@namzu/sdk 27.0.0 → 28.0.0

package/dist/store/feedback/disk.js

@@ -0,0 +1,141 @@
+import { mkdir, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { DiskRecordStore } from '../kv/record-store.js';
+import { readRunEventsIn } from '../run/disk.js';
+import { defineSchema, stamp } from '../schema.js';
+import { StaleFeedbackError, UnknownMessageError, } from './types.js';
+const SCHEMA = defineSchema({ kind: 'feedback-store', current: 1, migrations: {} });
+const records = new DiskRecordStore(SCHEMA);
+/** Filesystem-safe file name for one rated message. */
+function fileName(messageId) {
+    // Message ids are `msg_` + an alphabet with no separators, so this is a
+    // pass-through today. Written as a function anyway: the day an id gains
+    // a `/` is the day this silently starts writing outside its directory.
+    return `${messageId.replace(/[^a-zA-Z0-9_-]/g, '_')}.json`;
+}
+/**
+ * Does this run's transcript mention this message?
+ *
+ * Reads the run's own event log, which is the only record of what a run
+ * actually produced. A `messageId` that appears nowhere in it is either a
+ * typo or a fabrication, and both are worth refusing — a feedback row
+ * pointing at a message nobody can find is unreviewable and
+ * indistinguishable from a real one.
+ */
+export function runEventMessageCheck(runsDir) {
+    return async (runId, messageId) => {
+        const events = await readRunEventsIn(join(runsDir, runId));
+        return events.some((event) => event.messageId === messageId);
+    };
+}
+export class DiskMessageFeedbackStore {
+    now;
+    rootDir;
+    messageExists;
+    constructor(config, messageExists, now = Date.now) {
+        this.now = now;
+        this.rootDir = config.rootDir;
+        this.messageExists =
+            messageExists ??
+                // No `runsDir` means nothing to validate against. Accepting
+                // everything would be the quiet degradation this repo's rule
+                // forbids, so a store built that way refuses every write and names
+                // the missing configuration.
+                (config.runsDir
+                    ? runEventMessageCheck(config.runsDir)
+                    : async (runId, messageId) => {
+                        throw new UnknownMessageError({ runId, messageId });
+                    });
+    }
+    runDir(runId) {
+        return join(this.rootDir, runId);
+    }
+    async putMessageFeedback(input) {
+        // Validated BEFORE the version check, so a rating aimed at a message
+        // that does not exist is refused for what it is rather than reported
+        // as a version conflict.
+        if (!(await this.messageExists(input.runId, input.messageId))) {
+            throw new UnknownMessageError({ runId: input.runId, messageId: input.messageId });
+        }
+        const dir = this.runDir(input.runId);
+        const path = join(dir, fileName(input.messageId));
+        const existing = await records.read(path);
+        const actualVersion = existing?.ownerVersion ?? 0;
+        if (input.expectedVersion !== actualVersion) {
+            throw new StaleFeedbackError({
+                runId: input.runId,
+                messageId: input.messageId,
+                expectedVersion: input.expectedVersion,
+                actualVersion,
+            });
+        }
+        const timestamp = this.now();
+        const record = {
+            runId: input.runId,
+            messageId: input.messageId,
+            rating: input.rating,
+            ...(input.note !== undefined ? { note: input.note } : {}),
+            ownerVersion: actualVersion + 1,
+            createdAt: existing?.createdAt ?? timestamp,
+            updatedAt: timestamp,
+        };
+        await mkdir(dir, { recursive: true });
+        if (actualVersion === 0) {
+            // EXCLUSIVE create for the first write, and this is the whole
+            // compare-and-set on a filesystem. A read-then-write is not
+            // atomic: two raters who each read "no feedback yet" both see
+            // version 0, both pass the check above, and both write — the
+            // second silently discarding the first. `wx` makes the kernel
+            // the arbiter, so exactly one of them lands.
+            //
+            // Found by the conformance suite on the day it was written, with
+            // the in-memory store passing the same rule for free because
+            // nothing awaits between its read and its write.
+            try {
+                await writeFile(path, `${JSON.stringify(stamp(SCHEMA, record), null, 2)}\n`, {
+                    encoding: 'utf-8',
+                    flag: 'wx',
+                });
+            }
+            catch (err) {
+                if (err.code !== 'EEXIST')
+                    throw err;
+                // Somebody else got there between the read and here. Report
+                // what is actually stored now, rather than the 0 we read.
+                const winner = await records.read(path);
+                throw new StaleFeedbackError({
+                    runId: input.runId,
+                    messageId: input.messageId,
+                    expectedVersion: input.expectedVersion,
+                    actualVersion: winner?.ownerVersion ?? 1,
+                });
+            }
+            return record;
+        }
+        // An UPDATE is written through the ordinary atomic replace. Two
+        // concurrent updates from separate PROCESSES can still interleave
+        // between the read above and this write — the file already exists, so
+        // there is no exclusive-create to arbitrate, and feedback carries no
+        // fencing token the way a run claim does. Said plainly rather than
+        // implied by the `expectedVersion` parameter, which reads like a
+        // stronger guarantee than a filesystem gives without one.
+        await records.write(path, record);
+        return record;
+    }
+    async listMessageFeedback(query) {
+        const dir = this.runDir(query.runId);
+        const names = await records.scanNames(dir, '');
+        const out = [];
+        for (const name of names) {
+            if (!name.endsWith('.json'))
+                continue;
+            const record = await records.read(join(dir, name));
+            // A half-written entry from a crashed writer must not make the
+            // whole listing unavailable.
+            if (record !== null)
+                out.push(record);
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=disk.js.map

package/dist/store/feedback/disk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk.js","sourceRoot":"","sources":["../../../src/store/feedback/disk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGhC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAIN,kBAAkB,EAClB,mBAAmB,GACnB,MAAM,YAAY,CAAA;AAEnB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAA;AAEnF,MAAM,OAAO,GAAG,IAAI,eAAe,CAAkB,MAAM,CAAC,CAAA;AAwB5D,uDAAuD;AACvD,SAAS,QAAQ,CAAC,SAAoB;IACrC,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAA;AAC3D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IACnD,OAAO,KAAK,EAAE,KAAY,EAAE,SAAoB,EAAoB,EAAE;QACrE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAE,KAAgC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;IACzF,CAAC,CAAA;AACF,CAAC;AAED,MAAM,OAAO,wBAAwB;IAOlB;IAND,OAAO,CAAQ;IACf,aAAa,CAAuB;IAErD,YACC,MAAsC,EACtC,aAAqC,EACpB,MAAoB,IAAI,CAAC,GAAG;QAA5B,QAAG,GAAH,GAAG,CAAyB;QAE7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC7B,IAAI,CAAC,aAAa;YACjB,aAAa;gBACb,4DAA4D;gBAC5D,6DAA6D;gBAC7D,mEAAmE;gBACnE,6BAA6B;gBAC7B,CAAC,MAAM,CAAC,OAAO;oBACd,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC;oBACtC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;wBAC3B,MAAM,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;oBACpD,CAAC,CAAC,CAAA;IACN,CAAC;IAEO,MAAM,CAAC,KAAY;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAA8B;QACtD,qEAAqE;QACrE,qEAAqE;QACrE,yBAAyB;QACzB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;QAClF,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QACjD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,MAAM,aAAa,GAAG,QAAQ,EAAE,YAAY,IAAI,CAAC,CAAA;QAEjD,IAAI,KAAK,CAAC,eAAe,KAAK,aAAa,EAAE,CAAC;YAC7C,MAAM,IAAI,kBAAkB,CAAC;gBAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,aAAa;aACb,CAAC,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,MAAM,GAAoB;YAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,YAAY,EAAE,aAAa,GAAG,CAAC;YAC/B,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,SAAS;YAC3C,SAAS,EAAE,SAAS;SACpB,CAAA;QAED,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAErC,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACzB,8DAA8D;YAC9D,4DAA4D;YAC5D,8DAA8D;YAC9D,6DAA6D;YAC7D,8DAA8D;YAC9D,6CAA6C;YAC7C,EAAE;YACF,iEAAiE;YACjE,6DAA6D;YAC7D,iDAAiD;YACjD,IAAI,CAAC;gBACJ,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;oBAC5E,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,IAAI;iBACV,CAAC,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAA;gBAC/D,4DAA4D;gBAC5D,0DAA0D;gBAC1D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACvC,MAAM,IAAI,kBAAkB,CAAC;oBAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;oBACtC,aAAa,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC;iBACxC,CAAC,CAAA;YACH,CAAC;YACD,OAAO,MAAM,CAAA;QACd,CAAC;QAED,gEAAgE;QAChE,kEAAkE;QAClE,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,iEAAiE;QACjE,0DAA0D;QAC1D,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACjC,OAAO,MAAM,CAAA;IACd,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAuB;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC9C,MAAM,GAAG,GAAsB,EAAE,CAAA;QACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAQ;YACrC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;YAClD,+DAA+D;YAC/D,6BAA6B;YAC7B,IAAI,MAAM,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtC,CAAC;QACD,OAAO,GAAG,CAAA;IACX,CAAC;CACD"}

package/dist/store/feedback/index.d.ts

@@ -0,0 +1,9 @@
+export { defineMessageFeedbackConformance } from './conformance.js';
+export type { FeedbackConformanceOptions } from './conformance.js';
+export { DiskMessageFeedbackStore, runEventMessageCheck } from './disk.js';
+export type { DiskMessageFeedbackStoreConfig } from './disk.js';
+export { acceptAnyMessage, InMemoryMessageFeedbackStore } from './memory.js';
+export type { MessageExistenceCheck } from './memory.js';
+export { StaleFeedbackError, UnknownMessageError } from './types.js';
+export type { FeedbackRating, MessageFeedback, MessageFeedbackStore, PutMessageFeedbackInput, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/store/feedback/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/store/feedback/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAA;AACnE,YAAY,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAClE,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAC1E,YAAY,EAAE,8BAA8B,EAAE,MAAM,WAAW,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AAC5E,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACxD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACpE,YAAY,EACX,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACvB,MAAM,YAAY,CAAA"}

package/dist/store/feedback/index.js

@@ -0,0 +1,5 @@
+export { defineMessageFeedbackConformance } from './conformance.js';
+export { DiskMessageFeedbackStore, runEventMessageCheck } from './disk.js';
+export { acceptAnyMessage, InMemoryMessageFeedbackStore } from './memory.js';
+export { StaleFeedbackError, UnknownMessageError } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/store/feedback/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/feedback/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAA;AAEnE,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAE1E,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AAE5E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA"}

package/dist/store/feedback/memory.d.ts

@@ -0,0 +1,33 @@
+import type { MessageId, RunId } from '../../types/ids/index.js';
+import { type MessageFeedback, type MessageFeedbackStore, type PutMessageFeedbackInput } from './types.js';
+/**
+ * Feedback held in one process, for tests and for a host that does not want
+ * a file.
+ *
+ * Shares its compare-and-set and its validation with the disk store by
+ * running the same conformance suite rather than by sharing code — the two
+ * built-in checkpoint stores diverged at exactly their enforcement point
+ * once already, and the one documented as the reference carried the defect.
+ */
+/** Which messages a run actually produced. Injected, never inferred. */
+export type MessageExistenceCheck = (runId: RunId, messageId: MessageId) => Promise<boolean>;
+/**
+ * Accepts every message id.
+ *
+ * The default for a store with no run log to consult, and it is named so a
+ * reader sees the hole rather than discovering it. A host wiring this to a
+ * real runtime passes the disk check; a test that is not about validation
+ * takes this and says so by taking it.
+ */
+export declare const acceptAnyMessage: MessageExistenceCheck;
+export declare class InMemoryMessageFeedbackStore implements MessageFeedbackStore {
+    private readonly messageExists;
+    private readonly now;
+    private readonly records;
+    constructor(messageExists?: MessageExistenceCheck, now?: () => number);
+    putMessageFeedback(input: PutMessageFeedbackInput): Promise<MessageFeedback>;
+    listMessageFeedback(query: {
+        runId: RunId;
+    }): Promise<readonly MessageFeedback[]>;
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/store/feedback/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/store/feedback/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAA;AAChE,OAAO,EACN,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAG5B,MAAM,YAAY,CAAA;AAEnB;;;;;;;;GAQG;AAEH,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE5F;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,EAAE,qBAAwC,CAAA;AAMvE,qBAAa,4BAA6B,YAAW,oBAAoB;IAIvE,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;gBAG3C,aAAa,GAAE,qBAAwC,EACvD,GAAG,GAAE,MAAM,MAAiB;IAGxC,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,eAAe,CAAC;IAoC5E,mBAAmB,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,KAAK,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;CAQvF"}

package/dist/store/feedback/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/store/feedback/memory.ts"],"names":[],"mappings":"AACA,OAAO,EAIN,kBAAkB,EAClB,mBAAmB,GACnB,MAAM,YAAY,CAAA;AAenB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA0B,KAAK,IAAI,EAAE,CAAC,IAAI,CAAA;AAEvE,SAAS,GAAG,CAAC,KAAY,EAAE,SAAoB;IAC9C,OAAO,GAAG,KAAK,IAAI,SAAS,EAAE,CAAA;AAC/B,CAAC;AAED,MAAM,OAAO,4BAA4B;IAItB;IACA;IAJD,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAA;IAE7D,YACkB,gBAAuC,gBAAgB,EACvD,MAAoB,IAAI,CAAC,GAAG;QAD5B,kBAAa,GAAb,aAAa,CAA0C;QACvD,QAAG,GAAH,GAAG,CAAyB;IAC3C,CAAC;IAEJ,KAAK,CAAC,kBAAkB,CAAC,KAA8B;QACtD,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,+CAA+C;QAC/C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;QAClF,CAAC;QAED,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,aAAa,GAAG,QAAQ,EAAE,YAAY,IAAI,CAAC,CAAA;QAEjD,IAAI,KAAK,CAAC,eAAe,KAAK,aAAa,EAAE,CAAC;YAC7C,MAAM,IAAI,kBAAkB,CAAC;gBAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,aAAa;aACb,CAAC,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,MAAM,GAAoB;YAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,YAAY,EAAE,aAAa,GAAG,CAAC;YAC/B,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,SAAS;YAC3C,SAAS,EAAE,SAAS;SACpB,CAAA;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAA;IACd,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAuB;QAChD,+DAA+D;QAC/D,oEAAoE;QACpE,iDAAiD;QACjD,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;aACtC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACzD,CAAC;CACD"}

package/dist/store/feedback/types.d.ts

@@ -0,0 +1,95 @@
+import type { MessageId, RunId } from '../../types/ids/index.js';
+/**
+ * Was that answer any good — recorded per message, durably.
+ *
+ * Nothing in this tree stored a per-message judgment, and every ingredient
+ * for one already existed: `MessageId` is a branded type, run events carry
+ * it, and the versioned-store idiom with compare-and-set is established in
+ * three neighbouring stores. So every consumer — the CLI, a gateway, a
+ * future UI — had to invent its own side table to answer the most basic
+ * question there is, which is also the input to session review, support
+ * triage and eval collection.
+ */
+/**
+ * Two values, closed.
+ *
+ * Not a number, and not an open string. A 1–5 scale invites a mean nobody
+ * can interpret across raters, and an open string turns every consumer into
+ * a parser of somebody else's vocabulary. Widening this later is then a
+ * deliberate `major` with a migration, rather than the accident that a
+ * `number` would have made inevitable.
+ */
+export type FeedbackRating = 'good' | 'bad';
+export interface MessageFeedback {
+    readonly runId: RunId;
+    readonly messageId: MessageId;
+    readonly rating: FeedbackRating;
+    /** Whatever the rater wanted to say. Absent is different from empty. */
+    readonly note?: string;
+    /**
+     * Compare-and-set counter, starting at 1 for a record's first write.
+     *
+     * The same mechanism the topic store uses, and for the same reason: two
+     * writers racing on one record must not have the second silently
+     * overwrite the first. A rating is exactly the kind of value where
+     * last-write-wins loses information nobody notices is gone.
+     */
+    readonly ownerVersion: number;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+}
+export interface PutMessageFeedbackInput {
+    readonly runId: RunId;
+    readonly messageId: MessageId;
+    readonly rating: FeedbackRating;
+    readonly note?: string;
+    /**
+     * The version the caller believes is current — `0` for a first write.
+     *
+     * Required rather than optional. An optional expected version reads as
+     * "I do not care", and a caller who does not care is the caller whose
+     * write silently discards somebody else's.
+     */
+    readonly expectedVersion: number;
+}
+export interface MessageFeedbackStore {
+    putMessageFeedback(input: PutMessageFeedbackInput): Promise<MessageFeedback>;
+    listMessageFeedback(query: {
+        readonly runId: RunId;
+    }): Promise<readonly MessageFeedback[]>;
+}
+/** A write whose `expectedVersion` no longer matches what is stored. */
+export declare class StaleFeedbackError extends Error {
+    readonly details: {
+        runId: RunId;
+        messageId: MessageId;
+        expectedVersion: number;
+        actualVersion: number;
+    };
+    constructor(details: {
+        runId: RunId;
+        messageId: MessageId;
+        expectedVersion: number;
+        actualVersion: number;
+    });
+}
+/**
+ * A rating aimed at a message the named run never produced.
+ *
+ * Refused rather than stored, per `refuse-do-not-degrade`. A feedback table
+ * is read later to answer "which answers were bad" — a row pointing at a
+ * message that does not exist cannot be reviewed, cannot be traced back to
+ * what was said, and is indistinguishable from a real one. Storing it costs
+ * nothing at write time and poisons every read after it.
+ */
+export declare class UnknownMessageError extends Error {
+    readonly details: {
+        runId: RunId;
+        messageId: MessageId;
+    };
+    constructor(details: {
+        runId: RunId;
+        messageId: MessageId;
+    });
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/store/feedback/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/store/feedback/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAA;AAEhE;;;;;;;;;;GAUG;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,CAAA;AAE3C,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,oBAAoB;IACpC,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC5E,mBAAmB,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAA;CAC1F;AAED,wEAAwE;AACxE,qBAAa,kBAAmB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,OAAO,EAAE;QACjB,KAAK,EAAE,KAAK,CAAA;QACZ,SAAS,EAAE,SAAS,CAAA;QACpB,eAAe,EAAE,MAAM,CAAA;QACvB,aAAa,EAAE,MAAM,CAAA;KACrB,CAAA;gBAEW,OAAO,EAAE;QACpB,KAAK,EAAE,KAAK,CAAA;QACZ,SAAS,EAAE,SAAS,CAAA;QACpB,eAAe,EAAE,MAAM,CAAA;QACvB,aAAa,EAAE,MAAM,CAAA;KACrB;CAOD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,CAAA;gBAE5C,OAAO,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE;CAO3D"}

package/dist/store/feedback/types.js

@@ -0,0 +1,27 @@
+/** A write whose `expectedVersion` no longer matches what is stored. */
+export class StaleFeedbackError extends Error {
+    details;
+    constructor(details) {
+        super(`Stale feedback for ${details.messageId} in ${details.runId}: expected ownerVersion=${details.expectedVersion}, actual=${details.actualVersion}`);
+        this.name = 'StaleFeedbackError';
+        this.details = details;
+    }
+}
+/**
+ * A rating aimed at a message the named run never produced.
+ *
+ * Refused rather than stored, per `refuse-do-not-degrade`. A feedback table
+ * is read later to answer "which answers were bad" — a row pointing at a
+ * message that does not exist cannot be reviewed, cannot be traced back to
+ * what was said, and is indistinguishable from a real one. Storing it costs
+ * nothing at write time and poisons every read after it.
+ */
+export class UnknownMessageError extends Error {
+    details;
+    constructor(details) {
+        super(`No message ${details.messageId} in run ${details.runId}: feedback must name a message the run actually produced.`);
+        this.name = 'UnknownMessageError';
+        this.details = details;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/store/feedback/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/store/feedback/types.ts"],"names":[],"mappings":"AAgEA,wEAAwE;AACxE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACnC,OAAO,CAKf;IAED,YAAY,OAKX;QACA,KAAK,CACJ,sBAAsB,OAAO,CAAC,SAAS,OAAO,OAAO,CAAC,KAAK,2BAA2B,OAAO,CAAC,eAAe,YAAY,OAAO,CAAC,aAAa,EAAE,CAChJ,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACvB,CAAC;CACD;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACpC,OAAO,CAAwC;IAExD,YAAY,OAA+C;QAC1D,KAAK,CACJ,cAAc,OAAO,CAAC,SAAS,WAAW,OAAO,CAAC,KAAK,2DAA2D,CAClH,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACvB,CAAC;CACD"}

package/dist/store/index.d.ts

@@ -15,4 +15,5 @@ export { InMemoryMemoryIndex } from './memory/index.js';
 export { InMemoryMemoryStore } from './memory/memory.js';
 export { DiskMemoryStore } from './memory/disk.js';
 export type { DiskMemoryStoreConfig } from './memory/disk.js';
+export * from './feedback/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/store/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEnE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,YAAY,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAA;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAWpE,OAAO,EACN,4BAA4B,EAC5B,QAAQ,EACR,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,iBAAiB,GACjB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAEhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAEzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEnE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,YAAY,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAA;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAWpE,OAAO,EACN,4BAA4B,EAC5B,QAAQ,EACR,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,iBAAiB,GACjB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAEhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAEzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAK7D,cAAc,qBAAqB,CAAA"}

package/dist/store/index.js

@@ -20,4 +20,8 @@ export { DiskTaskStore } from './task/disk.js';
 export { InMemoryMemoryIndex } from './memory/index.js';
 export { InMemoryMemoryStore } from './memory/memory.js';
 export { DiskMemoryStore } from './memory/disk.js';
+// Was that answer any good — recorded per message, durably, with
+// compare-and-set. Every consumer used to invent its own side table for the
+// most basic feedback loop there is.
+export * from './feedback/index.js';
 //# sourceMappingURL=index.js.map

package/dist/store/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAGlD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AACpE,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,kEAAkE;AAClE,mEAAmE;AACnE,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,qEAAqE;AACrE,OAAO,EACN,4BAA4B,EAC5B,QAAQ,EACR,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,iBAAiB,GACjB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAGpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAGlD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AACpE,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,kEAAkE;AAClE,mEAAmE;AACnE,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,qEAAqE;AACrE,OAAO,EACN,4BAA4B,EAC5B,QAAQ,EACR,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,iBAAiB,GACjB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAGpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAGlD,iEAAiE;AACjE,4EAA4E;AAC5E,qCAAqC;AACrC,cAAc,qBAAqB,CAAA"}

package/dist/store/kv/record-store.d.ts

@@ -0,0 +1,54 @@
+import { type SchemaDefinition } from '../schema.js';
+/**
+ * Read a record, write a record, walk a directory of them — once.
+ *
+ * Four disk stores each carried a private copy of the same twenty lines:
+ * a `readFile` + `JSON.parse` + `migrate` with ENOENT collapsed to null, an
+ * `atomicWriteFile` of `stamp`ed JSON, and a `readdir` filtered by prefix.
+ * Every property fixed in one of them had to be remembered into the other
+ * three, and the properties are not obvious ones — that a missing file is
+ * an empty read rather than an error, that a record from a NEWER build is
+ * refused rather than read partially and written back with the difference
+ * gone, that a listing needs a stable order.
+ *
+ * Internal to the package. It is a shape four call sites already agree on,
+ * not a contract offered to hosts, and exporting it would freeze an
+ * argument list nobody outside has asked for.
+ */
+export declare class DiskRecordStore<T> {
+    private readonly schema;
+    constructor(schema: SchemaDefinition);
+    /**
+     * `null` for a file that is not there — the convention every copy of
+     * this already used, and the one worth stating once. A store asking
+     * "does this exist" through an exception has to distinguish ENOENT from
+     * a real IO failure at every call site, and the copies that got it
+     * right did so independently.
+     */
+    read<U = T>(path: string): Promise<U | null>;
+    /**
+     * Stamped with the current schema version, written atomically.
+     *
+     * `U` defaults to the store's own `T`, and widening it is what lets one
+     * schema cover a tree that holds several record shapes — the session
+     * store keeps projects, sessions, sub-sessions and a path index under
+     * one `session-store` schema, and they version together on purpose.
+     */
+    write<U = T>(path: string, value: U): Promise<void>;
+    /**
+     * Entry names under `dir`, prefix-filtered and SORTED.
+     *
+     * The sort is not decoration. `readdir` order is filesystem-dependent,
+     * so a listing that skipped it would return records in an order that
+     * differs between a developer's machine and a container — which turns a
+     * pagination bug into one that reproduces nowhere.
+     *
+     * A missing directory lists as empty, for the same reason a missing
+     * file reads as null: "nothing has been written yet" is an ordinary
+     * state of a store, not a failure.
+     */
+    scanNames(dir: string, prefix: string): Promise<string[]>;
+    /** Every record under `dir` whose name starts with `prefix`, in name order. */
+    scan(dir: string, prefix: string, file?: string): AsyncIterable<T>;
+}
+//# sourceMappingURL=record-store.d.ts.map

package/dist/store/kv/record-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-store.d.ts","sourceRoot":"","sources":["../../../src/store/kv/record-store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,gBAAgB,EAAkB,MAAM,cAAc,CAAA;AAEpE;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,eAAe,CAAC,CAAC;IACjB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,gBAAgB;IAErD;;;;;;OAMG;IACG,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAclD;;;;;;;OAOG;IACG,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD;;;;;;;;;;;OAWG;IACG,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAU/D,+EAA+E;IACxE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,SAAgB,GAAG,aAAa,CAAC,CAAC,CAAC;CAShF"}

package/dist/store/kv/record-store.js

@@ -0,0 +1,94 @@
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { atomicWriteFile } from '../../utils/atomic-write.js';
+import { migrate, stamp } from '../schema.js';
+/**
+ * Read a record, write a record, walk a directory of them — once.
+ *
+ * Four disk stores each carried a private copy of the same twenty lines:
+ * a `readFile` + `JSON.parse` + `migrate` with ENOENT collapsed to null, an
+ * `atomicWriteFile` of `stamp`ed JSON, and a `readdir` filtered by prefix.
+ * Every property fixed in one of them had to be remembered into the other
+ * three, and the properties are not obvious ones — that a missing file is
+ * an empty read rather than an error, that a record from a NEWER build is
+ * refused rather than read partially and written back with the difference
+ * gone, that a listing needs a stable order.
+ *
+ * Internal to the package. It is a shape four call sites already agree on,
+ * not a contract offered to hosts, and exporting it would freeze an
+ * argument list nobody outside has asked for.
+ */
+export class DiskRecordStore {
+    schema;
+    constructor(schema) {
+        this.schema = schema;
+    }
+    /**
+     * `null` for a file that is not there — the convention every copy of
+     * this already used, and the one worth stating once. A store asking
+     * "does this exist" through an exception has to distinguish ENOENT from
+     * a real IO failure at every call site, and the copies that got it
+     * right did so independently.
+     */
+    async read(path) {
+        try {
+            const raw = await readFile(path, 'utf-8');
+            // Through the schema, never a bare cast: a record from an older
+            // build is brought forward, and one from a NEWER build is refused
+            // rather than read partially and written back with the difference
+            // silently gone.
+            return migrate(this.schema, JSON.parse(raw));
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                return null;
+            throw err;
+        }
+    }
+    /**
+     * Stamped with the current schema version, written atomically.
+     *
+     * `U` defaults to the store's own `T`, and widening it is what lets one
+     * schema cover a tree that holds several record shapes — the session
+     * store keeps projects, sessions, sub-sessions and a path index under
+     * one `session-store` schema, and they version together on purpose.
+     */
+    async write(path, value) {
+        await atomicWriteFile(path, `${JSON.stringify(stamp(this.schema, value), null, 2)}\n`);
+    }
+    /**
+     * Entry names under `dir`, prefix-filtered and SORTED.
+     *
+     * The sort is not decoration. `readdir` order is filesystem-dependent,
+     * so a listing that skipped it would return records in an order that
+     * differs between a developer's machine and a container — which turns a
+     * pagination bug into one that reproduces nowhere.
+     *
+     * A missing directory lists as empty, for the same reason a missing
+     * file reads as null: "nothing has been written yet" is an ordinary
+     * state of a store, not a failure.
+     */
+    async scanNames(dir, prefix) {
+        try {
+            const entries = await readdir(dir);
+            return entries.filter((name) => name.startsWith(prefix)).sort();
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                return [];
+            throw err;
+        }
+    }
+    /** Every record under `dir` whose name starts with `prefix`, in name order. */
+    async *scan(dir, prefix, file = 'record.json') {
+        for (const name of await this.scanNames(dir, prefix)) {
+            const record = await this.read(join(dir, name, file));
+            // A directory whose record is absent or unreadable is skipped, not
+            // fatal: a half-written entry from a crashed writer must not make
+            // the whole listing unavailable.
+            if (record !== null)
+                yield record;
+        }
+    }
+}
+//# sourceMappingURL=record-store.js.map

package/dist/store/kv/record-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-store.js","sourceRoot":"","sources":["../../../src/store/kv/record-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAyB,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAEpE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,eAAe;IACE;IAA7B,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;IAAG,CAAC;IAEzD;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAQ,IAAY;QAC7B,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACzC,gEAAgE;YAChE,kEAAkE;YAClE,kEAAkE;YAClE,iBAAiB;YACjB,OAAO,OAAO,CAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YACjE,MAAM,GAAG,CAAA;QACV,CAAC;IACF,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAQ,IAAY,EAAE,KAAQ;QACxC,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IACvF,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,MAAc;QAC1C,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;YAClC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAA;YAC/D,MAAM,GAAG,CAAA;QACV,CAAC;IACF,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,CAAC,IAAI,CAAC,GAAW,EAAE,MAAc,EAAE,IAAI,GAAG,aAAa;QAC5D,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;YACrD,mEAAmE;YACnE,kEAAkE;YAClE,iCAAiC;YACjC,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,MAAM,CAAA;QAClC,CAAC;IACF,CAAC;CACD"}

package/dist/store/memory/disk.d.ts

@@ -11,6 +11,8 @@ export declare class DiskMemoryStore implements MemoryStore {
     private log;
     private index;
     private initialized;
+    private readonly records;
+    private readonly indexRecords;
     constructor(config: DiskMemoryStoreConfig);
     private get indexPath();
     private get contentDir();

package/dist/store/memory/disk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"disk.d.ts","sourceRoot":"","sources":["../../../src/store/memory/disk.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,KAAK,EACX,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,MAAM,6BAA6B,CAAA;AAGpC,OAAO,EAAE,KAAK,MAAM,EAAiB,MAAM,uBAAuB,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAYhD,MAAM,WAAW,qBAAqB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,qBAAa,eAAgB,YAAW,WAAW;IAClD,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,GAAG,CAAQ;IACnB,OAAO,CAAC,KAAK,CAA4B;IACzC,OAAO,CAAC,WAAW,CAAQ;gBAEf,MAAM,EAAE,qBAAqB;IAKzC,OAAO,KAAK,SAAS,GAEpB;IAED,OAAO,KAAK,UAAU,GAErB;IAED,OAAO,CAAC,WAAW;YAIL,UAAU;IAuBlB,MAAM,CACX,MAAM,EAAE,kBAAkB,GACxB,OAAO,CAAC;QAAE,KAAK,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,aAAa,CAAA;KAAE,CAAC;IAgCzD,GAAG,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAcrD,MAAM,CACX,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAClC,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IA8ClC,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAatC,IAAI,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAKpE,QAAQ,IAAI,mBAAmB;YAIjB,YAAY;CAI1B"}
+{"version":3,"file":"disk.d.ts","sourceRoot":"","sources":["../../../src/store/memory/disk.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,KAAK,EACX,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,MAAM,6BAA6B,CAAA;AAGpC,OAAO,EAAE,KAAK,MAAM,EAAiB,MAAM,uBAAuB,CAAA;AAGlE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAYhD,MAAM,WAAW,qBAAqB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,qBAAa,eAAgB,YAAW,WAAW;IAClD,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,GAAG,CAAQ;IACnB,OAAO,CAAC,KAAK,CAA4B;IACzC,OAAO,CAAC,WAAW,CAAQ;IAK3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IACrE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2D;gBAE5E,MAAM,EAAE,qBAAqB;IAKzC,OAAO,KAAK,SAAS,GAEpB;IAED,OAAO,KAAK,UAAU,GAErB;IAED,OAAO,CAAC,WAAW;YAIL,UAAU;IAwBlB,MAAM,CACX,MAAM,EAAE,kBAAkB,GACxB,OAAO,CAAC;QAAE,KAAK,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,aAAa,CAAA;KAAE,CAAC;IAgCzD,GAAG,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAarD,MAAM,CACX,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAClC,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IA8ClC,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAatC,IAAI,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAKpE,QAAQ,IAAI,mBAAmB;YAIjB,YAAY;CAI1B"}