@north-light/cli 0.0.0 → 0.3.413

package/dist/core/canvas/migrations.js

@@ -0,0 +1,989 @@
+var re=Object.defineProperty;var E=(e,t)=>re(e,"name",{value:t,configurable:!0});import{randomBytes as P}from"node:crypto";import{parseScope as ae}from"@north-light/identity";import{importNodeSqlAuthority as de,recreateNodeRowsView as _e}from"./node-sql-migration.js";import{migrateRecoveryWitnesses as Ne}from"./recovery.js";import{migrateMessagingState as ce}from"./deliveries.js";import{migrateHumanRequestsState as Le}from"../human/requests.js";import{existsSync as I,readFileSync as k,readdirSync as M,realpathSync as le,statSync as ue}from"node:fs";import{basename as pe,join as H,resolve as Y}from"node:path";import{isSafeNodeId as Re,nodesRoot as y,nodeMetaPath as v}from"./paths.js";import{convertLegacyEdges as Ae}from"../../migrations/004-canvas-documents/legacy-edges.js";import{customExtensionPaths as Oe}from"./extensions.js";import{readMetaObject as K,updateJsonFileDurably as q,withMetaLock as Ie,writeMetaObjectLocked as me}from"./meta-file.js";function Xe(e){e.exec(`
+CREATE TABLE IF NOT EXISTS nodes (
+  node_id    TEXT PRIMARY KEY,
+  name       TEXT NOT NULL,
+  kind       TEXT NOT NULL,
+  mode       TEXT NOT NULL DEFAULT 'base',
+  lifecycle  TEXT NOT NULL DEFAULT 'terminal',
+  status     TEXT NOT NULL DEFAULT 'active',
+  cwd        TEXT NOT NULL,
+  parent     TEXT,
+  created    TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS edges (
+  type     TEXT NOT NULL,           -- 'subscribes_to' | 'spawned_by'
+  from_id  TEXT NOT NULL,
+  to_id    TEXT NOT NULL,
+  active   INTEGER NOT NULL DEFAULT 1,
+  created  TEXT NOT NULL,
+  PRIMARY KEY (type, from_id, to_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_edges_to   ON edges(type, to_id);
+CREATE INDEX IF NOT EXISTS idx_edges_from ON edges(type, from_id);
+CREATE INDEX IF NOT EXISTS idx_nodes_status ON nodes(status);
+`)}E(Xe,"baselineSchema");function B(e,t){return new Set(e.prepare(`PRAGMA table_info(${t})`).all().map(n=>n.name))}E(B,"tableColumns");function $(e,t,n,o){t.has(n)||(e.exec(o),t.add(n))}E($,"addColumnIfMissing");function u(e){return B(e,"nodes")}E(u,"nodeColumns");const a=$;function fe(e){const t=u(e);a(e,t,"intent","ALTER TABLE nodes ADD COLUMN intent TEXT;"),a(e,t,"pi_pid","ALTER TABLE nodes ADD COLUMN pi_pid INTEGER;"),a(e,t,"window","ALTER TABLE nodes ADD COLUMN window TEXT;"),a(e,t,"tmux_session","ALTER TABLE nodes ADD COLUMN tmux_session TEXT;")}E(fe,"addRuntimeColumns");function Ce(e){const t=y();if(!I(t))return;const n=e.prepare('UPDATE nodes SET intent = ?, pi_pid = ?, "window" = ?, tmux_session = ? WHERE node_id = ?');for(const o of M(t)){const s=v(o);if(!I(s))continue;let i;try{i=JSON.parse(k(s,"utf8"))}catch{continue}n.run(i.intent??null,i.pi_pid??null,i.window??null,i.tmux_session??null,o)}}E(Ce,"backfillRuntime");function Ue(e){b(e,3,()=>{if(!(e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'edges'").get()!==void 0)){e.exec(`
+CREATE TABLE edges (
+  type     TEXT NOT NULL,
+  from_id  TEXT NOT NULL,
+  to_id    TEXT NOT NULL,
+  active   INTEGER NOT NULL DEFAULT 1,
+  created  TEXT NOT NULL,
+  PRIMARY KEY (type, from_id, to_id),
+  FOREIGN KEY (from_id) REFERENCES nodes(node_id) ON DELETE CASCADE,
+  FOREIGN KEY (to_id)   REFERENCES nodes(node_id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_edges_to   ON edges(type, to_id);
+CREATE INDEX IF NOT EXISTS idx_edges_from ON edges(type, from_id);
+`);return}const n=e.prepare(`SELECT COUNT(*) AS n FROM edges
+           WHERE from_id IN (SELECT node_id FROM nodes)
+             AND to_id   IN (SELECT node_id FROM nodes)`).get().n;e.exec(`
+CREATE TABLE edges_new (
+  type     TEXT NOT NULL,
+  from_id  TEXT NOT NULL,
+  to_id    TEXT NOT NULL,
+  active   INTEGER NOT NULL DEFAULT 1,
+  created  TEXT NOT NULL,
+  PRIMARY KEY (type, from_id, to_id),
+  FOREIGN KEY (from_id) REFERENCES nodes(node_id) ON DELETE CASCADE,
+  FOREIGN KEY (to_id)   REFERENCES nodes(node_id) ON DELETE CASCADE
+);
+INSERT INTO edges_new (type, from_id, to_id, active, created)
+  SELECT type, from_id, to_id, active, created FROM edges
+  WHERE from_id IN (SELECT node_id FROM nodes)
+    AND to_id   IN (SELECT node_id FROM nodes);
+DROP TABLE edges;
+ALTER TABLE edges_new RENAME TO edges;
+CREATE INDEX IF NOT EXISTS idx_edges_to   ON edges(type, to_id);
+CREATE INDEX IF NOT EXISTS idx_edges_from ON edges(type, from_id);
+`);const o=e.prepare("SELECT COUNT(*) AS n FROM edges").get().n;if(o!==n)throw new Error(`edges FK rebuild lost rows: expected ${n} non-orphan edge(s), got ${o}`);const s=e.prepare("PRAGMA foreign_key_check").all();if(s.length>0)throw new Error(`edges FK rebuild left ${s.length} foreign-key violation(s)`)})}E(Ue,"edgesForeignKeyCascade");function Se(e){const t=u(e);a(e,t,"pane","ALTER TABLE nodes ADD COLUMN pane TEXT;")}E(Se,"addPaneColumn");function De(e){e.exec(`
+CREATE TABLE IF NOT EXISTS focuses (
+  focus_id  TEXT PRIMARY KEY,   -- stable internal id for the viewport
+  pane      TEXT,               -- the durable %pane_id realizing the focus
+  session   TEXT,               -- derived cache of the user session (reconciled from pane)
+  node_id   TEXT NOT NULL UNIQUE -- the node shown; UNIQUE \u2192 a node occupies <=1 focus
+);
+`)}E(De,"addFocusesTable");function ge(e){e.exec(`
+CREATE TABLE IF NOT EXISTS wakeups (
+  wakeup_id  TEXT PRIMARY KEY,
+  node_id    TEXT,                       -- TARGET + node-anchored cancel anchor; NULL = canvas-detached
+  owner_id   TEXT NOT NULL,              -- ARMER; set on EVERY row. PLAIN column, NO FK (design D1/D2)
+  fire_at    TEXT NOT NULL,              -- ISO 8601 UTC; NEXT occurrence; lexicographic <=
+  kind       TEXT NOT NULL,              -- 'bare' | 'noted' | 'deadline' | 'spawn'
+  recur      TEXT,                       -- NULL = one-shot; else the pinned recur JSON
+  payload    TEXT,                       -- JSON per kind (shared contracts)
+  created    TEXT NOT NULL,
+  FOREIGN KEY (node_id) REFERENCES nodes(node_id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_wakeups_fire  ON wakeups(fire_at);                 -- per-tick due query
+CREATE INDEX IF NOT EXISTS idx_wakeups_node  ON wakeups(node_id);                 -- by-node cancel / list
+CREATE INDEX IF NOT EXISTS idx_wakeups_owner ON wakeups(owner_id);               -- by-owner reap (ruling A)
+CREATE UNIQUE INDEX IF NOT EXISTS idx_wakeups_deadline ON wakeups(node_id) WHERE kind = 'deadline';
+`)}E(ge,"appendWakeupsTable");function we(e){e.exec(`
+CREATE TABLE IF NOT EXISTS triggers (
+  trigger_id        TEXT PRIMARY KEY,
+  owner_id          TEXT NOT NULL,
+  node_id           TEXT,                       -- TARGET + node-anchored cancel anchor; NULL = canvas-detached
+  action            TEXT NOT NULL,               -- 'msg' | 'new'
+  action_mode       TEXT NOT NULL,               -- 'inbox_message' | 'fresh_revive' | 'deadline_message' | 'node_birth'
+  trigger_type      TEXT NOT NULL,               -- 'at' | 'every' | 'when' | 'until'
+  fire_at           TEXT,                        -- clock triggers: NEXT occurrence, ISO 8601 UTC; lexicographic <=
+  recur             TEXT,                        -- NULL = one-shot; else the recur JSON the daemon advances
+  payload           TEXT,                        -- JSON action payload, discriminated by action_mode
+  when_script       TEXT,                        -- predicate triggers: the --when bash source
+  eval_every        TEXT,                        -- predicate triggers: evaluation cadence (recur-shaped JSON)
+  next_eval_at      TEXT,                        -- predicate triggers: next evaluation instant
+  timeout_at        TEXT,                        -- predicate triggers: wall-clock expiry
+  eval_state        TEXT NOT NULL DEFAULT 'idle', -- 'idle' | 'running'
+  eval_started_at   TEXT,
+  eval_pid          INTEGER,
+  eval_lease_owner  TEXT,
+  last_eval_at      TEXT,
+  last_exit         INTEGER,
+  last_stderr       TEXT,
+  created           TEXT NOT NULL,
+  FOREIGN KEY (node_id) REFERENCES nodes(node_id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_triggers_fire  ON triggers(fire_at);                  -- clock per-tick due query
+CREATE INDEX IF NOT EXISTS idx_triggers_node  ON triggers(node_id);                  -- by-node cancel / list
+CREATE INDEX IF NOT EXISTS idx_triggers_owner ON triggers(owner_id);                 -- by-owner reap
+CREATE INDEX IF NOT EXISTS idx_triggers_eval  ON triggers(eval_state, next_eval_at); -- predicate due query
+CREATE UNIQUE INDEX IF NOT EXISTS idx_triggers_deadline ON triggers(node_id) WHERE action_mode = 'deadline_message';
+
+INSERT INTO triggers (trigger_id, owner_id, node_id, action, action_mode, trigger_type, fire_at, recur, payload, created)
+SELECT
+  wakeup_id,
+  owner_id,
+  node_id,
+  CASE kind WHEN 'spawn' THEN 'new' ELSE 'msg' END,
+  CASE kind
+    WHEN 'bare' THEN 'fresh_revive'
+    WHEN 'noted' THEN 'inbox_message'
+    WHEN 'deadline' THEN 'deadline_message'
+    WHEN 'spawn' THEN 'node_birth'
+  END,
+  CASE WHEN kind = 'deadline' THEN 'until' WHEN recur IS NULL THEN 'at' ELSE 'every' END,
+  fire_at,
+  recur,
+  payload,
+  created
+FROM wakeups;
+
+DROP TABLE wakeups;
+`)}E(we,"migrateWakeupsToTriggers");function ye(e){const t=u(e);a(e,t,"host_kind","ALTER TABLE nodes ADD COLUMN host_kind TEXT;")}E(ye,"addHostKindColumn");function ve(e){e.exec(`
+CREATE TABLE IF NOT EXISTS canvas_meta (
+  key   TEXT PRIMARY KEY,
+  value TEXT NOT NULL
+);
+`)}E(ve,"addCanvasMetaTable");function he(e){const t=u(e);a(e,t,"profile_id","ALTER TABLE nodes ADD COLUMN profile_id TEXT;")}E(he,"addProfileIdColumn");function xe(e){const t=u(e);a(e,t,"pi_pid_identity","ALTER TABLE nodes ADD COLUMN pi_pid_identity TEXT;")}E(xe,"addPidIdentityColumn");function Fe(e){const t=u(e);a(e,t,"waiting_for","ALTER TABLE nodes ADD COLUMN waiting_for TEXT;")}E(Fe,"addMessageWaitColumn");function J(e){const t=u(e);if(t.size===0)return;a(e,t,"final_report","ALTER TABLE nodes ADD COLUMN final_report TEXT;"),a(e,t,"finalized_at","ALTER TABLE nodes ADD COLUMN finalized_at TEXT;");const n=e.prepare("SELECT node_id FROM nodes WHERE status = 'done' AND final_report IS NULL").all(),o=e.prepare("UPDATE nodes SET final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL");for(const{node_id:s}of n){const i=H(y(),s,"reports");if(!I(i))continue;let T=null;for(const d of M(i))if(d.endsWith(".md"))try{const _=k(H(i,d),"utf8"),N=/^---\nnode: [^\n]+\nkind: final\nts: ([^\n]+)\n---\n/.exec(_);if(N===null||Number.isNaN(Date.parse(N[1])))continue;const c={name:d,ts:N[1]};(T===null||c.ts>T.ts||c.ts===T.ts&&c.name>T.name)&&(T=c)}catch{}T!==null&&o.run(T.name,T.ts,s)}}E(J,"addCanonicalFinalColumns");function ke(e){const t=y();if(I(t))for(const n of M(t)){const o=v(n);I(o)&&q(o,s=>{const i=s.launch;if(typeof i!="object"||i===null||Array.isArray(i))return!1;const T=i.extensions;if(!Array.isArray(T)||!T.every(_=>typeof _=="string"))return!1;const d=Oe(T);return d.length===T.length?!1:(i.extensions=d,!0)})}}E(ke,"normalizePersistedLaunchExtensions");function Me(e){const t=u(e);a(e,t,"waiting_for_generation","ALTER TABLE nodes ADD COLUMN waiting_for_generation INTEGER NOT NULL DEFAULT 0;")}E(Me,"addMessageWaitGenerationColumn");function je(e){e.exec(`
+CREATE TABLE IF NOT EXISTS consult_outbox (
+  node_id      TEXT PRIMARY KEY,   -- legacy work node id
+  dir          TEXT NOT NULL,      -- legacy ticket directory
+  root         TEXT NOT NULL,      -- legacy registered root
+  request_id   TEXT NOT NULL,      -- legacy request id
+  status       TEXT NOT NULL,      -- armed | pending | acked | errored | canceled
+  final_report TEXT,               -- legacy final report basename
+  updated_at   TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_status ON consult_outbox(status);
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir ON consult_outbox(dir);
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir_request_status ON consult_outbox(dir, request_id, status);
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir_status ON consult_outbox(dir, status);
+`)}E(je,"addHumanWorkOutboxTable");function Ge(e){const t=B(e,"consult_outbox"),n=E((o,s)=>$(e,t,o,s),"add");n("work_kind","ALTER TABLE consult_outbox ADD COLUMN work_kind TEXT NOT NULL DEFAULT 'follow_up';"),n("interaction_id","ALTER TABLE consult_outbox ADD COLUMN interaction_id TEXT;"),n("generation_id","ALTER TABLE consult_outbox ADD COLUMN generation_id TEXT;"),n("interaction_snapshot","ALTER TABLE consult_outbox ADD COLUMN interaction_snapshot TEXT;"),n("handler_command","ALTER TABLE consult_outbox ADD COLUMN handler_command TEXT;"),n("handler_args_json","ALTER TABLE consult_outbox ADD COLUMN handler_args_json TEXT;"),n("claim_token","ALTER TABLE consult_outbox ADD COLUMN claim_token TEXT;"),e.exec(`
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_status ON consult_outbox(work_kind, status);
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_dir_status ON consult_outbox(dir, work_kind, status);
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_request_status ON consult_outbox(dir, request_id, work_kind, status);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_consult_outbox_visual_request ON consult_outbox(dir, request_id, work_kind) WHERE work_kind = 'visual';
+`)}E(Ge,"addHumanWorkColumns");function He(e){e.exec(`
+CREATE INDEX IF NOT EXISTS idx_nodes_parent  ON nodes(parent);
+CREATE INDEX IF NOT EXISTS idx_nodes_created ON nodes(created);
+`)}E(He,"addNodeParentCreatedIndexes");function Be(e){e.exec(`
+CREATE TABLE IF NOT EXISTS crons (
+  cron_id          TEXT PRIMARY KEY,
+  name             TEXT NOT NULL,          -- agent-legible label; how it shows in list
+  created_by       TEXT,                   -- provenance only, NO FK, never cascades
+  command          TEXT NOT NULL,          -- the bash
+
+  fire_at          TEXT NOT NULL,          -- next occurrence, ISO 8601 UTC; lexicographic <=
+  recur            TEXT,                   -- NULL = one-shot; else recur JSON the daemon advances
+  tz               TEXT,                   -- IANA zone for calendar cadence
+  expires_at       TEXT,                   -- clock bound; row is deleted when passed
+
+  anchor_node      TEXT,                   -- opt-in node coupling; NULL = outlives every node
+  cancel_on_wake   INTEGER NOT NULL DEFAULT 0,  -- deleted when anchor revives (deadline rule)
+
+  cwd              TEXT NOT NULL,          -- snapshotted at creation
+  env_json         TEXT,
+  profile          TEXT,
+  scope            TEXT NOT NULL DEFAULT 'profile',   -- 'profile' | 'global'
+
+  run_timeout_s    INTEGER NOT NULL DEFAULT 300,
+  overlap          TEXT NOT NULL DEFAULT 'skip',      -- 'skip' | 'queue' | 'replace'
+  on_output        TEXT NOT NULL DEFAULT 'on-failure',-- 'silent'|'on-failure'|'always'|'on-change'
+  sink             TEXT NOT NULL,          -- JSON: {node}|{spawn,kind,...}|{human}
+  tier             TEXT NOT NULL DEFAULT 'normal',
+  last_output_hash TEXT,                   -- drives 'on-change'
+
+  state            TEXT NOT NULL DEFAULT 'active',    -- 'active' | 'paused'
+  run_state        TEXT NOT NULL DEFAULT 'idle',      -- 'idle' | 'running'
+  run_pid          INTEGER,
+  run_pid_identity TEXT,                  -- v23: launch-time pid fingerprint; a kill requires a MATCH
+  run_started_at   TEXT,
+  run_lease_owner  TEXT,
+  run_out_of_band  INTEGER NOT NULL DEFAULT 0,        -- v24: this lease is a manual cron run, not a scheduled fire
+
+  created          TEXT NOT NULL,
+  updated          TEXT NOT NULL,
+  FOREIGN KEY (anchor_node) REFERENCES nodes(node_id) ON DELETE CASCADE
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_crons_deadline ON crons(anchor_node) WHERE cancel_on_wake = 1;
+CREATE INDEX IF NOT EXISTS idx_crons_fire ON crons(fire_at);
+
+CREATE TABLE IF NOT EXISTS cron_runs (                -- bounded ring, last 20 per cron
+  run_id       TEXT PRIMARY KEY,
+  cron_id      TEXT NOT NULL,
+  started      TEXT NOT NULL,
+  finished     TEXT,
+  duration_ms  INTEGER,
+  exit_code    INTEGER,                    -- NULL while running; -1 for timeout kill
+  stdout_head  TEXT,                       -- capped at 4KB
+  stderr_head  TEXT,
+  delivered    TEXT,                       -- what the sink did, or why it didn't
+  FOREIGN KEY (cron_id) REFERENCES crons(cron_id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_cron_runs_cron ON cron_runs(cron_id, started);
+`)}E(Be,"addCronsTables");function U(e){return`'${e.replace(/'/g,`'"'"'`)}'`}E(U,"shellSingleQuote");function be(e,t){let n=0;for(;;){const o=`${t}_${n}`;if(!e.split(`
+`).includes(o))return o;n++}}E(be,"uniqueHeredocDelimiter");function Q(e,t,n){const o=be(t,n);return`${e} <<'${o}'
+${t}
+${o}`}E(Q,"heredocCommand");function We(e){if(typeof e!="string")return{};try{const t=JSON.parse(e);return typeof t!="object"||t===null||Array.isArray(t)?{}:t}catch{return{}}}E(We,"migrationPayload");function A(e,t,n){const o=e[t];if(typeof o!="string"||o.trim()==="")throw new Error(`trigger ${n} payload requires non-empty ${t}`);return o}E(A,"requiredString");function j(e,t){const n=e[t];return typeof n=="string"&&n.trim()!==""?n:void 0}E(j,"optionalString");function S(e,t){const n=e[t];return typeof n=="string"&&n.trim()!==""?n:void 0}E(S,"optionalColumn");function z(e,t,n,o){return Q(`crtr node message send --to ${U(e)} --tier ${U(t)}`,n,`CRTR_MIGRATED_${o.replace(/[^A-Za-z0-9]/g,"_")}`)}E(z,"migratedMessageCommand");function Pe(e,t){return`printf '%s\\n' "$CRTR_GATE_STDOUT" | crtr node message send --to ${U(e)} --tier ${U(t)}`}E(Pe,"migratedGateStdoutMessageCommand");function Ye(e,t){const n=[`crtr node new --kind ${U(A(e,"kind",t))}`],o=[["mode","mode"],["cwd","cwd"],["name","name"],["parent","parent"],["worktreeBase","worktree"],["forkFrom","fork-from"],["model","model"],["profile","profile"],["situationalContext","situational-context"]];for(const[i,T]of o){const d=j(e,i);d!==void 0&&n.push(`--${T} ${U(d)}`)}e.root===!0&&n.push("--root");const s=A(e,"prompt",t);return Q(n.join(" "),s,`CRTR_MIGRATED_${t.replace(/[^A-Za-z0-9]/g,"_")}`)}E(Ye,"migratedSpawnCommand");const V="migration.v22.skipped";function Ke(e){const t=e.prepare("SELECT cwd FROM nodes WHERE parent IS NULL ORDER BY created LIMIT 1").get();return(t!==void 0?S(t,"cwd"):void 0)??process.cwd()}E(Ke,"ambientMigrationCwd");function qe(e){let t;try{t=e.prepare("SELECT eval_pid FROM triggers WHERE eval_state = 'running' AND eval_pid IS NOT NULL").all()}catch{return}for(const n of t){const o=n.eval_pid;if(!(typeof o!="number"||!Number.isInteger(o)||o<=1))try{process.kill(-o,"SIGTERM")}catch{}}}E(qe,"reapRunningPredicateEvaluations");function $e(e){const t=[],n=e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'triggers'").get()!==void 0;n&&qe(e);let o=[];if(n)try{o=e.prepare("SELECT * FROM triggers ORDER BY created, trigger_id").all()}catch(T){t.push({trigger_id:"<unreadable table>",reason:`triggers table could not be read: ${T instanceof Error?T.message:String(T)}`})}const s=Ke(e),i=e.prepare(`
+INSERT OR REPLACE INTO crons (
+  cron_id, name, created_by, command, fire_at, recur, tz, expires_at,
+  anchor_node, cancel_on_wake, cwd, env_json, profile, scope,
+  run_timeout_s, overlap, on_output, sink, tier, created, updated
+) VALUES (?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, NULL, ?, 'profile', ?, 'skip', 'on-failure', '{}', ?, ?, ?)`);for(const T of o){const d=S(T,"trigger_id");if(d===void 0){t.push({trigger_id:"<unidentified row>",reason:"row carries no trigger_id"});continue}try{Je(e,i,T,d,s)}catch(_){t.push({trigger_id:d,reason:_ instanceof Error?_.message:String(_)})}}t.length>0&&(e.prepare("INSERT INTO canvas_meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(V,JSON.stringify(t)),console.warn(`[canvas migration v22] ${t.length} retired schedule(s) could not be converted to crons and were dropped; see canvas_meta['${V}']: `+t.map(T=>`${T.trigger_id} (${T.reason})`).join("; "))),e.exec(`
+DROP INDEX IF EXISTS idx_triggers_fire;
+DROP INDEX IF EXISTS idx_triggers_node;
+DROP INDEX IF EXISTS idx_triggers_owner;
+DROP INDEX IF EXISTS idx_triggers_eval;
+DROP INDEX IF EXISTS idx_triggers_deadline;
+DROP TABLE IF EXISTS triggers;
+`)}E($e,"migrateTriggersToCrons");function Je(e,t,n,o,s){const i=A(n,"owner_id",o),T=e.prepare("SELECT cwd, profile_id FROM nodes WHERE node_id = ?").get(i),d=(T===void 0?void 0:S(T,"cwd"))??s,_=T===void 0?null:S(T,"profile_id")??null,N=S(n,"node_id")??null,c=A(n,"action",o),L=A(n,"action_mode",o),l=A(n,"trigger_type",o),O=We(n.payload),x=S(n,"created")??new Date().toISOString(),f=L==="deadline_message"?"urgent":j(O,"tier")??"normal",D=j(O,"label");let r,p,F=!1;if(c==="msg"&&(L==="inbox_message"||L==="deadline_message")){if(N===null)throw new Error("has no message target");const R=j(O,"body");R!==void 0?r=z(N,f,R,o):l==="when"?(F=!0,r=Pe(N,f)):r=z(N,f,D??"Scheduled message (no body was recorded when this schedule was armed).",o),p=D??(L==="deadline_message"?"deadline":"scheduled message")}else if(c==="msg"&&L==="fresh_revive"){if(N===null)throw new Error("has no revive target");r=`crtr node lifecycle revive ${U(N)} --fresh`,p=D??"scheduled fresh revive"}else if(c==="new"&&L==="node_birth")r=Ye(O,o),p=j(O,"name")??`scheduled ${A(O,"kind",o)} node`;else throw new Error(`has unsupported action ${c}/${L}`);let C,g,G=null;if(l==="when"){C=A(n,"next_eval_at",o),g=A(n,"eval_every",o),G=S(n,"timeout_at")??null;const R=A(n,"when_script",o);r=`${F?`if ! CRTR_GATE_STDOUT="$(
+${R}
+)"; then`:`if ! (
+${R}
+); then`}
+  exit 0
+fi
+{
+${r}
+} && crtr cron cancel "$CRTR_CRON_ID"`}else if(l==="at"||l==="every"||l==="until")C=A(n,"fire_at",o),g=l==="every"?A(n,"recur",o):null;else throw new Error(`has unknown timing type ${l}`);if(L==="deadline_message"&&N!==null){const R=e.prepare("SELECT cron_id FROM crons WHERE anchor_node = ? AND cancel_on_wake = 1 AND cron_id <> ?").get(N,o);if(R!==void 0)throw new Error(`node ${N} already has a migrated deadline (${String(R.cron_id)}); only one is allowed`)}t.run(o,p,i,r,C,g,G,N,L==="deadline_message"?1:0,d,_,300,f,x,x)}E(Je,"convertTriggerRow");function Qe(e){const t=B(e,"crons");t.size===0||t.has("run_pid_identity")||e.exec("ALTER TABLE crons ADD COLUMN run_pid_identity TEXT;")}E(Qe,"addCronRunPidIdentityColumn");function ze(e){const t=B(e,"crons");t.size!==0&&(t.has("run_out_of_band")||e.exec("ALTER TABLE crons ADD COLUMN run_out_of_band INTEGER NOT NULL DEFAULT 0;"),t.has("queued")&&e.exec("ALTER TABLE crons DROP COLUMN queued;"))}E(ze,"addCronOutOfBandColumn");function Ve(e){e.exec(`
+CREATE TABLE IF NOT EXISTS warm_pool (
+  node_id    TEXT PRIMARY KEY REFERENCES nodes(node_id) ON DELETE CASCADE,
+  recipe_key TEXT NOT NULL,   -- frozen launch tuple this spare was minted for
+  created    TEXT NOT NULL    -- ISO 8601, mint time (oldest spare claimed first)
+);
+CREATE INDEX IF NOT EXISTS idx_warm_pool_recipe ON warm_pool(recipe_key, created);
+`)}E(Ve,"addWarmPoolTable");function Ze(e){const t=e.prepare("SELECT node_id, dir, root, request_id, work_kind, status, final_report, updated_at FROM consult_outbox").all();e.exec(`
+CREATE TABLE consult_outbox_new (
+  node_id        TEXT PRIMARY KEY,
+  ticket_node_id TEXT NOT NULL,
+  request_id     TEXT NOT NULL,
+  work_kind      TEXT NOT NULL DEFAULT 'follow_up',
+  status         TEXT NOT NULL,
+  final_report   TEXT,
+  updated_at     TEXT NOT NULL
+);
+`);const n=e.prepare(`
+INSERT INTO consult_outbox_new (node_id, ticket_node_id, request_id, work_kind, status, final_report, updated_at)
+VALUES (?, ?, ?, ?, ?, ?, ?)`);let o=0;for(const s of t){const i=pe(s.dir);if(!(s.root===Y(s.root)&&s.dir===H(s.root,i))||!Re(i)){o+=1;continue}n.run(s.node_id,i,s.request_id,s.work_kind,s.status,s.final_report,s.updated_at)}o>0&&console.warn(`[canvas migration v26] dropped ${o} consult_outbox row(s) whose legacy ticket path cannot safely map to a ticket node id`),e.exec(`
+DROP TABLE consult_outbox;
+ALTER TABLE consult_outbox_new RENAME TO consult_outbox;
+
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_status ON consult_outbox(status);
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_status ON consult_outbox(work_kind, status);
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_ticket_status ON consult_outbox(ticket_node_id, work_kind, status);
+CREATE INDEX IF NOT EXISTS idx_consult_outbox_ticket_request_status ON consult_outbox(ticket_node_id, request_id, work_kind, status);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_consult_outbox_visual_request ON consult_outbox(ticket_node_id, request_id, work_kind) WHERE work_kind = 'visual';
+`)}E(Ze,"narrowHumanWorkOutbox");function et(e){e.exec(`
+CREATE TABLE IF NOT EXISTS reviews (
+  review_id            TEXT PRIMARY KEY,
+  idempotency_key      TEXT NOT NULL UNIQUE,
+  origin_kind          TEXT NOT NULL CHECK (origin_kind IN ('ticket', 'inline')),
+  origin_node_id       TEXT NOT NULL,
+  bridge_node_id       TEXT,
+  companion_node_id    TEXT NOT NULL UNIQUE,
+  review_dir           TEXT NOT NULL,
+  file                 TEXT NOT NULL,
+  origin_session_file  TEXT NOT NULL,
+  origin_session_id    TEXT NOT NULL,
+  origin_leaf_id       TEXT NOT NULL,
+  model_spec           TEXT NOT NULL,
+  branch_file          TEXT NOT NULL,
+  baseline_sha256      TEXT NOT NULL,
+  baseline_bytes       INTEGER NOT NULL,
+  anchor_base_sha256   TEXT NOT NULL,
+  anchor_base_bytes    BLOB NOT NULL,
+  state                TEXT NOT NULL CHECK (state IN ('binding', 'open', 'approved', 'canceled')),
+  created              TEXT NOT NULL,
+  captured_at          TEXT NOT NULL,
+  opened_at            TEXT,
+  output_path          TEXT,
+  subtitle             TEXT,
+  approved_at          TEXT,
+  approved_sha256      TEXT,
+  changed              INTEGER,
+  comments_total       INTEGER,
+  comments_unresolved  INTEGER,
+  result_json          TEXT,
+  canceled_at          TEXT,
+  cancel_reason        TEXT,
+  cancel_actor         TEXT,
+  delivery_entry_id    TEXT,
+  delivered_at         TEXT,
+  delivery_error       TEXT,
+  projected_at         TEXT,
+  projection_error     TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_reviews_state ON reviews(state);
+CREATE INDEX IF NOT EXISTS idx_reviews_origin ON reviews(origin_node_id);
+CREATE INDEX IF NOT EXISTS idx_reviews_file ON reviews(file);
+CREATE INDEX IF NOT EXISTS idx_reviews_bridge ON reviews(bridge_node_id);
+`)}E(et,"addReviewsTable");function tt(e){e.exec(`
+CREATE TABLE IF NOT EXISTS review_comments (
+  comment_id          TEXT PRIMARY KEY,
+  review_id           TEXT NOT NULL,
+  status              TEXT NOT NULL CHECK (status IN ('open', 'resolved', 'deleted')),
+  revision            INTEGER NOT NULL,
+  text                TEXT NOT NULL,
+  anchor_line         INTEGER NOT NULL,
+  anchor_end_line     INTEGER NOT NULL,
+  anchor_col_start    INTEGER,
+  anchor_col_end      INTEGER,
+  anchor_quote        TEXT,
+  anchor_line_text    TEXT NOT NULL,
+  anchor_doc_hash     TEXT NOT NULL,
+  author_kind         TEXT NOT NULL CHECK (author_kind IN ('human', 'node')),
+  author_node_id      TEXT,
+  updated_by_kind     TEXT NOT NULL CHECK (updated_by_kind IN ('human', 'node')),
+  updated_by_node_id  TEXT,
+  created_at          TEXT NOT NULL,
+  updated_at          TEXT NOT NULL,
+  resolved_at         TEXT,
+  deleted_at          TEXT,
+  created_seq         INTEGER NOT NULL
+);
+CREATE TABLE IF NOT EXISTS review_comment_events (
+  seq             INTEGER PRIMARY KEY AUTOINCREMENT,
+  review_id       TEXT NOT NULL,
+  comment_id      TEXT NOT NULL,
+  kind            TEXT NOT NULL CHECK (kind IN ('created', 'edited', 'resolved', 'reopened', 'deleted', 'reanchored', 'notified', 'notify_failed')),
+  state_change    INTEGER NOT NULL,
+  revision_after  INTEGER,
+  actor_kind      TEXT NOT NULL CHECK (actor_kind IN ('human', 'node', 'system')),
+  actor_node_id   TEXT,
+  at              TEXT NOT NULL,
+  operation_id    TEXT NOT NULL,
+  payload         TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_review_comments_review_line_seq
+  ON review_comments(review_id, anchor_line, created_seq);
+CREATE INDEX IF NOT EXISTS idx_review_comments_review_status
+  ON review_comments(review_id, status);
+CREATE INDEX IF NOT EXISTS idx_review_comment_events_review_seq
+  ON review_comment_events(review_id, seq);
+CREATE INDEX IF NOT EXISTS idx_review_comment_events_comment_seq
+  ON review_comment_events(comment_id, seq);
+`)}E(tt,"addReviewCommentTables");function nt(e){e.exec(`
+ALTER TABLE review_comments
+  ADD COLUMN anchor_state TEXT NOT NULL DEFAULT 'live' CHECK (anchor_state IN ('live', 'detached'));
+`)}E(nt,"addReviewCommentAnchorState");function Et(e){e.exec("DROP TABLE IF EXISTS consult_outbox")}E(Et,"dropConsultOutbox");function ot(e){e.exec("ALTER TABLE reviews ADD COLUMN submit_requested_at TEXT")}E(ot,"addReviewSubmitRequested");function it(e){e.exec(`
+ALTER TABLE crons ADD COLUMN held INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE crons ADD COLUMN last_poke_at TEXT;
+`)}E(it,"addCronHeldColumns");function st(e){e.exec(`
+CREATE TABLE human_action_deliveries (
+  request_id           TEXT PRIMARY KEY,
+  state                TEXT NOT NULL,
+  attempt              INTEGER NOT NULL DEFAULT 0,
+  argv_json            TEXT NOT NULL,
+  cwd                  TEXT NOT NULL,
+  completion_json      TEXT NOT NULL,
+  next_attempt_at      INTEGER NOT NULL,
+  claimed_at           INTEGER,
+  claim_owner          TEXT,
+  accepted_at          INTEGER,
+  permanent_failed_at  INTEGER,
+  last_failure_json    TEXT,
+  created_at           INTEGER NOT NULL,
+  updated_at           INTEGER NOT NULL
+);
+CREATE INDEX idx_human_action_deliveries_due ON human_action_deliveries(state, next_attempt_at);
+`)}E(st,"addHumanActionDeliveries");function Tt(e){const t=u(e);a(e,t,"pi_session_file","ALTER TABLE nodes ADD COLUMN pi_session_file TEXT;");for(const n of M(y(),{withFileTypes:!0}))if(n.isDirectory())try{const o=JSON.parse(k(v(n.name),"utf8"));typeof o.pi_session_file=="string"&&e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?").run(o.pi_session_file,n.name)}catch{}e.exec("CREATE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}E(Tt,"addNodeSessionFileIndex");function Z(e,t){const n=E(d=>{const _=Y(d);return I(_)?le(_):_},"canonical"),o=e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?");e.exec("DROP INDEX IF EXISTS idx_nodes_pi_session_file;");const s=e.prepare("SELECT node_id FROM nodes ORDER BY created ASC, node_id ASC").all();for(const{node_id:d}of s){const _=v(d);if(K(_)===null){o.run(null,d);continue}const N=Ie(_,()=>{const c=K(_);if(c===null)throw new Error(`node ${d} session metadata changed during ownership migration`);if(typeof c.pi_session_file!="string")return null;const L=c.pi_session_file,l=n(L);return l!==L&&(c.pi_session_file=l,me(_,c)),l});o.run(N,d)}const i=e.prepare(`
+SELECT pi_session_file
+FROM nodes
+WHERE pi_session_file IS NOT NULL
+GROUP BY pi_session_file
+HAVING COUNT(*) > 1
+`).all();if(!t&&i.length>0){const d=i.map(({pi_session_file:_})=>_).join(", ");throw new Error(`cannot restore unique Pi session ownership: authoritative metadata has concurrent claimants for ${d}`)}const T=e.prepare("UPDATE nodes SET pi_session_file = NULL WHERE node_id = ?");for(const{pi_session_file:d}of i){const _=e.prepare(`
+SELECT node_id
+FROM nodes
+WHERE pi_session_file = ?
+ORDER BY created ASC, node_id ASC
+`).all(d);for(const{node_id:N}of _.slice(1)){if(!q(v(N),L=>{const l=L.pi_session_file;if(typeof l!="string"||n(l)!==d)throw new Error(`node ${N} session metadata changed during ownership migration`);return L.pi_session_id=null,L.pi_session_file=null,!0}))throw new Error(`node ${N} session metadata changed during ownership migration`);T.run(N)}}e.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}E(Z,"reconcileNodeSessionFileOwners");function rt(e){Z(e,!0)}E(rt,"makeNodeSessionFileUnique");function at(e){Z(e,!1)}E(at,"repairNodeSessionFileUniqueIndex");function dt(e){const t=u(e);a(e,t,"frozen_at","ALTER TABLE nodes ADD COLUMN frozen_at TEXT;"),a(e,t,"respawn_failures","ALTER TABLE nodes ADD COLUMN respawn_failures INTEGER NOT NULL DEFAULT 0;"),a(e,t,"respawn_not_before","ALTER TABLE nodes ADD COLUMN respawn_not_before TEXT;"),a(e,t,"launched_at","ALTER TABLE nodes ADD COLUMN launched_at TEXT;"),a(e,t,"last_settled_at","ALTER TABLE nodes ADD COLUMN last_settled_at TEXT;"),a(e,t,"terminal_reason","ALTER TABLE nodes ADD COLUMN terminal_reason TEXT;"),e.exec(`
+UPDATE nodes SET terminal_reason = CASE
+  WHEN status = 'done' AND final_report IS NOT NULL THEN 'finalized'
+  WHEN status = 'done' AND intent = 'parked'        THEN 'parked'
+  WHEN status = 'done'                              THEN 'finished'
+  WHEN status = 'canceled'                          THEN 'stranded'
+  WHEN status = 'dead'                              THEN 'crashed'
+END
+WHERE status IN ('done','canceled','dead') AND terminal_reason IS NULL;
+`)}E(dt,"addNodeLifecycleColumns");function _t(e){const t=u(e);a(e,t,"description","ALTER TABLE nodes ADD COLUMN description TEXT;"),a(e,t,"cycles","ALTER TABLE nodes ADD COLUMN cycles INTEGER;");const n=y();if(!I(n))return;const o=e.prepare("UPDATE nodes SET description = ?, cycles = ? WHERE node_id = ?");for(const s of M(n)){const i=v(s);if(!I(i))continue;let T;try{T=JSON.parse(k(i,"utf8"))}catch{continue}const d=typeof T.description=="string"?T.description:null,_=typeof T.cycles=="number"?T.cycles:null;o.run(d,_,s)}}E(_t,"addNodeLabelColumns");function Nt(e){const t=u(e);a(e,t,"outcome_kind","ALTER TABLE nodes ADD COLUMN outcome_kind TEXT;"),a(e,t,"outcome_reason","ALTER TABLE nodes ADD COLUMN outcome_reason TEXT;"),a(e,t,"outcome_at","ALTER TABLE nodes ADD COLUMN outcome_at TEXT;"),a(e,t,"outcome_revision","ALTER TABLE nodes ADD COLUMN outcome_revision INTEGER NOT NULL DEFAULT 0;"),a(e,t,"outcome_detail_json","ALTER TABLE nodes ADD COLUMN outcome_detail_json TEXT;"),a(e,t,"deadline_at","ALTER TABLE nodes ADD COLUMN deadline_at TEXT;"),e.exec(`
+CREATE TABLE IF NOT EXISTS node_outcome_deliveries (
+  node_id              TEXT PRIMARY KEY,
+  state                TEXT NOT NULL,
+  attempt              INTEGER NOT NULL DEFAULT 0,
+  action_name          TEXT NOT NULL,
+  argv_json            TEXT NOT NULL,
+  cwd                  TEXT NOT NULL,
+  config_origin        TEXT NOT NULL,
+  payload_json         TEXT,
+  document_json        TEXT,
+  next_attempt_at      INTEGER NOT NULL DEFAULT 0,
+  claimed_at           INTEGER,
+  claim_owner          TEXT,
+  accepted_at          INTEGER,
+  permanent_failed_at  INTEGER,
+  last_failure_json    TEXT,
+  created_at           INTEGER NOT NULL,
+  updated_at           INTEGER NOT NULL,
+  FOREIGN KEY(node_id) REFERENCES nodes(node_id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_node_outcome_deliveries_due
+  ON node_outcome_deliveries(state, next_attempt_at);
+CREATE INDEX IF NOT EXISTS idx_nodes_deadline ON nodes(deadline_at) WHERE deadline_at IS NOT NULL;
+
+UPDATE nodes SET outcome_kind='result', outcome_reason='finalized',
+       outcome_at=finalized_at, outcome_revision=1
+ WHERE final_report IS NOT NULL AND outcome_at IS NULL;
+
+UPDATE nodes SET outcome_kind='failure',
+       outcome_reason=COALESCE(terminal_reason,'crashed'),
+       outcome_at=COALESCE(finalized_at, created), outcome_revision=1
+ WHERE final_report IS NULL AND status IN ('done','dead','canceled') AND outcome_at IS NULL;
+`)}E(Nt,"addNodeOutcomeAndDeadline");function ct(e){const t=u(e);a(e,t,"telemetry_tokens_in","ALTER TABLE nodes ADD COLUMN telemetry_tokens_in INTEGER;"),a(e,t,"telemetry_context_tokens","ALTER TABLE nodes ADD COLUMN telemetry_context_tokens INTEGER;"),a(e,t,"telemetry_last_activity","ALTER TABLE nodes ADD COLUMN telemetry_last_activity TEXT;"),a(e,t,"telemetry_updated_at","ALTER TABLE nodes ADD COLUMN telemetry_updated_at TEXT;");const n=e.prepare(`UPDATE nodes
+    SET telemetry_tokens_in = ?, telemetry_context_tokens = ?,
+        telemetry_last_activity = ?, telemetry_updated_at = ?
+    WHERE node_id = ?`);for(const{node_id:o}of e.prepare("SELECT node_id FROM nodes").all()){const s=H(y(),o,"job","telemetry.json");if(I(s))try{const i=JSON.parse(k(s,"utf8")),T=typeof i.tokens_in=="number"&&Number.isFinite(i.tokens_in)?i.tokens_in:null,d=typeof i.context_tokens=="number"&&Number.isFinite(i.context_tokens)?i.context_tokens:null,_=typeof i.last_activity=="string"?i.last_activity:null,N=ue(s).mtime.toISOString();n.run(T,d,_,N,o)}catch{}}}E(ct,"addNodeTelemetryColumns");function Lt(e){e.exec(`
+CREATE INDEX IF NOT EXISTS deliveries_external_due_order
+  ON deliveries(state, next_attempt_at, created_at, delivery_id)
+  WHERE destination_kind = 'external_action' AND canceled_at IS NULL;
+DROP INDEX IF EXISTS deliveries_external_due;
+CREATE INDEX IF NOT EXISTS idx_nodes_parent_created ON nodes(parent, created);
+CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
+`)}E(Lt,"addRecurringLaneIndexes");function lt(e){_e(e)}E(lt,"projectLiveNodeState");function ut(e){a(e,u(e),"scopes_json","ALTER TABLE nodes ADD COLUMN scopes_json TEXT;")}E(ut,"addNodeScopes");function pt(e){const t=u(e);a(e,t,"grantee","ALTER TABLE nodes ADD COLUMN grantee TEXT NOT NULL DEFAULT 'user:local';"),a(e,t,"sub","ALTER TABLE nodes ADD COLUMN sub TEXT;"),a(e,t,"grant_id","ALTER TABLE nodes ADD COLUMN grant_id TEXT;"),a(e,t,"client_id","ALTER TABLE nodes ADD COLUMN client_id TEXT;"),a(e,t,"metadata_json","ALTER TABLE nodes ADD COLUMN metadata_json TEXT;"),a(e,t,"run_id","ALTER TABLE nodes ADD COLUMN run_id TEXT;"),a(e,t,"event_cursor","ALTER TABLE nodes ADD COLUMN event_cursor INTEGER;"),a(e,t,"usage_json","ALTER TABLE nodes ADD COLUMN usage_json TEXT;"),a(e,t,"deleting_at","ALTER TABLE nodes ADD COLUMN deleting_at TEXT;"),e.exec(`
+    ALTER TABLE sessions ADD COLUMN event_offset INTEGER;
+    CREATE INDEX idx_nodes_run_id ON nodes(run_id);
+    -- Child nodes may be pruned while their root run and event history remain.
+    CREATE TABLE run_events (
+      run_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
+      sequence_number INTEGER NOT NULL,
+      node_id TEXT NOT NULL,
+      type TEXT NOT NULL,
+      ts TEXT NOT NULL,
+      body_json TEXT NOT NULL,
+      grantee TEXT NOT NULL,
+      PRIMARY KEY (run_id, sequence_number)
+    );
+    CREATE INDEX idx_run_events_ts ON run_events(ts);
+    CREATE TABLE idempotency_keys (
+      grantee TEXT NOT NULL,
+      key TEXT NOT NULL,
+      body_hash TEXT NOT NULL,
+      run_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
+      response_json TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      PRIMARY KEY (grantee, key)
+    );
+    CREATE INDEX idx_idempotency_keys_created_at ON idempotency_keys(created_at);
+  `)}E(pt,"addRunFoundation");function Rt(e){e.exec("ALTER TABLE nodes ADD COLUMN last_activity_at TEXT;"),e.exec(`UPDATE nodes SET last_activity_at = (
+    SELECT e.ts FROM run_events e WHERE e.run_id = nodes.node_id
+    ORDER BY e.sequence_number DESC LIMIT 1
+  ) WHERE run_id = node_id`)}E(Rt,"addRunLastActivity");function At(e){e.exec(`
+CREATE TABLE structured_requests (
+  request_id TEXT PRIMARY KEY,
+  node_id TEXT REFERENCES nodes(node_id) ON DELETE CASCADE,
+  mode TEXT NOT NULL,
+  submission TEXT NOT NULL,
+  dedicated INTEGER NOT NULL,
+  state TEXT NOT NULL,
+  schema_json TEXT NOT NULL,
+  result_json TEXT,
+  deadline_at INTEGER,
+  created_at INTEGER NOT NULL,
+  settled_at INTEGER,
+  effects_done_at INTEGER,
+  result_path TEXT,
+  declined_reason TEXT,
+  declined_code TEXT,
+  declined_retryable INTEGER,
+  failure_reason TEXT,
+  failure_detail_json TEXT,
+  request_message_id TEXT
+);
+CREATE UNIQUE INDEX idx_structured_requests_one_pending_node ON structured_requests(node_id) WHERE state = 'pending';
+CREATE INDEX idx_structured_requests_expiry ON structured_requests(state, deadline_at);
+CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done_at) WHERE effects_done_at IS NULL;
+`)}E(At,"addStructuredRequests");function Ot(e){e.exec(`
+    CREATE TABLE grants (
+      id TEXT PRIMARY KEY, runtime TEXT NOT NULL, sub TEXT NOT NULL, grantee TEXT NOT NULL,
+      rev INTEGER NOT NULL, scopes_json TEXT NOT NULL, resolved_scopes_json TEXT NOT NULL,
+      spend_cap REAL, expires_at TEXT, status TEXT NOT NULL, revoked_at TEXT,
+      approved_at TEXT, payer TEXT, synced_at TEXT NOT NULL
+    );
+    CREATE UNIQUE INDEX idx_grants_grantee_sub ON grants(grantee, sub);
+    CREATE TABLE runtime_state (key TEXT PRIMARY KEY, value TEXT NOT NULL);
+  `)}E(Ot,"addGrantMirror");function It(e){e.exec("UPDATE nodes SET grantee = 'app:terminal' WHERE grantee = 'user:local';")}E(It,"migrateTerminalGrantees");function mt(e){const t={llm:"crtr:llm",act:"crtr:act",schedule:"crtr:schedule","memory:read":"crtr:memory:read:user","memory:write":"crtr:memory:rw:user"},n=e.prepare("SELECT node_id, scopes_json FROM nodes WHERE scopes_json IS NOT NULL").all(),o=e.prepare("UPDATE nodes SET scopes_json = ? WHERE node_id = ?");for(const s of n){const i=JSON.parse(s.scopes_json);if(!Array.isArray(i))throw new Error(`invalid launched scopes for node ${s.node_id}`);const T=[];for(const d of i){if(typeof d!="string")continue;const _=t[d]??d;try{ae(_),T.push(_)}catch(N){if(!(N instanceof TypeError))throw N}}o.run(JSON.stringify([...new Set(T)]),s.node_id)}}E(mt,"migrateLaunchedScopes");function Xt(e){e.exec(`CREATE TABLE node_tokens (
+    broker_process_id TEXT PRIMARY KEY REFERENCES executions(execution_id) ON DELETE CASCADE,
+    node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
+    token_hash TEXT NOT NULL UNIQUE, grantee TEXT NOT NULL, uid INTEGER NOT NULL,
+    sub TEXT NOT NULL, grant TEXT, client_id TEXT, scopes_json TEXT,
+    issued_at TEXT NOT NULL, revoked_at TEXT
+  );`)}E(Xt,"addNodeTokens");function m(e,t){return e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(t)!==void 0}E(m,"hasTable");function X(e,t,n){return e.prepare(`PRAGMA table_info(${t})`).all().some(o=>o.name===n)}E(X,"hasColumn");function ee(e){m(e,"memory_reads")||e.exec(`CREATE TABLE memory_reads (
+    node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
+    name TEXT NOT NULL,
+    scope TEXT NOT NULL,
+    at TEXT NOT NULL,
+    type TEXT NOT NULL CHECK (type IN ('read','loaded'))
+  );
+  CREATE INDEX idx_memory_reads_at ON memory_reads(at);
+  CREATE INDEX idx_memory_reads_node ON memory_reads(node_id);
+  INSERT OR IGNORE INTO canvas_meta(key, value) VALUES ('memory_reads.started_at', strftime('%Y-%m-%dT%H:%M:%fZ','now'));`)}E(ee,"addMemoryReads");function te(e){X(e,"sessions","indexed_entry_id")||e.exec("ALTER TABLE sessions ADD COLUMN indexed_entry_id TEXT; ALTER TABLE sessions ADD COLUMN input_ids_json TEXT NOT NULL DEFAULT '[]';")}E(te,"addConversationIndex");function ne(e){m(e,"app_users")||e.exec(`CREATE TABLE app_users (
+    app TEXT PRIMARY KEY, uid INTEGER NOT NULL UNIQUE,
+    created TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('active', 'retired'))
+  );`)}E(ne,"addAppUsers");function Ee(e){X(e,"crons","grantee")||(e.exec("ALTER TABLE crons ADD COLUMN grantee TEXT NOT NULL DEFAULT 'app:terminal'"),e.exec(`UPDATE crons SET grantee = COALESCE(
+    (SELECT COALESCE(nodes.grantee, 'app:terminal') FROM nodes WHERE nodes.node_id = crons.anchor_node),
+    'app:terminal') WHERE anchor_node IS NOT NULL`))}E(Ee,"addCronGrantee");function ft(e){ee(e),te(e),ne(e),Ee(e)}E(ft,"convergeSharedVersions");function Ct(e){(e.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'app_users'").get()?.sql??"").includes("'removed'")||e.exec(`CREATE TABLE app_users_new (
+    uid INTEGER PRIMARY KEY, app TEXT NOT NULL,
+    created TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('active', 'removed')),
+    removed_at TEXT
+  );
+  INSERT INTO app_users_new (uid, app, created, status, removed_at)
+    SELECT uid, app, created, CASE status WHEN 'active' THEN 'active' ELSE 'removed' END,
+      CASE status WHEN 'active' THEN NULL ELSE created END FROM app_users;
+  DROP TABLE app_users;
+  ALTER TABLE app_users_new RENAME TO app_users;
+  CREATE UNIQUE INDEX idx_app_users_active_app ON app_users(app) WHERE status = 'active';`)}E(Ct,"appUsersRemoved");function oe(e){m(e,"objects")||(e.exec(`
+    CREATE TABLE objects (
+      rowid      INTEGER PRIMARY KEY,
+      id         TEXT NOT NULL UNIQUE,
+      type       TEXT NOT NULL CHECK (type IN ('document','node','job','person','app','repo','profile')),
+      kind       TEXT,
+      owner      INTEGER REFERENCES objects(rowid),
+      privacy    TEXT NOT NULL DEFAULT 'public' CHECK (privacy IN ('public','friends','private')),
+      name       TEXT NOT NULL,
+      preview    TEXT NOT NULL DEFAULT '',
+      created_at TEXT NOT NULL,
+      deleted_at TEXT
+    );
+    CREATE UNIQUE INDEX objects_doc_name   ON objects(owner, name) WHERE type = 'document' AND deleted_at IS NULL;
+    CREATE UNIQUE INDEX objects_handle     ON objects(type, name) WHERE type IN ('person','app','repo','profile');
+    CREATE INDEX        objects_owner_type ON objects(owner, type, kind);
+    CREATE INDEX        objects_type_kind  ON objects(type, kind);
+
+    CREATE TABLE documents (
+      object        INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
+      summary       TEXT,
+      heads_key     TEXT NOT NULL,
+      revision      INTEGER NOT NULL,
+      why_it_exists TEXT,
+      unlisted      INTEGER NOT NULL DEFAULT 0,
+      lint_ignore_json TEXT,
+      extensions_json  TEXT,
+      source_path   TEXT
+    );
+
+    CREATE TABLE revisions (
+      rowid      INTEGER PRIMARY KEY,
+      document   INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      rev_id     TEXT NOT NULL UNIQUE,
+      number     INTEGER NOT NULL,
+      body_hash  TEXT NOT NULL,
+      author     INTEGER REFERENCES objects(rowid),
+      rationale  TEXT,
+      verbatim   INTEGER NOT NULL DEFAULT 0,
+      created_at TEXT NOT NULL
+    );
+    CREATE TABLE revision_parents (
+      child  INTEGER NOT NULL REFERENCES revisions(rowid) ON DELETE CASCADE,
+      parent INTEGER NOT NULL REFERENCES revisions(rowid) ON DELETE CASCADE,
+      PRIMARY KEY (child, parent)
+    ) WITHOUT ROWID;
+    CREATE INDEX revisions_doc ON revisions(document, number);
+
+    CREATE TABLE jobs (
+      object    INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
+      command   TEXT NOT NULL,
+      status    TEXT NOT NULL CHECK (status IN ('running','exited','killed')),
+      exit_code INTEGER,
+      job_dir   TEXT NOT NULL,
+      log_path  TEXT NOT NULL
+    );
+
+    CREATE TABLE identities (
+      object      INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
+      scheme      TEXT NOT NULL,
+      external_id TEXT NOT NULL,
+      UNIQUE (scheme, external_id)
+    );
+
+    CREATE TABLE watches (
+      rowid          INTEGER PRIMARY KEY,
+      watcher        INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      object         INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      in_tree        INTEGER NOT NULL DEFAULT 0,
+      read_heads_key TEXT,
+      created_at     TEXT NOT NULL,
+      UNIQUE (watcher, object)
+    );
+    CREATE INDEX watches_object ON watches(object, watcher);
+    CREATE INDEX watches_tree_down ON watches(watcher, object) WHERE in_tree = 1;
+    CREATE INDEX watches_tree_up   ON watches(object, watcher) WHERE in_tree = 1;
+
+    CREATE TABLE watch_subscriptions (
+      rowid       INTEGER PRIMARY KEY,
+      watch       INTEGER NOT NULL REFERENCES watches(rowid) ON DELETE CASCADE,
+      pattern     TEXT NOT NULL,
+      filter_json TEXT,
+      config_json TEXT,
+      started_by  TEXT NOT NULL CHECK (started_by IN ('spawn','job-start','ask','read','write','act','message','deliver','fork')),
+      ends_on     TEXT,
+      created_at  TEXT NOT NULL
+    );
+    CREATE INDEX watch_subscriptions_watch ON watch_subscriptions(watch);
+
+    CREATE TABLE context_sessions (
+      node                INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
+      preference_snapshot TEXT,
+      listed_json         TEXT NOT NULL DEFAULT '{}'
+    );
+
+    CREATE TABLE exposures (
+      node        INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      object      INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      channel     TEXT NOT NULL CHECK (channel IN ('system','transcript')),
+      level       TEXT NOT NULL CHECK (level IN ('name','preview','content')),
+      heads_key   TEXT,
+      content_hash TEXT,
+      PRIMARY KEY (node, object, channel)
+    ) WITHOUT ROWID;
+
+    CREATE TABLE rules (
+      rowid    INTEGER PRIMARY KEY,
+      object   INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      owner    INTEGER,
+      position INTEGER NOT NULL,
+      on_event TEXT NOT NULL CHECK (on_event IN ('boot','workspace-open','file-read','document-read','command','pre-command','slash-command')),
+      match_json TEXT, match_frontmatter_json TEXT, if_json TEXT,
+      deliver  TEXT NOT NULL CHECK (deliver IN ('name','preview','content'))
+    );
+    CREATE INDEX rules_on_owner ON rules(on_event, owner);
+    CREATE INDEX rules_object   ON rules(object);
+
+    ALTER TABLE nodes ADD COLUMN listen_default_json TEXT;
+    ALTER TABLE messages ADD COLUMN event TEXT;
+    ALTER TABLE messages ADD COLUMN object_id TEXT;
+    ALTER TABLE messages ADD COLUMN level INTEGER;
+    ALTER TABLE messages ADD COLUMN actor_id TEXT;
+  `),ie(e),e.exec("ANALYZE"))}E(oe,"canvasObjectsSchema");function ie(e){const t=new Date().toISOString(),n=e.prepare("INSERT INTO objects (id, type, kind, owner, privacy, name, preview, created_at) VALUES (?, ?, NULL, NULL, 'public', ?, '', ?) RETURNING rowid"),o=e.prepare("INSERT INTO identities (object, scheme, external_id) VALUES (?, ?, ?)"),s=e.prepare(`SELECT DISTINCT n.grantee FROM nodes n
+    WHERE NOT EXISTS (SELECT 1 FROM identities i WHERE i.external_id = n.grantee AND i.scheme IN ('app', 'local-user'))`).all();for(const{grantee:i}of s){let T;if(i==="user:local")T={type:"person",scheme:"local-user",handle:"user"};else if(/^app:[a-z0-9][a-z0-9._-]*$/.test(i))T={type:"app",scheme:"app",handle:i.slice(4)};else throw new Error(`canvas objects migration: node grantee ${JSON.stringify(i)} is neither app:<name> nor user:local`);const{rowid:d}=n.get(`${Date.now().toString(36)}-${P(4).toString("hex")}`,T.type,T.handle,t);o.run(d,T.scheme,i)}e.exec(`INSERT INTO objects (id, type, kind, owner, privacy, name, preview, created_at)
+    SELECT n.node_id, 'node', n.kind, i.object, 'public', n.name, '', n.created
+    FROM nodes n JOIN identities i ON i.external_id = n.grantee AND i.scheme IN ('app', 'local-user')
+    WHERE NOT EXISTS (SELECT 1 FROM objects o WHERE o.id = n.node_id)`)}E(ie,"copyNodesIntoObjects");function Ut(e){if(oe(e),!X(e,"nodes","name"))return;ie(e);const t=e.prepare("SELECT COUNT(*) AS n FROM nodes WHERE node_id NOT IN (SELECT id FROM objects)").get();if(t.n>0)throw new Error(`canvasObjectsCut: ${t.n} node(s) have no objects row`);e.exec(`
+    ALTER TABLE edges RENAME TO legacy_edges;
+    CREATE TABLE edges (
+      type       TEXT NOT NULL CHECK (type IN ('acted-on','links-to')),
+      src        INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      dst        INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      written_as TEXT,
+      created_at TEXT NOT NULL,
+      PRIMARY KEY (type, src, dst)
+    ) WITHOUT ROWID;
+    CREATE INDEX edges_dst ON edges(type, dst, src);
+    DROP VIEW node_rows;
+    ALTER TABLE nodes DROP COLUMN name;
+    ALTER TABLE nodes DROP COLUMN kind;
+    ALTER TABLE nodes DROP COLUMN grantee;
+  `),e.exec(`
+    CREATE VIEW node_rows AS
+    SELECT n.*,
+           o.name,
+           o.kind,
+           oi.external_id AS grantee,
+           CASE WHEN e.state = 'running' THEN e.pid ELSE NULL END AS pi_pid,
+           CASE WHEN e.state = 'running' THEN e.process_identity ELSE NULL END AS pi_pid_identity,
+           e.turn_open_at,
+           e.turn_closed_at,
+           s.session_id AS pi_session_id,
+           s.transcript_path AS pi_session_file,
+           f.fault_id,
+           f.link AS fault_link,
+           f.op AS fault_op,
+           f.kind AS fault_kind,
+           f.message AS fault_message,
+           f.since AS fault_since,
+           f.operation_id AS fault_operation_id,
+           f.anchor_entry_id AS fault_anchor_entry_id,
+           f.retry_disposition AS fault_retry_disposition,
+           f.retry_by AS fault_retry_by,
+           f.retry_attempt AS fault_retry_attempt,
+           f.retry_max AS fault_retry_max,
+           f.retry_next_at AS fault_retry_next_at,
+           f.provider_error_json AS fault_provider_error_json
+      FROM nodes n
+      JOIN objects o ON o.id = n.node_id
+      LEFT JOIN identities oi ON oi.object = o.owner
+      LEFT JOIN executions e ON e.node_id = n.node_id AND e.state != 'exited'
+      LEFT JOIN sessions s ON s.node_id = n.node_id AND s.unbound_at IS NULL
+      LEFT JOIN node_faults f ON f.node_id = n.node_id AND f.active = 1;
+    ANALYZE;
+  `)}E(Ut,"canvasObjectsCut");function St(e){e.exec(`CREATE TABLE IF NOT EXISTS uploads (
+    upload_id TEXT PRIMARY KEY, grantee TEXT NOT NULL, name TEXT NOT NULL, media_type TEXT NOT NULL,
+    size INTEGER NOT NULL, created_at TEXT NOT NULL, delete_pending_since TEXT
+  );
+  CREATE INDEX IF NOT EXISTS idx_uploads_grantee ON uploads(grantee);
+  CREATE INDEX IF NOT EXISTS idx_uploads_delete_pending ON uploads(delete_pending_since) WHERE delete_pending_since IS NOT NULL;
+  CREATE TABLE IF NOT EXISTS upload_uses (
+    upload_id TEXT NOT NULL, run_id TEXT NOT NULL, path TEXT NOT NULL,
+    PRIMARY KEY (run_id, path)
+  );
+  CREATE INDEX IF NOT EXISTS idx_upload_uses_upload ON upload_uses(upload_id);
+  CREATE TABLE IF NOT EXISTS shares (
+    share_id TEXT PRIMARY KEY, source_space TEXT NOT NULL, source_path TEXT NOT NULL, storage_key TEXT NOT NULL,
+    url TEXT NOT NULL, created_by TEXT NOT NULL, created_at TEXT NOT NULL, expires_at TEXT,
+    status TEXT NOT NULL CHECK (status IN ('on', 'off')), object_deleted_at TEXT
+  );
+  CREATE INDEX IF NOT EXISTS idx_shares_created_by ON shares(created_by);`)}E(St,"addFileTransfer");function Dt(e){e.exec(`CREATE TABLE IF NOT EXISTS daemon_actions (
+    action_id TEXT PRIMARY KEY,
+    adapter_json TEXT NOT NULL,
+    body_json TEXT,
+    idempotency_key TEXT NOT NULL UNIQUE,
+    state TEXT NOT NULL CHECK (state IN ('pending', 'handed_off', 'acknowledged', 'permanent_failed')),
+    attempts INTEGER NOT NULL DEFAULT 0 CHECK (attempts >= 0),
+    next_attempt_at INTEGER,
+    claimed_at INTEGER,
+    claim_owner TEXT,
+    acknowledged_at INTEGER,
+    failed_at INTEGER,
+    last_failure_json TEXT,
+    canceled_at INTEGER,
+    created_at INTEGER NOT NULL,
+    updated_at INTEGER NOT NULL
+  );
+  CREATE INDEX IF NOT EXISTS daemon_actions_due ON daemon_actions(state, next_attempt_at, created_at, action_id) WHERE canceled_at IS NULL;
+  CREATE TEMP TABLE moved_actions AS
+    SELECT delivery_id, message_id FROM deliveries
+     WHERE destination_kind = 'external_action' AND adapter_json IS NOT NULL
+       AND (json_extract(adapter_json, '$.adapter') IN ('cron_spawn', 'cron_human') OR idempotency_key LIKE 'human-action:%');
+  INSERT OR IGNORE INTO daemon_actions
+    (action_id, adapter_json, body_json, idempotency_key, state, attempts, next_attempt_at, claimed_at, claim_owner,
+     acknowledged_at, failed_at, last_failure_json, canceled_at, created_at, updated_at)
+    SELECT d.delivery_id, d.adapter_json, m.body_json, COALESCE(d.idempotency_key, 'delivery:' || d.delivery_id),
+           CASE WHEN d.state = 'armed' THEN 'pending' ELSE d.state END, d.attempts,
+           CASE WHEN d.state = 'armed' THEN COALESCE(d.next_attempt_at, d.updated_at) ELSE d.next_attempt_at END,
+           d.claimed_at, d.claim_owner, d.acknowledged_at, d.failed_at, d.last_failure_json, d.canceled_at, d.created_at, d.updated_at
+      FROM deliveries d JOIN moved_actions ma ON ma.delivery_id = d.delivery_id
+      LEFT JOIN messages m ON m.message_id = d.message_id;
+  UPDATE human_requests
+     SET action_delivery_id = (SELECT a.action_id FROM daemon_actions a WHERE a.idempotency_key = 'human-action:' || human_requests.inbox_ticket_id)
+   WHERE action_delivery_id IS NOT NULL
+     AND EXISTS (SELECT 1 FROM daemon_actions a WHERE a.idempotency_key = 'human-action:' || human_requests.inbox_ticket_id);
+  DELETE FROM deliveries WHERE delivery_id IN (SELECT delivery_id FROM moved_actions);
+  DELETE FROM messages
+   WHERE message_id IN (SELECT message_id FROM moved_actions WHERE message_id IS NOT NULL)
+     AND NOT EXISTS (SELECT 1 FROM deliveries d WHERE d.message_id = messages.message_id);
+  DROP TABLE moved_actions;`)}E(Dt,"moveDaemonActions");function gt(e){b(e,61,()=>{if(!m(e,"objects"))return;const t=e.prepare("SELECT COUNT(*) AS n FROM objects").get().n,n=e.prepare("SELECT name, sql FROM sqlite_master WHERE type = 'view' AND sql LIKE '%objects%'").all();for(const i of n)e.exec(`DROP VIEW "${i.name}"`);e.exec(`
+        CREATE TABLE objects_new (
+          rowid      INTEGER PRIMARY KEY,
+          id         TEXT NOT NULL UNIQUE,
+          type       TEXT NOT NULL,
+          kind       TEXT,
+          owner      INTEGER REFERENCES objects(rowid),
+          privacy    TEXT NOT NULL DEFAULT 'public' CHECK (privacy IN ('public','friends','private')),
+          name       TEXT NOT NULL,
+          preview    TEXT NOT NULL DEFAULT '',
+          created_at TEXT NOT NULL,
+          deleted_at TEXT
+        );
+        INSERT INTO objects_new (rowid, id, type, kind, owner, privacy, name, preview, created_at, deleted_at)
+          SELECT rowid, id, type, kind, owner, privacy, name, preview, created_at, deleted_at FROM objects;
+        DROP TABLE objects;
+        ALTER TABLE objects_new RENAME TO objects;
+        CREATE UNIQUE INDEX objects_doc_name   ON objects(owner, name) WHERE type = 'document' AND deleted_at IS NULL;
+        CREATE UNIQUE INDEX objects_handle     ON objects(type, name) WHERE type IN ('person','app','repo','profile');
+        CREATE INDEX        objects_owner_type ON objects(owner, type, kind);
+        CREATE INDEX        objects_type_kind  ON objects(type, kind);
+      `);for(const i of n)e.exec(i.sql);const o=e.prepare("SELECT COUNT(*) AS n FROM objects").get().n;if(o!==t)throw new Error(`objects rebuild lost rows: expected ${t}, got ${o}`);const s=e.prepare("PRAGMA foreign_key_check").all();if(s.length>0)throw new Error(`objects rebuild left ${s.length} foreign-key violation(s)`)})}E(gt,"objectsWithoutTypeCheck");function wt(e){m(e,"deliveries")&&e.exec(`
+    CREATE INDEX IF NOT EXISTS deliveries_destination ON deliveries(destination_id, wake, state, created_at);
+    DROP INDEX IF EXISTS deliveries_node_inbox;
+  `)}E(wt,"addDeliveriesDestinationIndex");function yt(e){e.exec(`
+    CREATE TABLE object_kinds (
+      name TEXT PRIMARY KEY, owner INTEGER NOT NULL REFERENCES objects(rowid),
+      description TEXT NOT NULL DEFAULT '', events_json TEXT NOT NULL,
+      created_at TEXT NOT NULL, updated_at TEXT NOT NULL
+    );
+    ALTER TABLE custom_objects ADD COLUMN description TEXT;
+    ALTER TABLE custom_objects ADD COLUMN summary TEXT;
+    ALTER TABLE custom_objects ADD COLUMN state_json TEXT;
+    ALTER TABLE custom_objects ADD COLUMN published_at TEXT;
+    ALTER TABLE custom_objects ADD COLUMN token_hash TEXT;
+    ALTER TABLE custom_objects ADD COLUMN dropped INTEGER NOT NULL DEFAULT 0;
+    ALTER TABLE messages ADD COLUMN cause_message_id TEXT;
+    ALTER TABLE messages ADD COLUMN depth INTEGER NOT NULL DEFAULT 0;
+    CREATE TABLE message_sequence (id INTEGER PRIMARY KEY CHECK (id = 1), seq INTEGER NOT NULL);
+    INSERT INTO message_sequence (id, seq) SELECT 1, COALESCE(MAX(seq), 0) FROM messages;
+    CREATE TABLE message_causes (message_id TEXT PRIMARY KEY, depth INTEGER NOT NULL);
+    CREATE TRIGGER preserve_message_cause BEFORE DELETE ON messages BEGIN
+      INSERT OR IGNORE INTO message_causes (message_id, depth) VALUES (OLD.message_id, OLD.depth);
+    END;
+    DROP INDEX objects_doc_name;
+    CREATE UNIQUE INDEX objects_named ON objects(owner, name)
+      WHERE deleted_at IS NULL AND (type = 'document' OR instr(type, '.') > 0);
+  `)}E(yt,"customObjectKinds");function vt(e){e.exec("CREATE INDEX IF NOT EXISTS revision_parents_parent ON revision_parents(parent);")}E(vt,"addRevisionParentsParentIndex");function ht(e){m(e,"run_events")&&e.exec(`
+    DELETE FROM run_events
+    WHERE type IN ('node.thinking.delta', 'node.output_text.delta')
+      AND EXISTS (SELECT 1 FROM run_events done
+        WHERE done.run_id = run_events.run_id AND done.node_id = run_events.node_id
+          AND done.type IN ('node.thinking.done', 'node.output_text.done', 'usage')
+          AND done.sequence_number > run_events.sequence_number);
+  `)}E(ht,"dropSpentRunEventDeltas");function xt(e){e.exec("CREATE INDEX IF NOT EXISTS idx_run_events_node_type ON run_events(run_id, node_id, type);")}E(xt,"addRunEventsNodeTypeIndex");function Ft(e){b(e,63,()=>{if(!m(e,"objects")||!m(e,"deliveries"))return;if(X(e,"objects","reception")||e.exec("ALTER TABLE objects ADD COLUMN reception INTEGER NOT NULL DEFAULT 0"),X(e,"objects","listen_json")||e.exec("ALTER TABLE objects ADD COLUMN listen_json TEXT"),e.exec(`UPDATE objects SET reception = CASE WHEN n.status IN ('active','idle') THEN 2 ELSE 1 END
+        FROM nodes n WHERE n.node_id = objects.id`),X(e,"nodes","listen_default_json")){e.exec(`UPDATE objects SET listen_json = n.listen_default_json FROM nodes n
+          WHERE n.node_id = objects.id AND n.listen_default_json IS NOT NULL`);const n=e.prepare("SELECT name, sql FROM sqlite_master WHERE type = 'view' AND sql LIKE '%nodes%'").all();for(const o of n)e.exec(`DROP VIEW "${o.name}"`);e.exec("ALTER TABLE nodes DROP COLUMN listen_default_json");for(const o of n)e.exec(o.sql)}if(e.exec(`
+        DROP TRIGGER IF EXISTS nodes_reception_insert;
+        DROP TRIGGER IF EXISTS nodes_reception_status;
+        CREATE TRIGGER nodes_reception_insert AFTER INSERT ON nodes BEGIN
+          UPDATE objects SET reception = CASE WHEN NEW.status IN ('active','idle') THEN 2 ELSE 1 END WHERE id = NEW.node_id;
+        END;
+        CREATE TRIGGER nodes_reception_status AFTER UPDATE OF status ON nodes BEGIN
+          UPDATE objects SET reception = CASE WHEN NEW.status IN ('active','idle') THEN 2 ELSE 1 END WHERE id = NEW.node_id;
+        END;
+        CREATE INDEX IF NOT EXISTS objects_receiving ON objects(rowid) WHERE reception = 2;
+      `),X(e,"deliveries","destination_kind")){const n=e.prepare("SELECT COUNT(*) AS n FROM deliveries").get().n;e.exec(`
+          CREATE TABLE deliveries_new (
+            delivery_id TEXT PRIMARY KEY,
+            message_id TEXT REFERENCES messages(message_id),
+            destination_id TEXT NOT NULL,
+            urgency TEXT NOT NULL CHECK (urgency IN ('critical', 'urgent', 'normal', 'deferred')),
+            wake INTEGER NOT NULL CHECK (wake IN (0, 1)),
+            state TEXT NOT NULL CHECK (state IN ('armed', 'pending', 'handed_off', 'acknowledged', 'permanent_failed')),
+            attempts INTEGER NOT NULL DEFAULT 0 CHECK (attempts >= 0),
+            next_attempt_at INTEGER,
+            claimed_at INTEGER,
+            claim_owner TEXT,
+            acknowledged_at INTEGER,
+            failed_at INTEGER,
+            last_failure_json TEXT,
+            adapter_json TEXT,
+            idempotency_key TEXT,
+            canceled_at INTEGER,
+            created_at INTEGER NOT NULL,
+            updated_at INTEGER NOT NULL,
+            CHECK (state = 'armed' OR message_id IS NOT NULL)
+          );
+          INSERT INTO deliveries_new (rowid, delivery_id, message_id, destination_id, urgency, wake, state, attempts, next_attempt_at,
+              claimed_at, claim_owner, acknowledged_at, failed_at, last_failure_json, adapter_json, idempotency_key, canceled_at, created_at, updated_at)
+            SELECT rowid, delivery_id, message_id, destination_id, urgency, wake, state, attempts, next_attempt_at,
+              claimed_at, claim_owner, acknowledged_at, failed_at, last_failure_json, adapter_json, idempotency_key, canceled_at, created_at, updated_at
+            FROM deliveries;
+          DROP TABLE deliveries;
+          ALTER TABLE deliveries_new RENAME TO deliveries;
+          CREATE INDEX deliveries_destination ON deliveries(destination_id, wake, state, created_at);
+          CREATE INDEX deliveries_due ON deliveries(state, next_attempt_at, created_at, delivery_id) WHERE next_attempt_at IS NOT NULL AND canceled_at IS NULL;
+          CREATE INDEX deliveries_handed_off ON deliveries(claim_owner) WHERE state = 'handed_off';
+          CREATE INDEX deliveries_message ON deliveries(message_id);
+          CREATE UNIQUE INDEX deliveries_idempotency ON deliveries(idempotency_key) WHERE idempotency_key IS NOT NULL;
+        `);const o=e.prepare("SELECT COUNT(*) AS n FROM deliveries").get().n;if(o!==n)throw new Error(`deliveries rebuild lost rows: expected ${n}, got ${o}`)}const t=e.prepare("PRAGMA foreign_key_check").all();if(t.length>0)throw new Error(`v64 left ${t.length} foreign-key violation(s)`)})}E(Ft,"nodesOnObjectInterface");function kt(e){b(e,66,()=>{if(e.exec(`CREATE TABLE IF NOT EXISTS custom_objects (
+        object INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
+        receiver_json TEXT,
+        payload_json TEXT
+      )`),X(e,"deliveries","adapter_json")){const n=e.prepare(`SELECT d.delivery_id, d.state, d.idempotency_key
+          FROM deliveries d
+          WHERE d.adapter_json IS NOT NULL
+            AND NOT EXISTS (SELECT 1 FROM nodes n JOIN objects o ON o.id = n.node_id AND o.type = 'node'
+              WHERE d.idempotency_key = 'node-outcome:' || n.node_id)`).all(),o=n.filter(r=>r.idempotency_key?.startsWith("node-outcome:")!==!0||r.state!=="acknowledged"&&r.state!=="permanent_failed");if(o.length)throw new Error(`v67 cannot migrate ${o.length} unmappable external-action deliver${o.length===1?"y":"ies"}: ${o.slice(0,5).map(r=>`${r.delivery_id} (${r.state}, ${r.idempotency_key??"no key"})`).join(", ")}; pending work requires a live outcome node`);const s=e.prepare("DELETE FROM deliveries WHERE delivery_id = ?");for(const r of n)s.run(r.delivery_id);const i=e.prepare(`SELECT d.delivery_id, d.message_id, d.destination_id,
+            d.adapter_json, d.state, d.created_at, n.node_id, o.owner, o.privacy
+          FROM deliveries d
+          JOIN nodes n ON d.idempotency_key = 'node-outcome:' || n.node_id
+          JOIN objects o ON o.id = n.node_id AND o.type = 'node'
+          WHERE d.idempotency_key LIKE 'node-outcome:%'`).all(),T=e.prepare(`INSERT INTO objects
+          (id, type, kind, owner, privacy, name, preview, created_at, reception)
+          VALUES (?, 'action', NULL, ?, ?, ?, '', ?, 2) RETURNING rowid`),d=e.prepare("INSERT INTO custom_objects (object, receiver_json, payload_json) VALUES (?, ?, ?)"),_=e.prepare(`INSERT INTO watches (watcher, object, in_tree, read_heads_key, created_at)
+          VALUES (?, ?, 1, NULL, ?) RETURNING rowid`),N=e.prepare(`INSERT INTO watch_subscriptions
+          (watch, pattern, filter_json, config_json, started_by, ends_on, created_at)
+          VALUES (?, 'outcome', NULL, '{"1":"after-turn"}', 'spawn', NULL, ?)`),c=e.prepare("UPDATE deliveries SET destination_id = ?, idempotency_key = NULL WHERE delivery_id = ?"),L=e.prepare("SELECT body_json FROM messages WHERE message_id = ?"),l=e.prepare(`UPDATE messages SET body_json = ?, event = 'outcome', object_id = ?, level = 1
+          WHERE message_id = ?`);for(const r of i){if(r.owner===null)throw new Error(`v67 outcome node ${r.node_id} has no owner`);const p=JSON.parse(r.adapter_json);if(p.adapter!=="subprocess"||!Array.isArray(p.argv)||typeof p.cwd!="string"||typeof p.config_origin!="string")throw new Error(`v67 invalid outcome adapter on ${r.delivery_id}`);const F=P(16).toString("hex"),C=new Date(r.created_at).toISOString(),g=T.get(F,r.owner,r.privacy,`outcome/${r.node_id}`,C);d.run(g.rowid,JSON.stringify({argv:p.argv,cwd:p.cwd,config_origin:p.config_origin,name:r.destination_id}),JSON.stringify(p.payload??null));const G=_.get(g.rowid,e.prepare("SELECT rowid FROM objects WHERE id = ?").get(r.node_id).rowid,C);if(N.run(G.rowid,C),r.message_id===null){if(r.state!=="armed")throw new Error(`v67 delivery ${r.delivery_id} has no message but is ${r.state}`);continue}const R=L.get(r.message_id);if(!R||R.body_json===null)throw new Error(`v67 delivery ${r.delivery_id} has no frozen outcome document`);if(e.prepare("SELECT COUNT(*) AS n FROM deliveries WHERE message_id = ?").get(r.message_id).n!==1)throw new Error(`v67 outcome message ${r.message_id} is shared`);const w=JSON.parse(R.body_json);if(w===null||Array.isArray(w)||typeof w!="object")throw new Error(`v67 invalid outcome body on ${r.delivery_id}`);delete w.action,delete w.delivery,l.run(JSON.stringify(w),r.node_id,r.message_id),c.run(F,r.delivery_id)}const O=e.prepare("SELECT COUNT(*) AS n FROM deliveries WHERE state = 'armed'").get();if(O.n!==i.filter(r=>r.state==="armed").length)throw new Error(`v67 found ${O.n} armed deliveries but only ${i.length} mapped outcome rows`);const x=e.prepare("SELECT COUNT(*) AS n FROM deliveries").get().n-O.n,f=e.prepare("SELECT name, sql FROM sqlite_master WHERE type = 'view' AND sql LIKE '%deliveries%'").all();for(const r of f)e.exec(`DROP VIEW "${r.name.replaceAll('"','""')}"`);e.exec(`
+          CREATE TABLE deliveries_new (
+            delivery_id TEXT PRIMARY KEY,
+            message_id TEXT NOT NULL REFERENCES messages(message_id),
+            destination_id TEXT NOT NULL,
+            urgency TEXT NOT NULL CHECK (urgency IN ('critical', 'urgent', 'normal', 'deferred')),
+            wake INTEGER NOT NULL CHECK (wake IN (0, 1)),
+            state TEXT NOT NULL CHECK (state IN ('pending', 'handed_off', 'acknowledged', 'permanent_failed')),
+            attempts INTEGER NOT NULL DEFAULT 0 CHECK (attempts >= 0),
+            next_attempt_at INTEGER,
+            claimed_at INTEGER,
+            claim_owner TEXT,
+            acknowledged_at INTEGER,
+            failed_at INTEGER,
+            last_failure_json TEXT,
+            idempotency_key TEXT,
+            canceled_at INTEGER,
+            created_at INTEGER NOT NULL,
+            updated_at INTEGER NOT NULL
+          );
+          INSERT INTO deliveries_new (rowid, delivery_id, message_id, destination_id, urgency, wake, state,
+              attempts, next_attempt_at, claimed_at, claim_owner, acknowledged_at, failed_at,
+              last_failure_json, idempotency_key, canceled_at, created_at, updated_at)
+            SELECT rowid, delivery_id, message_id, destination_id, urgency, wake, state,
+              attempts, next_attempt_at, claimed_at, claim_owner, acknowledged_at, failed_at,
+              last_failure_json, idempotency_key, canceled_at, created_at, updated_at
+            FROM deliveries WHERE state != 'armed';
+          DROP TABLE deliveries;
+          ALTER TABLE deliveries_new RENAME TO deliveries;
+          CREATE INDEX deliveries_destination ON deliveries(destination_id, wake, state, created_at);
+          CREATE INDEX deliveries_due ON deliveries(state, next_attempt_at, created_at, delivery_id)
+            WHERE next_attempt_at IS NOT NULL AND canceled_at IS NULL;
+          CREATE INDEX deliveries_handed_off ON deliveries(claim_owner) WHERE state = 'handed_off';
+          CREATE INDEX deliveries_message ON deliveries(message_id);
+          CREATE UNIQUE INDEX deliveries_idempotency ON deliveries(idempotency_key) WHERE idempotency_key IS NOT NULL;
+        `);for(const r of f)e.exec(r.sql);const D=e.prepare("SELECT COUNT(*) AS n FROM deliveries").get().n;if(D!==x)throw new Error(`v67 deliveries rebuild lost rows: expected ${x}, got ${D}`)}const t=e.prepare("PRAGMA foreign_key_check").all();if(t.length)throw new Error(`v67 left ${t.length} foreign-key violation(s)`)})}E(kt,"outcomeActionsOnObjects");function Mt(e){e.exec(`
+    CREATE TABLE IF NOT EXISTS create_requests (
+      request_key TEXT PRIMARY KEY,
+      node_id     TEXT,
+      expires_at  INTEGER NOT NULL,
+      state       TEXT NOT NULL DEFAULT 'reserved' CHECK (state IN ('reserved', 'warm_claimed', 'complete'))
+    );
+    CREATE INDEX IF NOT EXISTS idx_create_requests_expires ON create_requests(expires_at);
+  `)}E(Mt,"addCreateRequests");const h=[Xe,fe,Ce,Ue,Se,De,ge,ye,we,ve,he,xe,Fe,J,ke,J,Me,je,Ge,He,Be,$e,Qe,ze,Ve,Ze,et,tt,nt,Et,ot,it,st,Tt,dt,rt,at,_t,Nt,e=>{de(e),Ne(e),ce(e),Le(e)},Lt,lt,ct,ut,pt,Rt,Ot,Xt,It,mt,ee,te,ne,Ee,ft,Ct,oe,Ut,Ae,St,Dt,gt,wt,Ft,xt,ht,kt,vt,e=>e.exec(`
+    CREATE TABLE audit_rows (
+      id INTEGER PRIMARY KEY, request_id TEXT NOT NULL, time TEXT NOT NULL, grantee TEXT, sub TEXT,
+      client_id TEXT, class TEXT, operation TEXT NOT NULL, scope_checked TEXT,
+      outcome TEXT NOT NULL, node_id TEXT, run_id TEXT, payer TEXT,
+      resource TEXT, initiator_chain TEXT, provider TEXT, tool TEXT,
+      jti TEXT, receipt_id TEXT, responder TEXT
+    );
+    CREATE INDEX audit_rows_grantee_time ON audit_rows(grantee, id DESC);
+    CREATE INDEX audit_rows_request ON audit_rows(request_id);
+    CREATE INDEX audit_rows_time ON audit_rows(id DESC);
+    CREATE TABLE grantee_usage (
+      grantee TEXT NOT NULL, month TEXT NOT NULL, usd_equivalent REAL NOT NULL DEFAULT 0,
+      PRIMARY KEY (grantee, month)
+    );
+    CREATE TABLE provider_receipts (
+      provider TEXT NOT NULL, receipt_id TEXT NOT NULL, grantee TEXT NOT NULL,
+      run_id TEXT, usd_equivalent REAL NOT NULL, received_at TEXT NOT NULL,
+      PRIMARY KEY (provider, receipt_id)
+    );
+    CREATE TABLE provider_approvals (
+      question_id TEXT PRIMARY KEY, grantee TEXT NOT NULL, sub TEXT NOT NULL,
+      provider TEXT NOT NULL, tool TEXT NOT NULL, version INTEGER,
+      args_hash TEXT NOT NULL, request_id TEXT NOT NULL,
+      status TEXT NOT NULL CHECK (status IN ('open','answered','consumed','canceled')),
+      option_id TEXT
+    );
+  `),e=>e.exec(`
+    ALTER TABLE audit_rows ADD COLUMN question_id TEXT;
+    ALTER TABLE provider_approvals ADD COLUMN call_shape TEXT;
+    ALTER TABLE provider_approvals ADD COLUMN prepared_files TEXT;
+  `),yt,e=>e.exec(`
+    CREATE INDEX idx_human_requests_page_source ON human_requests(
+      CASE WHEN json_valid(specification_json) THEN json_extract(specification_json, '$.source.nodeId') END
+    ) WHERE kind = 'page';
+    CREATE INDEX idx_human_requests_page_invalid_spec ON human_requests(created_at, request_id)
+      WHERE kind = 'page' AND (NOT json_valid(specification_json)
+        OR CASE WHEN json_valid(specification_json) THEN json_type(specification_json) != 'object' END);
+  `),e=>e.exec(`
+    CREATE INDEX idx_human_requests_page_result_exception ON human_requests(created_at, request_id)
+      WHERE kind = 'page' AND result_json IS NOT NULL AND
+        CASE WHEN json_valid(result_json) THEN
+          json_extract(result_json, '$.kind') = 'page'
+          AND json_type(result_json, '$.summary') IS NOT 'text'
+        ELSE 1 END;
+  `),e=>e.exec(`
+    CREATE INDEX idx_nodes_terminal_placement_created ON nodes(created)
+      WHERE status IN ('done', 'canceled', 'dead')
+        AND (pane IS NOT NULL OR "window" IS NOT NULL OR tmux_session IS NOT NULL);
+  `),e=>e.exec(`
+    CREATE INDEX idx_nodes_supervision_frozen ON nodes(node_id) WHERE frozen_at IS NOT NULL;
+  `),e=>e.exec(`
+    ALTER TABLE nodes ADD COLUMN isolated INTEGER NOT NULL DEFAULT 0 CHECK (isolated IN (0, 1));
+    ALTER TABLE crons ADD COLUMN isolated INTEGER NOT NULL DEFAULT 0 CHECK (isolated IN (0, 1));
+  `),e=>e.exec(`
+    ALTER TABLE nodes ADD COLUMN last_turn_error_json TEXT;
+  `),e=>e.exec(`
+    -- Run confinement (Silas, 2026-09-30): the run of a deleted node of an isolated
+    -- run outlives its nodes row, so its kept objects stay confined; and the node
+    -- that registered a custom object fixes the run that object reads from.
+    CREATE TABLE deleted_isolated_nodes (node_id TEXT PRIMARY KEY, run_id TEXT NOT NULL);
+    ALTER TABLE custom_objects ADD COLUMN registered_by TEXT;
+  `),At,Mt,e=>e.exec("ALTER TABLE grants ADD COLUMN dependencies_json TEXT NOT NULL DEFAULT '{}'"),e=>e.exec("ALTER TABLE grants ADD COLUMN run_notice_url TEXT")];function b(e,t,n){const o=e.prepare("PRAGMA foreign_keys").get().foreign_keys;e.exec("PRAGMA foreign_keys = OFF;");try{e.exec("BEGIN IMMEDIATE");try{W(e)===t&&(n(),e.exec(`PRAGMA user_version = ${t+1}`)),e.exec("COMMIT")}catch(s){try{e.exec("ROLLBACK")}catch{}throw s}}finally{e.exec(`PRAGMA foreign_keys = ${o};`)}}E(b,"selfTransactionalMigration");const jt=new Set([3,61,63,66]);function W(e){return e.prepare("PRAGMA user_version").get().user_version}E(W,"currentUserVersion");function se(e,t){h[t](e),e.exec(`PRAGMA user_version = ${t+1}`)}E(se,"applyMigration");function Zt(e){const t=W(e);if(t>h.length)throw new Error(`unsupported canvas schema version ${t} (latest supported ${h.length})`);if(t===h.length)return;const n=e.prepare("PRAGMA busy_timeout").get().timeout;e.exec("PRAGMA busy_timeout = 60000;");try{Gt(e)}finally{e.exec(`PRAGMA busy_timeout = ${n};`)}}E(Zt,"migrate");function Gt(e){for(;;){const t=W(e);if(t>=h.length)return;if(jt.has(t)){if(e.isTransaction)throw new Error(`canvas migration v${t+1} requires autocommit`);h[t](e);continue}if(e.isTransaction){se(e,t);continue}e.exec("BEGIN IMMEDIATE");try{W(e)===t&&se(e,t),e.exec("COMMIT")}catch(n){try{e.exec("ROLLBACK")}catch{}throw n}}}E(Gt,"runPendingMigrations");export{h as MIGRATIONS,Zt as migrate};