavaScript string equality, including lone surrogates. */
+export function stateDbMessageFingerprint(message) {
+    return createHash('sha256').update(stateDbMessageKey(message), 'utf16le').digest('hex');
+}
+/** The last recorded database generation remains the numeric identity's owner when a marker becomes stale. */
+export function markedStateDbGeneration(s) {
+    if (!s.state_db_seen_boundary)
+        return null;
+    try {
+        const boundary = JSON.parse(s.state_db_seen_boundary);
+        if (!Array.isArray(boundary) || !Array.isArray(boundary[4]))
+            return null;
+        const anchor = boundary[4];
+        return typeof anchor[2] === 'string' ? anchor[2] : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=state-db-identity.js.map

package/dist/sessions/state-db-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-db-identity.js","sourceRoot":"","sources":["../../src/sessions/state-db-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAIxC,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAA;IACnC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAClE,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,WAAW,GAAG,IAAI,EAAE,qBAAoC,IAAI,EAAE,eAAe,GAAG,IAAI;IACxI,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,sBAAsB,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,kBAAkB,CAAA;IACxG,MAAM,UAAU,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAA;IAC3H,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,EAAE,KAAK,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1C,KAAK,MAAM,QAAQ,IAAI,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpH,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;IAChG,CAAC;IACD,6GAA6G;IAC7G,IAAI,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,yBAAyB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;QAClH,MAAM,QAAQ,GAAc,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAA;QAClI,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;YACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,oHAAoH;AACpH,MAAM,UAAU,yBAAyB,CAAC,OAAgB,EAAE,WAA6C,EAAE,WAAW,GAAG,IAAI,EAAE,aAA4B,IAAI;IAC7J,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IACxE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9J,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,sBAAsB,CAAC,IAAe,EAAE,UAAyB;IAC/E,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,sBAAsB,IAAI,OAAO,CAAC,IAAI,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,oBAAoB,GAAG,UAAU,CAAA;IACnI,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAA;IAC/G,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,OAAO,EAAE,CAAA;AACtG,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzF,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,uBAAuB,CAAC,CAA4C;IAClF,IAAI,CAAC,CAAC,CAAC,sBAAsB;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAA;QAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QACxE,MAAM,MAAM,GAAc,QAAQ,CAAC,CAAC,CAAC,CAAA;QACrC,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AACzB,CAAC"}

package/dist/sessions/state-db-worker.js

@@ -1,33 +1,52 @@
 /**
- * The listing worker behind the `state-db.ts` `…Async` readers (TAL-920): runs
- * the synchronous `state.db` reads of the session list and the gateway watcher
- * off the server's event loop, one request at a time.
+ * The worker behind each lane of the `state-db.ts` `…Async` readers (TAL-1189): runs
+ * the synchronous `state.db` reads of the session list, the gateway watcher, the
+ * single-session lookups (TAL-923), and the transcript reads (TAL-1162) off the
+ * server's event loop, one request at a time per lane.
  */
 import { parentPort } from 'node:worker_threads';
 // Source runs (vitest) start this file as TypeScript; map its `.js` imports back to the sources first.
 if (import.meta.url.endsWith('.ts'))
     await import(new URL('../test/ts-worker-hooks.ts', import.meta.url).href);
-const { agentSessionRowsExisting, cheapChangeFingerprint, readImportableAgentSessionRows, stateDbSessionSources } = await import('./state-db.js');
+const { SESSION_READS, agentSessionRowsExisting, cheapChangeFingerprint, readImportableAgentSessionRowBatches, readImportableAgentSessionRows, stateDbSessionSources, stateDbStorage, stateDbWebDiagnosticIds } = await import('./state-db.js');
 parentPort?.on('message', (request) => {
+    if (request.op === 'stop')
+        process.exit(0);
+    const started = process.hrtime.bigint();
     const reply = { id: request.id, logs: [], failures: [] };
+    if (request.testBarrier) {
+        const barrier = new Int32Array(request.testBarrier);
+        Atomics.store(barrier, 0, 1);
+        Atomics.notify(barrier, 0);
+        Atomics.wait(barrier, 1, 0);
+    }
     // The test read delay holds every request here, standing in for a slow state.db.
     if (request.delayMs > 0)
         Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, request.delayMs);
     try {
         if (request.op === 'crash')
             process.exit(1);
+        else if (request.op === 'rowBatches')
+            reply.value = readImportableAgentSessionRowBatches(request.dbPath, request.queries.map((opts) => ({ ...opts, log: (line) => { reply.logs.push(line); } })));
         else if (request.op === 'rows')
             reply.value = readImportableAgentSessionRows(request.dbPath, { ...request.opts, log: (line) => { reply.logs.push(line); } });
         else if (request.op === 'fingerprint')
             reply.value = cheapChangeFingerprint(request.dbPath, (reason, error) => { reply.failures.push([reason, error.message]); });
+        else if (request.op === 'storage')
+            reply.value = stateDbStorage(request.dbPath);
+        else if (request.op === 'webDiagnostic')
+            reply.value = stateDbWebDiagnosticIds(request.dbPath);
         else if (request.op === 'sources')
             reply.value = stateDbSessionSources(request.dbPath, request.ids);
-        else
+        else if (request.op === 'existing')
             reply.value = agentSessionRowsExisting(request.dbPath, request.ids);
+        else if (request.op === 'session')
+            reply.value = SESSION_READS[request.read](...request.args);
     }
     catch (error) {
         reply.error = error.message;
     }
+    reply.timing = { queue_wait_ms: Math.max(0, Number(started - (request.queuedAtNs ?? started)) / 1e6), execution_ms: Number(process.hrtime.bigint() - started) / 1e6 };
     parentPort?.postMessage(reply);
 });
 //# sourceMappingURL=state-db-worker.js.map

package/dist/sessions/state-db-worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"state-db-worker.js","sourceRoot":"","sources":["../../src/sessions/state-db-worker.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,uGAAuG;AACvG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;IAAE,MAAM,MAAM,CAAC,IAAI,GAAG,CAAC,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;AAC9G,MAAM,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;AAEjJ,UAAU,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,OAA6B,EAAE,EAAE;IAC1D,MAAM,KAAK,GAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAC5E,iFAAiF;IACjF,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACtG,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;aACtC,IAAI,OAAO,CAAC,EAAE,KAAK,MAAM;YAAE,KAAK,CAAC,KAAK,GAAG,8BAA8B,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,EAAE,CAAC,CAAA;aACtJ,IAAI,OAAO,CAAC,EAAE,KAAK,aAAa;YAAE,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;aACtK,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;;YAC9F,KAAK,CAAC,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,KAAK,GAAI,KAAe,CAAC,OAAO,CAAA;IACxC,CAAC;IACD,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;AAChC,CAAC,CAAC,CAAA"}
+{"version":3,"file":"state-db-worker.js","sourceRoot":"","sources":["../../src/sessions/state-db-worker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAGhD,uGAAuG;AACvG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;IAAE,MAAM,MAAM,CAAC,IAAI,GAAG,CAAC,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;AAC9G,MAAM,EAAE,aAAa,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,oCAAoC,EAAE,8BAA8B,EAAE,qBAAqB,EAAE,cAAc,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;AAE/O,UAAU,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,OAA6B,EAAE,EAAE;IAC1D,IAAI,OAAO,CAAC,EAAE,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;IACvC,MAAM,KAAK,GAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAC5E,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACnD,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAC5B,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAC1B,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7B,CAAC;IACD,iFAAiF;IACjF,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACtG,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;aACtC,IAAI,OAAO,CAAC,EAAE,KAAK,YAAY;YAAE,KAAK,CAAC,KAAK,GAAG,oCAAoC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;aAC3L,IAAI,OAAO,CAAC,EAAE,KAAK,MAAM;YAAE,KAAK,CAAC,KAAK,GAAG,8BAA8B,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,EAAE,CAAC,CAAA;aACtJ,IAAI,OAAO,CAAC,EAAE,KAAK,aAAa;YAAE,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;aACtK,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;aAC1E,IAAI,OAAO,CAAC,EAAE,KAAK,eAAe;YAAE,KAAK,CAAC,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;aACzF,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;aAC9F,IAAI,OAAO,CAAC,EAAE,KAAK,UAAU;YAAE,KAAK,CAAC,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;aAClG,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAI,aAAa,CAAC,OAAO,CAAC,IAAI,CAAqC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpI,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,KAAK,GAAI,KAAe,CAAC,OAAO,CAAA;IACxC,CAAC;IACD,KAAK,CAAC,MAAM,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,EAAE,CAAA;IACrK,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;AAChC,CAAC,CAAC,CAAA"}

package/dist/sessions/state-db.d.ts

@@ -1,4 +1,4 @@
-import { DatabaseSync } from 'node:sqlite';
+import type { AgentStorage, ExecutionMode } from '@maudecode/talaria-web-contracts';
 export type Dict = Record<string, unknown>;
 export declare const CLI_MIN_UNTITLED_USER_MESSAGE_COUNT = 2;
 /** Python `normalize_agent_session_source`: the durable `{raw_source, session_source, source_label}` contract. */
@@ -12,11 +12,40 @@ export declare function isCliSessionRow(row: Dict): boolean;
 /** Python `is_cli_session_row_visible`. */
 export declare function isCliSessionRowVisible(row: Dict): boolean;
 /** Python `_project_agent_session_rows`: collapse compression chains into one sidebar row pointing at the freshest importable tip. */
-export declare function projectAgentSessionRows(rows: Dict[]): Dict[];
-/** Python `open_state_db_readonly`: read-only URI open with a bounded busy timeout; the caller closes it. */
-export declare function openStateDbReadonly(dbPath: string, busyTimeoutMs?: number): DatabaseSync;
+export declare function projectAgentSessionRows(rows: Dict[], keepEmpty?: boolean): Dict[];
+/** The validated receipt's current physical target, or the original id on old Agents / unproven metadata. */
+export declare function stateDbLocalTarget(dbPath: string, sid: string, opts?: {
+    onRead?: (target: string) => void;
+}): string;
+/** `stateDbLocalTarget` plus whether state.db answered (a missing one does), so only a real answer seeds a routing cache. */
+declare function stateDbLocalTargetRead(dbPath: string, sid: string): {
+    target: string;
+    read: boolean;
+};
+export declare const AGENT_STORAGE_OK: AgentStorage;
+/**
+ * The corrupt-storage reason when `error` is SQLite's `SQLITE_CORRUPT` or `SQLITE_NOTADB` (the Agent's
+ * `hermes_state_health`), else null. The message is matched too, since a listing worker failure crosses the thread
+ * boundary as its message alone.
+ */
+export declare function stateDbCorruptReason(error: unknown): string | null;
+/** The storage state a failed `state.db` read reports: `corrupt` when SQLite says the file is damaged, else `unavailable`. */
+export declare function stateDbReadFailure(error: unknown): AgentStorage;
+/**
+ * TAL-785: whether `state.db` can serve the session list: `corrupt` when SQLite reports the file damaged, `unavailable`
+ * when it cannot be read for another reason (permissions, a lock, an I/O error), `outdated` when a readable database
+ * has no `sessions.source` column. A missing file is `ok`. Full-text index damage is never probed, so it stays `ok`, as
+ * the Agent treats it.
+ */
+export declare function stateDbStorage(dbPath: string): AgentStorage;
 export interface ReadRowsOptions {
     limit?: number | null;
+    /** A direct metadata lookup uses the same projection without the sidebar's recency window. */
+    sessionIds?: readonly string[];
+    /** With `sessionIds`: keep those rows even without a visible turn (TAL-1040's receipt-proven Web diagnostic chats). */
+    keepEmpty?: boolean;
+    /** With `sessionIds`: also read each id's compression chain, so the projection collapses it into the sidebar's row (TAL-923). */
+    compressionChains?: boolean;
     excludeSources?: readonly string[] | null;
     includeSources?: readonly string[] | null;
     log?: (line: string) => void;
@@ -32,25 +61,52 @@ export declare function setStateDbReadDelayForTests(ms: number): void;
  * `idx_messages_session` exactly as Python does when its heal fails.
  */
 export declare function readImportableAgentSessionRows(dbPath: string, opts?: ReadRowsOptions): Dict[];
+/** Per-query failures preserve healthy sidebar kinds while still reporting damaged storage. */
+export interface AgentSessionRowBatches {
+    rows: (Dict[] | Error)[];
+    storage: AgentStorage;
+}
+/** All listing windows share one read snapshot, schema, validated local lineages and ownership lookup. */
+export declare function readImportableAgentSessionRowBatches(dbPath: string, queries: ReadRowsOptions[]): AgentSessionRowBatches;
 /** Python `agent_session_rows_existing`: batch existence probe; assumes present on any failure so nothing is pruned by mistake. */
 export declare function agentSessionRowsExisting(dbPath: string, sessionIds: Iterable<string>): Set<string>;
+/** Read-only admission lookup, built once per session listing; older Agent stores have none. */
+export declare function stateDbCronJobIds(dbPath: string): Map<string, string>;
+/** Shared job identity rule for completion links and sidebar titles, including legacy job ids with underscores. */
+export declare function cronSessionJobId(sid: string, jobIds: Iterable<string>, admissions: ReadonlyMap<string, string>): string | null;
 export interface CronSessionInfo {
     session_id: string;
     message_count: number | null;
 }
 /**
- * Python `_latest_cron_session_info_for_jobs`: the newest-started cron session for each completed job. A session id
- * belongs to the job with the longest matching `cron_{job_id}_` prefix, so `a` never claims `a_b`'s sessions. A
+ * Python `_latest_cron_session_info_for_jobs`: the newest-started cron session for each completed job, excluding
+ * non-terminal gateway admissions so the next run cannot steal the completion link. A session id
+ * belongs to its scheduler admission's job or its legacy timestamp identity. Non-timestamp ids retain the longest
+ * matching job prefix, so `a` never claims a known `a_b`'s sessions. A
  * missing, locked, or unrecognized state.db answers an empty map; callers send no enrichment.
  */
 export declare function latestCronSessionInfo(dbPath: string, jobIds: Iterable<string>, completedIds: Iterable<string>): Map<string, CronSessionInfo>;
-/**
- * TAL-358: the `sessions.source` owner of each present id, in one chunked read. A missing state.db (or one without a
- * `source` column) owns nothing; an unreadable one answers null, so callers fail closed on an unknown owner.
- */
-export declare function stateDbSessionSources(dbPath: string, sessionIds: Iterable<string>): Map<string, string> | null;
+/** A source label remains display metadata; canonical receipts and ledgers independently retain write ownership. */
+export declare const CANONICAL_READ_ONLY_REASON = "This session is owned by the Agent gateway and is display-only in Talaria.";
+export declare const OWNERSHIP_UNAVAILABLE_REASON = "Agent session ownership could not be verified. The session is read-only until storage is readable.";
+export declare const RETIRED_READ_ONLY_REASON = "The Agent has retired this session identity. Open or import a new conversation to continue.";
+/** `execution_mode` (TAL-1040) is the frozen bypass in the owner's creation receipt; absent without a readable receipt. */
+export type StateDbSessionSource = string | {
+    source: string;
+    canonical: true;
+    reason?: string;
+    execution_mode?: ExecutionMode;
+};
+/** TAL-1040: the request-id prefix Talaria mints for the diagnostic chats it asks an owner to create; its receipt keeps it. */
+export declare const WEB_DIAGNOSTIC_REQUEST_PREFIX = "talaria-web:";
+/** Owner ids whose creation receipt carries Talaria's request prefix: chats Web started, shown whatever the external-session setting. */
+export declare function stateDbWebDiagnosticIds(dbPath: string): string[];
+/** Batched source/ownership probe. An unreadable authority answers null so callers fail closed. */
+export declare function stateDbSessionSources(dbPath: string, sessionIds: Iterable<string>): Map<string, StateDbSessionSource> | null;
 /** Python `state_db_has_session`: true only when `sid` is a row of the sessions table; a missing or unreadable db is false. */
 export declare function stateDbHasSession(dbPath: string, sid: string): boolean;
+/** True when a session has a live message; never materializes its transcript or compaction archive. */
+export declare function stateDbSessionHasMessages(dbPath: string, sid: string): boolean;
 /**
  * Python `_cheap_change_fingerprint`: `MAX(rowid)` of both tables, the file
  * stamps of the DB and its WAL, and the SQLite change counter (header bytes
@@ -58,23 +114,38 @@ export declare function stateDbHasSession(dbPath: string, sid: string): boolean;
  */
 export declare function cheapChangeFingerprint(dbPath: string, onError?: (reason: string, error: unknown) => void): string | null;
 type ListingCall = {
+    op: 'rowBatches';
+    dbPath: string;
+    queries: Omit<ReadRowsOptions, 'log'>[];
+} | {
     op: 'rows';
     dbPath: string;
     opts: Omit<ReadRowsOptions, 'log'>;
 } | {
     op: 'fingerprint';
     dbPath: string;
+} | {
+    op: 'storage' | 'webDiagnostic';
+    dbPath: string;
 } | {
     op: 'sources' | 'existing';
     dbPath: string;
     ids: string[];
 } | {
-    op: 'crash';
+    [K in SessionReadName]: {
+        op: 'session';
+        read: K;
+        args: Parameters<typeof SESSION_READS[K]>;
+    };
+}[SessionReadName] | {
+    op: 'crash' | 'stop';
 };
-/** A request to the listing worker; `delayMs` carries the test read delay across the thread boundary. */
+/** A request to a state.db worker; `delayMs` carries the test read delay across the thread boundary. */
 export type StateDbWorkerRequest = ListingCall & {
     id: number;
     delayMs: number;
+    queuedAtNs?: bigint;
+    testBarrier?: SharedArrayBuffer;
 };
 /** The call's result or error message, plus the log lines and `[reason, message]` failures it reported in the worker. */
 export interface StateDbWorkerReply {
@@ -83,23 +154,69 @@ export interface StateDbWorkerReply {
     error?: string;
     logs: string[];
     failures: [string, string][];
+    timing?: {
+        queue_wait_ms: number;
+        execution_ms: number;
+    };
 }
+declare const STATE_DB_WORKER_LANES: readonly ["listing", "authority", "session"];
+type StateDbWorkerLane = typeof STATE_DB_WORKER_LANES[number];
+/** Keep a sidebar phase's nested reads on its lane without changing interactive callers' defaults. */
+export declare function withStateDbListingReads<T>(read: () => T): T;
 /** `readImportableAgentSessionRows` on the listing worker, so a slow `state.db` never blocks the event loop. Rejects when the worker fails. */
 export declare function readImportableAgentSessionRowsAsync(dbPath: string, opts?: ReadRowsOptions): Promise<Dict[]>;
+/** One worker crossing for all sidebar windows and their storage health. */
+export declare function readImportableAgentSessionRowBatchesAsync(dbPath: string, queries: ReadRowsOptions[]): Promise<AgentSessionRowBatches>;
 /** `cheapChangeFingerprint` on the listing worker; a worker failure reports as a failed change check. */
 export declare function cheapChangeFingerprintAsync(dbPath: string, onError?: (reason: string, error: unknown) => void): Promise<string | null>;
-/** `stateDbSessionSources` on the listing worker; a worker failure is an unreadable state.db (null), so owners stay locked. */
-export declare function stateDbSessionSourcesAsync(dbPath: string, sessionIds: Iterable<string>): Promise<Map<string, string> | null>;
-/** `agentSessionRowsExisting` on the listing worker; a worker failure assumes every row present, so nothing is pruned. */
+/** `stateDbStorage` on the listing worker; a worker failure is `unavailable`. */
+export declare function stateDbStorageAsync(dbPath: string): Promise<AgentStorage>;
+/** `stateDbSessionSources` on the authority worker; a worker failure is an unreadable state.db (null), so owners stay locked. Without a state.db it answers here, opening nothing. */
+export declare function stateDbSessionSourcesAsync(dbPath: string, sessionIds: Iterable<string>): Promise<Map<string, StateDbSessionSource> | null>;
+/** `stateDbWebDiagnosticIds` on the listing worker; a failed read lists none, so the setting still governs every other row. */
+export declare function stateDbWebDiagnosticIdsAsync(dbPath: string): Promise<string[]>;
+/** `agentSessionRowsExisting` on the authority worker; a worker failure assumes every row present, so nothing is pruned. */
 export declare function agentSessionRowsExistingAsync(dbPath: string, sessionIds: Iterable<string>): Promise<Set<string>>;
-/** Test hook: the listing worker exits abruptly while this call is in flight. */
-export declare function crashStateDbWorkerForTests(): Promise<unknown>;
-/** Stop the listing worker (server shutdown). Calls in flight reject; a later call starts a new worker. */
+/**
+ * TAL-923: the single-session readers behind chat start, session detail, and the mutation gates, run on the worker.
+ * TAL-1162: and the transcript reads behind turn history, settlement, and the detail's page tail.
+ * TAL-1256: shared cron admission identities and completion links use this same dispatcher.
+ */
+export declare const SESSION_READS: {
+    stateDbHasSession: typeof stateDbHasSession;
+    stateDbSessionHasMessages: typeof stateDbSessionHasMessages;
+    insightsSessionRows: typeof insightsSessionRows;
+    countConversationRounds: typeof countConversationRounds;
+    stateDbTailToolContent: typeof stateDbTailToolContent;
+    stateDbLineageReport: typeof stateDbLineageReport;
+    stateDbCronJobIds: typeof stateDbCronJobIds;
+    latestCronSessionInfo: typeof latestCronSessionInfo;
+    stateDbLocalTargetRead: typeof stateDbLocalTargetRead;
+    stateDbSessionRow: typeof stateDbSessionRow;
+    stateDbSessionMessages: typeof stateDbSessionMessages;
+    stateDbCompressionLineage: typeof stateDbCompressionLineage;
+    stateDbSessionRead: typeof stateDbSessionRead;
+    stateDbSessionTailRead: typeof stateDbSessionTailRead;
+    stateDbSettlementRead: typeof stateDbSettlementRead;
+};
+type SessionReadName = keyof typeof SESSION_READS;
+/**
+ * A `SESSION_READS` reader on its authority or transcript lane, so expensive reads cannot hold up authority. Each reader
+ * already answers a failed read with `fallback`'s value; a worker failure answers it too. Without a state.db the reader
+ * answers here, as it opens nothing then.
+ */
+export declare function stateDbSessionReadAsync<K extends SessionReadName>(fallback: ReturnType<typeof SESSION_READS[K]>, read: K, ...args: Parameters<typeof SESSION_READS[K]>): Promise<ReturnType<typeof SESSION_READS[K]>>;
+/** Test hook: crash one lane, or all when omitted, while its calls are in flight. */
+export declare function crashStateDbWorkerForTests(lane?: StateDbWorkerLane): Promise<unknown>;
+/** Stop every worker (server shutdown). Calls in flight reject; later calls start fresh workers. */
 export declare function stopStateDbWorker(): Promise<void>;
+/** `reason`: why a failed read failed (TAL-785). */
 export interface StateDbRead {
     rows: Dict[];
     idCapable: boolean;
     ok: boolean;
+    reason: string | null;
+    generation: string | null;
 }
 export declare function stateDbSessionMessages(dbPath: string, sid: string, opts?: {
     stitch?: boolean;
@@ -112,12 +229,31 @@ export declare function stateDbSessionRead(dbPath: string, sid: string, opts?: {
     stitch?: boolean;
     lineage?: string[] | null;
 }): StateDbRead;
+/** What a turn's settlement reads: the transcript, the compression lineage now, and, when that moved, the transcript it names. */
+export interface StateDbSettlementRead extends StateDbRead {
+    lineage: string[];
+    rotated: StateDbRead | null;
+}
+/**
+ * A settlement's reads in one request: the transcript under `recorded` (the session's `state_db_lineage`), the lineage
+ * the Agent's compression rotations give it now, and, when that differs from `recorded`, the transcript under it.
+ */
+export declare function stateDbSettlementRead(dbPath: string, sid: string, recorded: string[] | null): StateDbSettlementRead;
+/** The same snapshot and provenance projection, restricted to physical rows past the seen marker. */
+export declare function stateDbSessionTailRead(dbPath: string, sid: string, afterId: number, opts?: {
+    lineage?: string[] | null;
+    unidentified?: readonly ReadonlyMap<string, number>[];
+}): StateDbRead & {
+    anchor?: Dict;
+    requiresFullRead?: boolean;
+};
 /**
  * TAL-529: `sid` and each compression continuation the Agent rotated it to, down to the live tip (Python
- * `resolve_live_compression_tip`). The walk stops at the last unambiguous row: no continuation, several, a cycle, or 20
- * hops. A missing or unreadable database is `[sid]`.
+ * `resolve_live_compression_tip`). The walk stops at the last unambiguous row: no continuation, several, a cycle, or
+ * `COMPRESSION_CHAIN_CAP` hops. A missing or unreadable database is `[sid]`.
  */
 export declare function stateDbCompressionLineage(dbPath: string, sid: string): string[];
+export declare const emptyLineageReport: (sid: string) => Dict;
 /**
  * Python `read_session_lineage_report`: a read-only report of `sid`'s compression lineage. The walk follows up to
  * `maxHops` continuation parents (the tip first, the root last), then lists each segment's non-continuation children,