@north-light/crouter 0.3.318 → 0.3.319

package/dist/core/canvas/daemon-owner.js

@@ -1,150 +1,6 @@
-// daemon-owner.ts — the canvas-layer authoritative daemon ownership primitive.
-//
-// A pidfile check followed by a later write is not singleton ownership: two
-// `crtrd` invocations racing a cold start can both read "no pidfile", both
-// proceed, and both bind a canonical event source. The only race-free gate is
-// a SNAPSHOT-CONDITIONED canvas.db mutation — a conditional insert/replace
-// that only ever succeeds for exactly one caller. This module owns that
-// mutation exclusively: the `DAEMON_OWNER_META_KEY` row shape, validated
-// parsing of it, exact serialized snapshot reads, the conditional insert/
-// replace SQL, and the exact conditional delete SQL. It has NO opinion about
-// daemon lifecycle, source binding, the pidfile, or diagnostics — the caller
-// (`src/daemon/crtrd.ts`) generates the unpredictable per-invocation token,
-// calls `claimDaemonOwnership`/`releaseDaemonOwnership`, and owns everything
-// that happens before and after those two calls.
-//
-// The claim is a snapshot-conditioned loop, not a single statement, because a
-// live incumbent must be probed for liveness OUTSIDE any write transaction —
-// `capturePidIdentities`/`recordedPidLiveness` shell out to `ps`, and holding
-// `BEGIN IMMEDIATE` across a subprocess spawn would stall every unrelated
-// canvas writer for the probe's duration. Each iteration therefore reads the
-// current row as a plain (non-transactional) snapshot, probes if needed
-// entirely outside a transaction, and only then opens a SHORT `withCanvasWrite`
-// that conditionally mutates the row iff it still equals the exact snapshot
-// just read. Zero changed rows means a concurrent writer changed the row
-// between the read and the write; the loop restarts from a fresh read rather
-// than assuming the outcome. This is what closes the second-writer race
-// without ever holding the write lock across a liveness probe.
-import { openDb, withCanvasWrite } from './db.js';
-import { capturePidIdentities, recordedPidLiveness } from './pid.js';
-/** The single `canvas_meta` key this module exclusively owns. No other module
- *  may read or write this key. */
-export const DAEMON_OWNER_META_KEY = 'daemon_owner';
-/** Deterministic serialization used for BOTH the stored `value` and every
- *  exact-match compare (insert guard, CAS replace, CAS release). Fixed key
- *  order so the same logical claim always serializes identically within this
- *  module — the only thing that matters, since no other writer touches this
- *  key. */
-function serializeClaim(claim) {
-    return JSON.stringify({ pid: claim.pid, pid_identity: claim.pid_identity, token: claim.token });
-}
-/** Validated parse of a persisted `canvas_meta.value` back into a
- *  `DaemonOwnerClaim`. Returns `null` for anything that isn't exactly the
- *  expected shape (invalid JSON, wrong type, missing/empty field) — a
- *  malformed incumbent is treated as an unreadable claim, never coerced or
- *  partially trusted. */
-function parseClaim(raw) {
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return null;
-    }
-    if (typeof parsed !== 'object' || parsed === null)
-        return null;
-    const { pid, pid_identity, token } = parsed;
-    if (!Number.isInteger(pid) || pid <= 0)
-        return null;
-    if (typeof pid_identity !== 'string' || pid_identity.length === 0)
-        return null;
-    if (typeof token !== 'string' || token.length === 0)
-        return null;
-    return { pid: pid, pid_identity, token };
-}
-/** Bootstrap only `canvas_meta`; daemon startup owns explicit schema migration. */
-function ensureOwnerTable() {
-    openDb().exec(`
+var f=Object.defineProperty;var r=(e,n)=>f(e,"name",{value:n,configurable:!0});import{openDb as p,withCanvasWrite as d}from"./db.js";import{capturePidIdentities as T,recordedPidLiveness as _}from"./pid.js";const s="daemon_owner";function E(e){return JSON.stringify({pid:e.pid,pid_identity:e.pid_identity,token:e.token})}r(E,"serializeClaim");function v(e){let n;try{n=JSON.parse(e)}catch{return null}if(typeof n!="object"||n===null)return null;const{pid:t,pid_identity:i,token:a}=n;return!Number.isInteger(t)||t<=0||typeof i!="string"||i.length===0||typeof a!="string"||a.length===0?null:{pid:t,pid_identity:i,token:a}}r(v,"parseClaim");function y(){p().exec(`
     CREATE TABLE IF NOT EXISTS canvas_meta (
       key TEXT PRIMARY KEY,
       value TEXT NOT NULL
     )
-  `);
-}
-/** Read the incumbent's exact serialized `value` for `DAEMON_OWNER_META_KEY`
- *  as a plain snapshot — no transaction. `undefined` means the key is
- *  currently absent. */
-function readSnapshot() {
-    const db = openDb();
-    const row = db
-        .prepare('SELECT value FROM canvas_meta WHERE key = ?')
-        .get(DAEMON_OWNER_META_KEY);
-    return row?.value;
-}
-/** Attempt to claim exclusive daemon ownership for this process, using
- *  `token` as the unpredictable per-invocation discriminator the caller
- *  generated. Synchronous — every underlying operation (identity capture,
- *  liveness probe, sqlite) is synchronous, and this must complete before the
- *  caller does any other fallible startup work.
- *
- *  Only a `dead` incumbent is ever reclaimed, via a snapshot-conditioned
- *  compare-and-set; `alive` and `indeterminate` incumbents cause an immediate
- *  loss with no row mutation at all. A malformed incumbent also loses without
- *  deletion or probing — this primitive never repairs or clears a bad row; a
- *  future winning claimant's CAS naturally supersedes it once its OWN pid is
- *  confirmed dead... except a malformed row can never be proven dead (no pid
- *  to probe), so a malformed incumbent can only ever be lost against, never
- *  reclaimed, by this primitive alone. That is intentional: this module never
- *  guesses at repair. */
-export function claimDaemonOwnership(token) {
-    const ownIdentities = capturePidIdentities([process.pid]);
-    const ownIdentity = ownIdentities?.get(process.pid);
-    if (ownIdentities === null || ownIdentity === undefined) {
-        return { claimed: false, reason: 'own_identity_indeterminate' };
-    }
-    const claim = { pid: process.pid, pid_identity: ownIdentity, token };
-    const serializedClaim = serializeClaim(claim);
-    ensureOwnerTable();
-    for (;;) {
-        const snapshot = readSnapshot();
-        if (snapshot === undefined) {
-            const changes = withCanvasWrite((db) => db
-                .prepare('INSERT INTO canvas_meta (key, value) SELECT ?, ? WHERE NOT EXISTS (SELECT 1 FROM canvas_meta WHERE key = ?)')
-                .run(DAEMON_OWNER_META_KEY, serializedClaim, DAEMON_OWNER_META_KEY).changes);
-            if (changes === 1)
-                return { claimed: true, claim };
-            continue; // the key was no longer absent by the time we wrote — restart from a fresh read
-        }
-        const incumbent = parseClaim(snapshot);
-        if (incumbent === null)
-            return { claimed: false, reason: 'incumbent_malformed' };
-        const verdict = recordedPidLiveness(incumbent.pid, incumbent.pid_identity);
-        if (verdict === 'alive' || verdict === 'indeterminate') {
-            return {
-                claimed: false,
-                reason: verdict === 'alive' ? 'incumbent_alive' : 'incumbent_indeterminate',
-                incumbentPid: incumbent.pid,
-                verdict,
-            };
-        }
-        // verdict === 'dead': CAS-replace, conditioned on the exact snapshot we probed.
-        const changes = withCanvasWrite((db) => db
-            .prepare('UPDATE canvas_meta SET value = ? WHERE key = ? AND value = ?')
-            .run(serializedClaim, DAEMON_OWNER_META_KEY, snapshot).changes);
-        if (changes === 1)
-            return { claimed: true, claim };
-        continue; // lost compare-and-set — the snapshot changed since the read — restart
-    }
-}
-/** Release exclusive daemon ownership, iff the persisted row still equals
- *  `claim` EXACTLY (key present and value byte-identical to this invocation's
- *  own winning claim). This is a conditional delete, not an unconditional one:
- *  a caller must never release a row a successor has since won (e.g. after
- *  this invocation's claim was already reclaimed via the dead-incumbent CAS
- *  path while this process lingered mid-teardown). */
-export function releaseDaemonOwnership(claim) {
-    const changes = withCanvasWrite((db) => db
-        .prepare('DELETE FROM canvas_meta WHERE key = ? AND value = ?')
-        .run(DAEMON_OWNER_META_KEY, serializeClaim(claim)).changes);
-    return { released: changes === 1 };
-}
+  `)}r(y,"ensureOwnerTable");function g(){return p().prepare("SELECT value FROM canvas_meta WHERE key = ?").get(s)?.value}r(g,"readSnapshot");function S(e){const n=T([process.pid]),t=n?.get(process.pid);if(n===null||t===void 0)return{claimed:!1,reason:"own_identity_indeterminate"};const i={pid:process.pid,pid_identity:t,token:e},a=E(i);for(y();;){const u=g();if(u===void 0){if(d(m=>m.prepare("INSERT INTO canvas_meta (key, value) SELECT ?, ? WHERE NOT EXISTS (SELECT 1 FROM canvas_meta WHERE key = ?)").run(s,a,s).changes)===1)return{claimed:!0,claim:i};continue}const c=v(u);if(c===null)return{claimed:!1,reason:"incumbent_malformed"};const o=_(c.pid,c.pid_identity);if(o==="alive"||o==="indeterminate")return{claimed:!1,reason:o==="alive"?"incumbent_alive":"incumbent_indeterminate",incumbentPid:c.pid,verdict:o};if(d(l=>l.prepare("UPDATE canvas_meta SET value = ? WHERE key = ? AND value = ?").run(a,s,u).changes)===1)return{claimed:!0,claim:i}}}r(S,"claimDaemonOwnership");function b(e){return{released:d(t=>t.prepare("DELETE FROM canvas_meta WHERE key = ? AND value = ?").run(s,E(e)).changes)===1}}r(b,"releaseDaemonOwnership");export{s as DAEMON_OWNER_META_KEY,S as claimDaemonOwnership,b as releaseDaemonOwnership};

package/dist/core/canvas/db.js

@@ -1,100 +1,2 @@
-import { DatabaseSync } from 'node:sqlite';
-import { appendFileSync } from 'node:fs';
-import { canvasDbPath, ensureHome } from './paths.js';
-export { migrate, MIGRATIONS } from './migrations.js';
-const handles = new Map();
-// V-2 open-ledger instrumentation
-//
-// When `CRTR_DB_OPEN_LEDGER=<path>` is set, every *fresh* canvas.db open (i.e.
-// one that actually constructs a new DatabaseSync, not a cache hit) appends one
-// line recording the opening process's identity. This is corroborating runtime
-// evidence for the crtrd-sole-state-owner guarantee: the C-4 §11 scenario
-// runner sets the env for daemon + CLI and asserts the ledger contains ONLY the
-// crtrd process — zero opens attributed to a `crtr`/`bin/crtr` CLI process.
-//
-// Line format (space-separated, one per open, trivially parseable):
-//   <iso-timestamp> <pid> <argv1>
-// e.g. `2026-07-21T18:04:11.923Z 40521 /Users/x/crouter/dist/daemon/crtrd.js`
-//
-// A dumb append — no locking, no dedup. Zero behavior change when the env is
-// unset; a failing append is swallowed so instrumentation never breaks an open.
-function recordOpenLedger() {
-    const ledger = process.env.CRTR_DB_OPEN_LEDGER;
-    if (!ledger)
-        return;
-    try {
-        const line = `${new Date().toISOString()} ${process.pid} ${process.argv[1] ?? '<unknown>'}\n`;
-        appendFileSync(ledger, line);
-    }
-    catch {
-        /* instrumentation only — never let a ledger write break a db open */
-    }
-}
-/** Open (or reuse) the canvas db at the current `CRTR_HOME`, configuring WAL
- *  but never changing its schema. Keyed by path so tests with distinct homes get
- *  independent handles.
- *
- *  A cache hit trusts the cached handle outright: `crtrd` is this process's
- *  sole canvas-db owner (see `crtrd-sole-state-owner`), and nothing outside
- *  `openDb`/`closeDb` ever touches `handles` — there is no other actor in this
- *  process that could invalidate a live handle out from under it. (A
- *  2026-06-25 revision added a `PRAGMA database_list` liveness probe here that
- *  silently closed and reopened the handle on any throw; it shipped alongside
- *  an unrelated guest-relay `PATH` fix for the now-removed `hearth` guest
- *  bootstrap, named no concrete failure mode in its commit or a test, and that
- *  guest-relay path no longer exists. Removed rather than kept-and-logged: a
- *  silent boot-path reopen is worse than trusting a handle this process
- *  already owns.) */
-export function openDb() {
-    const path = canvasDbPath();
-    const existing = handles.get(path);
-    if (existing)
-        return existing;
-    ensureHome();
-    recordOpenLedger();
-    const db = new DatabaseSync(path);
-    // FIRST, before any pragma that can contend. `journal_mode = WAL` takes a
-    // brief exclusive lock, so on the default zero busy_timeout a cold open that
-    // races a concurrent writer throws `database is locked` outright — crtrd, a
-    // CLI child and a broker all open this same file, and every one of them opens
-    // it cold. Setting the wait window first makes that open wait its turn.
-    db.exec('PRAGMA busy_timeout = 5000;');
-    db.exec('PRAGMA journal_mode = WAL;');
-    // Load-bearing as of migration v4: the edges→nodes FK (ON DELETE CASCADE)
-    // needs this ON at the deleting connection so a node delete reaps its edges.
-    db.exec('PRAGMA foreign_keys = ON;');
-    handles.set(path, db);
-    return db;
-}
-/** Run `body` under the canvas SQLite write lock, joining an outer transaction
- *  when the shared connection already owns one. This is the common boundary for
- *  multi-statement mutations whose reads and writes must linearize as one unit;
- *  `node:sqlite` rejects nested BEGINs, so only the outermost call commits.
- */
-export function withCanvasWrite(body) {
-    const db = openDb();
-    if (db.isTransaction)
-        return body(db);
-    db.exec('BEGIN IMMEDIATE');
-    try {
-        const result = body(db);
-        db.exec('COMMIT');
-        return result;
-    }
-    catch (err) {
-        try {
-            db.exec('ROLLBACK');
-        }
-        catch { /* transaction was already closed */ }
-        throw err;
-    }
-}
-/** Close and forget the handle for the current home. Mainly for tests. */
-export function closeDb() {
-    const path = canvasDbPath();
-    const db = handles.get(path);
-    if (db) {
-        db.close();
-        handles.delete(path);
-    }
-}
+var s=Object.defineProperty;var r=(t,e)=>s(t,"name",{value:e,configurable:!0});import{DatabaseSync as i}from"node:sqlite";import{appendFileSync as a}from"node:fs";import{canvasDbPath as c,ensureHome as p}from"./paths.js";import{migrate as D,MIGRATIONS as R}from"./migrations.js";const o=new Map;function u(){const t=process.env.CRTR_DB_OPEN_LEDGER;if(t)try{const e=`${new Date().toISOString()} ${process.pid} ${process.argv[1]??"<unknown>"}
+`;a(t,e)}catch{}}r(u,"recordOpenLedger");function f(){const t=c(),e=o.get(t);if(e)return e;p(),u();const n=new i(t);return n.exec("PRAGMA busy_timeout = 5000;"),n.exec("PRAGMA journal_mode = WAL;"),n.exec("PRAGMA foreign_keys = ON;"),o.set(t,n),n}r(f,"openDb");function g(t){const e=f();if(e.isTransaction)return t(e);e.exec("BEGIN IMMEDIATE");try{const n=t(e);return e.exec("COMMIT"),n}catch(n){try{e.exec("ROLLBACK")}catch{}throw n}}r(g,"withCanvasWrite");function h(){const t=c(),e=o.get(t);e&&(e.close(),o.delete(t))}r(h,"closeDb");export{R as MIGRATIONS,h as closeDb,D as migrate,f as openDb,g as withCanvasWrite};

package/dist/core/canvas/deliveries.js

@@ -1,247 +1,42 @@
-import { existsSync, readFileSync } from 'node:fs';
-import { randomBytes } from 'node:crypto';
-import { openDb, withCanvasWrite } from './db.js';
-import { inboxPath, passivePath } from './paths.js';
-function deliveryFrom(row) {
-    return {
-        deliveryId: row.delivery_id,
-        messageId: row.message_id,
-        destinationKind: row.destination_kind,
-        destinationId: row.destination_id,
-        urgency: row.urgency,
-        wake: row.wake === 1 ? 1 : 0,
-        state: row.state,
-        attempts: row.attempts,
-        nextAttemptAt: row.next_attempt_at,
-        claimedAt: row.claimed_at,
-        claimOwner: row.claim_owner,
-        acknowledgedAt: row.acknowledged_at,
-        failedAt: row.failed_at,
-        lastFailure: row.last_failure_json === null ? null : JSON.parse(row.last_failure_json),
-        adapter: row.adapter_json === null ? null : JSON.parse(row.adapter_json),
-        effect: row.effect_json === null ? null : JSON.parse(row.effect_json),
-        idempotencyKey: row.idempotency_key,
-        canceledAt: row.canceled_at,
-        createdAt: row.created_at,
-        updatedAt: row.updated_at,
-    };
-}
-function executionIsLive(db, nodeId, executionId, rejectRefresh) {
-    const row = db.prepare(`SELECT 1 FROM nodes n JOIN executions e ON e.node_id = n.node_id
-      WHERE n.node_id = ? AND e.execution_id = ? AND e.state != 'exited'${rejectRefresh ? " AND n.intent IS NOT 'refresh'" : ''}`).get(nodeId, executionId);
-    return row !== undefined;
-}
-function nodeMailRows(db, nodeId, executionId, wake, freshIds) {
-    const rows = db.prepare(`SELECT d.*, m.message_id AS m_message_id, m.seq, m.operation_id, m.created_at AS message_created_at,
+var w=Object.defineProperty;var o=(e,n)=>w(e,"name",{value:n,configurable:!0});import{existsSync as L,readFileSync as S}from"node:fs";import{randomBytes as U}from"node:crypto";import{openDb as u,withCanvasWrite as N}from"./db.js";import{inboxPath as T,passivePath as I}from"./paths.js";function g(e){return{deliveryId:e.delivery_id,messageId:e.message_id,destinationKind:e.destination_kind,destinationId:e.destination_id,urgency:e.urgency,wake:e.wake===1?1:0,state:e.state,attempts:e.attempts,nextAttemptAt:e.next_attempt_at,claimedAt:e.claimed_at,claimOwner:e.claim_owner,acknowledgedAt:e.acknowledged_at,failedAt:e.failed_at,lastFailure:e.last_failure_json===null?null:JSON.parse(e.last_failure_json),adapter:e.adapter_json===null?null:JSON.parse(e.adapter_json),effect:e.effect_json===null?null:JSON.parse(e.effect_json),idempotencyKey:e.idempotency_key,canceledAt:e.canceled_at,createdAt:e.created_at,updatedAt:e.updated_at}}o(g,"deliveryFrom");function y(e,n,d,r){return e.prepare(`SELECT 1 FROM nodes n JOIN executions e ON e.node_id = n.node_id
+      WHERE n.node_id = ? AND e.execution_id = ? AND e.state != 'exited'${r?" AND n.intent IS NOT 'refresh'":""}`).get(n,d)!==void 0}o(y,"executionIsLive");function O(e,n,d,r,i){return e.prepare(`SELECT d.*, m.message_id AS m_message_id, m.seq, m.operation_id, m.created_at AS message_created_at,
             m.sender_node_id, m.sender_name, m.kind, m.label, m.body_ref, m.body_json, m.disposition,
             CASE WHEN d.state = 'handed_off' THEN 'inherited' ELSE 'fresh' END AS handoff
        FROM deliveries d JOIN messages m ON m.message_id = d.message_id
       WHERE d.destination_kind = 'node_inbox' AND d.destination_id = ? AND d.wake = ?
         AND d.canceled_at IS NULL
         AND (d.state = 'pending' OR (d.state = 'handed_off' AND d.claim_owner = ?))
-      ORDER BY m.seq`).all(nodeId, wake, executionId);
-    return rows.map((row) => ({
-        ...deliveryFrom(row),
-        message: {
-            messageId: row['m_message_id'],
-            seq: Number(row['seq']),
-            operationId: row['operation_id'],
-            createdAt: row['message_created_at'],
-            senderNodeId: row['sender_node_id'],
-            senderName: row['sender_name'],
-            kind: row['kind'],
-            label: row['label'],
-            bodyRef: row['body_ref'],
-            bodyJson: row['body_json'] === null ? null : JSON.parse(row['body_json']),
-            disposition: row['disposition'],
-        },
-        handoff: freshIds?.has(row.delivery_id) === true ? 'fresh' : row['handoff'],
-    }));
-}
-/** Claim one broker channel. A refreshing or stale broker receives hold and changes nothing. */
-export function claimNodeMail(nodeId, executionId, channel, now = Date.now()) {
-    return withCanvasWrite((db) => {
-        if (!executionIsLive(db, nodeId, executionId, true))
-            return { action: 'hold', deliveries: [] };
-        const wake = channel === 'wake' ? 1 : 0;
-        const freshIds = new Set(db.prepare(`SELECT delivery_id FROM deliveries
-        WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = ? AND state = 'pending' AND canceled_at IS NULL`).all(nodeId, wake).map((row) => row.delivery_id));
-        db.prepare(`UPDATE deliveries SET state = 'handed_off', attempts = attempts + 1, claim_owner = ?, claimed_at = ?, updated_at = ?
-        WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = ? AND state = 'pending' AND canceled_at IS NULL`).run(executionId, now, now, nodeId, wake);
-        return { action: 'claimed', deliveries: nodeMailRows(db, nodeId, executionId, wake, freshIds) };
-    });
-}
-/** Pre-launch wake claim. It uses the same state transition but deliberately does not reject refresh intent. */
-export function claimKickoffMail(nodeId, executionId, now = Date.now()) {
-    return withCanvasWrite((db) => {
-        if (!executionIsLive(db, nodeId, executionId, false))
-            throw new Error(`execution ${executionId} is not live for node ${nodeId}`);
-        const freshIds = new Set(db.prepare(`SELECT delivery_id FROM deliveries
-        WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = 1 AND state = 'pending' AND canceled_at IS NULL`).all(nodeId).map((row) => row.delivery_id));
-        db.prepare(`UPDATE deliveries SET state = 'handed_off', attempts = attempts + 1, claim_owner = ?, claimed_at = ?, updated_at = ?
-        WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = 1 AND state = 'pending' AND canceled_at IS NULL`).run(executionId, now, now, nodeId);
-        return nodeMailRows(db, nodeId, executionId, 1, freshIds);
-    });
-}
-// Convert the existing subprocess contract at the one shared fence. The old names do not escape this module.
-function normalizedSettlement(settlement) {
-    if (settlement.state === 'accepted')
-        return { state: 'acknowledged' };
-    return settlement;
-}
-/** The one execution/attempt/owner fence for node mail and external actions. */
-export function settleDelivery(deliveryId, attempts, claimOwner, settlement, now = Date.now()) {
-    const next = normalizedSettlement(settlement);
-    const failure = next.state === 'pending' || next.state === 'permanent_failed' ? JSON.stringify(next.failure) : null;
-    const state = next.state === 'released' ? 'pending' : next.state;
-    const nextAttemptAt = next.state === 'pending' ? next.nextAttemptAt : state === 'pending' ? now : null;
-    return withCanvasWrite((db) => Number(db.prepare(`UPDATE deliveries
+      ORDER BY m.seq`).all(n,r,d).map(s=>({...g(s),message:{messageId:s.m_message_id,seq:Number(s.seq),operationId:s.operation_id,createdAt:s.message_created_at,senderNodeId:s.sender_node_id,senderName:s.sender_name,kind:s.kind,label:s.label,bodyRef:s.body_ref,bodyJson:s.body_json===null?null:JSON.parse(s.body_json),disposition:s.disposition},handoff:i?.has(s.delivery_id)===!0?"fresh":s.handoff}))}o(O,"nodeMailRows");function b(e,n,d,r=Date.now()){return N(i=>{if(!y(i,e,n,!0))return{action:"hold",deliveries:[]};const _=d==="wake"?1:0,s=new Set(i.prepare(`SELECT delivery_id FROM deliveries
+        WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = ? AND state = 'pending' AND canceled_at IS NULL`).all(e,_).map(c=>c.delivery_id));return i.prepare(`UPDATE deliveries SET state = 'handed_off', attempts = attempts + 1, claim_owner = ?, claimed_at = ?, updated_at = ?
+        WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = ? AND state = 'pending' AND canceled_at IS NULL`).run(n,r,r,e,_),{action:"claimed",deliveries:O(i,e,n,_,s)}})}o(b,"claimNodeMail");function q(e,n,d=Date.now()){return N(r=>{if(!y(r,e,n,!1))throw new Error(`execution ${n} is not live for node ${e}`);const i=new Set(r.prepare(`SELECT delivery_id FROM deliveries
+        WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = 1 AND state = 'pending' AND canceled_at IS NULL`).all(e).map(_=>_.delivery_id));return r.prepare(`UPDATE deliveries SET state = 'handed_off', attempts = attempts + 1, claim_owner = ?, claimed_at = ?, updated_at = ?
+        WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = 1 AND state = 'pending' AND canceled_at IS NULL`).run(n,d,d,e),O(r,e,n,1,i)})}o(q,"claimKickoffMail");function C(e){return e.state==="accepted"?{state:"acknowledged"}:e}o(C,"normalizedSettlement");function h(e,n,d,r,i=Date.now()){const _=C(r),s=_.state==="pending"||_.state==="permanent_failed"?JSON.stringify(_.failure):null,c=_.state==="released"?"pending":_.state,t=_.state==="pending"?_.nextAttemptAt:c==="pending"?i:null;return N(a=>Number(a.prepare(`UPDATE deliveries
         SET state = ?, next_attempt_at = ?, claimed_at = NULL, claim_owner = NULL,
             acknowledged_at = ?, failed_at = ?, last_failure_json = ?, updated_at = ?
-      WHERE delivery_id = ? AND state = 'handed_off' AND attempts = ? AND claim_owner = ?`).run(state, nextAttemptAt, state === 'acknowledged' ? now : null, state === 'permanent_failed' ? now : null, failure, now, deliveryId, attempts, claimOwner).changes) === 1);
-}
-/** Broker acknowledgement additionally checks the live execution/refresh guards before the per-row fence. */
-export function acknowledgeNodeMail(nodeId, executionId, deliveries, now = Date.now()) {
-    return withCanvasWrite((db) => {
-        if (!executionIsLive(db, nodeId, executionId, true))
-            return { action: 'hold', results: [] };
-        const results = deliveries.map((delivery) => {
-            const owned = db.prepare("SELECT 1 FROM deliveries WHERE delivery_id = ? AND destination_kind = 'node_inbox' AND destination_id = ?").get(delivery.deliveryId, nodeId) !== undefined;
-            return {
-                deliveryId: delivery.deliveryId,
-                outcome: owned && settleDelivery(delivery.deliveryId, delivery.attempts, executionId, { state: delivery.disposition }, now)
-                    ? delivery.disposition
-                    : 'stale',
-            };
-        });
-        return { action: 'acknowledged', results };
-    });
-}
-/** The immutable action document belonging to one external-action obligation. */
-export function messageBodyForDelivery(deliveryId) {
-    const row = openDb().prepare(`SELECT m.body_json FROM deliveries d JOIN messages m ON m.message_id = d.message_id
-      WHERE d.delivery_id = ? AND d.destination_kind = 'external_action'`).get(deliveryId);
-    return row === undefined || row.body_json === null ? null : JSON.parse(row.body_json);
-}
-/** Read the one external-action obligation with this caller-owned identity. */
-export function readExternalActionDelivery(idempotencyKey) {
-    const row = openDb().prepare("SELECT * FROM deliveries WHERE destination_kind = 'external_action' AND idempotency_key = ?").get(idempotencyKey);
-    return row === undefined ? null : deliveryFrom(row);
-}
-export function dueExternalActionDeliveries(now) {
-    return openDb().prepare(`SELECT * FROM deliveries
+      WHERE delivery_id = ? AND state = 'handed_off' AND attempts = ? AND claim_owner = ?`).run(c,t,c==="acknowledged"?i:null,c==="permanent_failed"?i:null,s,i,e,n,d).changes)===1)}o(h,"settleDelivery");function $(e,n,d,r=Date.now()){return N(i=>y(i,e,n,!0)?{action:"acknowledged",results:d.map(s=>{const c=i.prepare("SELECT 1 FROM deliveries WHERE delivery_id = ? AND destination_kind = 'node_inbox' AND destination_id = ?").get(s.deliveryId,e)!==void 0;return{deliveryId:s.deliveryId,outcome:c&&h(s.deliveryId,s.attempts,n,{state:s.disposition},r)?s.disposition:"stale"}})}:{action:"hold",results:[]})}o($,"acknowledgeNodeMail");function J(e){const n=u().prepare(`SELECT m.body_json FROM deliveries d JOIN messages m ON m.message_id = d.message_id
+      WHERE d.delivery_id = ? AND d.destination_kind = 'external_action'`).get(e);return n===void 0||n.body_json===null?null:JSON.parse(n.body_json)}o(J,"messageBodyForDelivery");function K(e){const n=u().prepare("SELECT * FROM deliveries WHERE destination_kind = 'external_action' AND idempotency_key = ?").get(e);return n===void 0?null:g(n)}o(K,"readExternalActionDelivery");function P(e){return u().prepare(`SELECT * FROM deliveries
       WHERE destination_kind = 'external_action' AND state = 'pending' AND canceled_at IS NULL AND next_attempt_at <= ?
-      ORDER BY next_attempt_at, created_at, delivery_id`).all(now).map(deliveryFrom);
-}
-export function claimExternalActionDelivery(deliveryId, now, claimOwner) {
-    return withCanvasWrite((db) => {
-        const result = db.prepare(`UPDATE deliveries SET state = 'handed_off', attempts = attempts + 1, claimed_at = ?, claim_owner = ?, updated_at = ?
-        WHERE delivery_id = ? AND destination_kind = 'external_action' AND state = 'pending' AND canceled_at IS NULL AND next_attempt_at <= ?`).run(now, claimOwner, now, deliveryId, now);
-        if (Number(result.changes) === 0)
-            return null;
-        return deliveryFrom(db.prepare('SELECT * FROM deliveries WHERE delivery_id = ?').get(deliveryId));
-    });
-}
-export function resetHandedOffDeliveries(now) {
-    return withCanvasWrite((db) => Number(db.prepare(`UPDATE deliveries SET state = 'pending', next_attempt_at = CASE WHEN destination_kind = 'external_action' THEN ? ELSE NULL END,
-       claimed_at = NULL, claim_owner = NULL, updated_at = ? WHERE state = 'handed_off'`).run(now, now).changes));
-}
-/** Reset mail held by an execution that is no longer this node's one live execution. */
-export function resetStaleExecutionMail(now) {
-    return withCanvasWrite((db) => Number(db.prepare(`UPDATE deliveries AS d SET state = 'pending', claimed_at = NULL, claim_owner = NULL, updated_at = ?
+      ORDER BY next_attempt_at, created_at, delivery_id`).all(e).map(g)}o(P,"dueExternalActionDeliveries");function G(e,n,d){return N(r=>{const i=r.prepare(`UPDATE deliveries SET state = 'handed_off', attempts = attempts + 1, claimed_at = ?, claim_owner = ?, updated_at = ?
+        WHERE delivery_id = ? AND destination_kind = 'external_action' AND state = 'pending' AND canceled_at IS NULL AND next_attempt_at <= ?`).run(n,d,n,e,n);return Number(i.changes)===0?null:g(r.prepare("SELECT * FROM deliveries WHERE delivery_id = ?").get(e))})}o(G,"claimExternalActionDelivery");function B(e){return N(n=>Number(n.prepare(`UPDATE deliveries SET state = 'pending', next_attempt_at = CASE WHEN destination_kind = 'external_action' THEN ? ELSE NULL END,
+       claimed_at = NULL, claim_owner = NULL, updated_at = ? WHERE state = 'handed_off'`).run(e,e).changes))}o(B,"resetHandedOffDeliveries");function Y(e){return N(n=>Number(n.prepare(`UPDATE deliveries AS d SET state = 'pending', claimed_at = NULL, claim_owner = NULL, updated_at = ?
       WHERE d.destination_kind = 'node_inbox' AND d.state = 'handed_off'
         AND NOT EXISTS (
           SELECT 1 FROM executions e WHERE e.node_id = d.destination_id AND e.execution_id = d.claim_owner AND e.state != 'exited'
-        )`).run(now).changes));
-}
-export function hasUnseenWakeMail(nodeId) {
-    return openDb().prepare(`SELECT 1 FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = 1
-       AND canceled_at IS NULL AND urgency != 'deferred' AND state IN ('pending', 'handed_off') LIMIT 1`).get(nodeId) !== undefined;
-}
-export function hasWakeMailSince(nodeId, since) {
-    return openDb().prepare(`SELECT 1 FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = 1
-       AND urgency != 'deferred' AND created_at >= ? LIMIT 1`).get(nodeId, since) !== undefined;
-}
-export function acknowledgedNodeMailCount(nodeId) {
-    return Number(openDb().prepare("SELECT COUNT(*) AS count FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id = ? AND acknowledged_at IS NOT NULL").get(nodeId).count);
-}
-/** Register an outcome's frozen external destination before an outcome message exists. */
-export function armExternalActionDelivery(db, input, now = Date.now()) {
-    const deliveryId = newId();
-    const result = db.prepare(`INSERT INTO deliveries
+        )`).run(e).changes))}o(Y,"resetStaleExecutionMail");function V(e){return u().prepare(`SELECT 1 FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = 1
+       AND canceled_at IS NULL AND urgency != 'deferred' AND state IN ('pending', 'handed_off') LIMIT 1`).get(e)!==void 0}o(V,"hasUnseenWakeMail");function Q(e,n){return u().prepare(`SELECT 1 FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id = ? AND wake = 1
+       AND urgency != 'deferred' AND created_at >= ? LIMIT 1`).get(e,n)!==void 0}o(Q,"hasWakeMailSince");function z(e){return Number(u().prepare("SELECT COUNT(*) AS count FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id = ? AND acknowledged_at IS NOT NULL").get(e).count)}o(z,"acknowledgedNodeMailCount");function Z(e,n,d=Date.now()){const r=p(),i=e.prepare(`INSERT INTO deliveries
        (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, adapter_json, idempotency_key, created_at, updated_at)
      VALUES (?, NULL, 'external_action', ?, 'normal', 0, 'armed', ?, ?, ?, ?)
      ON CONFLICT(idempotency_key) WHERE idempotency_key IS NOT NULL DO UPDATE SET
        destination_id = excluded.destination_id, adapter_json = excluded.adapter_json, updated_at = excluded.updated_at
-     WHERE deliveries.state = 'armed'`).run(deliveryId, input.destinationId, JSON.stringify(input.adapter), input.idempotencyKey, now, now);
-    if (Number(result.changes) === 0)
-        throw new Error(`external action ${input.idempotencyKey} is already active`);
-}
-/** Attach a newly written immutable outcome message and make its registered action due. */
-export function activateArmedExternalActionDelivery(db, input, now = Date.now()) {
-    const row = db.prepare("SELECT state FROM deliveries WHERE destination_kind = 'external_action' AND idempotency_key = ?").get(input.idempotencyKey);
-    if (row === undefined || (!input.supersede && row.state !== 'armed'))
-        return false;
-    let body;
-    try {
-        body = JSON.parse(input.bodyJson);
-    }
-    catch (error) {
-        throw new Error(`external action ${input.idempotencyKey} has invalid outcome document: ${error instanceof Error ? error.message : String(error)}`);
-    }
-    const messageId = newId();
-    const seq = Number(db.prepare('SELECT COALESCE(MAX(seq), 0) AS seq FROM messages').get().seq) + 1;
-    db.prepare(`INSERT INTO messages
+     WHERE deliveries.state = 'armed'`).run(r,n.destinationId,JSON.stringify(n.adapter),n.idempotencyKey,d,d);if(Number(i.changes)===0)throw new Error(`external action ${n.idempotencyKey} is already active`)}o(Z,"armExternalActionDelivery");function ee(e,n,d=Date.now()){const r=e.prepare("SELECT state FROM deliveries WHERE destination_kind = 'external_action' AND idempotency_key = ?").get(n.idempotencyKey);if(r===void 0||!n.supersede&&r.state!=="armed")return!1;let i;try{i=JSON.parse(n.bodyJson)}catch(c){throw new Error(`external action ${n.idempotencyKey} has invalid outcome document: ${c instanceof Error?c.message:String(c)}`)}const _=p(),s=Number(e.prepare("SELECT COALESCE(MAX(seq), 0) AS seq FROM messages").get().seq)+1;return e.prepare(`INSERT INTO messages
        (message_id, seq, operation_id, created_at, sender_node_id, sender_name, kind, label, body_ref, body_json, disposition)
-     VALUES (?, ?, ?, ?, NULL, NULL, 'completed', ?, NULL, ?, NULL)`).run(messageId, seq, newId(), new Date(now).toISOString(), input.label, JSON.stringify(body));
-    if (input.supersede) {
-        db.prepare(`UPDATE deliveries SET message_id = ?, state = 'pending', attempts = 0, next_attempt_at = ?, claimed_at = NULL, claim_owner = NULL,
+     VALUES (?, ?, ?, ?, NULL, NULL, 'completed', ?, NULL, ?, NULL)`).run(_,s,p(),new Date(d).toISOString(),n.label,JSON.stringify(i)),n.supersede?e.prepare(`UPDATE deliveries SET message_id = ?, state = 'pending', attempts = 0, next_attempt_at = ?, claimed_at = NULL, claim_owner = NULL,
          acknowledged_at = NULL, failed_at = NULL, last_failure_json = NULL, updated_at = ?
-       WHERE destination_kind = 'external_action' AND idempotency_key = ?`).run(messageId, now, now, input.idempotencyKey);
-    }
-    else {
-        db.prepare(`UPDATE deliveries SET message_id = ?, state = 'pending', next_attempt_at = ?, updated_at = ?
-       WHERE destination_kind = 'external_action' AND idempotency_key = ? AND state = 'armed'`).run(messageId, now, now, input.idempotencyKey);
-    }
-    return true;
-}
-function newId() {
-    let id;
-    do
-        id = randomBytes(16).toString('hex');
-    while (id === '00000000000000000000000000000000');
-    return id;
-}
-function readJsonLines(path) {
-    if (!existsSync(path))
-        return [];
-    const raw = readFileSync(path, 'utf8');
-    if (raw.trim() === '')
-        return [];
-    return raw.split('\n').filter((line) => line.trim() !== '').map((line, index) => {
-        let entry;
-        try {
-            entry = JSON.parse(line);
-        }
-        catch (error) {
-            throw new Error(`invalid mailbox JSON at ${path}:${index + 1}: ${error.message}`);
-        }
-        if (!/^(?!0{32}$)[0-9a-f]{32}$/.test(entry.entry_id) || !/^(?!0{32}$)[0-9a-f]{32}$/.test(entry.operation_id)) {
-            throw new Error(`invalid mailbox identity at ${path}:${index + 1}`);
-        }
-        if (typeof entry.ts !== 'string' || typeof entry.label !== 'string')
-            throw new Error(`incomplete mailbox entry at ${path}:${index + 1}`);
-        return entry;
-    });
-}
-function readCanceled(path) {
-    if (!existsSync(path))
-        return new Set();
-    return new Set(readFileSync(path, 'utf8').split('\n').map((line) => line.trim()).filter(Boolean));
-}
-/** Create the messaging schema and import every legacy mailbox/action/wait row. The caller owns the encompassing migration transaction. */
-export function migrateMessagingState(db) {
-    db.exec(`
+       WHERE destination_kind = 'external_action' AND idempotency_key = ?`).run(_,d,d,n.idempotencyKey):e.prepare(`UPDATE deliveries SET message_id = ?, state = 'pending', next_attempt_at = ?, updated_at = ?
+       WHERE destination_kind = 'external_action' AND idempotency_key = ? AND state = 'armed'`).run(_,d,d,n.idempotencyKey),!0}o(ee,"activateArmedExternalActionDelivery");function p(){let e;do e=U(16).toString("hex");while(e==="00000000000000000000000000000000");return e}o(p,"newId");function R(e){if(!L(e))return[];const n=S(e,"utf8");return n.trim()===""?[]:n.split(`
+`).filter(d=>d.trim()!=="").map((d,r)=>{let i;try{i=JSON.parse(d)}catch(_){throw new Error(`invalid mailbox JSON at ${e}:${r+1}: ${_.message}`)}if(!/^(?!0{32}$)[0-9a-f]{32}$/.test(i.entry_id)||!/^(?!0{32}$)[0-9a-f]{32}$/.test(i.operation_id))throw new Error(`invalid mailbox identity at ${e}:${r+1}`);if(typeof i.ts!="string"||typeof i.label!="string")throw new Error(`incomplete mailbox entry at ${e}:${r+1}`);return i})}o(R,"readJsonLines");function X(e){return L(e)?new Set(S(e,"utf8").split(`
+`).map(n=>n.trim()).filter(Boolean)):new Set}o(X,"readCanceled");function te(e){e.exec(`
 CREATE TABLE IF NOT EXISTS messages (
   message_id TEXT PRIMARY KEY,
   seq INTEGER NOT NULL UNIQUE,
@@ -295,60 +90,4 @@ CREATE TABLE IF NOT EXISTS waits (
 );
 CREATE UNIQUE INDEX IF NOT EXISTS waits_live ON waits(node_id) WHERE satisfied_at IS NULL;
 CREATE INDEX IF NOT EXISTS waits_node ON waits(node_id);
-`);
-    const mail = [];
-    for (const row of db.prepare('SELECT node_id FROM nodes').all()) {
-        const nodeId = row.node_id;
-        const inbox = readJsonLines(inboxPath(nodeId));
-        const cursor = existsSync(`${inboxPath(nodeId)}.cursor`) ? readFileSync(`${inboxPath(nodeId)}.cursor`, 'utf8').trim() : '';
-        const cursorIndex = inbox.findIndex((entry) => entry.entry_id === cursor);
-        const canceled = readCanceled(`${inboxPath(nodeId)}.canceled`);
-        inbox.forEach((entry, physicalIndex) => mail.push({ nodeId, wake: 1, source: 'inbox', fileRank: 0, physicalIndex, entry, acknowledged: cursorIndex >= 0 && physicalIndex <= cursorIndex, canceled: canceled.has(entry.entry_id), seq: 0 }));
-        for (const [fileRank, path] of [[0, `${passivePath(nodeId)}.draining`], [1, passivePath(nodeId)]]) {
-            readJsonLines(path).forEach((entry, physicalIndex) => mail.push({ nodeId, wake: 0, source: 'passive', fileRank, physicalIndex, entry, acknowledged: false, canceled: false, seq: 0 }));
-        }
-    }
-    mail.sort((a, b) => a.entry.ts.localeCompare(b.entry.ts) || a.nodeId.localeCompare(b.nodeId) || a.fileRank - b.fileRank || a.physicalIndex - b.physicalIndex);
-    mail.forEach((entry, index) => { entry.seq = index + 1; });
-    const groups = new Map();
-    for (const entry of mail) {
-        const key = `${entry.nodeId}\0${entry.source}`;
-        const group = groups.get(key) ?? [];
-        group.push(entry);
-        groups.set(key, group);
-    }
-    for (const group of groups.values()) {
-        const available = group.map((entry) => entry.seq).sort((a, b) => a - b);
-        group.sort((a, b) => a.fileRank - b.fileRank || a.physicalIndex - b.physicalIndex).forEach((entry, index) => { entry.seq = available[index]; });
-    }
-    const insertMessage = db.prepare(`INSERT INTO messages (message_id, seq, operation_id, created_at, sender_node_id, sender_name, kind, label, body_ref, body_json, disposition) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);
-    const insertDelivery = db.prepare(`INSERT INTO deliveries (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, attempts, acknowledged_at, canceled_at, created_at, updated_at) VALUES (?, ?, 'node_inbox', ?, ?, ?, ?, 0, ?, ?, ?, ?)`);
-    for (const imported of mail) {
-        const entry = imported.entry;
-        insertMessage.run(entry.entry_id, imported.seq, entry.operation_id, entry.ts, entry.from, entry.from_name ?? null, entry.kind, entry.label, entry.ref ?? null, entry.data === undefined ? null : JSON.stringify(entry.data), entry.disposition ?? null);
-        const timestamp = Date.parse(entry.ts);
-        const now = Number.isFinite(timestamp) ? timestamp : 0;
-        insertDelivery.run(newId(), entry.entry_id, imported.nodeId, entry.tier, imported.wake, imported.acknowledged ? 'acknowledged' : 'pending', imported.acknowledged ? now : null, imported.canceled ? now : null, now, now);
-    }
-    const actionRows = db.prepare('SELECT * FROM human_action_deliveries').all();
-    for (const row of actionRows) {
-        const messageId = newId();
-        insertMessage.run(messageId, nextSeq(db), newId(), new Date(row.created_at).toISOString(), null, null, 'completed', row.request_id, null, row.completion_json, null);
-        const state = row.state === 'running' ? 'handed_off' : row.state === 'accepted' ? 'acknowledged' : row.state;
-        db.prepare(`INSERT INTO deliveries (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, attempts, next_attempt_at, claimed_at, claim_owner, acknowledged_at, failed_at, last_failure_json, adapter_json, idempotency_key, created_at, updated_at) VALUES (?, ?, 'external_action', 'human_action', 'normal', 0, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(newId(), messageId, state, row.attempt, row.next_attempt_at, row.claimed_at, row.claim_owner, row.accepted_at, row.permanent_failed_at, row.last_failure_json, JSON.stringify({ adapter: 'subprocess', argv: JSON.parse(row.argv_json), cwd: row.cwd }), `human-action:${row.request_id}`, row.created_at, row.updated_at);
-    }
-    const outcomeRows = db.prepare('SELECT * FROM node_outcome_deliveries').all();
-    for (const row of outcomeRows) {
-        const messageId = row.document_json === null ? null : newId();
-        if (messageId !== null)
-            insertMessage.run(messageId, nextSeq(db), newId(), new Date(row.created_at).toISOString(), null, null, 'completed', row.node_id, null, row.document_json, null);
-        const state = row.document_json === null ? 'armed' : row.state === 'running' ? 'handed_off' : row.state === 'accepted' ? 'acknowledged' : row.state;
-        db.prepare(`INSERT INTO deliveries (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, attempts, next_attempt_at, claimed_at, claim_owner, acknowledged_at, failed_at, last_failure_json, adapter_json, idempotency_key, created_at, updated_at) VALUES (?, ?, 'external_action', ?, 'normal', 0, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(newId(), messageId, row.action_name, state, row.attempt, row.next_attempt_at, row.claimed_at, row.claim_owner, row.accepted_at, row.permanent_failed_at, row.last_failure_json, JSON.stringify({ adapter: 'subprocess', argv: JSON.parse(row.argv_json), cwd: row.cwd, config_origin: row.config_origin, payload: row.payload_json === null ? null : JSON.parse(row.payload_json) }), `node-outcome:${row.node_id}`, row.created_at, row.updated_at);
-    }
-    const waiting = db.prepare('SELECT node_id, waiting_for, waiting_for_generation FROM nodes WHERE waiting_for IS NOT NULL').all();
-    for (const row of waiting)
-        db.prepare("INSERT INTO waits (wait_id, node_id, kind, target_id, generation, created_at, satisfied_at) VALUES (?, ?, 'controller', ?, ?, ?, NULL)").run(newId(), row.node_id, row.waiting_for, row.waiting_for_generation, Date.now());
-}
-function nextSeq(db) {
-    return Number(db.prepare('SELECT COALESCE(MAX(seq), 0) AS seq FROM messages').get().seq) + 1;
-}
+`);const n=[];for(const t of e.prepare("SELECT node_id FROM nodes").all()){const a=t.node_id,l=R(T(a)),E=L(`${T(a)}.cursor`)?S(`${T(a)}.cursor`,"utf8").trim():"",A=l.findIndex(m=>m.entry_id===E),D=X(`${T(a)}.canceled`);l.forEach((m,f)=>n.push({nodeId:a,wake:1,source:"inbox",fileRank:0,physicalIndex:f,entry:m,acknowledged:A>=0&&f<=A,canceled:D.has(m.entry_id),seq:0}));for(const[m,f]of[[0,`${I(a)}.draining`],[1,I(a)]])R(f).forEach((x,v)=>n.push({nodeId:a,wake:0,source:"passive",fileRank:m,physicalIndex:v,entry:x,acknowledged:!1,canceled:!1,seq:0}))}n.sort((t,a)=>t.entry.ts.localeCompare(a.entry.ts)||t.nodeId.localeCompare(a.nodeId)||t.fileRank-a.fileRank||t.physicalIndex-a.physicalIndex),n.forEach((t,a)=>{t.seq=a+1});const d=new Map;for(const t of n){const a=`${t.nodeId}\0${t.source}`,l=d.get(a)??[];l.push(t),d.set(a,l)}for(const t of d.values()){const a=t.map(l=>l.seq).sort((l,E)=>l-E);t.sort((l,E)=>l.fileRank-E.fileRank||l.physicalIndex-E.physicalIndex).forEach((l,E)=>{l.seq=a[E]})}const r=e.prepare("INSERT INTO messages (message_id, seq, operation_id, created_at, sender_node_id, sender_name, kind, label, body_ref, body_json, disposition) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"),i=e.prepare("INSERT INTO deliveries (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, attempts, acknowledged_at, canceled_at, created_at, updated_at) VALUES (?, ?, 'node_inbox', ?, ?, ?, ?, 0, ?, ?, ?, ?)");for(const t of n){const a=t.entry;r.run(a.entry_id,t.seq,a.operation_id,a.ts,a.from,a.from_name??null,a.kind,a.label,a.ref??null,a.data===void 0?null:JSON.stringify(a.data),a.disposition??null);const l=Date.parse(a.ts),E=Number.isFinite(l)?l:0;i.run(p(),a.entry_id,t.nodeId,a.tier,t.wake,t.acknowledged?"acknowledged":"pending",t.acknowledged?E:null,t.canceled?E:null,E,E)}const _=e.prepare("SELECT * FROM human_action_deliveries").all();for(const t of _){const a=p();r.run(a,k(e),p(),new Date(t.created_at).toISOString(),null,null,"completed",t.request_id,null,t.completion_json,null);const l=t.state==="running"?"handed_off":t.state==="accepted"?"acknowledged":t.state;e.prepare("INSERT INTO deliveries (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, attempts, next_attempt_at, claimed_at, claim_owner, acknowledged_at, failed_at, last_failure_json, adapter_json, idempotency_key, created_at, updated_at) VALUES (?, ?, 'external_action', 'human_action', 'normal', 0, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)").run(p(),a,l,t.attempt,t.next_attempt_at,t.claimed_at,t.claim_owner,t.accepted_at,t.permanent_failed_at,t.last_failure_json,JSON.stringify({adapter:"subprocess",argv:JSON.parse(t.argv_json),cwd:t.cwd}),`human-action:${t.request_id}`,t.created_at,t.updated_at)}const s=e.prepare("SELECT * FROM node_outcome_deliveries").all();for(const t of s){const a=t.document_json===null?null:p();a!==null&&r.run(a,k(e),p(),new Date(t.created_at).toISOString(),null,null,"completed",t.node_id,null,t.document_json,null);const l=t.document_json===null?"armed":t.state==="running"?"handed_off":t.state==="accepted"?"acknowledged":t.state;e.prepare("INSERT INTO deliveries (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, attempts, next_attempt_at, claimed_at, claim_owner, acknowledged_at, failed_at, last_failure_json, adapter_json, idempotency_key, created_at, updated_at) VALUES (?, ?, 'external_action', ?, 'normal', 0, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)").run(p(),a,t.action_name,l,t.attempt,t.next_attempt_at,t.claimed_at,t.claim_owner,t.accepted_at,t.permanent_failed_at,t.last_failure_json,JSON.stringify({adapter:"subprocess",argv:JSON.parse(t.argv_json),cwd:t.cwd,config_origin:t.config_origin,payload:t.payload_json===null?null:JSON.parse(t.payload_json)}),`node-outcome:${t.node_id}`,t.created_at,t.updated_at)}const c=e.prepare("SELECT node_id, waiting_for, waiting_for_generation FROM nodes WHERE waiting_for IS NOT NULL").all();for(const t of c)e.prepare("INSERT INTO waits (wait_id, node_id, kind, target_id, generation, created_at, satisfied_at) VALUES (?, ?, 'controller', ?, ?, ?, NULL)").run(p(),t.node_id,t.waiting_for,t.waiting_for_generation,Date.now())}o(te,"migrateMessagingState");function k(e){return Number(e.prepare("SELECT COALESCE(MAX(seq), 0) AS seq FROM messages").get().seq)+1}o(k,"nextSeq");export{$ as acknowledgeNodeMail,z as acknowledgedNodeMailCount,ee as activateArmedExternalActionDelivery,Z as armExternalActionDelivery,G as claimExternalActionDelivery,q as claimKickoffMail,b as claimNodeMail,P as dueExternalActionDeliveries,V as hasUnseenWakeMail,Q as hasWakeMailSince,J as messageBodyForDelivery,te as migrateMessagingState,K as readExternalActionDelivery,B as resetHandedOffDeliveries,Y as resetStaleExecutionMail,h as settleDelivery};

package/dist/core/canvas/delivery-contract.js

@@ -1,8 +1 @@
-// The durable contract shared by every retried delivery: what a failed attempt
-// records, how an attempt settles, and when the next attempt becomes due. The
-// canvas modules own the rows; `daemon/delivery/run-delivery.ts` owns the
-// process that produces these settlements.
-/** Durable exponential retry delay for the attempt that just failed. */
-export function deliveryBackoffMs(attempt) {
-    return Math.min(5_000 * 2 ** (attempt - 1), 3_600_000);
-}
+var t=Object.defineProperty;var n=(e,r)=>t(e,"name",{value:r,configurable:!0});function i(e){return Math.min(5e3*2**(e-1),36e5)}n(i,"deliveryBackoffMs");export{i as deliveryBackoffMs};