@north-light/cli 0.3.538 → 0.3.539

package/dist/core/canvas/migrations.js

@@ -1,4 +1,4 @@
-var Te=Object.defineProperty;var E=(e,t)=>Te(e,"name",{value:t,configurable:!0});import{randomBytes as P}from"node:crypto";import{parseScope as ae}from"@north-light/identity";import{importNodeSqlAuthority as de,recreateNodeRowsView as _e}from"./node-sql-migration.js";import{addFaultNotifiedSince as Ne,migrateRecoveryWitnesses as ce}from"./recovery.js";import{migrateMessagingState as Le}from"./deliveries.js";import{migrateHumanRequestsState as le}from"../human/requests.js";import{existsSync as U,readFileSync as M,readdirSync as k,realpathSync as ue,statSync as pe}from"node:fs";import{basename as Re,join as j,resolve as Y}from"node:path";import{appSpace as Ae}from"../layout.js";import{emitEvent as Oe}from"../events/emit.js";import{isSafeNodeId as Ie,nodesRoot as h,nodeMetaPath as x}from"./paths.js";import{convertLegacyEdges as me}from"../../migrations/004-canvas-documents/legacy-edges.js";import{customExtensionPaths as fe}from"./extensions.js";import{readMetaObject as K,updateJsonFileDurably as q,withMetaLock as Xe,writeMetaObjectLocked as Ue}from"./meta-file.js";function Ce(e){e.exec(`
+var ae=Object.defineProperty;var E=(e,t)=>ae(e,"name",{value:t,configurable:!0});import{randomBytes as Y}from"node:crypto";import{parseScope as de}from"@north-light/identity";import{importNodeSqlAuthority as _e,recreateNodeRowsView as Ne}from"./node-sql-migration.js";import{addFaultNotifiedSince as ce,migrateRecoveryWitnesses as Le}from"./recovery.js";import{migrateMessagingState as le}from"./deliveries.js";import{migrateHumanRequestsState as ue}from"../human/requests.js";import{existsSync as U,readFileSync as k,readdirSync as j,realpathSync as pe,statSync as Re}from"node:fs";import{basename as Ae,join as H,resolve as K}from"node:path";import{appSpace as Oe}from"../layout.js";import{emitEvent as Ie}from"../events/emit.js";import{isSafeNodeId as me,nodesRoot as x,nodeMetaPath as F}from"./paths.js";import{LEGACY_LOCAL_PERSON as g}from"./legacy-person.js";import{convertLegacyEdges as fe}from"../../migrations/004-canvas-documents/legacy-edges.js";import{customExtensionPaths as Xe}from"./extensions.js";import{readMetaObject as q,updateJsonFileDurably as $,withMetaLock as Ue,writeMetaObjectLocked as Ce}from"./meta-file.js";function Se(e){e.exec(`
 CREATE TABLE IF NOT EXISTS nodes (
   node_id    TEXT PRIMARY KEY,
   name       TEXT NOT NULL,
@@ -23,7 +23,7 @@ CREATE TABLE IF NOT EXISTS edges (
 CREATE INDEX IF NOT EXISTS idx_edges_to   ON edges(type, to_id);
 CREATE INDEX IF NOT EXISTS idx_edges_from ON edges(type, from_id);
 CREATE INDEX IF NOT EXISTS idx_nodes_status ON nodes(status);
-`)}E(Ce,"baselineSchema");function b(e,t){return new Set(e.prepare(`PRAGMA table_info(${t})`).all().map(n=>n.name))}E(b,"tableColumns");function $(e,t,n,o){t.has(n)||(e.exec(o),t.add(n))}E($,"addColumnIfMissing");function O(e){return b(e,"nodes")}E(O,"nodeColumns");const c=$;function Se(e){const t=O(e);c(e,t,"intent","ALTER TABLE nodes ADD COLUMN intent TEXT;"),c(e,t,"pi_pid","ALTER TABLE nodes ADD COLUMN pi_pid INTEGER;"),c(e,t,"window","ALTER TABLE nodes ADD COLUMN window TEXT;"),c(e,t,"tmux_session","ALTER TABLE nodes ADD COLUMN tmux_session TEXT;")}E(Se,"addRuntimeColumns");function De(e){const t=h();if(!U(t))return;const n=e.prepare('UPDATE nodes SET intent = ?, pi_pid = ?, "window" = ?, tmux_session = ? WHERE node_id = ?');for(const o of k(t)){const T=x(o);if(!U(T))continue;let i;try{i=JSON.parse(M(T,"utf8"))}catch{continue}n.run(i.intent??null,i.pi_pid??null,i.window??null,i.tmux_session??null,o)}}E(De,"backfillRuntime");function ge(e){B(e,3,()=>{if(!(e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'edges'").get()!==void 0)){e.exec(`
+`)}E(Se,"baselineSchema");function B(e,t){return new Set(e.prepare(`PRAGMA table_info(${t})`).all().map(n=>n.name))}E(B,"tableColumns");function J(e,t,n,o){t.has(n)||(e.exec(o),t.add(n))}E(J,"addColumnIfMissing");function O(e){return B(e,"nodes")}E(O,"nodeColumns");const c=J;function De(e){const t=O(e);c(e,t,"intent","ALTER TABLE nodes ADD COLUMN intent TEXT;"),c(e,t,"pi_pid","ALTER TABLE nodes ADD COLUMN pi_pid INTEGER;"),c(e,t,"window","ALTER TABLE nodes ADD COLUMN window TEXT;"),c(e,t,"tmux_session","ALTER TABLE nodes ADD COLUMN tmux_session TEXT;")}E(De,"addRuntimeColumns");function ge(e){const t=x();if(!U(t))return;const n=e.prepare('UPDATE nodes SET intent = ?, pi_pid = ?, "window" = ?, tmux_session = ? WHERE node_id = ?');for(const o of j(t)){const T=F(o);if(!U(T))continue;let i;try{i=JSON.parse(k(T,"utf8"))}catch{continue}n.run(i.intent??null,i.pi_pid??null,i.window??null,i.tmux_session??null,o)}}E(ge,"backfillRuntime");function we(e){W(e,3,()=>{if(!(e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'edges'").get()!==void 0)){e.exec(`
 CREATE TABLE edges (
   type     TEXT NOT NULL,
   from_id  TEXT NOT NULL,
@@ -57,14 +57,14 @@ DROP TABLE edges;
 ALTER TABLE edges_new RENAME TO edges;
 CREATE INDEX IF NOT EXISTS idx_edges_to   ON edges(type, to_id);
 CREATE INDEX IF NOT EXISTS idx_edges_from ON edges(type, from_id);
-`);const o=e.prepare("SELECT COUNT(*) AS n FROM edges").get().n;if(o!==n)throw new Error(`edges FK rebuild lost rows: expected ${n} non-orphan edge(s), got ${o}`);const T=e.prepare("PRAGMA foreign_key_check").all();if(T.length>0)throw new Error(`edges FK rebuild left ${T.length} foreign-key violation(s)`)})}E(ge,"edgesForeignKeyCascade");function we(e){const t=O(e);c(e,t,"pane","ALTER TABLE nodes ADD COLUMN pane TEXT;")}E(we,"addPaneColumn");function ye(e){e.exec(`
+`);const o=e.prepare("SELECT COUNT(*) AS n FROM edges").get().n;if(o!==n)throw new Error(`edges FK rebuild lost rows: expected ${n} non-orphan edge(s), got ${o}`);const T=e.prepare("PRAGMA foreign_key_check").all();if(T.length>0)throw new Error(`edges FK rebuild left ${T.length} foreign-key violation(s)`)})}E(we,"edgesForeignKeyCascade");function ye(e){const t=O(e);c(e,t,"pane","ALTER TABLE nodes ADD COLUMN pane TEXT;")}E(ye,"addPaneColumn");function ve(e){e.exec(`
 CREATE TABLE IF NOT EXISTS focuses (
   focus_id  TEXT PRIMARY KEY,   -- stable internal id for the viewport
   pane      TEXT,               -- the durable %pane_id realizing the focus
   session   TEXT,               -- derived cache of the user session (reconciled from pane)
   node_id   TEXT NOT NULL UNIQUE -- the node shown; UNIQUE \u2192 a node occupies <=1 focus
 );
-`)}E(ye,"addFocusesTable");function ve(e){e.exec(`
+`)}E(ve,"addFocusesTable");function he(e){e.exec(`
 CREATE TABLE IF NOT EXISTS wakeups (
   wakeup_id  TEXT PRIMARY KEY,
   node_id    TEXT,                       -- TARGET + node-anchored cancel anchor; NULL = canvas-detached
@@ -80,7 +80,7 @@ CREATE INDEX IF NOT EXISTS idx_wakeups_fire  ON wakeups(fire_at);
 CREATE INDEX IF NOT EXISTS idx_wakeups_node  ON wakeups(node_id);                 -- by-node cancel / list
 CREATE INDEX IF NOT EXISTS idx_wakeups_owner ON wakeups(owner_id);               -- by-owner reap (ruling A)
 CREATE UNIQUE INDEX IF NOT EXISTS idx_wakeups_deadline ON wakeups(node_id) WHERE kind = 'deadline';
-`)}E(ve,"appendWakeupsTable");function he(e){e.exec(`
+`)}E(he,"appendWakeupsTable");function xe(e){e.exec(`
 CREATE TABLE IF NOT EXISTS triggers (
   trigger_id        TEXT PRIMARY KEY,
   owner_id          TEXT NOT NULL,
@@ -131,12 +131,12 @@ SELECT
 FROM wakeups;
 
 DROP TABLE wakeups;
-`)}E(he,"migrateWakeupsToTriggers");function xe(e){const t=O(e);c(e,t,"host_kind","ALTER TABLE nodes ADD COLUMN host_kind TEXT;")}E(xe,"addHostKindColumn");function Fe(e){e.exec(`
+`)}E(xe,"migrateWakeupsToTriggers");function Fe(e){const t=O(e);c(e,t,"host_kind","ALTER TABLE nodes ADD COLUMN host_kind TEXT;")}E(Fe,"addHostKindColumn");function Me(e){e.exec(`
 CREATE TABLE IF NOT EXISTS canvas_meta (
   key   TEXT PRIMARY KEY,
   value TEXT NOT NULL
 );
-`)}E(Fe,"addCanvasMetaTable");function Me(e){const t=O(e);c(e,t,"profile_id","ALTER TABLE nodes ADD COLUMN profile_id TEXT;")}E(Me,"addProfileIdColumn");function ke(e){const t=O(e);c(e,t,"pi_pid_identity","ALTER TABLE nodes ADD COLUMN pi_pid_identity TEXT;")}E(ke,"addPidIdentityColumn");function je(e){const t=O(e);c(e,t,"waiting_for","ALTER TABLE nodes ADD COLUMN waiting_for TEXT;")}E(je,"addMessageWaitColumn");function J(e){const t=O(e);if(t.size===0)return;c(e,t,"final_report","ALTER TABLE nodes ADD COLUMN final_report TEXT;"),c(e,t,"finalized_at","ALTER TABLE nodes ADD COLUMN finalized_at TEXT;");const n=e.prepare("SELECT node_id FROM nodes WHERE status = 'done' AND final_report IS NULL").all(),o=e.prepare("UPDATE nodes SET final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL");for(const{node_id:T}of n){const i=j(h(),T,"reports");if(!U(i))continue;let a=null;for(const N of k(i))if(N.endsWith(".md"))try{const L=M(j(i,N),"utf8"),l=/^---\nnode: [^\n]+\nkind: final\nts: ([^\n]+)\n---\n/.exec(L);if(l===null||Number.isNaN(Date.parse(l[1])))continue;const r={name:N,ts:l[1]};(a===null||r.ts>a.ts||r.ts===a.ts&&r.name>a.name)&&(a=r)}catch{}a!==null&&o.run(a.name,a.ts,T)}}E(J,"addCanonicalFinalColumns");function He(e){const t=h();if(U(t))for(const n of k(t)){const o=x(n);U(o)&&q(o,T=>{const i=T.launch;if(typeof i!="object"||i===null||Array.isArray(i))return!1;const a=i.extensions;if(!Array.isArray(a)||!a.every(L=>typeof L=="string"))return!1;const N=fe(a);return N.length===a.length?!1:(i.extensions=N,!0)})}}E(He,"normalizePersistedLaunchExtensions");function Ge(e){const t=O(e);c(e,t,"waiting_for_generation","ALTER TABLE nodes ADD COLUMN waiting_for_generation INTEGER NOT NULL DEFAULT 0;")}E(Ge,"addMessageWaitGenerationColumn");function be(e){e.exec(`
+`)}E(Me,"addCanvasMetaTable");function ke(e){const t=O(e);c(e,t,"profile_id","ALTER TABLE nodes ADD COLUMN profile_id TEXT;")}E(ke,"addProfileIdColumn");function je(e){const t=O(e);c(e,t,"pi_pid_identity","ALTER TABLE nodes ADD COLUMN pi_pid_identity TEXT;")}E(je,"addPidIdentityColumn");function He(e){const t=O(e);c(e,t,"waiting_for","ALTER TABLE nodes ADD COLUMN waiting_for TEXT;")}E(He,"addMessageWaitColumn");function Q(e){const t=O(e);if(t.size===0)return;c(e,t,"final_report","ALTER TABLE nodes ADD COLUMN final_report TEXT;"),c(e,t,"finalized_at","ALTER TABLE nodes ADD COLUMN finalized_at TEXT;");const n=e.prepare("SELECT node_id FROM nodes WHERE status = 'done' AND final_report IS NULL").all(),o=e.prepare("UPDATE nodes SET final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL");for(const{node_id:T}of n){const i=H(x(),T,"reports");if(!U(i))continue;let a=null;for(const N of j(i))if(N.endsWith(".md"))try{const L=k(H(i,N),"utf8"),l=/^---\nnode: [^\n]+\nkind: final\nts: ([^\n]+)\n---\n/.exec(L);if(l===null||Number.isNaN(Date.parse(l[1])))continue;const r={name:N,ts:l[1]};(a===null||r.ts>a.ts||r.ts===a.ts&&r.name>a.name)&&(a=r)}catch{}a!==null&&o.run(a.name,a.ts,T)}}E(Q,"addCanonicalFinalColumns");function Ge(e){const t=x();if(U(t))for(const n of j(t)){const o=F(n);U(o)&&$(o,T=>{const i=T.launch;if(typeof i!="object"||i===null||Array.isArray(i))return!1;const a=i.extensions;if(!Array.isArray(a)||!a.every(L=>typeof L=="string"))return!1;const N=Xe(a);return N.length===a.length?!1:(i.extensions=N,!0)})}}E(Ge,"normalizePersistedLaunchExtensions");function be(e){const t=O(e);c(e,t,"waiting_for_generation","ALTER TABLE nodes ADD COLUMN waiting_for_generation INTEGER NOT NULL DEFAULT 0;")}E(be,"addMessageWaitGenerationColumn");function Be(e){e.exec(`
 CREATE TABLE IF NOT EXISTS consult_outbox (
   node_id      TEXT PRIMARY KEY,   -- legacy work node id
   dir          TEXT NOT NULL,      -- legacy ticket directory
@@ -150,15 +150,15 @@ CREATE INDEX IF NOT EXISTS idx_consult_outbox_status ON consult_outbox(status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir ON consult_outbox(dir);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir_request_status ON consult_outbox(dir, request_id, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir_status ON consult_outbox(dir, status);
-`)}E(be,"addHumanWorkOutboxTable");function Be(e){const t=b(e,"consult_outbox"),n=E((o,T)=>$(e,t,o,T),"add");n("work_kind","ALTER TABLE consult_outbox ADD COLUMN work_kind TEXT NOT NULL DEFAULT 'follow_up';"),n("interaction_id","ALTER TABLE consult_outbox ADD COLUMN interaction_id TEXT;"),n("generation_id","ALTER TABLE consult_outbox ADD COLUMN generation_id TEXT;"),n("interaction_snapshot","ALTER TABLE consult_outbox ADD COLUMN interaction_snapshot TEXT;"),n("handler_command","ALTER TABLE consult_outbox ADD COLUMN handler_command TEXT;"),n("handler_args_json","ALTER TABLE consult_outbox ADD COLUMN handler_args_json TEXT;"),n("claim_token","ALTER TABLE consult_outbox ADD COLUMN claim_token TEXT;"),e.exec(`
+`)}E(Be,"addHumanWorkOutboxTable");function We(e){const t=B(e,"consult_outbox"),n=E((o,T)=>J(e,t,o,T),"add");n("work_kind","ALTER TABLE consult_outbox ADD COLUMN work_kind TEXT NOT NULL DEFAULT 'follow_up';"),n("interaction_id","ALTER TABLE consult_outbox ADD COLUMN interaction_id TEXT;"),n("generation_id","ALTER TABLE consult_outbox ADD COLUMN generation_id TEXT;"),n("interaction_snapshot","ALTER TABLE consult_outbox ADD COLUMN interaction_snapshot TEXT;"),n("handler_command","ALTER TABLE consult_outbox ADD COLUMN handler_command TEXT;"),n("handler_args_json","ALTER TABLE consult_outbox ADD COLUMN handler_args_json TEXT;"),n("claim_token","ALTER TABLE consult_outbox ADD COLUMN claim_token TEXT;"),e.exec(`
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_status ON consult_outbox(work_kind, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_dir_status ON consult_outbox(dir, work_kind, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_request_status ON consult_outbox(dir, request_id, work_kind, status);
 CREATE UNIQUE INDEX IF NOT EXISTS idx_consult_outbox_visual_request ON consult_outbox(dir, request_id, work_kind) WHERE work_kind = 'visual';
-`)}E(Be,"addHumanWorkColumns");function We(e){e.exec(`
+`)}E(We,"addHumanWorkColumns");function Pe(e){e.exec(`
 CREATE INDEX IF NOT EXISTS idx_nodes_parent  ON nodes(parent);
 CREATE INDEX IF NOT EXISTS idx_nodes_created ON nodes(created);
-`)}E(We,"addNodeParentCreatedIndexes");function Pe(e){e.exec(`
+`)}E(Pe,"addNodeParentCreatedIndexes");function Ye(e){e.exec(`
 CREATE TABLE IF NOT EXISTS crons (
   cron_id          TEXT PRIMARY KEY,
   name             TEXT NOT NULL,          -- agent-legible label; how it shows in list
@@ -213,22 +213,22 @@ CREATE TABLE IF NOT EXISTS cron_runs (                -- bounded ring, last 20 p
   FOREIGN KEY (cron_id) REFERENCES crons(cron_id) ON DELETE CASCADE
 );
 CREATE INDEX IF NOT EXISTS idx_cron_runs_cron ON cron_runs(cron_id, started);
-`)}E(Pe,"addCronsTables");function g(e){return`'${e.replace(/'/g,`'"'"'`)}'`}E(g,"shellSingleQuote");function Ye(e,t){let n=0;for(;;){const o=`${t}_${n}`;if(!e.split(`
-`).includes(o))return o;n++}}E(Ye,"uniqueHeredocDelimiter");function Q(e,t,n){const o=Ye(t,n);return`${e} <<'${o}'
+`)}E(Ye,"addCronsTables");function w(e){return`'${e.replace(/'/g,`'"'"'`)}'`}E(w,"shellSingleQuote");function Ke(e,t){let n=0;for(;;){const o=`${t}_${n}`;if(!e.split(`
+`).includes(o))return o;n++}}E(Ke,"uniqueHeredocDelimiter");function z(e,t,n){const o=Ke(t,n);return`${e} <<'${o}'
 ${t}
-${o}`}E(Q,"heredocCommand");function Ke(e){if(typeof e!="string")return{};try{const t=JSON.parse(e);return typeof t!="object"||t===null||Array.isArray(t)?{}:t}catch{return{}}}E(Ke,"migrationPayload");function X(e,t,n){const o=e[t];if(typeof o!="string"||o.trim()==="")throw new Error(`trigger ${n} payload requires non-empty ${t}`);return o}E(X,"requiredString");function H(e,t){const n=e[t];return typeof n=="string"&&n.trim()!==""?n:void 0}E(H,"optionalString");function w(e,t){const n=e[t];return typeof n=="string"&&n.trim()!==""?n:void 0}E(w,"optionalColumn");function z(e,t,n,o){return Q(`crtr node message send --to ${g(e)} --tier ${g(t)}`,n,`CRTR_MIGRATED_${o.replace(/[^A-Za-z0-9]/g,"_")}`)}E(z,"migratedMessageCommand");function qe(e,t){return`printf '%s\\n' "$CRTR_GATE_STDOUT" | crtr node message send --to ${g(e)} --tier ${g(t)}`}E(qe,"migratedGateStdoutMessageCommand");function $e(e,t){const n=[`crtr node new --kind ${g(X(e,"kind",t))}`],o=[["mode","mode"],["cwd","cwd"],["name","name"],["parent","parent"],["worktreeBase","worktree"],["forkFrom","fork-from"],["model","model"],["profile","profile"],["situationalContext","situational-context"]];for(const[i,a]of o){const N=H(e,i);N!==void 0&&n.push(`--${a} ${g(N)}`)}e.root===!0&&n.push("--root");const T=X(e,"prompt",t);return Q(n.join(" "),T,`CRTR_MIGRATED_${t.replace(/[^A-Za-z0-9]/g,"_")}`)}E($e,"migratedSpawnCommand");const V="migration.v22.skipped";function Je(e){const t=e.prepare("SELECT cwd FROM nodes WHERE parent IS NULL ORDER BY created LIMIT 1").get();return(t!==void 0?w(t,"cwd"):void 0)??process.cwd()}E(Je,"ambientMigrationCwd");function Qe(e){let t;try{t=e.prepare("SELECT eval_pid FROM triggers WHERE eval_state = 'running' AND eval_pid IS NOT NULL").all()}catch{return}for(const n of t){const o=n.eval_pid;if(!(typeof o!="number"||!Number.isInteger(o)||o<=1))try{process.kill(-o,"SIGTERM")}catch{}}}E(Qe,"reapRunningPredicateEvaluations");function ze(e){const t=[],n=e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'triggers'").get()!==void 0;n&&Qe(e);let o=[];if(n)try{o=e.prepare("SELECT * FROM triggers ORDER BY created, trigger_id").all()}catch(a){t.push({trigger_id:"<unreadable table>",reason:`triggers table could not be read: ${a instanceof Error?a.message:String(a)}`})}const T=Je(e),i=e.prepare(`
+${o}`}E(z,"heredocCommand");function qe(e){if(typeof e!="string")return{};try{const t=JSON.parse(e);return typeof t!="object"||t===null||Array.isArray(t)?{}:t}catch{return{}}}E(qe,"migrationPayload");function X(e,t,n){const o=e[t];if(typeof o!="string"||o.trim()==="")throw new Error(`trigger ${n} payload requires non-empty ${t}`);return o}E(X,"requiredString");function G(e,t){const n=e[t];return typeof n=="string"&&n.trim()!==""?n:void 0}E(G,"optionalString");function y(e,t){const n=e[t];return typeof n=="string"&&n.trim()!==""?n:void 0}E(y,"optionalColumn");function V(e,t,n,o){return z(`crtr node message send --to ${w(e)} --tier ${w(t)}`,n,`CRTR_MIGRATED_${o.replace(/[^A-Za-z0-9]/g,"_")}`)}E(V,"migratedMessageCommand");function $e(e,t){return`printf '%s\\n' "$CRTR_GATE_STDOUT" | crtr node message send --to ${w(e)} --tier ${w(t)}`}E($e,"migratedGateStdoutMessageCommand");function Je(e,t){const n=[`crtr node new --kind ${w(X(e,"kind",t))}`],o=[["mode","mode"],["cwd","cwd"],["name","name"],["parent","parent"],["worktreeBase","worktree"],["forkFrom","fork-from"],["model","model"],["profile","profile"],["situationalContext","situational-context"]];for(const[i,a]of o){const N=G(e,i);N!==void 0&&n.push(`--${a} ${w(N)}`)}e.root===!0&&n.push("--root");const T=X(e,"prompt",t);return z(n.join(" "),T,`CRTR_MIGRATED_${t.replace(/[^A-Za-z0-9]/g,"_")}`)}E(Je,"migratedSpawnCommand");const Z="migration.v22.skipped";function Qe(e){const t=e.prepare("SELECT cwd FROM nodes WHERE parent IS NULL ORDER BY created LIMIT 1").get();return(t!==void 0?y(t,"cwd"):void 0)??process.cwd()}E(Qe,"ambientMigrationCwd");function ze(e){let t;try{t=e.prepare("SELECT eval_pid FROM triggers WHERE eval_state = 'running' AND eval_pid IS NOT NULL").all()}catch{return}for(const n of t){const o=n.eval_pid;if(!(typeof o!="number"||!Number.isInteger(o)||o<=1))try{process.kill(-o,"SIGTERM")}catch{}}}E(ze,"reapRunningPredicateEvaluations");function Ve(e){const t=[],n=e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'triggers'").get()!==void 0;n&&ze(e);let o=[];if(n)try{o=e.prepare("SELECT * FROM triggers ORDER BY created, trigger_id").all()}catch(a){t.push({trigger_id:"<unreadable table>",reason:`triggers table could not be read: ${a instanceof Error?a.message:String(a)}`})}const T=Qe(e),i=e.prepare(`
 INSERT OR REPLACE INTO crons (
   cron_id, name, created_by, command, fire_at, recur, tz, expires_at,
   anchor_node, cancel_on_wake, cwd, env_json, profile, scope,
   run_timeout_s, overlap, on_output, sink, tier, created, updated
-) VALUES (?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, NULL, ?, 'profile', ?, 'skip', 'on-failure', '{}', ?, ?, ?)`);for(const a of o){const N=w(a,"trigger_id");if(N===void 0){t.push({trigger_id:"<unidentified row>",reason:"row carries no trigger_id"});continue}try{Ve(e,i,a,N,T)}catch(L){t.push({trigger_id:N,reason:L instanceof Error?L.message:String(L)})}}t.length>0&&(e.prepare("INSERT INTO canvas_meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(V,JSON.stringify(t)),console.warn(`[canvas migration v22] ${t.length} retired schedule(s) could not be converted to crons and were dropped; see canvas_meta['${V}']: `+t.map(a=>`${a.trigger_id} (${a.reason})`).join("; "))),e.exec(`
+) VALUES (?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, NULL, ?, 'profile', ?, 'skip', 'on-failure', '{}', ?, ?, ?)`);for(const a of o){const N=y(a,"trigger_id");if(N===void 0){t.push({trigger_id:"<unidentified row>",reason:"row carries no trigger_id"});continue}try{Ze(e,i,a,N,T)}catch(L){t.push({trigger_id:N,reason:L instanceof Error?L.message:String(L)})}}t.length>0&&(e.prepare("INSERT INTO canvas_meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(Z,JSON.stringify(t)),console.warn(`[canvas migration v22] ${t.length} retired schedule(s) could not be converted to crons and were dropped; see canvas_meta['${Z}']: `+t.map(a=>`${a.trigger_id} (${a.reason})`).join("; "))),e.exec(`
 DROP INDEX IF EXISTS idx_triggers_fire;
 DROP INDEX IF EXISTS idx_triggers_node;
 DROP INDEX IF EXISTS idx_triggers_owner;
 DROP INDEX IF EXISTS idx_triggers_eval;
 DROP INDEX IF EXISTS idx_triggers_deadline;
 DROP TABLE IF EXISTS triggers;
-`)}E(ze,"migrateTriggersToCrons");function Ve(e,t,n,o,T){const i=X(n,"owner_id",o),a=e.prepare("SELECT cwd, profile_id FROM nodes WHERE node_id = ?").get(i),N=(a===void 0?void 0:w(a,"cwd"))??T,L=a===void 0?null:w(a,"profile_id")??null,l=w(n,"node_id")??null,r=X(n,"action",o),_=X(n,"action_mode",o),d=X(n,"trigger_type",o),u=Ke(n.payload),p=w(n,"created")??new Date().toISOString(),I=_==="deadline_message"?"urgent":H(u,"tier")??"normal",R=H(u,"label");let s,A,m=!1;if(r==="msg"&&(_==="inbox_message"||_==="deadline_message")){if(l===null)throw new Error("has no message target");const f=H(u,"body");f!==void 0?s=z(l,I,f,o):d==="when"?(m=!0,s=qe(l,I)):s=z(l,I,R??"Scheduled message (no body was recorded when this schedule was armed).",o),A=R??(_==="deadline_message"?"deadline":"scheduled message")}else if(r==="msg"&&_==="fresh_revive"){if(l===null)throw new Error("has no revive target");s=`crtr node lifecycle revive ${g(l)} --fresh`,A=R??"scheduled fresh revive"}else if(r==="new"&&_==="node_birth")s=$e(u,o),A=H(u,"name")??`scheduled ${X(u,"kind",o)} node`;else throw new Error(`has unsupported action ${r}/${_}`);let D,y,G=null;if(d==="when"){D=X(n,"next_eval_at",o),y=X(n,"eval_every",o),G=w(n,"timeout_at")??null;const f=X(n,"when_script",o);s=`${m?`if ! CRTR_GATE_STDOUT="$(
+`)}E(Ve,"migrateTriggersToCrons");function Ze(e,t,n,o,T){const i=X(n,"owner_id",o),a=e.prepare("SELECT cwd, profile_id FROM nodes WHERE node_id = ?").get(i),N=(a===void 0?void 0:y(a,"cwd"))??T,L=a===void 0?null:y(a,"profile_id")??null,l=y(n,"node_id")??null,r=X(n,"action",o),_=X(n,"action_mode",o),d=X(n,"trigger_type",o),u=qe(n.payload),p=y(n,"created")??new Date().toISOString(),I=_==="deadline_message"?"urgent":G(u,"tier")??"normal",R=G(u,"label");let s,A,m=!1;if(r==="msg"&&(_==="inbox_message"||_==="deadline_message")){if(l===null)throw new Error("has no message target");const f=G(u,"body");f!==void 0?s=V(l,I,f,o):d==="when"?(m=!0,s=$e(l,I)):s=V(l,I,R??"Scheduled message (no body was recorded when this schedule was armed).",o),A=R??(_==="deadline_message"?"deadline":"scheduled message")}else if(r==="msg"&&_==="fresh_revive"){if(l===null)throw new Error("has no revive target");s=`crtr node lifecycle revive ${w(l)} --fresh`,A=R??"scheduled fresh revive"}else if(r==="new"&&_==="node_birth")s=Je(u,o),A=G(u,"name")??`scheduled ${X(u,"kind",o)} node`;else throw new Error(`has unsupported action ${r}/${_}`);let D,v,b=null;if(d==="when"){D=X(n,"next_eval_at",o),v=X(n,"eval_every",o),b=y(n,"timeout_at")??null;const f=X(n,"when_script",o);s=`${m?`if ! CRTR_GATE_STDOUT="$(
 ${f}
 )"; then`:`if ! (
 ${f}
@@ -237,14 +237,14 @@ ${f}
 fi
 {
 ${s}
-} && crtr cron cancel "$CRTR_CRON_ID"`}else if(d==="at"||d==="every"||d==="until")D=X(n,"fire_at",o),y=d==="every"?X(n,"recur",o):null;else throw new Error(`has unknown timing type ${d}`);if(_==="deadline_message"&&l!==null){const f=e.prepare("SELECT cron_id FROM crons WHERE anchor_node = ? AND cancel_on_wake = 1 AND cron_id <> ?").get(l,o);if(f!==void 0)throw new Error(`node ${l} already has a migrated deadline (${String(f.cron_id)}); only one is allowed`)}t.run(o,A,i,s,D,y,G,l,_==="deadline_message"?1:0,N,L,300,I,p,p)}E(Ve,"convertTriggerRow");function Ze(e){const t=b(e,"crons");t.size===0||t.has("run_pid_identity")||e.exec("ALTER TABLE crons ADD COLUMN run_pid_identity TEXT;")}E(Ze,"addCronRunPidIdentityColumn");function et(e){const t=b(e,"crons");t.size!==0&&(t.has("run_out_of_band")||e.exec("ALTER TABLE crons ADD COLUMN run_out_of_band INTEGER NOT NULL DEFAULT 0;"),t.has("queued")&&e.exec("ALTER TABLE crons DROP COLUMN queued;"))}E(et,"addCronOutOfBandColumn");function tt(e){e.exec(`
+} && crtr cron cancel "$CRTR_CRON_ID"`}else if(d==="at"||d==="every"||d==="until")D=X(n,"fire_at",o),v=d==="every"?X(n,"recur",o):null;else throw new Error(`has unknown timing type ${d}`);if(_==="deadline_message"&&l!==null){const f=e.prepare("SELECT cron_id FROM crons WHERE anchor_node = ? AND cancel_on_wake = 1 AND cron_id <> ?").get(l,o);if(f!==void 0)throw new Error(`node ${l} already has a migrated deadline (${String(f.cron_id)}); only one is allowed`)}t.run(o,A,i,s,D,v,b,l,_==="deadline_message"?1:0,N,L,300,I,p,p)}E(Ze,"convertTriggerRow");function et(e){const t=B(e,"crons");t.size===0||t.has("run_pid_identity")||e.exec("ALTER TABLE crons ADD COLUMN run_pid_identity TEXT;")}E(et,"addCronRunPidIdentityColumn");function tt(e){const t=B(e,"crons");t.size!==0&&(t.has("run_out_of_band")||e.exec("ALTER TABLE crons ADD COLUMN run_out_of_band INTEGER NOT NULL DEFAULT 0;"),t.has("queued")&&e.exec("ALTER TABLE crons DROP COLUMN queued;"))}E(tt,"addCronOutOfBandColumn");function nt(e){e.exec(`
 CREATE TABLE IF NOT EXISTS warm_pool (
   node_id    TEXT PRIMARY KEY REFERENCES nodes(node_id) ON DELETE CASCADE,
   recipe_key TEXT NOT NULL,   -- frozen launch tuple this spare was minted for
   created    TEXT NOT NULL    -- ISO 8601, mint time (oldest spare claimed first)
 );
 CREATE INDEX IF NOT EXISTS idx_warm_pool_recipe ON warm_pool(recipe_key, created);
-`)}E(tt,"addWarmPoolTable");function nt(e){const t=e.prepare("SELECT node_id, dir, root, request_id, work_kind, status, final_report, updated_at FROM consult_outbox").all();e.exec(`
+`)}E(nt,"addWarmPoolTable");function Et(e){const t=e.prepare("SELECT node_id, dir, root, request_id, work_kind, status, final_report, updated_at FROM consult_outbox").all();e.exec(`
 CREATE TABLE consult_outbox_new (
   node_id        TEXT PRIMARY KEY,
   ticket_node_id TEXT NOT NULL,
@@ -256,7 +256,7 @@ CREATE TABLE consult_outbox_new (
 );
 `);const n=e.prepare(`
 INSERT INTO consult_outbox_new (node_id, ticket_node_id, request_id, work_kind, status, final_report, updated_at)
-VALUES (?, ?, ?, ?, ?, ?, ?)`);let o=0;for(const T of t){const i=Re(T.dir);if(!(T.root===Y(T.root)&&T.dir===j(T.root,i))||!Ie(i)){o+=1;continue}n.run(T.node_id,i,T.request_id,T.work_kind,T.status,T.final_report,T.updated_at)}o>0&&console.warn(`[canvas migration v26] dropped ${o} consult_outbox row(s) whose legacy ticket path cannot safely map to a ticket node id`),e.exec(`
+VALUES (?, ?, ?, ?, ?, ?, ?)`);let o=0;for(const T of t){const i=Ae(T.dir);if(!(T.root===K(T.root)&&T.dir===H(T.root,i))||!me(i)){o+=1;continue}n.run(T.node_id,i,T.request_id,T.work_kind,T.status,T.final_report,T.updated_at)}o>0&&console.warn(`[canvas migration v26] dropped ${o} consult_outbox row(s) whose legacy ticket path cannot safely map to a ticket node id`),e.exec(`
 DROP TABLE consult_outbox;
 ALTER TABLE consult_outbox_new RENAME TO consult_outbox;
 
@@ -265,7 +265,7 @@ CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_status ON consult_outbo
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_ticket_status ON consult_outbox(ticket_node_id, work_kind, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_ticket_request_status ON consult_outbox(ticket_node_id, request_id, work_kind, status);
 CREATE UNIQUE INDEX IF NOT EXISTS idx_consult_outbox_visual_request ON consult_outbox(ticket_node_id, request_id, work_kind) WHERE work_kind = 'visual';
-`)}E(nt,"narrowHumanWorkOutbox");function Et(e){e.exec(`
+`)}E(Et,"narrowHumanWorkOutbox");function ot(e){e.exec(`
 CREATE TABLE IF NOT EXISTS reviews (
   review_id            TEXT PRIMARY KEY,
   idempotency_key      TEXT NOT NULL UNIQUE,
@@ -309,7 +309,7 @@ CREATE INDEX IF NOT EXISTS idx_reviews_state ON reviews(state);
 CREATE INDEX IF NOT EXISTS idx_reviews_origin ON reviews(origin_node_id);
 CREATE INDEX IF NOT EXISTS idx_reviews_file ON reviews(file);
 CREATE INDEX IF NOT EXISTS idx_reviews_bridge ON reviews(bridge_node_id);
-`)}E(Et,"addReviewsTable");function ot(e){e.exec(`
+`)}E(ot,"addReviewsTable");function it(e){e.exec(`
 CREATE TABLE IF NOT EXISTS review_comments (
   comment_id          TEXT PRIMARY KEY,
   review_id           TEXT NOT NULL,
@@ -354,13 +354,13 @@ CREATE INDEX IF NOT EXISTS idx_review_comment_events_review_seq
   ON review_comment_events(review_id, seq);
 CREATE INDEX IF NOT EXISTS idx_review_comment_events_comment_seq
   ON review_comment_events(comment_id, seq);
-`)}E(ot,"addReviewCommentTables");function it(e){e.exec(`
+`)}E(it,"addReviewCommentTables");function st(e){e.exec(`
 ALTER TABLE review_comments
   ADD COLUMN anchor_state TEXT NOT NULL DEFAULT 'live' CHECK (anchor_state IN ('live', 'detached'));
-`)}E(it,"addReviewCommentAnchorState");function st(e){e.exec("DROP TABLE IF EXISTS consult_outbox")}E(st,"dropConsultOutbox");function rt(e){e.exec("ALTER TABLE reviews ADD COLUMN submit_requested_at TEXT")}E(rt,"addReviewSubmitRequested");function Tt(e){e.exec(`
+`)}E(st,"addReviewCommentAnchorState");function rt(e){e.exec("DROP TABLE IF EXISTS consult_outbox")}E(rt,"dropConsultOutbox");function Tt(e){e.exec("ALTER TABLE reviews ADD COLUMN submit_requested_at TEXT")}E(Tt,"addReviewSubmitRequested");function at(e){e.exec(`
 ALTER TABLE crons ADD COLUMN held INTEGER NOT NULL DEFAULT 0;
 ALTER TABLE crons ADD COLUMN last_poke_at TEXT;
-`)}E(Tt,"addCronHeldColumns");function at(e){e.exec(`
+`)}E(at,"addCronHeldColumns");function dt(e){e.exec(`
 CREATE TABLE human_action_deliveries (
   request_id           TEXT PRIMARY KEY,
   state                TEXT NOT NULL,
@@ -378,7 +378,7 @@ CREATE TABLE human_action_deliveries (
   updated_at           INTEGER NOT NULL
 );
 CREATE INDEX idx_human_action_deliveries_due ON human_action_deliveries(state, next_attempt_at);
-`)}E(at,"addHumanActionDeliveries");function dt(e){const t=O(e);c(e,t,"pi_session_file","ALTER TABLE nodes ADD COLUMN pi_session_file TEXT;");for(const n of k(h(),{withFileTypes:!0}))if(n.isDirectory())try{const o=JSON.parse(M(x(n.name),"utf8"));typeof o.pi_session_file=="string"&&e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?").run(o.pi_session_file,n.name)}catch{}e.exec("CREATE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}E(dt,"addNodeSessionFileIndex");function Z(e,t){const n=E(N=>{const L=Y(N);return U(L)?ue(L):L},"canonical"),o=e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?");e.exec("DROP INDEX IF EXISTS idx_nodes_pi_session_file;");const T=e.prepare("SELECT node_id FROM nodes ORDER BY created ASC, node_id ASC").all();for(const{node_id:N}of T){const L=x(N);if(K(L)===null){o.run(null,N);continue}const l=Xe(L,()=>{const r=K(L);if(r===null)throw new Error(`node ${N} session metadata changed during ownership migration`);if(typeof r.pi_session_file!="string")return null;const _=r.pi_session_file,d=n(_);return d!==_&&(r.pi_session_file=d,Ue(L,r)),d});o.run(l,N)}const i=e.prepare(`
+`)}E(dt,"addHumanActionDeliveries");function _t(e){const t=O(e);c(e,t,"pi_session_file","ALTER TABLE nodes ADD COLUMN pi_session_file TEXT;");for(const n of j(x(),{withFileTypes:!0}))if(n.isDirectory())try{const o=JSON.parse(k(F(n.name),"utf8"));typeof o.pi_session_file=="string"&&e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?").run(o.pi_session_file,n.name)}catch{}e.exec("CREATE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}E(_t,"addNodeSessionFileIndex");function ee(e,t){const n=E(N=>{const L=K(N);return U(L)?pe(L):L},"canonical"),o=e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?");e.exec("DROP INDEX IF EXISTS idx_nodes_pi_session_file;");const T=e.prepare("SELECT node_id FROM nodes ORDER BY created ASC, node_id ASC").all();for(const{node_id:N}of T){const L=F(N);if(q(L)===null){o.run(null,N);continue}const l=Ue(L,()=>{const r=q(L);if(r===null)throw new Error(`node ${N} session metadata changed during ownership migration`);if(typeof r.pi_session_file!="string")return null;const _=r.pi_session_file,d=n(_);return d!==_&&(r.pi_session_file=d,Ce(L,r)),d});o.run(l,N)}const i=e.prepare(`
 SELECT pi_session_file
 FROM nodes
 WHERE pi_session_file IS NOT NULL
@@ -389,7 +389,7 @@ SELECT node_id
 FROM nodes
 WHERE pi_session_file = ?
 ORDER BY created ASC, node_id ASC
-`).all(N);for(const{node_id:l}of L.slice(1)){if(!q(x(l),_=>{const d=_.pi_session_file;if(typeof d!="string"||n(d)!==N)throw new Error(`node ${l} session metadata changed during ownership migration`);return _.pi_session_id=null,_.pi_session_file=null,!0}))throw new Error(`node ${l} session metadata changed during ownership migration`);a.run(l)}}e.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}E(Z,"reconcileNodeSessionFileOwners");function _t(e){Z(e,!0)}E(_t,"makeNodeSessionFileUnique");function Nt(e){Z(e,!1)}E(Nt,"repairNodeSessionFileUniqueIndex");function ct(e){const t=O(e);c(e,t,"frozen_at","ALTER TABLE nodes ADD COLUMN frozen_at TEXT;"),c(e,t,"respawn_failures","ALTER TABLE nodes ADD COLUMN respawn_failures INTEGER NOT NULL DEFAULT 0;"),c(e,t,"respawn_not_before","ALTER TABLE nodes ADD COLUMN respawn_not_before TEXT;"),c(e,t,"launched_at","ALTER TABLE nodes ADD COLUMN launched_at TEXT;"),c(e,t,"last_settled_at","ALTER TABLE nodes ADD COLUMN last_settled_at TEXT;"),c(e,t,"terminal_reason","ALTER TABLE nodes ADD COLUMN terminal_reason TEXT;"),e.exec(`
+`).all(N);for(const{node_id:l}of L.slice(1)){if(!$(F(l),_=>{const d=_.pi_session_file;if(typeof d!="string"||n(d)!==N)throw new Error(`node ${l} session metadata changed during ownership migration`);return _.pi_session_id=null,_.pi_session_file=null,!0}))throw new Error(`node ${l} session metadata changed during ownership migration`);a.run(l)}}e.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}E(ee,"reconcileNodeSessionFileOwners");function Nt(e){ee(e,!0)}E(Nt,"makeNodeSessionFileUnique");function ct(e){ee(e,!1)}E(ct,"repairNodeSessionFileUniqueIndex");function Lt(e){const t=O(e);c(e,t,"frozen_at","ALTER TABLE nodes ADD COLUMN frozen_at TEXT;"),c(e,t,"respawn_failures","ALTER TABLE nodes ADD COLUMN respawn_failures INTEGER NOT NULL DEFAULT 0;"),c(e,t,"respawn_not_before","ALTER TABLE nodes ADD COLUMN respawn_not_before TEXT;"),c(e,t,"launched_at","ALTER TABLE nodes ADD COLUMN launched_at TEXT;"),c(e,t,"last_settled_at","ALTER TABLE nodes ADD COLUMN last_settled_at TEXT;"),c(e,t,"terminal_reason","ALTER TABLE nodes ADD COLUMN terminal_reason TEXT;"),e.exec(`
 UPDATE nodes SET terminal_reason = CASE
   WHEN status = 'done' AND final_report IS NOT NULL THEN 'finalized'
   WHEN status = 'done' AND intent = 'parked'        THEN 'parked'
@@ -398,7 +398,7 @@ UPDATE nodes SET terminal_reason = CASE
   WHEN status = 'dead'                              THEN 'crashed'
 END
 WHERE status IN ('done','canceled','dead') AND terminal_reason IS NULL;
-`)}E(ct,"addNodeLifecycleColumns");function Lt(e){const t=O(e);c(e,t,"description","ALTER TABLE nodes ADD COLUMN description TEXT;"),c(e,t,"cycles","ALTER TABLE nodes ADD COLUMN cycles INTEGER;");const n=h();if(!U(n))return;const o=e.prepare("UPDATE nodes SET description = ?, cycles = ? WHERE node_id = ?");for(const T of k(n)){const i=x(T);if(!U(i))continue;let a;try{a=JSON.parse(M(i,"utf8"))}catch{continue}const N=typeof a.description=="string"?a.description:null,L=typeof a.cycles=="number"?a.cycles:null;o.run(N,L,T)}}E(Lt,"addNodeLabelColumns");function lt(e){const t=O(e);c(e,t,"outcome_kind","ALTER TABLE nodes ADD COLUMN outcome_kind TEXT;"),c(e,t,"outcome_reason","ALTER TABLE nodes ADD COLUMN outcome_reason TEXT;"),c(e,t,"outcome_at","ALTER TABLE nodes ADD COLUMN outcome_at TEXT;"),c(e,t,"outcome_revision","ALTER TABLE nodes ADD COLUMN outcome_revision INTEGER NOT NULL DEFAULT 0;"),c(e,t,"outcome_detail_json","ALTER TABLE nodes ADD COLUMN outcome_detail_json TEXT;"),c(e,t,"deadline_at","ALTER TABLE nodes ADD COLUMN deadline_at TEXT;"),e.exec(`
+`)}E(Lt,"addNodeLifecycleColumns");function lt(e){const t=O(e);c(e,t,"description","ALTER TABLE nodes ADD COLUMN description TEXT;"),c(e,t,"cycles","ALTER TABLE nodes ADD COLUMN cycles INTEGER;");const n=x();if(!U(n))return;const o=e.prepare("UPDATE nodes SET description = ?, cycles = ? WHERE node_id = ?");for(const T of j(n)){const i=F(T);if(!U(i))continue;let a;try{a=JSON.parse(k(i,"utf8"))}catch{continue}const N=typeof a.description=="string"?a.description:null,L=typeof a.cycles=="number"?a.cycles:null;o.run(N,L,T)}}E(lt,"addNodeLabelColumns");function ut(e){const t=O(e);c(e,t,"outcome_kind","ALTER TABLE nodes ADD COLUMN outcome_kind TEXT;"),c(e,t,"outcome_reason","ALTER TABLE nodes ADD COLUMN outcome_reason TEXT;"),c(e,t,"outcome_at","ALTER TABLE nodes ADD COLUMN outcome_at TEXT;"),c(e,t,"outcome_revision","ALTER TABLE nodes ADD COLUMN outcome_revision INTEGER NOT NULL DEFAULT 0;"),c(e,t,"outcome_detail_json","ALTER TABLE nodes ADD COLUMN outcome_detail_json TEXT;"),c(e,t,"deadline_at","ALTER TABLE nodes ADD COLUMN deadline_at TEXT;"),e.exec(`
 CREATE TABLE IF NOT EXISTS node_outcome_deliveries (
   node_id              TEXT PRIMARY KEY,
   state                TEXT NOT NULL,
@@ -431,17 +431,17 @@ UPDATE nodes SET outcome_kind='failure',
        outcome_reason=COALESCE(terminal_reason,'crashed'),
        outcome_at=COALESCE(finalized_at, created), outcome_revision=1
  WHERE final_report IS NULL AND status IN ('done','dead','canceled') AND outcome_at IS NULL;
-`)}E(lt,"addNodeOutcomeAndDeadline");function ut(e){const t=O(e);c(e,t,"telemetry_tokens_in","ALTER TABLE nodes ADD COLUMN telemetry_tokens_in INTEGER;"),c(e,t,"telemetry_context_tokens","ALTER TABLE nodes ADD COLUMN telemetry_context_tokens INTEGER;"),c(e,t,"telemetry_last_activity","ALTER TABLE nodes ADD COLUMN telemetry_last_activity TEXT;"),c(e,t,"telemetry_updated_at","ALTER TABLE nodes ADD COLUMN telemetry_updated_at TEXT;");const n=e.prepare(`UPDATE nodes
+`)}E(ut,"addNodeOutcomeAndDeadline");function pt(e){const t=O(e);c(e,t,"telemetry_tokens_in","ALTER TABLE nodes ADD COLUMN telemetry_tokens_in INTEGER;"),c(e,t,"telemetry_context_tokens","ALTER TABLE nodes ADD COLUMN telemetry_context_tokens INTEGER;"),c(e,t,"telemetry_last_activity","ALTER TABLE nodes ADD COLUMN telemetry_last_activity TEXT;"),c(e,t,"telemetry_updated_at","ALTER TABLE nodes ADD COLUMN telemetry_updated_at TEXT;");const n=e.prepare(`UPDATE nodes
     SET telemetry_tokens_in = ?, telemetry_context_tokens = ?,
         telemetry_last_activity = ?, telemetry_updated_at = ?
-    WHERE node_id = ?`);for(const{node_id:o}of e.prepare("SELECT node_id FROM nodes").all()){const T=j(h(),o,"job","telemetry.json");if(U(T))try{const i=JSON.parse(M(T,"utf8")),a=typeof i.tokens_in=="number"&&Number.isFinite(i.tokens_in)?i.tokens_in:null,N=typeof i.context_tokens=="number"&&Number.isFinite(i.context_tokens)?i.context_tokens:null,L=typeof i.last_activity=="string"?i.last_activity:null,l=pe(T).mtime.toISOString();n.run(a,N,L,l,o)}catch{}}}E(ut,"addNodeTelemetryColumns");function pt(e){e.exec(`
+    WHERE node_id = ?`);for(const{node_id:o}of e.prepare("SELECT node_id FROM nodes").all()){const T=H(x(),o,"job","telemetry.json");if(U(T))try{const i=JSON.parse(k(T,"utf8")),a=typeof i.tokens_in=="number"&&Number.isFinite(i.tokens_in)?i.tokens_in:null,N=typeof i.context_tokens=="number"&&Number.isFinite(i.context_tokens)?i.context_tokens:null,L=typeof i.last_activity=="string"?i.last_activity:null,l=Re(T).mtime.toISOString();n.run(a,N,L,l,o)}catch{}}}E(pt,"addNodeTelemetryColumns");function Rt(e){e.exec(`
 CREATE INDEX IF NOT EXISTS deliveries_external_due_order
   ON deliveries(state, next_attempt_at, created_at, delivery_id)
   WHERE destination_kind = 'external_action' AND canceled_at IS NULL;
 DROP INDEX IF EXISTS deliveries_external_due;
 CREATE INDEX IF NOT EXISTS idx_nodes_parent_created ON nodes(parent, created);
 CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
-`)}E(pt,"addRecurringLaneIndexes");function Rt(e){_e(e)}E(Rt,"projectLiveNodeState");function At(e){c(e,O(e),"scopes_json","ALTER TABLE nodes ADD COLUMN scopes_json TEXT;")}E(At,"addNodeScopes");function Ot(e){const t=O(e);c(e,t,"grantee","ALTER TABLE nodes ADD COLUMN grantee TEXT NOT NULL DEFAULT 'user:local';"),c(e,t,"sub","ALTER TABLE nodes ADD COLUMN sub TEXT;"),c(e,t,"grant_id","ALTER TABLE nodes ADD COLUMN grant_id TEXT;"),c(e,t,"client_id","ALTER TABLE nodes ADD COLUMN client_id TEXT;"),c(e,t,"metadata_json","ALTER TABLE nodes ADD COLUMN metadata_json TEXT;"),c(e,t,"run_id","ALTER TABLE nodes ADD COLUMN run_id TEXT;"),c(e,t,"event_cursor","ALTER TABLE nodes ADD COLUMN event_cursor INTEGER;"),c(e,t,"usage_json","ALTER TABLE nodes ADD COLUMN usage_json TEXT;"),c(e,t,"deleting_at","ALTER TABLE nodes ADD COLUMN deleting_at TEXT;"),e.exec(`
+`)}E(Rt,"addRecurringLaneIndexes");function At(e){Ne(e)}E(At,"projectLiveNodeState");function Ot(e){c(e,O(e),"scopes_json","ALTER TABLE nodes ADD COLUMN scopes_json TEXT;")}E(Ot,"addNodeScopes");function It(e){const t=O(e);c(e,t,"grantee",`ALTER TABLE nodes ADD COLUMN grantee TEXT NOT NULL DEFAULT '${g}';`),c(e,t,"sub","ALTER TABLE nodes ADD COLUMN sub TEXT;"),c(e,t,"grant_id","ALTER TABLE nodes ADD COLUMN grant_id TEXT;"),c(e,t,"client_id","ALTER TABLE nodes ADD COLUMN client_id TEXT;"),c(e,t,"metadata_json","ALTER TABLE nodes ADD COLUMN metadata_json TEXT;"),c(e,t,"run_id","ALTER TABLE nodes ADD COLUMN run_id TEXT;"),c(e,t,"event_cursor","ALTER TABLE nodes ADD COLUMN event_cursor INTEGER;"),c(e,t,"usage_json","ALTER TABLE nodes ADD COLUMN usage_json TEXT;"),c(e,t,"deleting_at","ALTER TABLE nodes ADD COLUMN deleting_at TEXT;"),e.exec(`
     ALTER TABLE sessions ADD COLUMN event_offset INTEGER;
     CREATE INDEX idx_nodes_run_id ON nodes(run_id);
     -- Child nodes may be pruned while their root run and event history remain.
@@ -466,10 +466,10 @@ CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
       PRIMARY KEY (grantee, key)
     );
     CREATE INDEX idx_idempotency_keys_created_at ON idempotency_keys(created_at);
-  `)}E(Ot,"addRunFoundation");function It(e){e.exec("ALTER TABLE nodes ADD COLUMN last_activity_at TEXT;"),e.exec(`UPDATE nodes SET last_activity_at = (
+  `)}E(It,"addRunFoundation");function mt(e){e.exec("ALTER TABLE nodes ADD COLUMN last_activity_at TEXT;"),e.exec(`UPDATE nodes SET last_activity_at = (
     SELECT e.ts FROM run_events e WHERE e.run_id = nodes.node_id
     ORDER BY e.sequence_number DESC LIMIT 1
-  ) WHERE run_id = node_id`)}E(It,"addRunLastActivity");function mt(e){e.exec(`
+  ) WHERE run_id = node_id`)}E(mt,"addRunLastActivity");function ft(e){e.exec(`
 CREATE TABLE structured_requests (
   request_id TEXT PRIMARY KEY,
   node_id TEXT REFERENCES nodes(node_id) ON DELETE CASCADE,
@@ -494,7 +494,7 @@ CREATE TABLE structured_requests (
 CREATE UNIQUE INDEX idx_structured_requests_one_pending_node ON structured_requests(node_id) WHERE state = 'pending';
 CREATE INDEX idx_structured_requests_expiry ON structured_requests(state, deadline_at);
 CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done_at) WHERE effects_done_at IS NULL;
-`)}E(mt,"addStructuredRequests");function ft(e){e.exec(`
+`)}E(ft,"addStructuredRequests");function Xt(e){e.exec(`
     CREATE TABLE grants (
       id TEXT PRIMARY KEY, runtime TEXT NOT NULL, sub TEXT NOT NULL, grantee TEXT NOT NULL,
       rev INTEGER NOT NULL, scopes_json TEXT NOT NULL, resolved_scopes_json TEXT NOT NULL,
@@ -503,13 +503,13 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
     );
     CREATE UNIQUE INDEX idx_grants_grantee_sub ON grants(grantee, sub);
     CREATE TABLE runtime_state (key TEXT PRIMARY KEY, value TEXT NOT NULL);
-  `)}E(ft,"addGrantMirror");function Xt(e){e.exec("UPDATE nodes SET grantee = 'app:terminal' WHERE grantee = 'user:local';")}E(Xt,"migrateTerminalGrantees");function Ut(e){const t={llm:"crtr:llm",act:"crtr:act",schedule:"crtr:schedule","memory:read":"crtr:memory:read:user","memory:write":"crtr:memory:rw:user"},n=e.prepare("SELECT node_id, scopes_json FROM nodes WHERE scopes_json IS NOT NULL").all(),o=e.prepare("UPDATE nodes SET scopes_json = ? WHERE node_id = ?");for(const T of n){const i=JSON.parse(T.scopes_json);if(!Array.isArray(i))throw new Error(`invalid launched scopes for node ${T.node_id}`);const a=[];for(const N of i){if(typeof N!="string")continue;const L=t[N]??N;try{ae(L),a.push(L)}catch(l){if(!(l instanceof TypeError))throw l}}o.run(JSON.stringify([...new Set(a)]),T.node_id)}}E(Ut,"migrateLaunchedScopes");function Ct(e){e.exec(`CREATE TABLE node_tokens (
+  `)}E(Xt,"addGrantMirror");function Ut(e){e.exec(`UPDATE nodes SET grantee = 'app:terminal' WHERE grantee = '${g}';`)}E(Ut,"migrateTerminalGrantees");function Ct(e){const t={llm:"crtr:llm",act:"crtr:act",schedule:"crtr:schedule","memory:read":"crtr:memory:read:user","memory:write":"crtr:memory:rw:user"},n=e.prepare("SELECT node_id, scopes_json FROM nodes WHERE scopes_json IS NOT NULL").all(),o=e.prepare("UPDATE nodes SET scopes_json = ? WHERE node_id = ?");for(const T of n){const i=JSON.parse(T.scopes_json);if(!Array.isArray(i))throw new Error(`invalid launched scopes for node ${T.node_id}`);const a=[];for(const N of i){if(typeof N!="string")continue;const L=t[N]??N;try{de(L),a.push(L)}catch(l){if(!(l instanceof TypeError))throw l}}o.run(JSON.stringify([...new Set(a)]),T.node_id)}}E(Ct,"migrateLaunchedScopes");function St(e){e.exec(`CREATE TABLE node_tokens (
     broker_process_id TEXT PRIMARY KEY REFERENCES executions(execution_id) ON DELETE CASCADE,
     node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
     token_hash TEXT NOT NULL UNIQUE, grantee TEXT NOT NULL, uid INTEGER NOT NULL,
     sub TEXT NOT NULL, grant TEXT, client_id TEXT, scopes_json TEXT,
     issued_at TEXT NOT NULL, revoked_at TEXT
-  );`)}E(Ct,"addNodeTokens");function C(e,t){return e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(t)!==void 0}E(C,"hasTable");function S(e,t,n){return e.prepare(`PRAGMA table_info(${t})`).all().some(o=>o.name===n)}E(S,"hasColumn");function ee(e){C(e,"memory_reads")||e.exec(`CREATE TABLE memory_reads (
+  );`)}E(St,"addNodeTokens");function C(e,t){return e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(t)!==void 0}E(C,"hasTable");function S(e,t,n){return e.prepare(`PRAGMA table_info(${t})`).all().some(o=>o.name===n)}E(S,"hasColumn");function te(e){C(e,"memory_reads")||e.exec(`CREATE TABLE memory_reads (
     node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
     name TEXT NOT NULL,
     scope TEXT NOT NULL,
@@ -518,12 +518,12 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
   );
   CREATE INDEX idx_memory_reads_at ON memory_reads(at);
   CREATE INDEX idx_memory_reads_node ON memory_reads(node_id);
-  INSERT OR IGNORE INTO canvas_meta(key, value) VALUES ('memory_reads.started_at', strftime('%Y-%m-%dT%H:%M:%fZ','now'));`)}E(ee,"addMemoryReads");function te(e){S(e,"sessions","indexed_entry_id")||e.exec("ALTER TABLE sessions ADD COLUMN indexed_entry_id TEXT; ALTER TABLE sessions ADD COLUMN input_ids_json TEXT NOT NULL DEFAULT '[]';")}E(te,"addConversationIndex");function ne(e){C(e,"app_users")||e.exec(`CREATE TABLE app_users (
+  INSERT OR IGNORE INTO canvas_meta(key, value) VALUES ('memory_reads.started_at', strftime('%Y-%m-%dT%H:%M:%fZ','now'));`)}E(te,"addMemoryReads");function ne(e){S(e,"sessions","indexed_entry_id")||e.exec("ALTER TABLE sessions ADD COLUMN indexed_entry_id TEXT; ALTER TABLE sessions ADD COLUMN input_ids_json TEXT NOT NULL DEFAULT '[]';")}E(ne,"addConversationIndex");function Ee(e){C(e,"app_users")||e.exec(`CREATE TABLE app_users (
     app TEXT PRIMARY KEY, uid INTEGER NOT NULL UNIQUE,
     created TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('active', 'retired'))
-  );`)}E(ne,"addAppUsers");function Ee(e){S(e,"crons","grantee")||(e.exec("ALTER TABLE crons ADD COLUMN grantee TEXT NOT NULL DEFAULT 'app:terminal'"),e.exec(`UPDATE crons SET grantee = COALESCE(
+  );`)}E(Ee,"addAppUsers");function oe(e){S(e,"crons","grantee")||(e.exec("ALTER TABLE crons ADD COLUMN grantee TEXT NOT NULL DEFAULT 'app:terminal'"),e.exec(`UPDATE crons SET grantee = COALESCE(
     (SELECT COALESCE(nodes.grantee, 'app:terminal') FROM nodes WHERE nodes.node_id = crons.anchor_node),
-    'app:terminal') WHERE anchor_node IS NOT NULL`))}E(Ee,"addCronGrantee");function St(e){ee(e),te(e),ne(e),Ee(e)}E(St,"convergeSharedVersions");function Dt(e){(e.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'app_users'").get()?.sql??"").includes("'removed'")||e.exec(`CREATE TABLE app_users_new (
+    'app:terminal') WHERE anchor_node IS NOT NULL`))}E(oe,"addCronGrantee");function Dt(e){te(e),ne(e),Ee(e),oe(e)}E(Dt,"convergeSharedVersions");function gt(e){(e.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'app_users'").get()?.sql??"").includes("'removed'")||e.exec(`CREATE TABLE app_users_new (
     uid INTEGER PRIMARY KEY, app TEXT NOT NULL,
     created TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('active', 'removed')),
     removed_at TEXT
@@ -533,7 +533,7 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
       CASE status WHEN 'active' THEN NULL ELSE created END FROM app_users;
   DROP TABLE app_users;
   ALTER TABLE app_users_new RENAME TO app_users;
-  CREATE UNIQUE INDEX idx_app_users_active_app ON app_users(app) WHERE status = 'active';`)}E(Dt,"appUsersRemoved");function oe(e){C(e,"objects")||(e.exec(`
+  CREATE UNIQUE INDEX idx_app_users_active_app ON app_users(app) WHERE status = 'active';`)}E(gt,"appUsersRemoved");function ie(e){C(e,"objects")||(e.exec(`
     CREATE TABLE objects (
       rowid      INTEGER PRIMARY KEY,
       id         TEXT NOT NULL UNIQUE,
@@ -655,11 +655,11 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
     ALTER TABLE messages ADD COLUMN object_id TEXT;
     ALTER TABLE messages ADD COLUMN level INTEGER;
     ALTER TABLE messages ADD COLUMN actor_id TEXT;
-  `),ie(e),e.exec("ANALYZE"))}E(oe,"canvasObjectsSchema");function ie(e){const t=new Date().toISOString(),n=e.prepare("INSERT INTO objects (id, type, kind, owner, privacy, name, preview, created_at) VALUES (?, ?, NULL, NULL, 'public', ?, '', ?) RETURNING rowid"),o=e.prepare("INSERT INTO identities (object, scheme, external_id) VALUES (?, ?, ?)"),T=e.prepare(`SELECT DISTINCT n.grantee FROM nodes n
-    WHERE NOT EXISTS (SELECT 1 FROM identities i WHERE i.external_id = n.grantee AND i.scheme IN ('app', 'local-user'))`).all();for(const{grantee:i}of T){let a;if(i==="user:local")a={type:"person",scheme:"local-user",handle:"user"};else if(/^app:[a-z0-9][a-z0-9._-]*$/.test(i))a={type:"app",scheme:"app",handle:i.slice(4)};else throw new Error(`canvas objects migration: node grantee ${JSON.stringify(i)} is neither app:<name> nor user:local`);const{rowid:N}=n.get(`${Date.now().toString(36)}-${P(4).toString("hex")}`,a.type,a.handle,t);o.run(N,a.scheme,i)}e.exec(`INSERT INTO objects (id, type, kind, owner, privacy, name, preview, created_at)
+  `),se(e),e.exec("ANALYZE"))}E(ie,"canvasObjectsSchema");function se(e){const t=new Date().toISOString(),n=e.prepare("INSERT INTO objects (id, type, kind, owner, privacy, name, preview, created_at) VALUES (?, ?, NULL, NULL, 'public', ?, '', ?) RETURNING rowid"),o=e.prepare("INSERT INTO identities (object, scheme, external_id) VALUES (?, ?, ?)"),T=e.prepare(`SELECT DISTINCT n.grantee FROM nodes n
+    WHERE NOT EXISTS (SELECT 1 FROM identities i WHERE i.external_id = n.grantee AND i.scheme IN ('app', 'local-user'))`).all();for(const{grantee:i}of T){let a;if(i===g)a={type:"person",scheme:"local-user",handle:"user"};else if(/^app:[a-z0-9][a-z0-9._-]*$/.test(i))a={type:"app",scheme:"app",handle:i.slice(4)};else throw new Error(`canvas objects migration: node grantee ${JSON.stringify(i)} is neither app:<name> nor ${g}`);const{rowid:N}=n.get(`${Date.now().toString(36)}-${Y(4).toString("hex")}`,a.type,a.handle,t);o.run(N,a.scheme,i)}e.exec(`INSERT INTO objects (id, type, kind, owner, privacy, name, preview, created_at)
     SELECT n.node_id, 'node', n.kind, i.object, 'public', n.name, '', n.created
     FROM nodes n JOIN identities i ON i.external_id = n.grantee AND i.scheme IN ('app', 'local-user')
-    WHERE NOT EXISTS (SELECT 1 FROM objects o WHERE o.id = n.node_id)`)}E(ie,"copyNodesIntoObjects");function gt(e){if(oe(e),!S(e,"nodes","name"))return;ie(e);const t=e.prepare("SELECT COUNT(*) AS n FROM nodes WHERE node_id NOT IN (SELECT id FROM objects)").get();if(t.n>0)throw new Error(`canvasObjectsCut: ${t.n} node(s) have no objects row`);e.exec(`
+    WHERE NOT EXISTS (SELECT 1 FROM objects o WHERE o.id = n.node_id)`)}E(se,"copyNodesIntoObjects");function wt(e){if(ie(e),!S(e,"nodes","name"))return;se(e);const t=e.prepare("SELECT COUNT(*) AS n FROM nodes WHERE node_id NOT IN (SELECT id FROM objects)").get();if(t.n>0)throw new Error(`canvasObjectsCut: ${t.n} node(s) have no objects row`);e.exec(`
     ALTER TABLE edges RENAME TO legacy_edges;
     CREATE TABLE edges (
       type       TEXT NOT NULL CHECK (type IN ('acted-on','links-to')),
@@ -707,7 +707,7 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
       LEFT JOIN sessions s ON s.node_id = n.node_id AND s.unbound_at IS NULL
       LEFT JOIN node_faults f ON f.node_id = n.node_id AND f.active = 1;
     ANALYZE;
-  `)}E(gt,"canvasObjectsCut");function wt(e){e.exec(`CREATE TABLE IF NOT EXISTS uploads (
+  `)}E(wt,"canvasObjectsCut");function yt(e){e.exec(`CREATE TABLE IF NOT EXISTS uploads (
     upload_id TEXT PRIMARY KEY, grantee TEXT NOT NULL, name TEXT NOT NULL, media_type TEXT NOT NULL,
     size INTEGER NOT NULL, created_at TEXT NOT NULL, delete_pending_since TEXT
   );
@@ -723,7 +723,7 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
     url TEXT NOT NULL, created_by TEXT NOT NULL, created_at TEXT NOT NULL, expires_at TEXT,
     status TEXT NOT NULL CHECK (status IN ('on', 'off')), object_deleted_at TEXT
   );
-  CREATE INDEX IF NOT EXISTS idx_shares_created_by ON shares(created_by);`)}E(wt,"addFileTransfer");function yt(e){e.exec(`CREATE TABLE IF NOT EXISTS daemon_actions (
+  CREATE INDEX IF NOT EXISTS idx_shares_created_by ON shares(created_by);`)}E(yt,"addFileTransfer");function vt(e){e.exec(`CREATE TABLE IF NOT EXISTS daemon_actions (
     action_id TEXT PRIMARY KEY,
     adapter_json TEXT NOT NULL,
     body_json TEXT,
@@ -762,7 +762,7 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
   DELETE FROM messages
    WHERE message_id IN (SELECT message_id FROM moved_actions WHERE message_id IS NOT NULL)
      AND NOT EXISTS (SELECT 1 FROM deliveries d WHERE d.message_id = messages.message_id);
-  DROP TABLE moved_actions;`)}E(yt,"moveDaemonActions");function vt(e){B(e,61,()=>{if(!C(e,"objects"))return;const t=e.prepare("SELECT COUNT(*) AS n FROM objects").get().n,n=e.prepare("SELECT name, sql FROM sqlite_master WHERE type = 'view' AND sql LIKE '%objects%'").all();for(const i of n)e.exec(`DROP VIEW "${i.name}"`);e.exec(`
+  DROP TABLE moved_actions;`)}E(vt,"moveDaemonActions");function ht(e){W(e,61,()=>{if(!C(e,"objects"))return;const t=e.prepare("SELECT COUNT(*) AS n FROM objects").get().n,n=e.prepare("SELECT name, sql FROM sqlite_master WHERE type = 'view' AND sql LIKE '%objects%'").all();for(const i of n)e.exec(`DROP VIEW "${i.name}"`);e.exec(`
         CREATE TABLE objects_new (
           rowid      INTEGER PRIMARY KEY,
           id         TEXT NOT NULL UNIQUE,
@@ -783,10 +783,10 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
         CREATE UNIQUE INDEX objects_handle     ON objects(type, name) WHERE type IN ('person','app','repo','profile');
         CREATE INDEX        objects_owner_type ON objects(owner, type, kind);
         CREATE INDEX        objects_type_kind  ON objects(type, kind);
-      `);for(const i of n)e.exec(i.sql);const o=e.prepare("SELECT COUNT(*) AS n FROM objects").get().n;if(o!==t)throw new Error(`objects rebuild lost rows: expected ${t}, got ${o}`);const T=e.prepare("PRAGMA foreign_key_check").all();if(T.length>0)throw new Error(`objects rebuild left ${T.length} foreign-key violation(s)`)})}E(vt,"objectsWithoutTypeCheck");function ht(e){C(e,"deliveries")&&e.exec(`
+      `);for(const i of n)e.exec(i.sql);const o=e.prepare("SELECT COUNT(*) AS n FROM objects").get().n;if(o!==t)throw new Error(`objects rebuild lost rows: expected ${t}, got ${o}`);const T=e.prepare("PRAGMA foreign_key_check").all();if(T.length>0)throw new Error(`objects rebuild left ${T.length} foreign-key violation(s)`)})}E(ht,"objectsWithoutTypeCheck");function xt(e){C(e,"deliveries")&&e.exec(`
     CREATE INDEX IF NOT EXISTS deliveries_destination ON deliveries(destination_id, wake, state, created_at);
     DROP INDEX IF EXISTS deliveries_node_inbox;
-  `)}E(ht,"addDeliveriesDestinationIndex");function xt(e){e.exec(`
+  `)}E(xt,"addDeliveriesDestinationIndex");function Ft(e){e.exec(`
     CREATE TABLE object_kinds (
       name TEXT PRIMARY KEY, owner INTEGER NOT NULL REFERENCES objects(rowid),
       description TEXT NOT NULL DEFAULT '', events_json TEXT NOT NULL,
@@ -809,14 +809,14 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
     DROP INDEX objects_doc_name;
     CREATE UNIQUE INDEX objects_named ON objects(owner, name)
       WHERE deleted_at IS NULL AND (type = 'document' OR instr(type, '.') > 0);
-  `)}E(xt,"customObjectKinds");function Ft(e){e.exec("CREATE INDEX IF NOT EXISTS revision_parents_parent ON revision_parents(parent);")}E(Ft,"addRevisionParentsParentIndex");function Mt(e){C(e,"run_events")&&e.exec(`
+  `)}E(Ft,"customObjectKinds");function Mt(e){e.exec("CREATE INDEX IF NOT EXISTS revision_parents_parent ON revision_parents(parent);")}E(Mt,"addRevisionParentsParentIndex");function kt(e){C(e,"run_events")&&e.exec(`
     DELETE FROM run_events
     WHERE type IN ('node.thinking.delta', 'node.output_text.delta')
       AND EXISTS (SELECT 1 FROM run_events done
         WHERE done.run_id = run_events.run_id AND done.node_id = run_events.node_id
           AND done.type IN ('node.thinking.done', 'node.output_text.done', 'usage')
           AND done.sequence_number > run_events.sequence_number);
-  `)}E(Mt,"dropSpentRunEventDeltas");function kt(e){e.exec("CREATE INDEX IF NOT EXISTS idx_run_events_node_type ON run_events(run_id, node_id, type);")}E(kt,"addRunEventsNodeTypeIndex");function jt(e){B(e,63,()=>{if(!C(e,"objects")||!C(e,"deliveries"))return;if(S(e,"objects","reception")||e.exec("ALTER TABLE objects ADD COLUMN reception INTEGER NOT NULL DEFAULT 0"),S(e,"objects","listen_json")||e.exec("ALTER TABLE objects ADD COLUMN listen_json TEXT"),e.exec(`UPDATE objects SET reception = CASE WHEN n.status IN ('active','idle') THEN 2 ELSE 1 END
+  `)}E(kt,"dropSpentRunEventDeltas");function jt(e){e.exec("CREATE INDEX IF NOT EXISTS idx_run_events_node_type ON run_events(run_id, node_id, type);")}E(jt,"addRunEventsNodeTypeIndex");function Ht(e){W(e,63,()=>{if(!C(e,"objects")||!C(e,"deliveries"))return;if(S(e,"objects","reception")||e.exec("ALTER TABLE objects ADD COLUMN reception INTEGER NOT NULL DEFAULT 0"),S(e,"objects","listen_json")||e.exec("ALTER TABLE objects ADD COLUMN listen_json TEXT"),e.exec(`UPDATE objects SET reception = CASE WHEN n.status IN ('active','idle') THEN 2 ELSE 1 END
         FROM nodes n WHERE n.node_id = objects.id`),S(e,"nodes","listen_default_json")){e.exec(`UPDATE objects SET listen_json = n.listen_default_json FROM nodes n
           WHERE n.node_id = objects.id AND n.listen_default_json IS NOT NULL`);const n=e.prepare("SELECT name, sql FROM sqlite_master WHERE type = 'view' AND sql LIKE '%nodes%'").all();for(const o of n)e.exec(`DROP VIEW "${o.name}"`);e.exec("ALTER TABLE nodes DROP COLUMN listen_default_json");for(const o of n)e.exec(o.sql)}if(e.exec(`
         DROP TRIGGER IF EXISTS nodes_reception_insert;
@@ -862,7 +862,7 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
           CREATE INDEX deliveries_handed_off ON deliveries(claim_owner) WHERE state = 'handed_off';
           CREATE INDEX deliveries_message ON deliveries(message_id);
           CREATE UNIQUE INDEX deliveries_idempotency ON deliveries(idempotency_key) WHERE idempotency_key IS NOT NULL;
-        `);const o=e.prepare("SELECT COUNT(*) AS n FROM deliveries").get().n;if(o!==n)throw new Error(`deliveries rebuild lost rows: expected ${n}, got ${o}`)}const t=e.prepare("PRAGMA foreign_key_check").all();if(t.length>0)throw new Error(`v64 left ${t.length} foreign-key violation(s)`)})}E(jt,"nodesOnObjectInterface");function Ht(e){B(e,66,()=>{if(e.exec(`CREATE TABLE IF NOT EXISTS custom_objects (
+        `);const o=e.prepare("SELECT COUNT(*) AS n FROM deliveries").get().n;if(o!==n)throw new Error(`deliveries rebuild lost rows: expected ${n}, got ${o}`)}const t=e.prepare("PRAGMA foreign_key_check").all();if(t.length>0)throw new Error(`v64 left ${t.length} foreign-key violation(s)`)})}E(Ht,"nodesOnObjectInterface");function Gt(e){W(e,66,()=>{if(e.exec(`CREATE TABLE IF NOT EXISTS custom_objects (
         object INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
         receiver_json TEXT,
         payload_json TEXT
@@ -881,7 +881,7 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
           VALUES (?, ?, 1, NULL, ?) RETURNING rowid`),l=e.prepare(`INSERT INTO watch_subscriptions
           (watch, pattern, filter_json, config_json, started_by, ends_on, created_at)
           VALUES (?, 'outcome', NULL, '{"1":"after-turn"}', 'spawn', NULL, ?)`),r=e.prepare("UPDATE deliveries SET destination_id = ?, idempotency_key = NULL WHERE delivery_id = ?"),_=e.prepare("SELECT body_json FROM messages WHERE message_id = ?"),d=e.prepare(`UPDATE messages SET body_json = ?, event = 'outcome', object_id = ?, level = 1
-          WHERE message_id = ?`);for(const s of i){if(s.owner===null)throw new Error(`v67 outcome node ${s.node_id} has no owner`);const A=JSON.parse(s.adapter_json);if(A.adapter!=="subprocess"||!Array.isArray(A.argv)||typeof A.cwd!="string"||typeof A.config_origin!="string")throw new Error(`v67 invalid outcome adapter on ${s.delivery_id}`);const m=P(16).toString("hex"),D=new Date(s.created_at).toISOString(),y=a.get(m,s.owner,s.privacy,`outcome/${s.node_id}`,D);N.run(y.rowid,JSON.stringify({argv:A.argv,cwd:A.cwd,config_origin:A.config_origin,name:s.destination_id}),JSON.stringify(A.payload??null));const G=L.get(y.rowid,e.prepare("SELECT rowid FROM objects WHERE id = ?").get(s.node_id).rowid,D);if(l.run(G.rowid,D),s.message_id===null){if(s.state!=="armed")throw new Error(`v67 delivery ${s.delivery_id} has no message but is ${s.state}`);continue}const f=_.get(s.message_id);if(!f||f.body_json===null)throw new Error(`v67 delivery ${s.delivery_id} has no frozen outcome document`);if(e.prepare("SELECT COUNT(*) AS n FROM deliveries WHERE message_id = ?").get(s.message_id).n!==1)throw new Error(`v67 outcome message ${s.message_id} is shared`);const v=JSON.parse(f.body_json);if(v===null||Array.isArray(v)||typeof v!="object")throw new Error(`v67 invalid outcome body on ${s.delivery_id}`);delete v.action,delete v.delivery,d.run(JSON.stringify(v),s.node_id,s.message_id),r.run(m,s.delivery_id)}const u=e.prepare("SELECT COUNT(*) AS n FROM deliveries WHERE state = 'armed'").get();if(u.n!==i.filter(s=>s.state==="armed").length)throw new Error(`v67 found ${u.n} armed deliveries but only ${i.length} mapped outcome rows`);const p=e.prepare("SELECT COUNT(*) AS n FROM deliveries").get().n-u.n,I=e.prepare("SELECT name, sql FROM sqlite_master WHERE type = 'view' AND sql LIKE '%deliveries%'").all();for(const s of I)e.exec(`DROP VIEW "${s.name.replaceAll('"','""')}"`);e.exec(`
+          WHERE message_id = ?`);for(const s of i){if(s.owner===null)throw new Error(`v67 outcome node ${s.node_id} has no owner`);const A=JSON.parse(s.adapter_json);if(A.adapter!=="subprocess"||!Array.isArray(A.argv)||typeof A.cwd!="string"||typeof A.config_origin!="string")throw new Error(`v67 invalid outcome adapter on ${s.delivery_id}`);const m=Y(16).toString("hex"),D=new Date(s.created_at).toISOString(),v=a.get(m,s.owner,s.privacy,`outcome/${s.node_id}`,D);N.run(v.rowid,JSON.stringify({argv:A.argv,cwd:A.cwd,config_origin:A.config_origin,name:s.destination_id}),JSON.stringify(A.payload??null));const b=L.get(v.rowid,e.prepare("SELECT rowid FROM objects WHERE id = ?").get(s.node_id).rowid,D);if(l.run(b.rowid,D),s.message_id===null){if(s.state!=="armed")throw new Error(`v67 delivery ${s.delivery_id} has no message but is ${s.state}`);continue}const f=_.get(s.message_id);if(!f||f.body_json===null)throw new Error(`v67 delivery ${s.delivery_id} has no frozen outcome document`);if(e.prepare("SELECT COUNT(*) AS n FROM deliveries WHERE message_id = ?").get(s.message_id).n!==1)throw new Error(`v67 outcome message ${s.message_id} is shared`);const h=JSON.parse(f.body_json);if(h===null||Array.isArray(h)||typeof h!="object")throw new Error(`v67 invalid outcome body on ${s.delivery_id}`);delete h.action,delete h.delivery,d.run(JSON.stringify(h),s.node_id,s.message_id),r.run(m,s.delivery_id)}const u=e.prepare("SELECT COUNT(*) AS n FROM deliveries WHERE state = 'armed'").get();if(u.n!==i.filter(s=>s.state==="armed").length)throw new Error(`v67 found ${u.n} armed deliveries but only ${i.length} mapped outcome rows`);const p=e.prepare("SELECT COUNT(*) AS n FROM deliveries").get().n-u.n,I=e.prepare("SELECT name, sql FROM sqlite_master WHERE type = 'view' AND sql LIKE '%deliveries%'").all();for(const s of I)e.exec(`DROP VIEW "${s.name.replaceAll('"','""')}"`);e.exec(`
           CREATE TABLE deliveries_new (
             delivery_id TEXT PRIMARY KEY,
             message_id TEXT NOT NULL REFERENCES messages(message_id),
@@ -916,7 +916,7 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
           CREATE INDEX deliveries_handed_off ON deliveries(claim_owner) WHERE state = 'handed_off';
           CREATE INDEX deliveries_message ON deliveries(message_id);
           CREATE UNIQUE INDEX deliveries_idempotency ON deliveries(idempotency_key) WHERE idempotency_key IS NOT NULL;
-        `);for(const s of I)e.exec(s.sql);const R=e.prepare("SELECT COUNT(*) AS n FROM deliveries").get().n;if(R!==p)throw new Error(`v67 deliveries rebuild lost rows: expected ${p}, got ${R}`)}const t=e.prepare("PRAGMA foreign_key_check").all();if(t.length)throw new Error(`v67 left ${t.length} foreign-key violation(s)`)})}E(Ht,"outcomeActionsOnObjects");function Gt(e){e.exec(`
+        `);for(const s of I)e.exec(s.sql);const R=e.prepare("SELECT COUNT(*) AS n FROM deliveries").get().n;if(R!==p)throw new Error(`v67 deliveries rebuild lost rows: expected ${p}, got ${R}`)}const t=e.prepare("PRAGMA foreign_key_check").all();if(t.length)throw new Error(`v67 left ${t.length} foreign-key violation(s)`)})}E(Gt,"outcomeActionsOnObjects");function bt(e){e.exec(`
     CREATE TABLE IF NOT EXISTS create_requests (
       request_key TEXT PRIMARY KEY,
       node_id     TEXT,
@@ -924,7 +924,7 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
       state       TEXT NOT NULL DEFAULT 'reserved' CHECK (state IN ('reserved', 'warm_claimed', 'complete'))
     );
     CREATE INDEX IF NOT EXISTS idx_create_requests_expires ON create_requests(expires_at);
-  `)}E(Gt,"addCreateRequests");function bt(e){for(const[r,_]of[["sub","TEXT"],["grant_id","TEXT"],["scopes_json","TEXT"],["origin_run_id","TEXT"],["run_execution_id","TEXT"]])S(e,"crons",r)||e.exec(`ALTER TABLE crons ADD COLUMN ${r} ${_}`);const t=[],n=E(r=>e.prepare("SELECT id, sub, resolved_scopes_json FROM grants WHERE grantee = ? ORDER BY CASE status WHEN 'active' THEN 0 ELSE 1 END, rev DESC LIMIT 1").get(r),"grantRow"),o=E(r=>e.prepare("SELECT grantee, sub, resolved_scopes_json FROM grants WHERE id = ?").get(r),"grantById"),T=E(r=>{try{const _=JSON.parse(r);return Array.isArray(_)?_.flatMap(d=>d&&d.mode==="always"&&typeof d.scope=="string"?[d.scope]:[]):[]}catch{return[]}},"snapshot"),i=E((r,_)=>{if(_===null)return null;const d=e.prepare("SELECT grantee, sub, grant_id, scopes_json, run_id FROM node_rows WHERE node_id = ?").get(_);if(d===void 0||d.grantee!==r)return null;const u=r==="app:terminal";let p=null;if(d.scopes_json!==null){let A;try{A=JSON.parse(d.scopes_json)}catch{return{pause:"bad_scopes"}}if(!Array.isArray(A)||!A.every(m=>typeof m=="string"))return{pause:"bad_scopes"};p=A}const I=u?n(r):void 0;let R=d.grant_id??I?.id??null;R===null&&!u&&d.sub!==null&&(R=e.prepare("SELECT id FROM grants WHERE grantee = ? AND sub = ? ORDER BY CASE status WHEN 'active' THEN 0 ELSE 1 END, rev DESC LIMIT 1").get(r,d.sub)?.id??null);const s=R===null?void 0:o(R);return R!==null&&(s===void 0||s.grantee!==r||d.sub!==null&&s.sub!==d.sub)?{pause:"no_grant"}:R===null&&!u?{pause:"no_grant"}:(p===null&&!u&&(p=T(s.resolved_scopes_json)),{principal:{sub:d.sub??s?.sub??I?.sub??"user:local",grant_id:R,scopes:p,origin_run_id:d.run_id}})},"fromCreator"),a=E(r=>{const _=n(r);return r==="app:terminal"?{sub:_?.sub??"user:local",grant_id:_?.id??null,scopes:null,origin_run_id:null}:_===void 0?null:{sub:_.sub,grant_id:_.id,scopes:T(_.resolved_scopes_json),origin_run_id:null}},"fromGrantee"),N=e.prepare("SELECT cron_id, grantee, created_by, isolated, cwd FROM crons WHERE sub IS NULL").all(),L=e.prepare("UPDATE crons SET sub = ?, grant_id = ?, scopes_json = ?, origin_run_id = ? WHERE cron_id = ?"),l=new Map;for(const r of N){const _=i(r.grantee,r.created_by),d=_===null?a(r.grantee):"principal"in _?_.principal:null;if(d===null){const u=_!==null&&"pause"in _?_.pause:"no_grant";L.run("user:local",null,null,null,r.cron_id),e.prepare("UPDATE crons SET state = 'paused' WHERE cron_id = ?").run(r.cron_id),t.push({event:`cron.migrated.${u}`,fields:{cron_id:r.cron_id,grantee:r.grantee}})}else l.set(r.cron_id,d),L.run(d.sub,d.grant_id,d.scopes===null?null:JSON.stringify(d.scopes),d.origin_run_id,r.cron_id);if(r.isolated!==0){const u=j(Ae(r.grantee).root,"crons",r.cron_id);e.prepare("UPDATE crons SET cwd = ? WHERE cron_id = ?").run(u,r.cron_id),t.push({event:"cron.migrated.isolated_cwd",fields:{cron_id:r.cron_id,old_cwd:r.cwd,cwd:u}})}}if(C(e,"daemon_actions")){const r=e.prepare("SELECT action_id, adapter_json FROM daemon_actions WHERE state IN ('pending', 'handed_off') AND json_extract(adapter_json, '$.adapter') = 'cron_spawn' AND json_extract(adapter_json, '$.principal') IS NULL").all();for(const _ of r){const d=JSON.parse(_.adapter_json),u=typeof d.cronId=="string"?d.cronId:null,p=u===null?void 0:e.prepare("SELECT grantee, sub, grant_id, scopes_json, origin_run_id, isolated, created_by FROM crons WHERE cron_id = ?").get(u);let I=null;if(p!==void 0&&!(p.grant_id===null&&p.grantee!=="app:terminal"))I={cron_id:u,grantee:p.grantee,sub:p.sub,grant_id:p.grant_id,scopes:p.scopes_json===null?null:JSON.parse(p.scopes_json),origin_run_id:p.origin_run_id,isolated:p.isolated!==0,creator:p.created_by};else if(p===void 0){const R=typeof d.parent=="string"?d.parent:null,s=R===null?void 0:e.prepare("SELECT grantee FROM node_rows WHERE node_id = ?").get(R),A=s===void 0?null:i(s.grantee,R),m=A===null||!("principal"in A)?null:A.principal;s!==void 0&&m!==null&&(I={cron_id:u,grantee:s.grantee,sub:m.sub,grant_id:m.grant_id,scopes:m.scopes,origin_run_id:m.origin_run_id,isolated:d.isolated===!0,creator:R})}if(I!==null)e.prepare("UPDATE daemon_actions SET adapter_json = ? WHERE action_id = ?").run(JSON.stringify({...d,principal:I}),_.action_id);else{const R=Date.now();e.prepare("UPDATE daemon_actions SET state = 'permanent_failed', failed_at = ?, updated_at = ?, claimed_at = NULL, claim_owner = NULL, next_attempt_at = NULL, last_failure_json = ? WHERE action_id = ?").run(R,R,JSON.stringify({kind:"grant_refused",message:"the cron has no derivable principal to authorize this birth"}),_.action_id),t.push({event:"cron.birth.refused",fields:{cron_id:u,action_id:_.action_id,reason:"grant_missing"}})}}}for(const{event:r,fields:_}of t)Oe({level:"warn",event:r,fields:_})}E(bt,"addCronPrincipal");const F=[Ce,Se,De,ge,we,ye,ve,xe,he,Fe,Me,ke,je,J,He,J,Ge,be,Be,We,Pe,ze,Ze,et,tt,nt,Et,ot,it,st,rt,Tt,at,dt,ct,_t,Nt,Lt,lt,e=>{de(e),ce(e),Le(e),le(e)},pt,Rt,ut,At,Ot,It,ft,Ct,Xt,Ut,ee,te,ne,Ee,St,Dt,oe,gt,me,wt,yt,vt,ht,jt,kt,Mt,Ht,Ft,e=>e.exec(`
+  `)}E(bt,"addCreateRequests");function Bt(e){for(const[r,_]of[["sub","TEXT"],["grant_id","TEXT"],["scopes_json","TEXT"],["origin_run_id","TEXT"],["run_execution_id","TEXT"]])S(e,"crons",r)||e.exec(`ALTER TABLE crons ADD COLUMN ${r} ${_}`);const t=[],n=E(r=>e.prepare("SELECT id, sub, resolved_scopes_json FROM grants WHERE grantee = ? ORDER BY CASE status WHEN 'active' THEN 0 ELSE 1 END, rev DESC LIMIT 1").get(r),"grantRow"),o=E(r=>e.prepare("SELECT grantee, sub, resolved_scopes_json FROM grants WHERE id = ?").get(r),"grantById"),T=E(r=>{try{const _=JSON.parse(r);return Array.isArray(_)?_.flatMap(d=>d&&d.mode==="always"&&typeof d.scope=="string"?[d.scope]:[]):[]}catch{return[]}},"snapshot"),i=E((r,_)=>{if(_===null)return null;const d=e.prepare("SELECT grantee, sub, grant_id, scopes_json, run_id FROM node_rows WHERE node_id = ?").get(_);if(d===void 0||d.grantee!==r)return null;const u=r==="app:terminal";let p=null;if(d.scopes_json!==null){let A;try{A=JSON.parse(d.scopes_json)}catch{return{pause:"bad_scopes"}}if(!Array.isArray(A)||!A.every(m=>typeof m=="string"))return{pause:"bad_scopes"};p=A}const I=u?n(r):void 0;let R=d.grant_id??I?.id??null;R===null&&!u&&d.sub!==null&&(R=e.prepare("SELECT id FROM grants WHERE grantee = ? AND sub = ? ORDER BY CASE status WHEN 'active' THEN 0 ELSE 1 END, rev DESC LIMIT 1").get(r,d.sub)?.id??null);const s=R===null?void 0:o(R);return R!==null&&(s===void 0||s.grantee!==r||d.sub!==null&&s.sub!==d.sub)?{pause:"no_grant"}:R===null&&!u?{pause:"no_grant"}:(p===null&&!u&&(p=T(s.resolved_scopes_json)),{principal:{sub:d.sub??s?.sub??I?.sub??g,grant_id:R,scopes:p,origin_run_id:d.run_id}})},"fromCreator"),a=E(r=>{const _=n(r);return r==="app:terminal"?{sub:_?.sub??g,grant_id:_?.id??null,scopes:null,origin_run_id:null}:_===void 0?null:{sub:_.sub,grant_id:_.id,scopes:T(_.resolved_scopes_json),origin_run_id:null}},"fromGrantee"),N=e.prepare("SELECT cron_id, grantee, created_by, isolated, cwd FROM crons WHERE sub IS NULL").all(),L=e.prepare("UPDATE crons SET sub = ?, grant_id = ?, scopes_json = ?, origin_run_id = ? WHERE cron_id = ?"),l=new Map;for(const r of N){const _=i(r.grantee,r.created_by),d=_===null?a(r.grantee):"principal"in _?_.principal:null;if(d===null){const u=_!==null&&"pause"in _?_.pause:"no_grant";L.run(g,null,null,null,r.cron_id),e.prepare("UPDATE crons SET state = 'paused' WHERE cron_id = ?").run(r.cron_id),t.push({event:`cron.migrated.${u}`,fields:{cron_id:r.cron_id,grantee:r.grantee}})}else l.set(r.cron_id,d),L.run(d.sub,d.grant_id,d.scopes===null?null:JSON.stringify(d.scopes),d.origin_run_id,r.cron_id);if(r.isolated!==0){const u=H(Oe(r.grantee).root,"crons",r.cron_id);e.prepare("UPDATE crons SET cwd = ? WHERE cron_id = ?").run(u,r.cron_id),t.push({event:"cron.migrated.isolated_cwd",fields:{cron_id:r.cron_id,old_cwd:r.cwd,cwd:u}})}}if(C(e,"daemon_actions")){const r=e.prepare("SELECT action_id, adapter_json FROM daemon_actions WHERE state IN ('pending', 'handed_off') AND json_extract(adapter_json, '$.adapter') = 'cron_spawn' AND json_extract(adapter_json, '$.principal') IS NULL").all();for(const _ of r){const d=JSON.parse(_.adapter_json),u=typeof d.cronId=="string"?d.cronId:null,p=u===null?void 0:e.prepare("SELECT grantee, sub, grant_id, scopes_json, origin_run_id, isolated, created_by FROM crons WHERE cron_id = ?").get(u);let I=null;if(p!==void 0&&!(p.grant_id===null&&p.grantee!=="app:terminal"))I={cron_id:u,grantee:p.grantee,sub:p.sub,grant_id:p.grant_id,scopes:p.scopes_json===null?null:JSON.parse(p.scopes_json),origin_run_id:p.origin_run_id,isolated:p.isolated!==0,creator:p.created_by};else if(p===void 0){const R=typeof d.parent=="string"?d.parent:null,s=R===null?void 0:e.prepare("SELECT grantee FROM node_rows WHERE node_id = ?").get(R),A=s===void 0?null:i(s.grantee,R),m=A===null||!("principal"in A)?null:A.principal;s!==void 0&&m!==null&&(I={cron_id:u,grantee:s.grantee,sub:m.sub,grant_id:m.grant_id,scopes:m.scopes,origin_run_id:m.origin_run_id,isolated:d.isolated===!0,creator:R})}if(I!==null)e.prepare("UPDATE daemon_actions SET adapter_json = ? WHERE action_id = ?").run(JSON.stringify({...d,principal:I}),_.action_id);else{const R=Date.now();e.prepare("UPDATE daemon_actions SET state = 'permanent_failed', failed_at = ?, updated_at = ?, claimed_at = NULL, claim_owner = NULL, next_attempt_at = NULL, last_failure_json = ? WHERE action_id = ?").run(R,R,JSON.stringify({kind:"grant_refused",message:"the cron has no derivable principal to authorize this birth"}),_.action_id),t.push({event:"cron.birth.refused",fields:{cron_id:u,action_id:_.action_id,reason:"grant_missing"}})}}}for(const{event:r,fields:_}of t)Ie({level:"warn",event:r,fields:_})}E(Bt,"addCronPrincipal");const M=[Se,De,ge,we,ye,ve,he,Fe,xe,Me,ke,je,He,Q,Ge,Q,be,Be,We,Pe,Ye,Ve,et,tt,nt,Et,ot,it,st,rt,Tt,at,dt,_t,Lt,Nt,ct,lt,ut,e=>{_e(e),Le(e),le(e),ue(e)},Rt,At,pt,Ot,It,mt,Xt,St,Ut,Ct,te,ne,Ee,oe,Dt,gt,ie,wt,fe,yt,vt,ht,xt,Ht,jt,kt,Gt,Mt,e=>e.exec(`
     CREATE TABLE audit_rows (
       id INTEGER PRIMARY KEY, request_id TEXT NOT NULL, time TEXT NOT NULL, grantee TEXT, sub TEXT,
       client_id TEXT, class TEXT, operation TEXT NOT NULL, scope_checked TEXT,
@@ -955,7 +955,7 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
     ALTER TABLE audit_rows ADD COLUMN question_id TEXT;
     ALTER TABLE provider_approvals ADD COLUMN call_shape TEXT;
     ALTER TABLE provider_approvals ADD COLUMN prepared_files TEXT;
-  `),xt,e=>e.exec(`
+  `),Ft,e=>e.exec(`
     CREATE INDEX idx_human_requests_page_source ON human_requests(
       CASE WHEN json_valid(specification_json) THEN json_extract(specification_json, '$.source.nodeId') END
     ) WHERE kind = 'page';
@@ -986,14 +986,14 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
     -- that registered a custom object fixes the run that object reads from.
     CREATE TABLE deleted_isolated_nodes (node_id TEXT PRIMARY KEY, run_id TEXT NOT NULL);
     ALTER TABLE custom_objects ADD COLUMN registered_by TEXT;
-  `),mt,Gt,e=>e.exec("ALTER TABLE grants ADD COLUMN dependencies_json TEXT NOT NULL DEFAULT '{}'"),e=>e.exec("ALTER TABLE grants ADD COLUMN run_notice_url TEXT"),e=>e.exec(`
+  `),ft,bt,e=>e.exec("ALTER TABLE grants ADD COLUMN dependencies_json TEXT NOT NULL DEFAULT '{}'"),e=>e.exec("ALTER TABLE grants ADD COLUMN run_notice_url TEXT"),e=>e.exec(`
     CREATE TABLE usage (
       grantee TEXT NOT NULL, month TEXT NOT NULL, payer TEXT NOT NULL, source TEXT NOT NULL, served_model TEXT NOT NULL,
       input_tokens INTEGER NOT NULL DEFAULT 0, output_tokens INTEGER NOT NULL DEFAULT 0, cached_tokens INTEGER NOT NULL DEFAULT 0,
       usd_equivalent REAL,
       PRIMARY KEY (grantee, month, payer, source, served_model)
     );
-  `),bt,e=>e.exec("ALTER TABLE audit_rows ADD COLUMN via TEXT"),e=>e.exec(`
+  `),Bt,e=>e.exec("ALTER TABLE audit_rows ADD COLUMN via TEXT"),e=>e.exec(`
     ALTER TABLE objects ADD COLUMN home_machine TEXT;
     CREATE TABLE peer_stubs (
       object        INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
@@ -1046,13 +1046,13 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
     CREATE UNIQUE INDEX objects_named ON objects(owner, name)
       WHERE deleted_at IS NULL AND home_machine IS NULL AND (type = 'document' OR instr(type, '.') > 0);
     CREATE UNIQUE INDEX objects_handle ON objects(type, name) WHERE home_machine IS NULL AND type IN ('person','app','repo','profile');
-  `),e=>e.exec("ALTER TABLE grants ADD COLUMN inference_endpoint_json TEXT"),e=>e.exec("ALTER TABLE nodes ADD COLUMN reply_at TEXT; ALTER TABLE nodes ADD COLUMN read_at TEXT;"),Wt,Bt,e=>e.exec(`
+  `),e=>e.exec("ALTER TABLE grants ADD COLUMN inference_endpoint_json TEXT"),e=>e.exec("ALTER TABLE nodes ADD COLUMN reply_at TEXT; ALTER TABLE nodes ADD COLUMN read_at TEXT;"),Pt,Wt,e=>e.exec(`
     CREATE TABLE IF NOT EXISTS unresolved_links (
       src  INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
       name TEXT NOT NULL,
       PRIMARY KEY (src, name)
     ) WITHOUT ROWID;
-  `),Ne];function Bt(e){e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'waits'").get()===void 0&&e.exec("CREATE TABLE waits (wait_id TEXT PRIMARY KEY, node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE, kind TEXT, target_id TEXT, generation INTEGER, created_at INTEGER, satisfied_at INTEGER)");const t=e.prepare("SELECT COUNT(*) AS n FROM waits").get().n;e.exec(`
+  `),ce];function Wt(e){e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'waits'").get()===void 0&&e.exec("CREATE TABLE waits (wait_id TEXT PRIMARY KEY, node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE, kind TEXT, target_id TEXT, generation INTEGER, created_at INTEGER, satisfied_at INTEGER)");const t=e.prepare("SELECT COUNT(*) AS n FROM waits").get().n;e.exec(`
     CREATE TABLE waits_new (
       wait_id TEXT PRIMARY KEY,
       node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
@@ -1070,4 +1070,4 @@ CREATE INDEX idx_structured_requests_effects ON structured_requests(effects_done
     CREATE UNIQUE INDEX waits_live_object ON waits(node_id, target_id) WHERE satisfied_at IS NULL AND kind = 'object';
     CREATE INDEX waits_target ON waits(target_id) WHERE satisfied_at IS NULL;
     CREATE INDEX waits_node ON waits(node_id);
-  `);const n=e.prepare("SELECT COUNT(*) AS n FROM waits").get().n;if(n!==t)throw new Error(`v96 waits rebuild lost rows: expected ${t}, got ${n}`)}E(Bt,"addObjectWaits");function Wt(e){const t=O(e);for(const n of["waiting_for","waiting_for_generation"])t.has(n)&&e.exec(`ALTER TABLE nodes DROP COLUMN ${n}`)}E(Wt,"dropNodeWaitColumns");function B(e,t,n){const o=e.prepare("PRAGMA foreign_keys").get().foreign_keys;e.exec("PRAGMA foreign_keys = OFF;");try{e.exec("BEGIN IMMEDIATE");try{W(e)===t&&(n(),e.exec(`PRAGMA user_version = ${t+1}`)),e.exec("COMMIT")}catch(T){try{e.exec("ROLLBACK")}catch{}throw T}}finally{e.exec(`PRAGMA foreign_keys = ${o};`)}}E(B,"selfTransactionalMigration");const Pt=new Set([3,61,63,66]);function W(e){return e.prepare("PRAGMA user_version").get().user_version}E(W,"currentUserVersion");function se(e,t){F[t](e),e.exec(`PRAGMA user_version = ${t+1}`)}E(se,"applyMigration");function Tn(e){const t=W(e);if(t>F.length)throw new Error(`unsupported canvas schema version ${t} (latest supported ${F.length})`);if(t===F.length)return;const n=e.prepare("PRAGMA busy_timeout").get().timeout;e.exec("PRAGMA busy_timeout = 60000;");try{Yt(e)}finally{e.exec(`PRAGMA busy_timeout = ${n};`)}}E(Tn,"migrate");function Yt(e){for(;;){const t=W(e);if(t>=F.length)return;if(Pt.has(t)){if(e.isTransaction)throw new Error(`canvas migration v${t+1} requires autocommit`);F[t](e);continue}if(e.isTransaction){se(e,t);continue}e.exec("BEGIN IMMEDIATE");try{W(e)===t&&se(e,t),e.exec("COMMIT")}catch(n){try{e.exec("ROLLBACK")}catch{}throw n}}}E(Yt,"runPendingMigrations");export{F as MIGRATIONS,Tn as migrate};
+  `);const n=e.prepare("SELECT COUNT(*) AS n FROM waits").get().n;if(n!==t)throw new Error(`v96 waits rebuild lost rows: expected ${t}, got ${n}`)}E(Wt,"addObjectWaits");function Pt(e){const t=O(e);for(const n of["waiting_for","waiting_for_generation"])t.has(n)&&e.exec(`ALTER TABLE nodes DROP COLUMN ${n}`)}E(Pt,"dropNodeWaitColumns");function W(e,t,n){const o=e.prepare("PRAGMA foreign_keys").get().foreign_keys;e.exec("PRAGMA foreign_keys = OFF;");try{e.exec("BEGIN IMMEDIATE");try{P(e)===t&&(n(),e.exec(`PRAGMA user_version = ${t+1}`)),e.exec("COMMIT")}catch(T){try{e.exec("ROLLBACK")}catch{}throw T}}finally{e.exec(`PRAGMA foreign_keys = ${o};`)}}E(W,"selfTransactionalMigration");const Yt=new Set([3,61,63,66]);function P(e){return e.prepare("PRAGMA user_version").get().user_version}E(P,"currentUserVersion");function re(e,t){M[t](e),e.exec(`PRAGMA user_version = ${t+1}`)}E(re,"applyMigration");function dn(e){const t=P(e);if(t>M.length)throw new Error(`unsupported canvas schema version ${t} (latest supported ${M.length})`);if(t===M.length)return;const n=e.prepare("PRAGMA busy_timeout").get().timeout;e.exec("PRAGMA busy_timeout = 60000;");try{Kt(e)}finally{e.exec(`PRAGMA busy_timeout = ${n};`)}}E(dn,"migrate");function Kt(e){for(;;){const t=P(e);if(t>=M.length)return;if(Yt.has(t)){if(e.isTransaction)throw new Error(`canvas migration v${t+1} requires autocommit`);M[t](e);continue}if(e.isTransaction){re(e,t);continue}e.exec("BEGIN IMMEDIATE");try{P(e)===t&&re(e,t),e.exec("COMMIT")}catch(n){try{e.exec("ROLLBACK")}catch{}throw n}}}E(Kt,"runPendingMigrations");export{M as MIGRATIONS,dn as migrate};

package/dist/core/canvas/node-tokens.d.ts

@@ -17,8 +17,4 @@ export declare function forgetNodeToken(executionId: string): void;
 export declare function resolveNodeToken(token: string): Promise<NodePrincipal | null>;
 export declare function revokeExitedNodeToken(executionId: string): Promise<void>;
 export declare function revokePriorEpochNodeTokens(epoch: string): Promise<void>;
-/** OWN-11 for a joined runtime: a `user:local` subject becomes the owner, a
- *  `user:local` grantee becomes `app:terminal` (no token has the owner as grantee),
- *  and a reference to the dropped local grant is cleared. */
-export declare function rewriteLocalNodeTokenIdentity(db: CanvasDb, owner: string, localGrantId: string): Promise<number>;
 export declare function revokeNodeTokens(db: CanvasDb, where: 'broker_process_id' | 'node_id', id: string, at: string): Promise<void>;