@noodleseed/one 0.120.1 → 0.122.0

package/node_modules/@noodle-borg/knowledge/dist/postgres-revision-store.js

@@ -0,0 +1,260 @@
+import { knowledgeScopeKey } from './ir.js';
+import { KnowledgeError } from './ports.js';
+import { identityDocumentTextCodec, } from './revision-store.js';
+const LEASE_TIMEOUT_MS = 60_000;
+export class PostgresKnowledgeRevisionStore {
+    #pool;
+    #codec;
+    constructor(pool, codec = identityDocumentTextCodec) {
+        this.#pool = pool;
+        this.#codec = codec;
+    }
+    async ensureSchema() {
+        await this.#pool.query(`
+      CREATE TABLE IF NOT EXISTS knowledge_revisions (
+        revision_id text PRIMARY KEY,
+        org text NOT NULL,
+        app text NOT NULL,
+        env text NOT NULL,
+        component_name text NOT NULL,
+        content_hash text NOT NULL,
+        state text NOT NULL DEFAULT 'staged',
+        documents jsonb NOT NULL,
+        staged_at timestamptz NOT NULL DEFAULT now(),
+        UNIQUE (org, app, env, component_name, content_hash)
+      )
+    `);
+        await this.#pool.query(`
+      CREATE TABLE IF NOT EXISTS knowledge_deployment_pins (
+        deployment_id text PRIMARY KEY,
+        revision_id text NOT NULL REFERENCES knowledge_revisions (revision_id) ON DELETE CASCADE
+      )
+    `);
+        await this.#pool.query(`
+      CREATE TABLE IF NOT EXISTS knowledge_publication_leases (
+        scope_key text PRIMARY KEY,
+        holder text NOT NULL,
+        acquired_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+        // Sealed revision text (ADR 0202 D5 as amended): lets any stateless instance rebuild the
+        // bundled BM25 index for the active revision. Ciphertext only; the codec owner holds keys.
+        await this.#pool.query(`
+      CREATE TABLE IF NOT EXISTS knowledge_revision_documents (
+        revision_id text NOT NULL REFERENCES knowledge_revisions (revision_id) ON DELETE CASCADE,
+        path text NOT NULL,
+        ciphertext bytea NOT NULL,
+        bytes integer NOT NULL,
+        PRIMARY KEY (revision_id, path)
+      )
+    `);
+    }
+    async stage(input) {
+        const result = await this.#pool.query(`INSERT INTO knowledge_revisions (revision_id, org, app, env, component_name, content_hash, documents)
+       VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb)
+       ON CONFLICT (org, app, env, component_name, content_hash) DO NOTHING
+       RETURNING revision_id, org, app, env, component_name, content_hash, state, documents, staged_at`, [
+            input.revision.revisionId,
+            input.scope.org,
+            input.scope.app,
+            input.scope.env,
+            input.componentName,
+            input.contentHash,
+            JSON.stringify(input.revision.documents),
+        ]);
+        if (result.rows[0] !== undefined)
+            return this.toRevision(result.rows[0]);
+        // Idempotent reuse: the unique scope+hash row already exists.
+        const existing = await this.#pool.query(`SELECT revision_id, org, app, env, component_name, content_hash, state, documents, staged_at
+       FROM knowledge_revisions
+       WHERE org = $1 AND app = $2 AND env = $3 AND component_name = $4 AND content_hash = $5`, [input.scope.org, input.scope.app, input.scope.env, input.componentName, input.contentHash]);
+        const row = existing.rows[0];
+        if (row === undefined)
+            throw new KnowledgeError('store', 'staged revision disappeared mid-transaction');
+        return this.toRevision(row);
+    }
+    async acquireLease(scope, componentName, holder) {
+        const scopeKey = knowledgeScopeKey(scope, componentName);
+        for (;;) {
+            const result = await this.#pool.query(`INSERT INTO knowledge_publication_leases (scope_key, holder, acquired_at)
+         VALUES ($1, $2, now())
+         ON CONFLICT (scope_key) DO UPDATE
+           SET holder = $2, acquired_at = now()
+           WHERE knowledge_publication_leases.acquired_at < now() - interval '${LEASE_TIMEOUT_MS} milliseconds'
+         RETURNING scope_key`, [scopeKey, holder]);
+            if (result.rows[0] !== undefined) {
+                return { scopeKey, leaseId: `${scopeKey}:${holder}` };
+            }
+            await new Promise((resolve) => setTimeout(resolve, 25));
+        }
+    }
+    async releaseLease(ticket) {
+        await this.#pool.query('DELETE FROM knowledge_publication_leases WHERE scope_key = $1', [
+            ticket.scopeKey,
+        ]);
+    }
+    async activate(scope, componentName, revisionId, deploymentId) {
+        const client = await this.#pool.connect();
+        try {
+            await client.query('BEGIN');
+            const existing = await client.query('SELECT * FROM knowledge_revisions WHERE revision_id = $1 FOR UPDATE', [revisionId]);
+            if (existing.rows[0] === undefined) {
+                await client.query('ROLLBACK');
+                throw new KnowledgeError('not-found', `revision ${revisionId} is not staged`);
+            }
+            await client.query(`UPDATE knowledge_revisions SET state = 'retired'
+         WHERE org = $1 AND app = $2 AND env = $3 AND component_name = $4 AND state = 'active' AND revision_id <> $5`, [scope.org, scope.app, scope.env, componentName, revisionId]);
+            await client.query(`UPDATE knowledge_revisions SET state = 'active' WHERE revision_id = $1`, [
+                revisionId,
+            ]);
+            await client.query(`INSERT INTO knowledge_deployment_pins (deployment_id, revision_id)
+         VALUES ($1, $2)
+         ON CONFLICT (deployment_id) DO UPDATE SET revision_id = $2`, [deploymentId, revisionId]);
+            await client.query('COMMIT');
+        }
+        catch (error) {
+            await client.query('ROLLBACK').catch(() => undefined);
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+    async pin(revisionId, deploymentId) {
+        const result = await this.#pool.query(`INSERT INTO knowledge_deployment_pins (deployment_id, revision_id)
+       VALUES ($1, $2)
+       ON CONFLICT (deployment_id) DO UPDATE SET revision_id = $2
+       RETURNING revision_id`, [deploymentId, revisionId]);
+        if (result.rows[0] === undefined)
+            throw new KnowledgeError('not-found', `revision ${revisionId} is not staged`);
+    }
+    async rollback(deploymentId) {
+        const client = await this.#pool.connect();
+        try {
+            await client.query('BEGIN');
+            const pinned = await client.query('SELECT revision_id FROM knowledge_deployment_pins WHERE deployment_id = $1', [deploymentId]);
+            const revisionId = pinned.rows[0]?.revision_id;
+            if (revisionId === undefined) {
+                await client.query('COMMIT');
+                return undefined;
+            }
+            const target = await client.query('SELECT * FROM knowledge_revisions WHERE revision_id = $1', [revisionId]);
+            if (target.rows[0] === undefined) {
+                await client.query('COMMIT');
+                return undefined;
+            }
+            const scope = this.rowScope(target.rows[0]);
+            await client.query(`UPDATE knowledge_revisions SET state = 'retired'
+         WHERE org = $1 AND app = $2 AND env = $3 AND component_name = $4 AND state = 'active' AND revision_id <> $5`, [scope.org, scope.app, scope.env, target.rows[0].component_name, revisionId]);
+            await client.query(`UPDATE knowledge_revisions SET state = 'active' WHERE revision_id = $1`, [
+                revisionId,
+            ]);
+            await client.query('COMMIT');
+            return this.toRevision(target.rows[0]);
+        }
+        catch (error) {
+            await client.query('ROLLBACK').catch(() => undefined);
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+    async collectGarbage() {
+        const result = await this.#pool.query(`DELETE FROM knowledge_revisions r
+       WHERE r.state <> 'active'
+         AND NOT EXISTS (
+           SELECT 1 FROM knowledge_deployment_pins p WHERE p.revision_id = r.revision_id
+         )`);
+        return result.rowCount ?? 0;
+    }
+    async active(scope, componentName) {
+        const result = await this.#pool.query(`SELECT * FROM knowledge_revisions
+       WHERE org = $1 AND app = $2 AND env = $3 AND component_name = $4 AND state = 'active'`, [scope.org, scope.app, scope.env, componentName]);
+        return result.rows[0] === undefined ? undefined : this.toRevision(result.rows[0]);
+    }
+    async record(revisionId) {
+        const result = await this.#pool.query('SELECT * FROM knowledge_revisions WHERE revision_id = $1', [revisionId]);
+        const row = result.rows[0];
+        if (row === undefined)
+            return undefined;
+        const pins = await this.#pool.query('SELECT deployment_id FROM knowledge_deployment_pins WHERE revision_id = $1', [revisionId]);
+        return {
+            revision: this.toRevision(row),
+            contentHash: row.content_hash,
+            state: row.state,
+            pins: new Set(pins.rows.map((pin) => pin.deployment_id)),
+            stagedAt: new Date(row.staged_at).getTime(),
+        };
+    }
+    async delete(revisionId) {
+        const record = await this.record(revisionId);
+        if (record === undefined)
+            return;
+        if (record.state === 'active') {
+            throw new KnowledgeError('store', 'cannot delete the active revision');
+        }
+        if (record.pins.size > 0) {
+            throw new KnowledgeError('store', 'cannot delete a deployment-pinned revision');
+        }
+        await this.#pool.query('DELETE FROM knowledge_revisions WHERE revision_id = $1', [revisionId]);
+    }
+    async stageDocuments(revisionId, documents) {
+        const client = await this.#pool.connect();
+        try {
+            await client.query('BEGIN');
+            const revision = await client.query('SELECT revision_id FROM knowledge_revisions WHERE revision_id = $1 FOR UPDATE', [revisionId]);
+            if (revision.rows[0] === undefined) {
+                await client.query('ROLLBACK');
+                throw new KnowledgeError('not-found', `revision ${revisionId} is not staged`);
+            }
+            await client.query('DELETE FROM knowledge_revision_documents WHERE revision_id = $1', [
+                revisionId,
+            ]);
+            for (const document of documents) {
+                const plaintext = Buffer.from(document.text, 'utf8');
+                await client.query(`INSERT INTO knowledge_revision_documents (revision_id, path, ciphertext, bytes)
+           VALUES ($1, $2, $3, $4)`, [revisionId, document.descriptor.path, this.#codec.seal(plaintext), plaintext.length]);
+            }
+            await client.query('COMMIT');
+        }
+        catch (error) {
+            await client.query('ROLLBACK').catch(() => undefined);
+            throw error;
+        }
+        finally {
+            client.release();
+        }
+    }
+    async documents(revisionId) {
+        const revision = await this.#pool.query('SELECT * FROM knowledge_revisions WHERE revision_id = $1', [revisionId]);
+        const row = revision.rows[0];
+        if (row === undefined) {
+            throw new KnowledgeError('not-found', `revision ${revisionId} is not staged`);
+        }
+        const rows = await this.#pool.query('SELECT path, ciphertext FROM knowledge_revision_documents WHERE revision_id = $1', [revisionId]);
+        const byPath = new Map(rows.rows.map((text) => [text.path, text.ciphertext]));
+        if (byPath.size === 0 && row.documents.length > 0) {
+            throw new KnowledgeError('store', `revision ${revisionId} has no staged document text`);
+        }
+        return row.documents.map((descriptor) => {
+            const ciphertext = byPath.get(descriptor.path);
+            if (ciphertext === undefined) {
+                throw new KnowledgeError('store', `revision ${revisionId} is missing text for ${descriptor.path}`);
+            }
+            return { descriptor, text: this.#codec.open(ciphertext).toString('utf8') };
+        });
+    }
+    rowScope(row) {
+        return { org: row.org, app: row.app, env: row.env };
+    }
+    toRevision(row) {
+        return {
+            revisionId: row.revision_id,
+            scope: this.rowScope(row),
+            componentName: row.component_name,
+            documents: row.documents,
+        };
+    }
+}
+//# sourceMappingURL=postgres-revision-store.js.map

package/node_modules/@noodle-borg/knowledge/dist/postgres-revision-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-revision-store.js","sourceRoot":"","sources":["../src/postgres-revision-store.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,cAAc,EAA+C,MAAM,YAAY,CAAC;AACzF,OAAO,EAEL,yBAAyB,GAK1B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAchC,MAAM,OAAO,8BAA8B;IAChC,KAAK,CAAO;IACZ,MAAM,CAAoB;IAEnC,YAAY,IAAU,EAAE,QAA2B,yBAAyB;QAC1E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;;;;;;;;;;;;KAatB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;;;;KAKtB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;;;;;KAMtB,CAAC,CAAC;QACH,yFAAyF;QACzF,2FAA2F;QAC3F,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;;;;;;;KAQtB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAyB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;;;uGAGiG,EACjG;YACE,KAAK,CAAC,QAAQ,CAAC,UAAU;YACzB,KAAK,CAAC,KAAK,CAAC,GAAG;YACf,KAAK,CAAC,KAAK,CAAC,GAAG;YACf,KAAK,CAAC,KAAK,CAAC,GAAG;YACf,KAAK,CAAC,aAAa;YACnB,KAAK,CAAC,WAAW;YACjB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;SACzC,CACF,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC;;8FAEwF,EACxF,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,CAC5F,CAAC;QACF,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS;YACnB,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,6CAA6C,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAqB,EACrB,aAAqB,EACrB,MAAc;QAEd,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACzD,SAAS,CAAC;YACR,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;;;;gFAIwE,gBAAgB;6BACnE,EACrB,CAAC,QAAQ,EAAE,MAAM,CAAC,CACnB,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,IAAI,MAAM,EAAE,EAAE,CAAC;YACxD,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAmB;QACpC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,+DAA+D,EAAE;YACtF,MAAM,CAAC,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,KAAqB,EACrB,aAAqB,EACrB,UAAkB,EAClB,YAAoB;QAEpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,qEAAqE,EACrE,CAAC,UAAU,CAAC,CACb,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,YAAY,UAAU,gBAAgB,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAChB;qHAC6G,EAC7G,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,UAAU,CAAC,CAC7D,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,wEAAwE,EAAE;gBAC3F,UAAU;aACX,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAChB;;oEAE4D,EAC5D,CAAC,YAAY,EAAE,UAAU,CAAC,CAC3B,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,YAAoB;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;;;6BAGuB,EACvB,CAAC,YAAY,EAAE,UAAU,CAAC,CAC3B,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YAC9B,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,YAAY,UAAU,gBAAgB,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,YAAoB;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,4EAA4E,EAC5E,CAAC,YAAY,CAAC,CACf,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC;YAC/C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,0DAA0D,EAC1D,CAAC,UAAU,CAAC,CACb,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,MAAM,CAAC,KAAK,CAChB;qHAC6G,EAC7G,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,CAAC,CAC7E,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,wEAAwE,EAAE;gBAC3F,UAAU;aACX,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;;;;WAIK,CACN,CAAC;QACF,OAAO,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAqB,EACrB,aAAqB;QAErB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;6FACuF,EACvF,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,CACjD,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC,0DAA0D,EAC1D,CAAC,UAAU,CAAC,CACb,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACjC,4EAA4E,EAC5E,CAAC,UAAU,CAAC,CACb,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAC9B,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACxD,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,4CAA4C,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,wDAAwD,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,SAAoC;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,+EAA+E,EAC/E,CAAC,UAAU,CAAC,CACb,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,YAAY,UAAU,gBAAgB,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,iEAAiE,EAAE;gBACpF,UAAU;aACX,CAAC,CAAC;YACH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACrD,MAAM,MAAM,CAAC,KAAK,CAChB;mCACyB,EACzB,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CACtF,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC,0DAA0D,EAC1D,CAAC,UAAU,CAAC,CACb,CAAC;QACF,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,YAAY,UAAU,gBAAgB,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACjC,kFAAkF,EAClF,CAAC,UAAU,CAAC,CACb,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,YAAY,UAAU,8BAA8B,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YACtC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,cAAc,CACtB,OAAO,EACP,YAAY,UAAU,wBAAwB,UAAU,CAAC,IAAI,EAAE,CAChE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,GAAgB;QAC/B,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IACtD,CAAC;IAEO,UAAU,CAAC,GAAgB;QACjC,OAAO;YACL,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACzB,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;CACF"}

package/node_modules/@noodle-borg/knowledge/dist/revision-store.d.ts

@@ -0,0 +1,86 @@
+import type { KnowledgeScope } from './ir.js';
+import type { KnowledgeRevision, StagedDocument } from './ports.js';
+/**
+ * Seals document text at rest and opens it for BM25 rebuilds (ADR 0202 D5 as amended: the
+ * managed-bundled tier persists revision text sealed in the revision store so a stateless
+ * instance can rebuild the active index). The service injects its secret-box codec; tests
+ * and non-durable stores may use the identity codec.
+ */
+export interface DocumentTextCodec {
+    seal(plaintext: Buffer): Buffer;
+    open(sealed: Buffer): Buffer;
+}
+export declare const identityDocumentTextCodec: DocumentTextCodec;
+export interface StageRevisionInput {
+    readonly scope: KnowledgeScope;
+    readonly componentName: string;
+    /** Content hash of the complete document set — equal sets reuse the same revision. */
+    readonly contentHash: string;
+    readonly revision: KnowledgeRevision;
+}
+export interface LeaseTicket {
+    readonly scopeKey: string;
+    readonly leaseId: string;
+}
+export interface RevisionRecord {
+    readonly revision: KnowledgeRevision;
+    readonly contentHash: string;
+    readonly state: 'staged' | 'active' | 'retired';
+    /** Deployment ids that pin this revision against GC. */
+    readonly pins: ReadonlySet<string>;
+    readonly stagedAt: number;
+}
+export interface KnowledgeRevisionStore {
+    /** Record a staged revision. Re-staging the same contentHash for the scope is idempotent. */
+    stage(input: StageRevisionInput): Promise<KnowledgeRevision>;
+    /** Serialize publication per component/scope; resolves when the lease is held. */
+    acquireLease(scope: KnowledgeScope, componentName: string, holder: string): Promise<LeaseTicket>;
+    releaseLease(ticket: LeaseTicket): Promise<void>;
+    /** Atomically pair artifact activation with the revision: verify, then flip both. */
+    activate(scope: KnowledgeScope, componentName: string, revisionId: string, deploymentId: string): Promise<void>;
+    /** Mark a deployment as pinning the revision it activated. */
+    pin(revisionId: string, deploymentId: string): Promise<void>;
+    /** Rollback reselects the revision the target deployment pinned; returns it when reselved. */
+    rollback(deploymentId: string): Promise<KnowledgeRevision | undefined>;
+    /** Remove revisions that are neither active nor pinned. Returns the removed count. */
+    collectGarbage(): Promise<number>;
+    /** Active revision for a scope/component, if any. */
+    active(scope: KnowledgeScope, componentName: string): Promise<KnowledgeRevision | undefined>;
+    /** A specific revision by id (diagnostics/status only). */
+    record(revisionId: string): Promise<RevisionRecord | undefined>;
+    /** Delete a revision record; refuses an active or pinned one. */
+    delete(revisionId: string): Promise<void>;
+    /**
+     * Persist the revision's sealed document text so any instance can rebuild the bundled
+     * index (ADR 0202 D5 as amended). Idempotent full replacement per revision.
+     */
+    stageDocuments(revisionId: string, documents: readonly StagedDocument[]): Promise<void>;
+    /**
+     * The staged text for a revision. Throws `KnowledgeError` when the revision is unknown or
+     * its text was never staged — a rebuild must fail loudly, never index an empty corpus.
+     */
+    documents(revisionId: string): Promise<readonly StagedDocument[]>;
+}
+export declare function documentsContentHash(documentHashes: readonly string[]): string;
+export declare class InMemoryKnowledgeRevisionStore implements KnowledgeRevisionStore {
+    private readonly records;
+    private readonly leases;
+    private readonly deploymentPins;
+    /** revisionId → path → sealed text; sealed even in memory so the codec path is exercised. */
+    private readonly sealedText;
+    private readonly codec;
+    constructor(codec?: DocumentTextCodec);
+    stage(input: StageRevisionInput): Promise<KnowledgeRevision>;
+    acquireLease(scope: KnowledgeScope, componentName: string, holder: string): Promise<LeaseTicket>;
+    releaseLease(ticket: LeaseTicket): Promise<void>;
+    activate(scope: KnowledgeScope, componentName: string, revisionId: string, deploymentId: string): Promise<void>;
+    pin(revisionId: string, deploymentId: string): Promise<void>;
+    rollback(deploymentId: string): Promise<KnowledgeRevision | undefined>;
+    collectGarbage(): Promise<number>;
+    active(scope: KnowledgeScope, componentName: string): Promise<KnowledgeRevision | undefined>;
+    record(revisionId: string): Promise<RevisionRecord | undefined>;
+    delete(revisionId: string): Promise<void>;
+    stageDocuments(revisionId: string, documents: readonly StagedDocument[]): Promise<void>;
+    documents(revisionId: string): Promise<readonly StagedDocument[]>;
+}
+//# sourceMappingURL=revision-store.d.ts.map

package/node_modules/@noodle-borg/knowledge/dist/revision-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-store.d.ts","sourceRoot":"","sources":["../src/revision-store.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGpE;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,yBAAyB,EAAE,iBAGvC,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,sFAAsF;IACtF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAChD,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAWD,MAAM,WAAW,sBAAsB;IACrC,6FAA6F;IAC7F,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7D,kFAAkF;IAClF,YAAY,CAAC,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACjG,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,qFAAqF;IACrF,QAAQ,CACN,KAAK,EAAE,cAAc,EACrB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,8DAA8D;IAC9D,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,8FAA8F;IAC9F,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IACvE,sFAAsF;IACtF,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,qDAAqD;IACrD,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAC7F,2DAA2D;IAC3D,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAChE,iEAAiE;IACjE,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C;;;OAGG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,cAAc,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF;;;OAGG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC;CACnE;AAED,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAE9E;AAID,qBAAa,8BAA+B,YAAW,sBAAsB;IAC3E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6D;IACpF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,6FAA6F;IAC7F,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;IACrE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;gBAE9B,KAAK,GAAE,iBAA6C;IAI1D,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAoB5D,YAAY,CAChB,KAAK,EAAE,cAAc,EACrB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,WAAW,CAAC;IAajB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,QAAQ,CACZ,KAAK,EAAE,cAAc,EACrB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAmBV,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ5D,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAoBtE,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAYjC,MAAM,CACV,KAAK,EAAE,cAAc,EACrB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAUnC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAM/D,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,cAAc,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvF,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC;CAoBxE"}

package/node_modules/@noodle-borg/knowledge/dist/revision-store.js

@@ -0,0 +1,167 @@
+/**
+ * Deploy-coupled knowledge revision store (ADR 0202 publication transaction): staged/active
+ * state, content-hash reuse, publication leases, positive-predicate verification, atomic
+ * artifact+revision activation, deployment pins, rollback pairing, retention, and GC.
+ *
+ * The store owns *coordination*; the `KnowledgeIndex` port owns provider bytes. A deployment
+ * stages through the port, records the revision here, verifies, then activates both as one
+ * transaction; failure retains the previous pair.
+ */
+import { createHash } from 'node:crypto';
+import { knowledgeScopeKey } from './ir.js';
+import { KnowledgeError } from './ports.js';
+export const identityDocumentTextCodec = {
+    seal: (plaintext) => plaintext,
+    open: (sealed) => sealed,
+};
+export function documentsContentHash(documentHashes) {
+    return createHash('sha256').update(documentHashes.join('\n')).digest('hex');
+}
+const LEASE_TIMEOUT_MS = 60_000;
+export class InMemoryKnowledgeRevisionStore {
+    records = new Map();
+    leases = new Map();
+    deploymentPins = new Map();
+    /** revisionId → path → sealed text; sealed even in memory so the codec path is exercised. */
+    sealedText = new Map();
+    codec;
+    constructor(codec = identityDocumentTextCodec) {
+        this.codec = codec;
+    }
+    async stage(input) {
+        const scopeKey = knowledgeScopeKey(input.scope, input.componentName);
+        const existing = [...this.records.values()].find((record) => knowledgeScopeKey(record.revision.scope, record.revision.componentName) === scopeKey &&
+            record.contentHash === input.contentHash);
+        if (existing !== undefined)
+            return existing.revision;
+        const record = {
+            revision: input.revision,
+            contentHash: input.contentHash,
+            state: 'staged',
+            pins: new Set(),
+            stagedAt: Date.now(),
+        };
+        this.records.set(input.revision.revisionId, record);
+        return input.revision;
+    }
+    async acquireLease(scope, componentName, holder) {
+        const scopeKey = knowledgeScopeKey(scope, componentName);
+        for (;;) {
+            const existing = this.leases.get(scopeKey);
+            const now = Date.now();
+            if (existing === undefined || now - existing.acquiredAt > LEASE_TIMEOUT_MS) {
+                this.leases.set(scopeKey, { holder, acquiredAt: now });
+                return { scopeKey, leaseId: `${scopeKey}:${now}:${holder}` };
+            }
+            await new Promise((resolve) => setTimeout(resolve, 5));
+        }
+    }
+    async releaseLease(ticket) {
+        this.leases.delete(ticket.scopeKey);
+    }
+    async activate(scope, componentName, revisionId, deploymentId) {
+        const record = this.records.get(revisionId);
+        if (record === undefined) {
+            throw new KnowledgeError('not-found', `revision ${revisionId} is not staged`);
+        }
+        const scopeKey = knowledgeScopeKey(scope, componentName);
+        const currentActive = [...this.records.values()].find((candidate) => candidate.state === 'active' &&
+            knowledgeScopeKey(candidate.revision.scope, candidate.revision.componentName) === scopeKey);
+        if (currentActive !== undefined && currentActive.revision.revisionId !== revisionId) {
+            currentActive.state = 'retired';
+        }
+        record.state = 'active';
+        record.pins.add(deploymentId);
+        this.deploymentPins.set(deploymentId, revisionId);
+    }
+    async pin(revisionId, deploymentId) {
+        const record = this.records.get(revisionId);
+        if (record === undefined)
+            throw new KnowledgeError('not-found', `revision ${revisionId} is not staged`);
+        record.pins.add(deploymentId);
+        this.deploymentPins.set(deploymentId, revisionId);
+    }
+    async rollback(deploymentId) {
+        const revisionId = this.deploymentPins.get(deploymentId);
+        if (revisionId === undefined)
+            return undefined;
+        const record = this.records.get(revisionId);
+        if (record === undefined)
+            return undefined;
+        const scopeKey = knowledgeScopeKey(record.revision.scope, record.revision.componentName);
+        for (const candidate of this.records.values()) {
+            if (candidate.state === 'active' &&
+                knowledgeScopeKey(candidate.revision.scope, candidate.revision.componentName) ===
+                    scopeKey &&
+                candidate.revision.revisionId !== revisionId) {
+                candidate.state = 'retired';
+            }
+        }
+        record.state = 'active';
+        return record.revision;
+    }
+    async collectGarbage() {
+        let removed = 0;
+        for (const [revisionId, record] of this.records) {
+            if (record.state !== 'active' && record.pins.size === 0) {
+                this.records.delete(revisionId);
+                this.sealedText.delete(revisionId);
+                removed += 1;
+            }
+        }
+        return removed;
+    }
+    async active(scope, componentName) {
+        const scopeKey = knowledgeScopeKey(scope, componentName);
+        const record = [...this.records.values()].find((candidate) => candidate.state === 'active' &&
+            knowledgeScopeKey(candidate.revision.scope, candidate.revision.componentName) === scopeKey);
+        return record?.revision;
+    }
+    async record(revisionId) {
+        const record = this.records.get(revisionId);
+        if (record === undefined)
+            return undefined;
+        return { ...record, pins: new Set(record.pins) };
+    }
+    async delete(revisionId) {
+        const record = this.records.get(revisionId);
+        if (record === undefined)
+            return;
+        if (record.state === 'active') {
+            throw new KnowledgeError('store', 'cannot delete the active revision');
+        }
+        if (record.pins.size > 0) {
+            throw new KnowledgeError('store', 'cannot delete a deployment-pinned revision');
+        }
+        this.records.delete(revisionId);
+        this.sealedText.delete(revisionId);
+    }
+    async stageDocuments(revisionId, documents) {
+        if (!this.records.has(revisionId)) {
+            throw new KnowledgeError('not-found', `revision ${revisionId} is not staged`);
+        }
+        const sealed = new Map();
+        for (const document of documents) {
+            sealed.set(document.descriptor.path, this.codec.seal(Buffer.from(document.text, 'utf8')));
+        }
+        this.sealedText.set(revisionId, sealed);
+    }
+    async documents(revisionId) {
+        const record = this.records.get(revisionId);
+        if (record === undefined) {
+            throw new KnowledgeError('not-found', `revision ${revisionId} is not staged`);
+        }
+        const sealed = this.sealedText.get(revisionId);
+        if (sealed === undefined && record.revision.documents.length > 0) {
+            throw new KnowledgeError('store', `revision ${revisionId} has no staged document text`);
+        }
+        return record.revision.documents.map((descriptor) => {
+            const ciphertext = sealed?.get(descriptor.path);
+            if (ciphertext === undefined) {
+                throw new KnowledgeError('store', `revision ${revisionId} is missing text for ${descriptor.path}`);
+            }
+            return { descriptor, text: this.codec.open(ciphertext).toString('utf8') };
+        });
+    }
+}
+//# sourceMappingURL=revision-store.js.map

package/node_modules/@noodle-borg/knowledge/dist/revision-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-store.js","sourceRoot":"","sources":["../src/revision-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAa5C,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS;IAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM;CACzB,CAAC;AAsEF,MAAM,UAAU,oBAAoB,CAAC,cAAiC;IACpE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,MAAM,OAAO,8BAA8B;IACxB,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC3C,MAAM,GAAG,IAAI,GAAG,EAAkD,CAAC;IACnE,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5D,6FAA6F;IAC5E,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IACpD,KAAK,CAAoB;IAE1C,YAAY,QAA2B,yBAAyB;QAC9D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAyB;QACnC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC9C,CAAC,MAAM,EAAE,EAAE,CACT,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,QAAQ;YACpF,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAC3C,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAErD,MAAM,MAAM,GAAkB;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,IAAI,GAAG,EAAU;YACvB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC,QAAQ,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAqB,EACrB,aAAqB,EACrB,MAAc;QAEd,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACzD,SAAS,CAAC;YACR,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,QAAQ,KAAK,SAAS,IAAI,GAAG,GAAG,QAAQ,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;gBAC3E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,IAAI,GAAG,IAAI,MAAM,EAAE,EAAE,CAAC;YAC/D,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAmB;QACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,KAAqB,EACrB,aAAqB,EACrB,UAAkB,EAClB,YAAoB;QAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,YAAY,UAAU,gBAAgB,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACnD,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,KAAK,KAAK,QAAQ;YAC5B,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,QAAQ,CAC7F,CAAC;QACF,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACpF,aAAa,CAAC,KAAK,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,YAAoB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YACtB,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,YAAY,UAAU,gBAAgB,CAAC,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,YAAoB;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACzF,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,IACE,SAAS,CAAC,KAAK,KAAK,QAAQ;gBAC5B,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC;oBAC3E,QAAQ;gBACV,SAAS,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU,EAC5C,CAAC;gBACD,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;QACxB,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACnC,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAqB,EACrB,aAAqB;QAErB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC5C,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,KAAK,KAAK,QAAQ;YAC5B,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,QAAQ,CAC7F,CAAC;QACF,OAAO,MAAM,EAAE,QAAQ,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,MAAM,GAA8B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,4CAA4C,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,SAAoC;QAC3E,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,YAAY,UAAU,gBAAgB,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,YAAY,UAAU,gBAAgB,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,YAAY,UAAU,8BAA8B,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YAClD,MAAM,UAAU,GAAG,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,cAAc,CACtB,OAAO,EACP,YAAY,UAAU,wBAAwB,UAAU,CAAC,IAAI,EAAE,CAChE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/node_modules/@noodle-borg/knowledge/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@noodle-borg/knowledge",
+  "version": "0.0.0",
+  "private": true,
+  "license": "Apache-2.0",
+  "type": "module",
+  "engines": {
+    "node": ">=24"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./conformance": {
+      "types": "./dist/conformance.d.ts",
+      "import": "./dist/conformance.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@types/node": "^24.13.1",
+    "@types/pg": "^8.20.0"
+  }
+}

package/node_modules/@noodle-borg/module/dist/contract.d.ts

@@ -14,6 +14,8 @@ export interface ModuleRoute {
 export interface ModuleRouteContext {
     readonly logger: ModuleLogger;
     readonly controlPlane?: ControlPlaneAuthorizer;
+    /** Host audit sink for route-emitted audit events; absent means the host has no audit trail. */
+    readonly audit?: AuditSink;
 }
 export interface ControlPlaneAuthorizer {
     authorize(req: IncomingMessage): Promise<ControlPlaneAuthResult> | ControlPlaneAuthResult;