@north-light/crouter 0.3.352 → 0.3.354

package/dist/core/canvas/migrations.js

@@ -1,4 +1,4 @@
-var te=Object.defineProperty;var o=(e,n)=>te(e,"name",{value:n,configurable:!0});import{parseScope as oe}from"@north-light/crouter-identity";import{importNodeSqlAuthority as ie,recreateNodeRowsView as Te}from"./node-sql-migration.js";import{migrateRecoveryWitnesses as Ee}from"./recovery.js";import{migrateMessagingState as re}from"./deliveries.js";import{migrateHumanRequestsState as se}from"../human/requests.js";import{existsSync as p,readFileSync as U,readdirSync as S,realpathSync as ae,statSync as de}from"node:fs";import{basename as _e,join as x,resolve as H}from"node:path";import{crtrHome as ce,isSafeNodeId as Ne,nodesRoot as f,nodeMetaPath as I}from"./paths.js";import{STATE_MIGRATIONS as ue}from"../../migrations/registry.js";import{customExtensionPaths as Le}from"./extensions.js";import{readMetaObject as P,updateJsonFileDurably as Y,withMetaLock as le,writeMetaObjectLocked as pe}from"./meta-file.js";function Oe(e){e.exec(`
+var Ee=Object.defineProperty;var o=(e,n)=>Ee(e,"name",{value:n,configurable:!0});import{randomBytes as Te}from"node:crypto";import{parseScope as ie}from"@north-light/crouter-identity";import{importNodeSqlAuthority as se,recreateNodeRowsView as re}from"./node-sql-migration.js";import{migrateRecoveryWitnesses as ae}from"./recovery.js";import{migrateMessagingState as de}from"./deliveries.js";import{migrateHumanRequestsState as Ne}from"../human/requests.js";import{existsSync as A,readFileSync as U,readdirSync as C,realpathSync as _e,statSync as ce}from"node:fs";import{basename as Le,join as w,resolve as j}from"node:path";import{isSafeNodeId as ue,nodesRoot as m,nodeMetaPath as f}from"./paths.js";import{convertLegacyEdges as le}from"../../migrations/004-canvas-documents/legacy-edges.js";import{customExtensionPaths as Ae}from"./extensions.js";import{readMetaObject as P,updateJsonFileDurably as Y,withMetaLock as Oe,writeMetaObjectLocked as pe}from"./meta-file.js";function Re(e){e.exec(`
 CREATE TABLE IF NOT EXISTS nodes (
   node_id    TEXT PRIMARY KEY,
   name       TEXT NOT NULL,
@@ -23,7 +23,7 @@ CREATE TABLE IF NOT EXISTS edges (
 CREATE INDEX IF NOT EXISTS idx_edges_to   ON edges(type, to_id);
 CREATE INDEX IF NOT EXISTS idx_edges_from ON edges(type, from_id);
 CREATE INDEX IF NOT EXISTS idx_nodes_status ON nodes(status);
-`)}o(Oe,"baselineSchema");function w(e,n){return new Set(e.prepare(`PRAGMA table_info(${n})`).all().map(t=>t.name))}o(w,"tableColumns");function W(e,n,t,i){n.has(t)||(e.exec(i),n.add(t))}o(W,"addColumnIfMissing");function u(e){return w(e,"nodes")}o(u,"nodeColumns");const s=W;function Ae(e){const n=u(e);s(e,n,"intent","ALTER TABLE nodes ADD COLUMN intent TEXT;"),s(e,n,"pi_pid","ALTER TABLE nodes ADD COLUMN pi_pid INTEGER;"),s(e,n,"window","ALTER TABLE nodes ADD COLUMN window TEXT;"),s(e,n,"tmux_session","ALTER TABLE nodes ADD COLUMN tmux_session TEXT;")}o(Ae,"addRuntimeColumns");function Re(e){const n=f();if(!p(n))return;const t=e.prepare('UPDATE nodes SET intent = ?, pi_pid = ?, "window" = ?, tmux_session = ? WHERE node_id = ?');for(const i of S(n)){const r=I(i);if(!p(r))continue;let T;try{T=JSON.parse(U(r,"utf8"))}catch{continue}t.run(T.intent??null,T.pi_pid??null,T.window??null,T.tmux_session??null,i)}}o(Re,"backfillRuntime");function Xe(e){if(!(e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'edges'").get()!==void 0)){e.exec(`
+`)}o(Re,"baselineSchema");function y(e,n){return new Set(e.prepare(`PRAGMA table_info(${n})`).all().map(t=>t.name))}o(y,"tableColumns");function W(e,n,t,E){n.has(t)||(e.exec(E),n.add(t))}o(W,"addColumnIfMissing");function L(e){return y(e,"nodes")}o(L,"nodeColumns");const r=W;function Ie(e){const n=L(e);r(e,n,"intent","ALTER TABLE nodes ADD COLUMN intent TEXT;"),r(e,n,"pi_pid","ALTER TABLE nodes ADD COLUMN pi_pid INTEGER;"),r(e,n,"window","ALTER TABLE nodes ADD COLUMN window TEXT;"),r(e,n,"tmux_session","ALTER TABLE nodes ADD COLUMN tmux_session TEXT;")}o(Ie,"addRuntimeColumns");function Xe(e){const n=m();if(!A(n))return;const t=e.prepare('UPDATE nodes SET intent = ?, pi_pid = ?, "window" = ?, tmux_session = ? WHERE node_id = ?');for(const E of C(n)){const s=f(E);if(!A(s))continue;let T;try{T=JSON.parse(U(s,"utf8"))}catch{continue}t.run(T.intent??null,T.pi_pid??null,T.window??null,T.tmux_session??null,E)}}o(Xe,"backfillRuntime");function me(e){if(!(e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'edges'").get()!==void 0)){e.exec(`
 CREATE TABLE edges (
   type     TEXT NOT NULL,
   from_id  TEXT NOT NULL,
@@ -57,14 +57,14 @@ DROP TABLE edges;
 ALTER TABLE edges_new RENAME TO edges;
 CREATE INDEX IF NOT EXISTS idx_edges_to   ON edges(type, to_id);
 CREATE INDEX IF NOT EXISTS idx_edges_from ON edges(type, from_id);
-`);const i=e.prepare("SELECT COUNT(*) AS n FROM edges").get().n;if(i!==t)throw new Error(`edges FK rebuild lost rows: expected ${t} non-orphan edge(s), got ${i}`);const r=e.prepare("PRAGMA foreign_key_check").all();if(r.length>0)throw new Error(`edges FK rebuild left ${r.length} foreign-key violation(s)`);e.exec("COMMIT")}catch(i){throw e.exec("ROLLBACK"),i}}finally{e.exec("PRAGMA foreign_keys = ON;")}}o(Xe,"edgesForeignKeyCascade");function me(e){const n=u(e);s(e,n,"pane","ALTER TABLE nodes ADD COLUMN pane TEXT;")}o(me,"addPaneColumn");function fe(e){e.exec(`
+`);const E=e.prepare("SELECT COUNT(*) AS n FROM edges").get().n;if(E!==t)throw new Error(`edges FK rebuild lost rows: expected ${t} non-orphan edge(s), got ${E}`);const s=e.prepare("PRAGMA foreign_key_check").all();if(s.length>0)throw new Error(`edges FK rebuild left ${s.length} foreign-key violation(s)`);e.exec("COMMIT")}catch(E){throw e.exec("ROLLBACK"),E}}finally{e.exec("PRAGMA foreign_keys = ON;")}}o(me,"edgesForeignKeyCascade");function fe(e){const n=L(e);r(e,n,"pane","ALTER TABLE nodes ADD COLUMN pane TEXT;")}o(fe,"addPaneColumn");function Ue(e){e.exec(`
 CREATE TABLE IF NOT EXISTS focuses (
   focus_id  TEXT PRIMARY KEY,   -- stable internal id for the viewport
   pane      TEXT,               -- the durable %pane_id realizing the focus
   session   TEXT,               -- derived cache of the user session (reconciled from pane)
   node_id   TEXT NOT NULL UNIQUE -- the node shown; UNIQUE \u2192 a node occupies <=1 focus
 );
-`)}o(fe,"addFocusesTable");function Ie(e){e.exec(`
+`)}o(Ue,"addFocusesTable");function Ce(e){e.exec(`
 CREATE TABLE IF NOT EXISTS wakeups (
   wakeup_id  TEXT PRIMARY KEY,
   node_id    TEXT,                       -- TARGET + node-anchored cancel anchor; NULL = canvas-detached
@@ -80,7 +80,7 @@ CREATE INDEX IF NOT EXISTS idx_wakeups_fire  ON wakeups(fire_at);
 CREATE INDEX IF NOT EXISTS idx_wakeups_node  ON wakeups(node_id);                 -- by-node cancel / list
 CREATE INDEX IF NOT EXISTS idx_wakeups_owner ON wakeups(owner_id);               -- by-owner reap (ruling A)
 CREATE UNIQUE INDEX IF NOT EXISTS idx_wakeups_deadline ON wakeups(node_id) WHERE kind = 'deadline';
-`)}o(Ie,"appendWakeupsTable");function Ue(e){e.exec(`
+`)}o(Ce,"appendWakeupsTable");function Se(e){e.exec(`
 CREATE TABLE IF NOT EXISTS triggers (
   trigger_id        TEXT PRIMARY KEY,
   owner_id          TEXT NOT NULL,
@@ -131,12 +131,12 @@ SELECT
 FROM wakeups;
 
 DROP TABLE wakeups;
-`)}o(Ue,"migrateWakeupsToTriggers");function Se(e){const n=u(e);s(e,n,"host_kind","ALTER TABLE nodes ADD COLUMN host_kind TEXT;")}o(Se,"addHostKindColumn");function Ce(e){e.exec(`
+`)}o(Se,"migrateWakeupsToTriggers");function De(e){const n=L(e);r(e,n,"host_kind","ALTER TABLE nodes ADD COLUMN host_kind TEXT;")}o(De,"addHostKindColumn");function ge(e){e.exec(`
 CREATE TABLE IF NOT EXISTS canvas_meta (
   key   TEXT PRIMARY KEY,
   value TEXT NOT NULL
 );
-`)}o(Ce,"addCanvasMetaTable");function De(e){const n=u(e);s(e,n,"profile_id","ALTER TABLE nodes ADD COLUMN profile_id TEXT;")}o(De,"addProfileIdColumn");function ge(e){const n=u(e);s(e,n,"pi_pid_identity","ALTER TABLE nodes ADD COLUMN pi_pid_identity TEXT;")}o(ge,"addPidIdentityColumn");function he(e){const n=u(e);s(e,n,"waiting_for","ALTER TABLE nodes ADD COLUMN waiting_for TEXT;")}o(he,"addMessageWaitColumn");function K(e){const n=u(e);if(n.size===0)return;s(e,n,"final_report","ALTER TABLE nodes ADD COLUMN final_report TEXT;"),s(e,n,"finalized_at","ALTER TABLE nodes ADD COLUMN finalized_at TEXT;");const t=e.prepare("SELECT node_id FROM nodes WHERE status = 'done' AND final_report IS NULL").all(),i=e.prepare("UPDATE nodes SET final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL");for(const{node_id:r}of t){const T=x(f(),r,"reports");if(!p(T))continue;let E=null;for(const a of S(T))if(a.endsWith(".md"))try{const d=U(x(T,a),"utf8"),_=/^---\nnode: [^\n]+\nkind: final\nts: ([^\n]+)\n---\n/.exec(d);if(_===null||Number.isNaN(Date.parse(_[1])))continue;const c={name:a,ts:_[1]};(E===null||c.ts>E.ts||c.ts===E.ts&&c.name>E.name)&&(E=c)}catch{}E!==null&&i.run(E.name,E.ts,r)}}o(K,"addCanonicalFinalColumns");function xe(e){const n=f();if(p(n))for(const t of S(n)){const i=I(t);p(i)&&Y(i,r=>{const T=r.launch;if(typeof T!="object"||T===null||Array.isArray(T))return!1;const E=T.extensions;if(!Array.isArray(E)||!E.every(d=>typeof d=="string"))return!1;const a=Le(E);return a.length===E.length?!1:(T.extensions=a,!0)})}}o(xe,"normalizePersistedLaunchExtensions");function we(e){const n=u(e);s(e,n,"waiting_for_generation","ALTER TABLE nodes ADD COLUMN waiting_for_generation INTEGER NOT NULL DEFAULT 0;")}o(we,"addMessageWaitGenerationColumn");function ye(e){e.exec(`
+`)}o(ge,"addCanvasMetaTable");function he(e){const n=L(e);r(e,n,"profile_id","ALTER TABLE nodes ADD COLUMN profile_id TEXT;")}o(he,"addProfileIdColumn");function we(e){const n=L(e);r(e,n,"pi_pid_identity","ALTER TABLE nodes ADD COLUMN pi_pid_identity TEXT;")}o(we,"addPidIdentityColumn");function ye(e){const n=L(e);r(e,n,"waiting_for","ALTER TABLE nodes ADD COLUMN waiting_for TEXT;")}o(ye,"addMessageWaitColumn");function K(e){const n=L(e);if(n.size===0)return;r(e,n,"final_report","ALTER TABLE nodes ADD COLUMN final_report TEXT;"),r(e,n,"finalized_at","ALTER TABLE nodes ADD COLUMN finalized_at TEXT;");const t=e.prepare("SELECT node_id FROM nodes WHERE status = 'done' AND final_report IS NULL").all(),E=e.prepare("UPDATE nodes SET final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL");for(const{node_id:s}of t){const T=w(m(),s,"reports");if(!A(T))continue;let i=null;for(const a of C(T))if(a.endsWith(".md"))try{const d=U(w(T,a),"utf8"),N=/^---\nnode: [^\n]+\nkind: final\nts: ([^\n]+)\n---\n/.exec(d);if(N===null||Number.isNaN(Date.parse(N[1])))continue;const _={name:a,ts:N[1]};(i===null||_.ts>i.ts||_.ts===i.ts&&_.name>i.name)&&(i=_)}catch{}i!==null&&E.run(i.name,i.ts,s)}}o(K,"addCanonicalFinalColumns");function xe(e){const n=m();if(A(n))for(const t of C(n)){const E=f(t);A(E)&&Y(E,s=>{const T=s.launch;if(typeof T!="object"||T===null||Array.isArray(T))return!1;const i=T.extensions;if(!Array.isArray(i)||!i.every(d=>typeof d=="string"))return!1;const a=Ae(i);return a.length===i.length?!1:(T.extensions=a,!0)})}}o(xe,"normalizePersistedLaunchExtensions");function ve(e){const n=L(e);r(e,n,"waiting_for_generation","ALTER TABLE nodes ADD COLUMN waiting_for_generation INTEGER NOT NULL DEFAULT 0;")}o(ve,"addMessageWaitGenerationColumn");function Fe(e){e.exec(`
 CREATE TABLE IF NOT EXISTS consult_outbox (
   node_id      TEXT PRIMARY KEY,   -- legacy work node id
   dir          TEXT NOT NULL,      -- legacy ticket directory
@@ -150,15 +150,15 @@ CREATE INDEX IF NOT EXISTS idx_consult_outbox_status ON consult_outbox(status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir ON consult_outbox(dir);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir_request_status ON consult_outbox(dir, request_id, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir_status ON consult_outbox(dir, status);
-`)}o(ye,"addHumanWorkOutboxTable");function ve(e){const n=w(e,"consult_outbox"),t=o((i,r)=>W(e,n,i,r),"add");t("work_kind","ALTER TABLE consult_outbox ADD COLUMN work_kind TEXT NOT NULL DEFAULT 'follow_up';"),t("interaction_id","ALTER TABLE consult_outbox ADD COLUMN interaction_id TEXT;"),t("generation_id","ALTER TABLE consult_outbox ADD COLUMN generation_id TEXT;"),t("interaction_snapshot","ALTER TABLE consult_outbox ADD COLUMN interaction_snapshot TEXT;"),t("handler_command","ALTER TABLE consult_outbox ADD COLUMN handler_command TEXT;"),t("handler_args_json","ALTER TABLE consult_outbox ADD COLUMN handler_args_json TEXT;"),t("claim_token","ALTER TABLE consult_outbox ADD COLUMN claim_token TEXT;"),e.exec(`
+`)}o(Fe,"addHumanWorkOutboxTable");function ke(e){const n=y(e,"consult_outbox"),t=o((E,s)=>W(e,n,E,s),"add");t("work_kind","ALTER TABLE consult_outbox ADD COLUMN work_kind TEXT NOT NULL DEFAULT 'follow_up';"),t("interaction_id","ALTER TABLE consult_outbox ADD COLUMN interaction_id TEXT;"),t("generation_id","ALTER TABLE consult_outbox ADD COLUMN generation_id TEXT;"),t("interaction_snapshot","ALTER TABLE consult_outbox ADD COLUMN interaction_snapshot TEXT;"),t("handler_command","ALTER TABLE consult_outbox ADD COLUMN handler_command TEXT;"),t("handler_args_json","ALTER TABLE consult_outbox ADD COLUMN handler_args_json TEXT;"),t("claim_token","ALTER TABLE consult_outbox ADD COLUMN claim_token TEXT;"),e.exec(`
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_status ON consult_outbox(work_kind, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_dir_status ON consult_outbox(dir, work_kind, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_request_status ON consult_outbox(dir, request_id, work_kind, status);
 CREATE UNIQUE INDEX IF NOT EXISTS idx_consult_outbox_visual_request ON consult_outbox(dir, request_id, work_kind) WHERE work_kind = 'visual';
-`)}o(ve,"addHumanWorkColumns");function Fe(e){e.exec(`
+`)}o(ke,"addHumanWorkColumns");function Me(e){e.exec(`
 CREATE INDEX IF NOT EXISTS idx_nodes_parent  ON nodes(parent);
 CREATE INDEX IF NOT EXISTS idx_nodes_created ON nodes(created);
-`)}o(Fe,"addNodeParentCreatedIndexes");function ke(e){e.exec(`
+`)}o(Me,"addNodeParentCreatedIndexes");function Be(e){e.exec(`
 CREATE TABLE IF NOT EXISTS crons (
   cron_id          TEXT PRIMARY KEY,
   name             TEXT NOT NULL,          -- agent-legible label; how it shows in list
@@ -213,38 +213,38 @@ CREATE TABLE IF NOT EXISTS cron_runs (                -- bounded ring, last 20 p
   FOREIGN KEY (cron_id) REFERENCES crons(cron_id) ON DELETE CASCADE
 );
 CREATE INDEX IF NOT EXISTS idx_cron_runs_cron ON cron_runs(cron_id, started);
-`)}o(ke,"addCronsTables");function R(e){return`'${e.replace(/'/g,`'"'"'`)}'`}o(R,"shellSingleQuote");function Me(e,n){let t=0;for(;;){const i=`${n}_${t}`;if(!e.split(`
-`).includes(i))return i;t++}}o(Me,"uniqueHeredocDelimiter");function b(e,n,t){const i=Me(n,t);return`${e} <<'${i}'
+`)}o(Be,"addCronsTables");function R(e){return`'${e.replace(/'/g,`'"'"'`)}'`}o(R,"shellSingleQuote");function Ge(e,n){let t=0;for(;;){const E=`${n}_${t}`;if(!e.split(`
+`).includes(E))return E;t++}}o(Ge,"uniqueHeredocDelimiter");function $(e,n,t){const E=Ge(n,t);return`${e} <<'${E}'
 ${n}
-${i}`}o(b,"heredocCommand");function Be(e){if(typeof e!="string")return{};try{const n=JSON.parse(e);return typeof n!="object"||n===null||Array.isArray(n)?{}:n}catch{return{}}}o(Be,"migrationPayload");function l(e,n,t){const i=e[n];if(typeof i!="string"||i.trim()==="")throw new Error(`trigger ${t} payload requires non-empty ${n}`);return i}o(l,"requiredString");function C(e,n){const t=e[n];return typeof t=="string"&&t.trim()!==""?t:void 0}o(C,"optionalString");function X(e,n){const t=e[n];return typeof t=="string"&&t.trim()!==""?t:void 0}o(X,"optionalColumn");function q(e,n,t,i){return b(`crtr node message send --to ${R(e)} --tier ${R(n)}`,t,`CRTR_MIGRATED_${i.replace(/[^A-Za-z0-9]/g,"_")}`)}o(q,"migratedMessageCommand");function Ge(e,n){return`printf '%s\\n' "$CRTR_GATE_STDOUT" | crtr node message send --to ${R(e)} --tier ${R(n)}`}o(Ge,"migratedGateStdoutMessageCommand");function He(e,n){const t=[`crtr node new --kind ${R(l(e,"kind",n))}`],i=[["mode","mode"],["cwd","cwd"],["name","name"],["parent","parent"],["worktreeBase","worktree"],["forkFrom","fork-from"],["model","model"],["profile","profile"],["situationalContext","situational-context"]];for(const[T,E]of i){const a=C(e,T);a!==void 0&&t.push(`--${E} ${R(a)}`)}e.root===!0&&t.push("--root");const r=l(e,"prompt",n);return b(t.join(" "),r,`CRTR_MIGRATED_${n.replace(/[^A-Za-z0-9]/g,"_")}`)}o(He,"migratedSpawnCommand");const $="migration.v22.skipped";function Pe(e){const n=e.prepare("SELECT cwd FROM nodes WHERE parent IS NULL ORDER BY created LIMIT 1").get();return(n!==void 0?X(n,"cwd"):void 0)??process.cwd()}o(Pe,"ambientMigrationCwd");function Ye(e){let n;try{n=e.prepare("SELECT eval_pid FROM triggers WHERE eval_state = 'running' AND eval_pid IS NOT NULL").all()}catch{return}for(const t of n){const i=t.eval_pid;if(!(typeof i!="number"||!Number.isInteger(i)||i<=1))try{process.kill(-i,"SIGTERM")}catch{}}}o(Ye,"reapRunningPredicateEvaluations");function We(e){const n=[],t=e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'triggers'").get()!==void 0;t&&Ye(e);let i=[];if(t)try{i=e.prepare("SELECT * FROM triggers ORDER BY created, trigger_id").all()}catch(E){n.push({trigger_id:"<unreadable table>",reason:`triggers table could not be read: ${E instanceof Error?E.message:String(E)}`})}const r=Pe(e),T=e.prepare(`
+${E}`}o($,"heredocCommand");function be(e){if(typeof e!="string")return{};try{const n=JSON.parse(e);return typeof n!="object"||n===null||Array.isArray(n)?{}:n}catch{return{}}}o(be,"migrationPayload");function l(e,n,t){const E=e[n];if(typeof E!="string"||E.trim()==="")throw new Error(`trigger ${t} payload requires non-empty ${n}`);return E}o(l,"requiredString");function S(e,n){const t=e[n];return typeof t=="string"&&t.trim()!==""?t:void 0}o(S,"optionalString");function I(e,n){const t=e[n];return typeof t=="string"&&t.trim()!==""?t:void 0}o(I,"optionalColumn");function q(e,n,t,E){return $(`crtr node message send --to ${R(e)} --tier ${R(n)}`,t,`CRTR_MIGRATED_${E.replace(/[^A-Za-z0-9]/g,"_")}`)}o(q,"migratedMessageCommand");function He(e,n){return`printf '%s\\n' "$CRTR_GATE_STDOUT" | crtr node message send --to ${R(e)} --tier ${R(n)}`}o(He,"migratedGateStdoutMessageCommand");function je(e,n){const t=[`crtr node new --kind ${R(l(e,"kind",n))}`],E=[["mode","mode"],["cwd","cwd"],["name","name"],["parent","parent"],["worktreeBase","worktree"],["forkFrom","fork-from"],["model","model"],["profile","profile"],["situationalContext","situational-context"]];for(const[T,i]of E){const a=S(e,T);a!==void 0&&t.push(`--${i} ${R(a)}`)}e.root===!0&&t.push("--root");const s=l(e,"prompt",n);return $(t.join(" "),s,`CRTR_MIGRATED_${n.replace(/[^A-Za-z0-9]/g,"_")}`)}o(je,"migratedSpawnCommand");const z="migration.v22.skipped";function Pe(e){const n=e.prepare("SELECT cwd FROM nodes WHERE parent IS NULL ORDER BY created LIMIT 1").get();return(n!==void 0?I(n,"cwd"):void 0)??process.cwd()}o(Pe,"ambientMigrationCwd");function Ye(e){let n;try{n=e.prepare("SELECT eval_pid FROM triggers WHERE eval_state = 'running' AND eval_pid IS NOT NULL").all()}catch{return}for(const t of n){const E=t.eval_pid;if(!(typeof E!="number"||!Number.isInteger(E)||E<=1))try{process.kill(-E,"SIGTERM")}catch{}}}o(Ye,"reapRunningPredicateEvaluations");function We(e){const n=[],t=e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'triggers'").get()!==void 0;t&&Ye(e);let E=[];if(t)try{E=e.prepare("SELECT * FROM triggers ORDER BY created, trigger_id").all()}catch(i){n.push({trigger_id:"<unreadable table>",reason:`triggers table could not be read: ${i instanceof Error?i.message:String(i)}`})}const s=Pe(e),T=e.prepare(`
 INSERT OR REPLACE INTO crons (
   cron_id, name, created_by, command, fire_at, recur, tz, expires_at,
   anchor_node, cancel_on_wake, cwd, env_json, profile, scope,
   run_timeout_s, overlap, on_output, sink, tier, created, updated
-) VALUES (?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, NULL, ?, 'profile', ?, 'skip', 'on-failure', '{}', ?, ?, ?)`);for(const E of i){const a=X(E,"trigger_id");if(a===void 0){n.push({trigger_id:"<unidentified row>",reason:"row carries no trigger_id"});continue}try{Ke(e,T,E,a,r)}catch(d){n.push({trigger_id:a,reason:d instanceof Error?d.message:String(d)})}}n.length>0&&(e.prepare("INSERT INTO canvas_meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run($,JSON.stringify(n)),console.warn(`[canvas migration v22] ${n.length} retired schedule(s) could not be converted to crons and were dropped; see canvas_meta['${$}']: `+n.map(E=>`${E.trigger_id} (${E.reason})`).join("; "))),e.exec(`
+) VALUES (?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, NULL, ?, 'profile', ?, 'skip', 'on-failure', '{}', ?, ?, ?)`);for(const i of E){const a=I(i,"trigger_id");if(a===void 0){n.push({trigger_id:"<unidentified row>",reason:"row carries no trigger_id"});continue}try{Ke(e,T,i,a,s)}catch(d){n.push({trigger_id:a,reason:d instanceof Error?d.message:String(d)})}}n.length>0&&(e.prepare("INSERT INTO canvas_meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(z,JSON.stringify(n)),console.warn(`[canvas migration v22] ${n.length} retired schedule(s) could not be converted to crons and were dropped; see canvas_meta['${z}']: `+n.map(i=>`${i.trigger_id} (${i.reason})`).join("; "))),e.exec(`
 DROP INDEX IF EXISTS idx_triggers_fire;
 DROP INDEX IF EXISTS idx_triggers_node;
 DROP INDEX IF EXISTS idx_triggers_owner;
 DROP INDEX IF EXISTS idx_triggers_eval;
 DROP INDEX IF EXISTS idx_triggers_deadline;
 DROP TABLE IF EXISTS triggers;
-`)}o(We,"migrateTriggersToCrons");function Ke(e,n,t,i,r){const T=l(t,"owner_id",i),E=e.prepare("SELECT cwd, profile_id FROM nodes WHERE node_id = ?").get(T),a=(E===void 0?void 0:X(E,"cwd"))??r,d=E===void 0?null:X(E,"profile_id")??null,_=X(t,"node_id")??null,c=l(t,"action",i),N=l(t,"action_mode",i),L=l(t,"trigger_type",i),m=Be(t.payload),M=X(t,"created")??new Date().toISOString(),g=N==="deadline_message"?"urgent":C(m,"tier")??"normal",y=C(m,"label");let O,h,B=!1;if(c==="msg"&&(N==="inbox_message"||N==="deadline_message")){if(_===null)throw new Error("has no message target");const A=C(m,"body");A!==void 0?O=q(_,g,A,i):L==="when"?(B=!0,O=Ge(_,g)):O=q(_,g,y??"Scheduled message (no body was recorded when this schedule was armed).",i),h=y??(N==="deadline_message"?"deadline":"scheduled message")}else if(c==="msg"&&N==="fresh_revive"){if(_===null)throw new Error("has no revive target");O=`crtr node lifecycle revive ${R(_)} --fresh`,h=y??"scheduled fresh revive"}else if(c==="new"&&N==="node_birth")O=He(m,i),h=C(m,"name")??`scheduled ${l(m,"kind",i)} node`;else throw new Error(`has unsupported action ${c}/${N}`);let v,F,G=null;if(L==="when"){v=l(t,"next_eval_at",i),F=l(t,"eval_every",i),G=X(t,"timeout_at")??null;const A=l(t,"when_script",i);O=`${B?`if ! CRTR_GATE_STDOUT="$(
-${A}
+`)}o(We,"migrateTriggersToCrons");function Ke(e,n,t,E,s){const T=l(t,"owner_id",E),i=e.prepare("SELECT cwd, profile_id FROM nodes WHERE node_id = ?").get(T),a=(i===void 0?void 0:I(i,"cwd"))??s,d=i===void 0?null:I(i,"profile_id")??null,N=I(t,"node_id")??null,_=l(t,"action",E),c=l(t,"action_mode",E),u=l(t,"trigger_type",E),X=be(t.payload),G=I(t,"created")??new Date().toISOString(),g=c==="deadline_message"?"urgent":S(X,"tier")??"normal",x=S(X,"label");let O,h,b=!1;if(_==="msg"&&(c==="inbox_message"||c==="deadline_message")){if(N===null)throw new Error("has no message target");const p=S(X,"body");p!==void 0?O=q(N,g,p,E):u==="when"?(b=!0,O=He(N,g)):O=q(N,g,x??"Scheduled message (no body was recorded when this schedule was armed).",E),h=x??(c==="deadline_message"?"deadline":"scheduled message")}else if(_==="msg"&&c==="fresh_revive"){if(N===null)throw new Error("has no revive target");O=`crtr node lifecycle revive ${R(N)} --fresh`,h=x??"scheduled fresh revive"}else if(_==="new"&&c==="node_birth")O=je(X,E),h=S(X,"name")??`scheduled ${l(X,"kind",E)} node`;else throw new Error(`has unsupported action ${_}/${c}`);let v,F,H=null;if(u==="when"){v=l(t,"next_eval_at",E),F=l(t,"eval_every",E),H=I(t,"timeout_at")??null;const p=l(t,"when_script",E);O=`${b?`if ! CRTR_GATE_STDOUT="$(
+${p}
 )"; then`:`if ! (
-${A}
+${p}
 ); then`}
   exit 0
 fi
 {
 ${O}
-} && crtr cron cancel "$CRTR_CRON_ID"`}else if(L==="at"||L==="every"||L==="until")v=l(t,"fire_at",i),F=L==="every"?l(t,"recur",i):null;else throw new Error(`has unknown timing type ${L}`);if(N==="deadline_message"&&_!==null){const A=e.prepare("SELECT cron_id FROM crons WHERE anchor_node = ? AND cancel_on_wake = 1 AND cron_id <> ?").get(_,i);if(A!==void 0)throw new Error(`node ${_} already has a migrated deadline (${String(A.cron_id)}); only one is allowed`)}n.run(i,h,T,O,v,F,G,_,N==="deadline_message"?1:0,a,d,300,g,M,M)}o(Ke,"convertTriggerRow");function be(e){const n=w(e,"crons");n.size===0||n.has("run_pid_identity")||e.exec("ALTER TABLE crons ADD COLUMN run_pid_identity TEXT;")}o(be,"addCronRunPidIdentityColumn");function qe(e){const n=w(e,"crons");n.size!==0&&(n.has("run_out_of_band")||e.exec("ALTER TABLE crons ADD COLUMN run_out_of_band INTEGER NOT NULL DEFAULT 0;"),n.has("queued")&&e.exec("ALTER TABLE crons DROP COLUMN queued;"))}o(qe,"addCronOutOfBandColumn");function $e(e){e.exec(`
+} && crtr cron cancel "$CRTR_CRON_ID"`}else if(u==="at"||u==="every"||u==="until")v=l(t,"fire_at",E),F=u==="every"?l(t,"recur",E):null;else throw new Error(`has unknown timing type ${u}`);if(c==="deadline_message"&&N!==null){const p=e.prepare("SELECT cron_id FROM crons WHERE anchor_node = ? AND cancel_on_wake = 1 AND cron_id <> ?").get(N,E);if(p!==void 0)throw new Error(`node ${N} already has a migrated deadline (${String(p.cron_id)}); only one is allowed`)}n.run(E,h,T,O,v,F,H,N,c==="deadline_message"?1:0,a,d,300,g,G,G)}o(Ke,"convertTriggerRow");function $e(e){const n=y(e,"crons");n.size===0||n.has("run_pid_identity")||e.exec("ALTER TABLE crons ADD COLUMN run_pid_identity TEXT;")}o($e,"addCronRunPidIdentityColumn");function qe(e){const n=y(e,"crons");n.size!==0&&(n.has("run_out_of_band")||e.exec("ALTER TABLE crons ADD COLUMN run_out_of_band INTEGER NOT NULL DEFAULT 0;"),n.has("queued")&&e.exec("ALTER TABLE crons DROP COLUMN queued;"))}o(qe,"addCronOutOfBandColumn");function ze(e){e.exec(`
 CREATE TABLE IF NOT EXISTS warm_pool (
   node_id    TEXT PRIMARY KEY REFERENCES nodes(node_id) ON DELETE CASCADE,
   recipe_key TEXT NOT NULL,   -- frozen launch tuple this spare was minted for
   created    TEXT NOT NULL    -- ISO 8601, mint time (oldest spare claimed first)
 );
 CREATE INDEX IF NOT EXISTS idx_warm_pool_recipe ON warm_pool(recipe_key, created);
-`)}o($e,"addWarmPoolTable");function je(e){const n=e.prepare("SELECT node_id, dir, root, request_id, work_kind, status, final_report, updated_at FROM consult_outbox").all();e.exec(`
+`)}o(ze,"addWarmPoolTable");function Je(e){const n=e.prepare("SELECT node_id, dir, root, request_id, work_kind, status, final_report, updated_at FROM consult_outbox").all();e.exec(`
 CREATE TABLE consult_outbox_new (
   node_id        TEXT PRIMARY KEY,
   ticket_node_id TEXT NOT NULL,
@@ -256,7 +256,7 @@ CREATE TABLE consult_outbox_new (
 );
 `);const t=e.prepare(`
 INSERT INTO consult_outbox_new (node_id, ticket_node_id, request_id, work_kind, status, final_report, updated_at)
-VALUES (?, ?, ?, ?, ?, ?, ?)`);let i=0;for(const r of n){const T=_e(r.dir);if(!(r.root===H(r.root)&&r.dir===x(r.root,T))||!Ne(T)){i+=1;continue}t.run(r.node_id,T,r.request_id,r.work_kind,r.status,r.final_report,r.updated_at)}i>0&&console.warn(`[canvas migration v26] dropped ${i} consult_outbox row(s) whose legacy ticket path cannot safely map to a ticket node id`),e.exec(`
+VALUES (?, ?, ?, ?, ?, ?, ?)`);let E=0;for(const s of n){const T=Le(s.dir);if(!(s.root===j(s.root)&&s.dir===w(s.root,T))||!ue(T)){E+=1;continue}t.run(s.node_id,T,s.request_id,s.work_kind,s.status,s.final_report,s.updated_at)}E>0&&console.warn(`[canvas migration v26] dropped ${E} consult_outbox row(s) whose legacy ticket path cannot safely map to a ticket node id`),e.exec(`
 DROP TABLE consult_outbox;
 ALTER TABLE consult_outbox_new RENAME TO consult_outbox;
 
@@ -265,7 +265,7 @@ CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_status ON consult_outbo
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_ticket_status ON consult_outbox(ticket_node_id, work_kind, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_ticket_request_status ON consult_outbox(ticket_node_id, request_id, work_kind, status);
 CREATE UNIQUE INDEX IF NOT EXISTS idx_consult_outbox_visual_request ON consult_outbox(ticket_node_id, request_id, work_kind) WHERE work_kind = 'visual';
-`)}o(je,"narrowHumanWorkOutbox");function ze(e){e.exec(`
+`)}o(Je,"narrowHumanWorkOutbox");function Qe(e){e.exec(`
 CREATE TABLE IF NOT EXISTS reviews (
   review_id            TEXT PRIMARY KEY,
   idempotency_key      TEXT NOT NULL UNIQUE,
@@ -309,7 +309,7 @@ CREATE INDEX IF NOT EXISTS idx_reviews_state ON reviews(state);
 CREATE INDEX IF NOT EXISTS idx_reviews_origin ON reviews(origin_node_id);
 CREATE INDEX IF NOT EXISTS idx_reviews_file ON reviews(file);
 CREATE INDEX IF NOT EXISTS idx_reviews_bridge ON reviews(bridge_node_id);
-`)}o(ze,"addReviewsTable");function Je(e){e.exec(`
+`)}o(Qe,"addReviewsTable");function Ve(e){e.exec(`
 CREATE TABLE IF NOT EXISTS review_comments (
   comment_id          TEXT PRIMARY KEY,
   review_id           TEXT NOT NULL,
@@ -354,13 +354,13 @@ CREATE INDEX IF NOT EXISTS idx_review_comment_events_review_seq
   ON review_comment_events(review_id, seq);
 CREATE INDEX IF NOT EXISTS idx_review_comment_events_comment_seq
   ON review_comment_events(comment_id, seq);
-`)}o(Je,"addReviewCommentTables");function Qe(e){e.exec(`
+`)}o(Ve,"addReviewCommentTables");function Ze(e){e.exec(`
 ALTER TABLE review_comments
   ADD COLUMN anchor_state TEXT NOT NULL DEFAULT 'live' CHECK (anchor_state IN ('live', 'detached'));
-`)}o(Qe,"addReviewCommentAnchorState");function Ve(e){e.exec("DROP TABLE IF EXISTS consult_outbox")}o(Ve,"dropConsultOutbox");function Ze(e){e.exec("ALTER TABLE reviews ADD COLUMN submit_requested_at TEXT")}o(Ze,"addReviewSubmitRequested");function en(e){e.exec(`
+`)}o(Ze,"addReviewCommentAnchorState");function en(e){e.exec("DROP TABLE IF EXISTS consult_outbox")}o(en,"dropConsultOutbox");function nn(e){e.exec("ALTER TABLE reviews ADD COLUMN submit_requested_at TEXT")}o(nn,"addReviewSubmitRequested");function tn(e){e.exec(`
 ALTER TABLE crons ADD COLUMN held INTEGER NOT NULL DEFAULT 0;
 ALTER TABLE crons ADD COLUMN last_poke_at TEXT;
-`)}o(en,"addCronHeldColumns");function nn(e){e.exec(`
+`)}o(tn,"addCronHeldColumns");function on(e){e.exec(`
 CREATE TABLE human_action_deliveries (
   request_id           TEXT PRIMARY KEY,
   state                TEXT NOT NULL,
@@ -378,18 +378,18 @@ CREATE TABLE human_action_deliveries (
   updated_at           INTEGER NOT NULL
 );
 CREATE INDEX idx_human_action_deliveries_due ON human_action_deliveries(state, next_attempt_at);
-`)}o(nn,"addHumanActionDeliveries");function tn(e){const n=u(e);s(e,n,"pi_session_file","ALTER TABLE nodes ADD COLUMN pi_session_file TEXT;");for(const t of S(f(),{withFileTypes:!0}))if(t.isDirectory())try{const i=JSON.parse(U(I(t.name),"utf8"));typeof i.pi_session_file=="string"&&e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?").run(i.pi_session_file,t.name)}catch{}e.exec("CREATE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}o(tn,"addNodeSessionFileIndex");function j(e,n){const t=o(a=>{const d=H(a);return p(d)?ae(d):d},"canonical"),i=e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?");e.exec("DROP INDEX IF EXISTS idx_nodes_pi_session_file;");const r=e.prepare("SELECT node_id FROM nodes ORDER BY created ASC, node_id ASC").all();for(const{node_id:a}of r){const d=I(a);if(P(d)===null){i.run(null,a);continue}const _=le(d,()=>{const c=P(d);if(c===null)throw new Error(`node ${a} session metadata changed during ownership migration`);if(typeof c.pi_session_file!="string")return null;const N=c.pi_session_file,L=t(N);return L!==N&&(c.pi_session_file=L,pe(d,c)),L});i.run(_,a)}const T=e.prepare(`
+`)}o(on,"addHumanActionDeliveries");function En(e){const n=L(e);r(e,n,"pi_session_file","ALTER TABLE nodes ADD COLUMN pi_session_file TEXT;");for(const t of C(m(),{withFileTypes:!0}))if(t.isDirectory())try{const E=JSON.parse(U(f(t.name),"utf8"));typeof E.pi_session_file=="string"&&e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?").run(E.pi_session_file,t.name)}catch{}e.exec("CREATE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}o(En,"addNodeSessionFileIndex");function J(e,n){const t=o(a=>{const d=j(a);return A(d)?_e(d):d},"canonical"),E=e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?");e.exec("DROP INDEX IF EXISTS idx_nodes_pi_session_file;");const s=e.prepare("SELECT node_id FROM nodes ORDER BY created ASC, node_id ASC").all();for(const{node_id:a}of s){const d=f(a);if(P(d)===null){E.run(null,a);continue}const N=Oe(d,()=>{const _=P(d);if(_===null)throw new Error(`node ${a} session metadata changed during ownership migration`);if(typeof _.pi_session_file!="string")return null;const c=_.pi_session_file,u=t(c);return u!==c&&(_.pi_session_file=u,pe(d,_)),u});E.run(N,a)}const T=e.prepare(`
 SELECT pi_session_file
 FROM nodes
 WHERE pi_session_file IS NOT NULL
 GROUP BY pi_session_file
 HAVING COUNT(*) > 1
-`).all();if(!n&&T.length>0){const a=T.map(({pi_session_file:d})=>d).join(", ");throw new Error(`cannot restore unique Pi session ownership: authoritative metadata has concurrent claimants for ${a}`)}const E=e.prepare("UPDATE nodes SET pi_session_file = NULL WHERE node_id = ?");for(const{pi_session_file:a}of T){const d=e.prepare(`
+`).all();if(!n&&T.length>0){const a=T.map(({pi_session_file:d})=>d).join(", ");throw new Error(`cannot restore unique Pi session ownership: authoritative metadata has concurrent claimants for ${a}`)}const i=e.prepare("UPDATE nodes SET pi_session_file = NULL WHERE node_id = ?");for(const{pi_session_file:a}of T){const d=e.prepare(`
 SELECT node_id
 FROM nodes
 WHERE pi_session_file = ?
 ORDER BY created ASC, node_id ASC
-`).all(a);for(const{node_id:_}of d.slice(1)){if(!Y(I(_),N=>{const L=N.pi_session_file;if(typeof L!="string"||t(L)!==a)throw new Error(`node ${_} session metadata changed during ownership migration`);return N.pi_session_id=null,N.pi_session_file=null,!0}))throw new Error(`node ${_} session metadata changed during ownership migration`);E.run(_)}}e.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}o(j,"reconcileNodeSessionFileOwners");function on(e){j(e,!0)}o(on,"makeNodeSessionFileUnique");function Tn(e){j(e,!1)}o(Tn,"repairNodeSessionFileUniqueIndex");function En(e){const n=u(e);s(e,n,"frozen_at","ALTER TABLE nodes ADD COLUMN frozen_at TEXT;"),s(e,n,"respawn_failures","ALTER TABLE nodes ADD COLUMN respawn_failures INTEGER NOT NULL DEFAULT 0;"),s(e,n,"respawn_not_before","ALTER TABLE nodes ADD COLUMN respawn_not_before TEXT;"),s(e,n,"launched_at","ALTER TABLE nodes ADD COLUMN launched_at TEXT;"),s(e,n,"last_settled_at","ALTER TABLE nodes ADD COLUMN last_settled_at TEXT;"),s(e,n,"terminal_reason","ALTER TABLE nodes ADD COLUMN terminal_reason TEXT;"),e.exec(`
+`).all(a);for(const{node_id:N}of d.slice(1)){if(!Y(f(N),c=>{const u=c.pi_session_file;if(typeof u!="string"||t(u)!==a)throw new Error(`node ${N} session metadata changed during ownership migration`);return c.pi_session_id=null,c.pi_session_file=null,!0}))throw new Error(`node ${N} session metadata changed during ownership migration`);i.run(N)}}e.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}o(J,"reconcileNodeSessionFileOwners");function Tn(e){J(e,!0)}o(Tn,"makeNodeSessionFileUnique");function sn(e){J(e,!1)}o(sn,"repairNodeSessionFileUniqueIndex");function rn(e){const n=L(e);r(e,n,"frozen_at","ALTER TABLE nodes ADD COLUMN frozen_at TEXT;"),r(e,n,"respawn_failures","ALTER TABLE nodes ADD COLUMN respawn_failures INTEGER NOT NULL DEFAULT 0;"),r(e,n,"respawn_not_before","ALTER TABLE nodes ADD COLUMN respawn_not_before TEXT;"),r(e,n,"launched_at","ALTER TABLE nodes ADD COLUMN launched_at TEXT;"),r(e,n,"last_settled_at","ALTER TABLE nodes ADD COLUMN last_settled_at TEXT;"),r(e,n,"terminal_reason","ALTER TABLE nodes ADD COLUMN terminal_reason TEXT;"),e.exec(`
 UPDATE nodes SET terminal_reason = CASE
   WHEN status = 'done' AND final_report IS NOT NULL THEN 'finalized'
   WHEN status = 'done' AND intent = 'parked'        THEN 'parked'
@@ -398,7 +398,7 @@ UPDATE nodes SET terminal_reason = CASE
   WHEN status = 'dead'                              THEN 'crashed'
 END
 WHERE status IN ('done','canceled','dead') AND terminal_reason IS NULL;
-`)}o(En,"addNodeLifecycleColumns");function rn(e){const n=u(e);s(e,n,"description","ALTER TABLE nodes ADD COLUMN description TEXT;"),s(e,n,"cycles","ALTER TABLE nodes ADD COLUMN cycles INTEGER;");const t=f();if(!p(t))return;const i=e.prepare("UPDATE nodes SET description = ?, cycles = ? WHERE node_id = ?");for(const r of S(t)){const T=I(r);if(!p(T))continue;let E;try{E=JSON.parse(U(T,"utf8"))}catch{continue}const a=typeof E.description=="string"?E.description:null,d=typeof E.cycles=="number"?E.cycles:null;i.run(a,d,r)}}o(rn,"addNodeLabelColumns");function sn(e){const n=u(e);s(e,n,"outcome_kind","ALTER TABLE nodes ADD COLUMN outcome_kind TEXT;"),s(e,n,"outcome_reason","ALTER TABLE nodes ADD COLUMN outcome_reason TEXT;"),s(e,n,"outcome_at","ALTER TABLE nodes ADD COLUMN outcome_at TEXT;"),s(e,n,"outcome_revision","ALTER TABLE nodes ADD COLUMN outcome_revision INTEGER NOT NULL DEFAULT 0;"),s(e,n,"outcome_detail_json","ALTER TABLE nodes ADD COLUMN outcome_detail_json TEXT;"),s(e,n,"deadline_at","ALTER TABLE nodes ADD COLUMN deadline_at TEXT;"),e.exec(`
+`)}o(rn,"addNodeLifecycleColumns");function an(e){const n=L(e);r(e,n,"description","ALTER TABLE nodes ADD COLUMN description TEXT;"),r(e,n,"cycles","ALTER TABLE nodes ADD COLUMN cycles INTEGER;");const t=m();if(!A(t))return;const E=e.prepare("UPDATE nodes SET description = ?, cycles = ? WHERE node_id = ?");for(const s of C(t)){const T=f(s);if(!A(T))continue;let i;try{i=JSON.parse(U(T,"utf8"))}catch{continue}const a=typeof i.description=="string"?i.description:null,d=typeof i.cycles=="number"?i.cycles:null;E.run(a,d,s)}}o(an,"addNodeLabelColumns");function dn(e){const n=L(e);r(e,n,"outcome_kind","ALTER TABLE nodes ADD COLUMN outcome_kind TEXT;"),r(e,n,"outcome_reason","ALTER TABLE nodes ADD COLUMN outcome_reason TEXT;"),r(e,n,"outcome_at","ALTER TABLE nodes ADD COLUMN outcome_at TEXT;"),r(e,n,"outcome_revision","ALTER TABLE nodes ADD COLUMN outcome_revision INTEGER NOT NULL DEFAULT 0;"),r(e,n,"outcome_detail_json","ALTER TABLE nodes ADD COLUMN outcome_detail_json TEXT;"),r(e,n,"deadline_at","ALTER TABLE nodes ADD COLUMN deadline_at TEXT;"),e.exec(`
 CREATE TABLE IF NOT EXISTS node_outcome_deliveries (
   node_id              TEXT PRIMARY KEY,
   state                TEXT NOT NULL,
@@ -431,17 +431,17 @@ UPDATE nodes SET outcome_kind='failure',
        outcome_reason=COALESCE(terminal_reason,'crashed'),
        outcome_at=COALESCE(finalized_at, created), outcome_revision=1
  WHERE final_report IS NULL AND status IN ('done','dead','canceled') AND outcome_at IS NULL;
-`)}o(sn,"addNodeOutcomeAndDeadline");function an(e){const n=u(e);s(e,n,"telemetry_tokens_in","ALTER TABLE nodes ADD COLUMN telemetry_tokens_in INTEGER;"),s(e,n,"telemetry_context_tokens","ALTER TABLE nodes ADD COLUMN telemetry_context_tokens INTEGER;"),s(e,n,"telemetry_last_activity","ALTER TABLE nodes ADD COLUMN telemetry_last_activity TEXT;"),s(e,n,"telemetry_updated_at","ALTER TABLE nodes ADD COLUMN telemetry_updated_at TEXT;");const t=e.prepare(`UPDATE nodes
+`)}o(dn,"addNodeOutcomeAndDeadline");function Nn(e){const n=L(e);r(e,n,"telemetry_tokens_in","ALTER TABLE nodes ADD COLUMN telemetry_tokens_in INTEGER;"),r(e,n,"telemetry_context_tokens","ALTER TABLE nodes ADD COLUMN telemetry_context_tokens INTEGER;"),r(e,n,"telemetry_last_activity","ALTER TABLE nodes ADD COLUMN telemetry_last_activity TEXT;"),r(e,n,"telemetry_updated_at","ALTER TABLE nodes ADD COLUMN telemetry_updated_at TEXT;");const t=e.prepare(`UPDATE nodes
     SET telemetry_tokens_in = ?, telemetry_context_tokens = ?,
         telemetry_last_activity = ?, telemetry_updated_at = ?
-    WHERE node_id = ?`);for(const{node_id:i}of e.prepare("SELECT node_id FROM nodes").all()){const r=x(f(),i,"job","telemetry.json");if(p(r))try{const T=JSON.parse(U(r,"utf8")),E=typeof T.tokens_in=="number"&&Number.isFinite(T.tokens_in)?T.tokens_in:null,a=typeof T.context_tokens=="number"&&Number.isFinite(T.context_tokens)?T.context_tokens:null,d=typeof T.last_activity=="string"?T.last_activity:null,_=de(r).mtime.toISOString();t.run(E,a,d,_,i)}catch{}}}o(an,"addNodeTelemetryColumns");function dn(e){e.exec(`
+    WHERE node_id = ?`);for(const{node_id:E}of e.prepare("SELECT node_id FROM nodes").all()){const s=w(m(),E,"job","telemetry.json");if(A(s))try{const T=JSON.parse(U(s,"utf8")),i=typeof T.tokens_in=="number"&&Number.isFinite(T.tokens_in)?T.tokens_in:null,a=typeof T.context_tokens=="number"&&Number.isFinite(T.context_tokens)?T.context_tokens:null,d=typeof T.last_activity=="string"?T.last_activity:null,N=ce(s).mtime.toISOString();t.run(i,a,d,N,E)}catch{}}}o(Nn,"addNodeTelemetryColumns");function _n(e){e.exec(`
 CREATE INDEX IF NOT EXISTS deliveries_external_due_order
   ON deliveries(state, next_attempt_at, created_at, delivery_id)
   WHERE destination_kind = 'external_action' AND canceled_at IS NULL;
 DROP INDEX IF EXISTS deliveries_external_due;
 CREATE INDEX IF NOT EXISTS idx_nodes_parent_created ON nodes(parent, created);
 CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
-`)}o(dn,"addRecurringLaneIndexes");const _n=ue.filter(e=>e.lane==="journaled").map(e=>n=>e.apply(n,ce()));function cn(e){Te(e)}o(cn,"projectLiveNodeState");function Nn(e){s(e,u(e),"scopes_json","ALTER TABLE nodes ADD COLUMN scopes_json TEXT;")}o(Nn,"addNodeScopes");function un(e){const n=u(e);s(e,n,"grantee","ALTER TABLE nodes ADD COLUMN grantee TEXT NOT NULL DEFAULT 'user:local';"),s(e,n,"sub","ALTER TABLE nodes ADD COLUMN sub TEXT;"),s(e,n,"grant_id","ALTER TABLE nodes ADD COLUMN grant_id TEXT;"),s(e,n,"client_id","ALTER TABLE nodes ADD COLUMN client_id TEXT;"),s(e,n,"metadata_json","ALTER TABLE nodes ADD COLUMN metadata_json TEXT;"),s(e,n,"run_id","ALTER TABLE nodes ADD COLUMN run_id TEXT;"),s(e,n,"event_cursor","ALTER TABLE nodes ADD COLUMN event_cursor INTEGER;"),s(e,n,"usage_json","ALTER TABLE nodes ADD COLUMN usage_json TEXT;"),s(e,n,"deleting_at","ALTER TABLE nodes ADD COLUMN deleting_at TEXT;"),e.exec(`
+`)}o(_n,"addRecurringLaneIndexes");function cn(e){re(e)}o(cn,"projectLiveNodeState");function Ln(e){r(e,L(e),"scopes_json","ALTER TABLE nodes ADD COLUMN scopes_json TEXT;")}o(Ln,"addNodeScopes");function un(e){const n=L(e);r(e,n,"grantee","ALTER TABLE nodes ADD COLUMN grantee TEXT NOT NULL DEFAULT 'user:local';"),r(e,n,"sub","ALTER TABLE nodes ADD COLUMN sub TEXT;"),r(e,n,"grant_id","ALTER TABLE nodes ADD COLUMN grant_id TEXT;"),r(e,n,"client_id","ALTER TABLE nodes ADD COLUMN client_id TEXT;"),r(e,n,"metadata_json","ALTER TABLE nodes ADD COLUMN metadata_json TEXT;"),r(e,n,"run_id","ALTER TABLE nodes ADD COLUMN run_id TEXT;"),r(e,n,"event_cursor","ALTER TABLE nodes ADD COLUMN event_cursor INTEGER;"),r(e,n,"usage_json","ALTER TABLE nodes ADD COLUMN usage_json TEXT;"),r(e,n,"deleting_at","ALTER TABLE nodes ADD COLUMN deleting_at TEXT;"),e.exec(`
     ALTER TABLE sessions ADD COLUMN event_offset INTEGER;
     CREATE INDEX idx_nodes_run_id ON nodes(run_id);
     -- Child nodes may be pruned while their root run and event history remain.
@@ -466,10 +466,10 @@ CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
       PRIMARY KEY (grantee, key)
     );
     CREATE INDEX idx_idempotency_keys_created_at ON idempotency_keys(created_at);
-  `)}o(un,"addRunFoundation");function Ln(e){e.exec("ALTER TABLE nodes ADD COLUMN last_activity_at TEXT;"),e.exec(`UPDATE nodes SET last_activity_at = (
+  `)}o(un,"addRunFoundation");function ln(e){e.exec("ALTER TABLE nodes ADD COLUMN last_activity_at TEXT;"),e.exec(`UPDATE nodes SET last_activity_at = (
     SELECT e.ts FROM run_events e WHERE e.run_id = nodes.node_id
     ORDER BY e.sequence_number DESC LIMIT 1
-  ) WHERE run_id = node_id`)}o(Ln,"addRunLastActivity");function ln(e){e.exec(`
+  ) WHERE run_id = node_id`)}o(ln,"addRunLastActivity");function An(e){e.exec(`
     CREATE TABLE grants (
       id TEXT PRIMARY KEY, runtime TEXT NOT NULL, sub TEXT NOT NULL, grantee TEXT NOT NULL,
       rev INTEGER NOT NULL, scopes_json TEXT NOT NULL, resolved_scopes_json TEXT NOT NULL,
@@ -478,13 +478,13 @@ CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
     );
     CREATE UNIQUE INDEX idx_grants_grantee_sub ON grants(grantee, sub);
     CREATE TABLE runtime_state (key TEXT PRIMARY KEY, value TEXT NOT NULL);
-  `)}o(ln,"addGrantMirror");function pn(e){e.exec("UPDATE nodes SET grantee = 'app:terminal' WHERE grantee = 'user:local';")}o(pn,"migrateTerminalGrantees");function On(e){const n={llm:"crtr:llm",act:"crtr:act",schedule:"crtr:schedule","memory:read":"crtr:memory:read:user","memory:write":"crtr:memory:rw:user"},t=e.prepare("SELECT node_id, scopes_json FROM nodes WHERE scopes_json IS NOT NULL").all(),i=e.prepare("UPDATE nodes SET scopes_json = ? WHERE node_id = ?");for(const r of t){const T=JSON.parse(r.scopes_json);if(!Array.isArray(T))throw new Error(`invalid launched scopes for node ${r.node_id}`);const E=[];for(const a of T){if(typeof a!="string")continue;const d=n[a]??a;try{oe(d),E.push(d)}catch(_){if(!(_ instanceof TypeError))throw _}}i.run(JSON.stringify([...new Set(E)]),r.node_id)}}o(On,"migrateLaunchedScopes");function An(e){e.exec(`CREATE TABLE node_tokens (
+  `)}o(An,"addGrantMirror");function On(e){e.exec("UPDATE nodes SET grantee = 'app:terminal' WHERE grantee = 'user:local';")}o(On,"migrateTerminalGrantees");function pn(e){const n={llm:"crtr:llm",act:"crtr:act",schedule:"crtr:schedule","memory:read":"crtr:memory:read:user","memory:write":"crtr:memory:rw:user"},t=e.prepare("SELECT node_id, scopes_json FROM nodes WHERE scopes_json IS NOT NULL").all(),E=e.prepare("UPDATE nodes SET scopes_json = ? WHERE node_id = ?");for(const s of t){const T=JSON.parse(s.scopes_json);if(!Array.isArray(T))throw new Error(`invalid launched scopes for node ${s.node_id}`);const i=[];for(const a of T){if(typeof a!="string")continue;const d=n[a]??a;try{ie(d),i.push(d)}catch(N){if(!(N instanceof TypeError))throw N}}E.run(JSON.stringify([...new Set(i)]),s.node_id)}}o(pn,"migrateLaunchedScopes");function Rn(e){e.exec(`CREATE TABLE node_tokens (
     broker_process_id TEXT PRIMARY KEY REFERENCES executions(execution_id) ON DELETE CASCADE,
     node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
     token_hash TEXT NOT NULL UNIQUE, grantee TEXT NOT NULL, uid INTEGER NOT NULL,
     sub TEXT NOT NULL, grant TEXT, client_id TEXT, scopes_json TEXT,
     issued_at TEXT NOT NULL, revoked_at TEXT
-  );`)}o(An,"addNodeTokens");function z(e,n){return e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(n)!==void 0}o(z,"hasTable");function J(e,n,t){return e.prepare(`PRAGMA table_info(${n})`).all().some(i=>i.name===t)}o(J,"hasColumn");function Q(e){z(e,"memory_reads")||e.exec(`CREATE TABLE memory_reads (
+  );`)}o(Rn,"addNodeTokens");function k(e,n){return e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(n)!==void 0}o(k,"hasTable");function M(e,n,t){return e.prepare(`PRAGMA table_info(${n})`).all().some(E=>E.name===t)}o(M,"hasColumn");function Q(e){k(e,"memory_reads")||e.exec(`CREATE TABLE memory_reads (
     node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
     name TEXT NOT NULL,
     scope TEXT NOT NULL,
@@ -493,12 +493,12 @@ CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
   );
   CREATE INDEX idx_memory_reads_at ON memory_reads(at);
   CREATE INDEX idx_memory_reads_node ON memory_reads(node_id);
-  INSERT OR IGNORE INTO canvas_meta(key, value) VALUES ('memory_reads.started_at', strftime('%Y-%m-%dT%H:%M:%fZ','now'));`)}o(Q,"addMemoryReads");function V(e){J(e,"sessions","indexed_entry_id")||e.exec("ALTER TABLE sessions ADD COLUMN indexed_entry_id TEXT; ALTER TABLE sessions ADD COLUMN input_ids_json TEXT NOT NULL DEFAULT '[]';")}o(V,"addConversationIndex");function Z(e){z(e,"app_users")||e.exec(`CREATE TABLE app_users (
+  INSERT OR IGNORE INTO canvas_meta(key, value) VALUES ('memory_reads.started_at', strftime('%Y-%m-%dT%H:%M:%fZ','now'));`)}o(Q,"addMemoryReads");function V(e){M(e,"sessions","indexed_entry_id")||e.exec("ALTER TABLE sessions ADD COLUMN indexed_entry_id TEXT; ALTER TABLE sessions ADD COLUMN input_ids_json TEXT NOT NULL DEFAULT '[]';")}o(V,"addConversationIndex");function Z(e){k(e,"app_users")||e.exec(`CREATE TABLE app_users (
     app TEXT PRIMARY KEY, uid INTEGER NOT NULL UNIQUE,
     created TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('active', 'retired'))
-  );`)}o(Z,"addAppUsers");function ee(e){J(e,"crons","grantee")||(e.exec("ALTER TABLE crons ADD COLUMN grantee TEXT NOT NULL DEFAULT 'app:terminal'"),e.exec(`UPDATE crons SET grantee = COALESCE(
+  );`)}o(Z,"addAppUsers");function ee(e){M(e,"crons","grantee")||(e.exec("ALTER TABLE crons ADD COLUMN grantee TEXT NOT NULL DEFAULT 'app:terminal'"),e.exec(`UPDATE crons SET grantee = COALESCE(
     (SELECT COALESCE(nodes.grantee, 'app:terminal') FROM nodes WHERE nodes.node_id = crons.anchor_node),
-    'app:terminal') WHERE anchor_node IS NOT NULL`))}o(ee,"addCronGrantee");function Rn(e){Q(e),V(e),Z(e),ee(e)}o(Rn,"convergeSharedVersions");function Xn(e){(e.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'app_users'").get()?.sql??"").includes("'removed'")||e.exec(`CREATE TABLE app_users_new (
+    'app:terminal') WHERE anchor_node IS NOT NULL`))}o(ee,"addCronGrantee");function In(e){Q(e),V(e),Z(e),ee(e)}o(In,"convergeSharedVersions");function Xn(e){(e.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'app_users'").get()?.sql??"").includes("'removed'")||e.exec(`CREATE TABLE app_users_new (
     uid INTEGER PRIMARY KEY, app TEXT NOT NULL,
     created TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('active', 'removed')),
     removed_at TEXT
@@ -508,7 +508,181 @@ CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
       CASE status WHEN 'active' THEN NULL ELSE created END FROM app_users;
   DROP TABLE app_users;
   ALTER TABLE app_users_new RENAME TO app_users;
-  CREATE UNIQUE INDEX idx_app_users_active_app ON app_users(app) WHERE status = 'active';`)}o(Xn,"appUsersRemoved");function mn(e){e.exec(`CREATE TABLE IF NOT EXISTS uploads (
+  CREATE UNIQUE INDEX idx_app_users_active_app ON app_users(app) WHERE status = 'active';`)}o(Xn,"appUsersRemoved");function ne(e){k(e,"objects")||(e.exec(`
+    CREATE TABLE objects (
+      rowid      INTEGER PRIMARY KEY,
+      id         TEXT NOT NULL UNIQUE,
+      type       TEXT NOT NULL CHECK (type IN ('document','node','job','person','app','repo','profile')),
+      kind       TEXT,
+      owner      INTEGER REFERENCES objects(rowid),
+      privacy    TEXT NOT NULL DEFAULT 'public' CHECK (privacy IN ('public','friends','private')),
+      name       TEXT NOT NULL,
+      preview    TEXT NOT NULL DEFAULT '',
+      created_at TEXT NOT NULL,
+      deleted_at TEXT
+    );
+    CREATE UNIQUE INDEX objects_doc_name   ON objects(owner, name) WHERE type = 'document' AND deleted_at IS NULL;
+    CREATE UNIQUE INDEX objects_handle     ON objects(type, name) WHERE type IN ('person','app','repo','profile');
+    CREATE INDEX        objects_owner_type ON objects(owner, type, kind);
+    CREATE INDEX        objects_type_kind  ON objects(type, kind);
+
+    CREATE TABLE documents (
+      object        INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
+      summary       TEXT,
+      heads_key     TEXT NOT NULL,
+      revision      INTEGER NOT NULL,
+      why_it_exists TEXT,
+      unlisted      INTEGER NOT NULL DEFAULT 0,
+      lint_ignore_json TEXT,
+      extensions_json  TEXT,
+      source_path   TEXT
+    );
+
+    CREATE TABLE revisions (
+      rowid      INTEGER PRIMARY KEY,
+      document   INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      rev_id     TEXT NOT NULL UNIQUE,
+      number     INTEGER NOT NULL,
+      body_hash  TEXT NOT NULL,
+      author     INTEGER REFERENCES objects(rowid),
+      rationale  TEXT,
+      verbatim   INTEGER NOT NULL DEFAULT 0,
+      created_at TEXT NOT NULL
+    );
+    CREATE TABLE revision_parents (
+      child  INTEGER NOT NULL REFERENCES revisions(rowid) ON DELETE CASCADE,
+      parent INTEGER NOT NULL REFERENCES revisions(rowid) ON DELETE CASCADE,
+      PRIMARY KEY (child, parent)
+    ) WITHOUT ROWID;
+    CREATE INDEX revisions_doc ON revisions(document, number);
+
+    CREATE TABLE jobs (
+      object    INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
+      command   TEXT NOT NULL,
+      status    TEXT NOT NULL CHECK (status IN ('running','exited','killed')),
+      exit_code INTEGER,
+      job_dir   TEXT NOT NULL,
+      log_path  TEXT NOT NULL
+    );
+
+    CREATE TABLE identities (
+      object      INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
+      scheme      TEXT NOT NULL,
+      external_id TEXT NOT NULL,
+      UNIQUE (scheme, external_id)
+    );
+
+    CREATE TABLE watches (
+      rowid          INTEGER PRIMARY KEY,
+      watcher        INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      object         INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      in_tree        INTEGER NOT NULL DEFAULT 0,
+      read_heads_key TEXT,
+      created_at     TEXT NOT NULL,
+      UNIQUE (watcher, object)
+    );
+    CREATE INDEX watches_object ON watches(object, watcher);
+    CREATE INDEX watches_tree_down ON watches(watcher, object) WHERE in_tree = 1;
+    CREATE INDEX watches_tree_up   ON watches(object, watcher) WHERE in_tree = 1;
+
+    CREATE TABLE watch_subscriptions (
+      rowid       INTEGER PRIMARY KEY,
+      watch       INTEGER NOT NULL REFERENCES watches(rowid) ON DELETE CASCADE,
+      pattern     TEXT NOT NULL,
+      filter_json TEXT,
+      config_json TEXT,
+      started_by  TEXT NOT NULL CHECK (started_by IN ('spawn','job-start','ask','read','write','act','message','deliver','fork')),
+      ends_on     TEXT,
+      created_at  TEXT NOT NULL
+    );
+    CREATE INDEX watch_subscriptions_watch ON watch_subscriptions(watch);
+
+    CREATE TABLE context_sessions (
+      node                INTEGER PRIMARY KEY REFERENCES objects(rowid) ON DELETE CASCADE,
+      preference_snapshot TEXT,
+      listed_json         TEXT NOT NULL DEFAULT '{}'
+    );
+
+    CREATE TABLE exposures (
+      node        INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      object      INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      channel     TEXT NOT NULL CHECK (channel IN ('system','transcript')),
+      level       TEXT NOT NULL CHECK (level IN ('name','preview','content')),
+      heads_key   TEXT,
+      content_hash TEXT,
+      PRIMARY KEY (node, object, channel)
+    ) WITHOUT ROWID;
+
+    CREATE TABLE rules (
+      rowid    INTEGER PRIMARY KEY,
+      object   INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      owner    INTEGER,
+      position INTEGER NOT NULL,
+      on_event TEXT NOT NULL CHECK (on_event IN ('boot','workspace-open','file-read','document-read','command','pre-command','slash-command')),
+      match_json TEXT, match_frontmatter_json TEXT, if_json TEXT,
+      deliver  TEXT NOT NULL CHECK (deliver IN ('name','preview','content'))
+    );
+    CREATE INDEX rules_on_owner ON rules(on_event, owner);
+    CREATE INDEX rules_object   ON rules(object);
+
+    ALTER TABLE nodes ADD COLUMN listen_default_json TEXT;
+    ALTER TABLE messages ADD COLUMN event TEXT;
+    ALTER TABLE messages ADD COLUMN object_id TEXT;
+    ALTER TABLE messages ADD COLUMN level INTEGER;
+    ALTER TABLE messages ADD COLUMN actor_id TEXT;
+  `),te(e),e.exec("ANALYZE"))}o(ne,"canvasObjectsSchema");function te(e){const n=new Date().toISOString(),t=e.prepare("INSERT INTO objects (id, type, kind, owner, privacy, name, preview, created_at) VALUES (?, ?, NULL, NULL, 'public', ?, '', ?) RETURNING rowid"),E=e.prepare("INSERT INTO identities (object, scheme, external_id) VALUES (?, ?, ?)"),s=e.prepare(`SELECT DISTINCT n.grantee FROM nodes n
+    WHERE NOT EXISTS (SELECT 1 FROM identities i WHERE i.external_id = n.grantee AND i.scheme IN ('app', 'local-user'))`).all();for(const{grantee:T}of s){let i;if(T==="user:local")i={type:"person",scheme:"local-user",handle:"user"};else if(/^app:[a-z0-9][a-z0-9._-]*$/.test(T))i={type:"app",scheme:"app",handle:T.slice(4)};else throw new Error(`canvas objects migration: node grantee ${JSON.stringify(T)} is neither app:<name> nor user:local`);const{rowid:a}=t.get(`${Date.now().toString(36)}-${Te(4).toString("hex")}`,i.type,i.handle,n);E.run(a,i.scheme,T)}e.exec(`INSERT INTO objects (id, type, kind, owner, privacy, name, preview, created_at)
+    SELECT n.node_id, 'node', n.kind, i.object, 'public', n.name, '', n.created
+    FROM nodes n JOIN identities i ON i.external_id = n.grantee AND i.scheme IN ('app', 'local-user')
+    WHERE NOT EXISTS (SELECT 1 FROM objects o WHERE o.id = n.node_id)`)}o(te,"copyNodesIntoObjects");function mn(e){if(ne(e),!M(e,"nodes","name"))return;te(e);const n=e.prepare("SELECT COUNT(*) AS n FROM nodes WHERE node_id NOT IN (SELECT id FROM objects)").get();if(n.n>0)throw new Error(`canvasObjectsCut: ${n.n} node(s) have no objects row`);e.exec(`
+    ALTER TABLE edges RENAME TO legacy_edges;
+    CREATE TABLE edges (
+      type       TEXT NOT NULL CHECK (type IN ('acted-on','links-to')),
+      src        INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      dst        INTEGER NOT NULL REFERENCES objects(rowid) ON DELETE CASCADE,
+      written_as TEXT,
+      created_at TEXT NOT NULL,
+      PRIMARY KEY (type, src, dst)
+    ) WITHOUT ROWID;
+    CREATE INDEX edges_dst ON edges(type, dst, src);
+    DROP VIEW node_rows;
+    ALTER TABLE nodes DROP COLUMN name;
+    ALTER TABLE nodes DROP COLUMN kind;
+    ALTER TABLE nodes DROP COLUMN grantee;
+  `),e.exec(`
+    CREATE VIEW node_rows AS
+    SELECT n.*,
+           o.name,
+           o.kind,
+           oi.external_id AS grantee,
+           CASE WHEN e.state = 'running' THEN e.pid ELSE NULL END AS pi_pid,
+           CASE WHEN e.state = 'running' THEN e.process_identity ELSE NULL END AS pi_pid_identity,
+           e.turn_open_at,
+           e.turn_closed_at,
+           s.session_id AS pi_session_id,
+           s.transcript_path AS pi_session_file,
+           f.fault_id,
+           f.link AS fault_link,
+           f.op AS fault_op,
+           f.kind AS fault_kind,
+           f.message AS fault_message,
+           f.since AS fault_since,
+           f.operation_id AS fault_operation_id,
+           f.anchor_entry_id AS fault_anchor_entry_id,
+           f.retry_disposition AS fault_retry_disposition,
+           f.retry_by AS fault_retry_by,
+           f.retry_attempt AS fault_retry_attempt,
+           f.retry_max AS fault_retry_max,
+           f.retry_next_at AS fault_retry_next_at,
+           f.provider_error_json AS fault_provider_error_json
+      FROM nodes n
+      JOIN objects o ON o.id = n.node_id
+      LEFT JOIN identities oi ON oi.object = o.owner
+      LEFT JOIN executions e ON e.node_id = n.node_id AND e.state != 'exited'
+      LEFT JOIN sessions s ON s.node_id = n.node_id AND s.unbound_at IS NULL
+      LEFT JOIN node_faults f ON f.node_id = n.node_id AND f.active = 1;
+    ANALYZE;
+  `)}o(mn,"canvasObjectsCut");function fn(e){e.exec(`CREATE TABLE IF NOT EXISTS uploads (
     upload_id TEXT PRIMARY KEY, grantee TEXT NOT NULL, name TEXT NOT NULL, media_type TEXT NOT NULL,
     size INTEGER NOT NULL, created_at TEXT NOT NULL, delete_pending_since TEXT
   );
@@ -524,4 +698,4 @@ CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
     url TEXT NOT NULL, created_by TEXT NOT NULL, created_at TEXT NOT NULL, expires_at TEXT,
     status TEXT NOT NULL CHECK (status IN ('on', 'off')), object_deleted_at TEXT
   );
-  CREATE INDEX IF NOT EXISTS idx_shares_created_by ON shares(created_by);`)}o(mn,"addFileTransfer");const D=[Oe,Ae,Re,Xe,me,fe,Ie,Se,Ue,Ce,De,ge,he,K,xe,K,we,ye,ve,Fe,ke,We,be,qe,$e,je,ze,Je,Qe,Ve,Ze,en,nn,tn,En,on,Tn,rn,sn,..._n,e=>{ie(e),Ee(e),re(e),se(e)},dn,cn,an,Nn,un,Ln,ln,An,pn,On,Q,V,Z,ee,Rn,Xn,mn],fn=new Set([3]);function k(e){return e.prepare("PRAGMA user_version").get().user_version}o(k,"currentUserVersion");function ne(e,n){D[n](e),e.exec(`PRAGMA user_version = ${n+1}`)}o(ne,"applyMigration");function Bn(e){const n=k(e);if(n>D.length)throw new Error(`unsupported canvas schema version ${n} (latest supported ${D.length})`);if(n===D.length)return;const t=e.prepare("PRAGMA busy_timeout").get().timeout;e.exec("PRAGMA busy_timeout = 60000;");try{In(e)}finally{e.exec(`PRAGMA busy_timeout = ${t};`)}}o(Bn,"migrate");function In(e){for(;;){const n=k(e);if(n>=D.length)return;if(e.isTransaction||fn.has(n)){ne(e,n);continue}e.exec("BEGIN IMMEDIATE");try{k(e)===n&&ne(e,n),e.exec("COMMIT")}catch(t){try{e.exec("ROLLBACK")}catch{}throw t}}}o(In,"runPendingMigrations");export{D as MIGRATIONS,Bn as migrate};
+  CREATE INDEX IF NOT EXISTS idx_shares_created_by ON shares(created_by);`)}o(fn,"addFileTransfer");const D=[Re,Ie,Xe,me,fe,Ue,Ce,De,Se,ge,he,we,ye,K,xe,K,ve,Fe,ke,Me,Be,We,$e,qe,ze,Je,Qe,Ve,Ze,en,nn,tn,on,En,rn,Tn,sn,an,dn,e=>{se(e),ae(e),de(e),Ne(e)},_n,cn,Nn,Ln,un,ln,An,Rn,On,pn,Q,V,Z,ee,In,Xn,ne,mn,le,fn],Un=new Set([3]);function B(e){return e.prepare("PRAGMA user_version").get().user_version}o(B,"currentUserVersion");function oe(e,n){D[n](e),e.exec(`PRAGMA user_version = ${n+1}`)}o(oe,"applyMigration");function Hn(e){const n=B(e);if(n>D.length)throw new Error(`unsupported canvas schema version ${n} (latest supported ${D.length})`);if(n===D.length)return;const t=e.prepare("PRAGMA busy_timeout").get().timeout;e.exec("PRAGMA busy_timeout = 60000;");try{Cn(e)}finally{e.exec(`PRAGMA busy_timeout = ${t};`)}}o(Hn,"migrate");function Cn(e){for(;;){const n=B(e);if(n>=D.length)return;if(e.isTransaction||Un.has(n)){oe(e,n);continue}e.exec("BEGIN IMMEDIATE");try{B(e)===n&&oe(e,n),e.exec("COMMIT")}catch(t){try{e.exec("ROLLBACK")}catch{}throw t}}}o(Cn,"runPendingMigrations");export{D as MIGRATIONS,Hn as migrate};

package/dist/core/canvas/node-agent-paths.js

@@ -1 +1 @@
-var s=Object.defineProperty;var t=(r,e)=>s(r,"name",{value:e,configurable:!0});import{join as p}from"node:path";import{envGrantee as a,envNodeId as u}from"../../shared/env.js";import{openDb as f}from"./db.js";import{nodeAgentDir as c,ensureNodeDirs as m,interpolateNodePaths as D}from"./paths.js";function o(r){const e=a();if(u()===r&&e)return e;const n=f().prepare("SELECT grantee FROM nodes WHERE node_id = ?").get(r);if(!n?.grantee)throw new Error(`node ${r} has no app assignment`);return n.grantee}t(o,"appForNode");function i(r,e){return c(r,e??o(r))}t(i,"nodeAgentDir");function E(r,e){return p(i(r,e),"context")}t(E,"contextDir");function F(r,e){return p(i(r,e),"reports")}t(F,"reportsDir");function w(r,e){return D(r,e,o(e))}t(w,"interpolateNodePaths");function d(r,e){m(r,e??o(r))}t(d,"ensureNodeDirs");export{o as appForNode,E as contextDir,d as ensureNodeDirs,w as interpolateNodePaths,i as nodeAgentDir,F as reportsDir};
+var s=Object.defineProperty;var t=(r,e)=>s(r,"name",{value:e,configurable:!0});import{join as p}from"node:path";import{envGrantee as a,envNodeId as u}from"../../shared/env.js";import{openDb as f}from"./db.js";import{nodeAgentDir as c,ensureNodeDirs as m,interpolateNodePaths as D}from"./paths.js";function o(r){const e=a();if(u()===r&&e)return e;const n=f().prepare("SELECT grantee FROM node_rows WHERE node_id = ?").get(r);if(!n?.grantee)throw new Error(`node ${r} has no app assignment`);return n.grantee}t(o,"appForNode");function i(r,e){return c(r,e??o(r))}t(i,"nodeAgentDir");function w(r,e){return p(i(r,e),"context")}t(w,"contextDir");function E(r,e){return p(i(r,e),"reports")}t(E,"reportsDir");function F(r,e){return D(r,e,o(e))}t(F,"interpolateNodePaths");function d(r,e){m(r,e??o(r))}t(d,"ensureNodeDirs");export{o as appForNode,w as contextDir,d as ensureNodeDirs,F as interpolateNodePaths,i as nodeAgentDir,E as reportsDir};

package/dist/core/canvas/node-tokens.js

@@ -1,4 +1,4 @@
-var g=Object.defineProperty;var t=(e,n)=>g(e,"name",{value:n,configurable:!0});import{createHash as k,randomBytes as m}from"node:crypto";import{openDb as u}from"./db.js";import{terminalGrant as N}from"../grants/mirror.js";import{readConfig as c}from"../config.js";import{uidForApp as T}from"../spaces/users.js";const i=new Map,l=t(e=>k("sha256").update(e).digest("hex"),"hash");function x(e,n,o,s){const r=e.prepare("SELECT grantee, sub, grant_id, client_id, scopes_json, run_id FROM nodes WHERE node_id = ?").get(o);if(!r)throw new Error(`cannot mint node token: missing node ${o}`);const a=r.run_id&&r.run_id!==o?e.prepare("SELECT sub, grant_id, client_id FROM nodes WHERE node_id = ?").get(r.run_id):void 0,d=r.grantee==="app:terminal"?N():null,p=d?.sub??a?.sub??r.sub,E=d?.id??a?.grant_id??r.grant_id??null;if(r.grantee==="app:terminal"&&c("user").runtime?.issuer&&!d)throw new Error("cannot mint node token: terminal grant is not active");if(!p&&r.grantee!=="user:local"&&!(r.grantee==="app:terminal"&&!c("user").runtime?.issuer))throw new Error(`cannot mint node token: no subject for ${r.grantee}`);const _=m(32).toString("base64url");e.prepare("INSERT INTO node_tokens (broker_process_id, node_id, token_hash, grantee, uid, sub, grant, client_id, scopes_json, issued_at, revoked_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)").run(n,o,l(_),r.grantee==="user:local"?"app:terminal":r.grantee,T(r.grantee==="user:local"?"app:terminal":r.grantee),p??"user:local",E,a?.client_id??r.client_id,r.scopes_json,s),i.set(n,_)}t(x,"mintNodeToken");function A(e){const n=i.get(e);if(i.delete(e),!n)throw new Error(`missing node token for execution ${e}`);return n}t(A,"takeNodeToken");function f(e){i.delete(e)}t(f,"forgetNodeToken");function D(e){if(!/^[A-Za-z0-9_-]{43}$/.test(e))return null;const n=u().prepare(`SELECT t.node_id, t.grantee, t.uid, t.sub, t.grant, t.client_id, t.scopes_json, n.run_id
+var g=Object.defineProperty;var t=(e,n)=>g(e,"name",{value:n,configurable:!0});import{createHash as k,randomBytes as m}from"node:crypto";import{openDb as u}from"./db.js";import{terminalGrant as N}from"../grants/mirror.js";import{readConfig as c}from"../config.js";import{uidForApp as T}from"../spaces/users.js";const i=new Map,l=t(e=>k("sha256").update(e).digest("hex"),"hash");function x(e,n,o,s){const r=e.prepare("SELECT grantee, sub, grant_id, client_id, scopes_json, run_id FROM node_rows WHERE node_id = ?").get(o);if(!r)throw new Error(`cannot mint node token: missing node ${o}`);const a=r.run_id&&r.run_id!==o?e.prepare("SELECT sub, grant_id, client_id FROM nodes WHERE node_id = ?").get(r.run_id):void 0,d=r.grantee==="app:terminal"?N():null,p=d?.sub??a?.sub??r.sub,E=d?.id??a?.grant_id??r.grant_id??null;if(r.grantee==="app:terminal"&&c("user").runtime?.issuer&&!d)throw new Error("cannot mint node token: terminal grant is not active");if(!p&&r.grantee!=="user:local"&&!(r.grantee==="app:terminal"&&!c("user").runtime?.issuer))throw new Error(`cannot mint node token: no subject for ${r.grantee}`);const _=m(32).toString("base64url");e.prepare("INSERT INTO node_tokens (broker_process_id, node_id, token_hash, grantee, uid, sub, grant, client_id, scopes_json, issued_at, revoked_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)").run(n,o,l(_),r.grantee==="user:local"?"app:terminal":r.grantee,T(r.grantee==="user:local"?"app:terminal":r.grantee),p??"user:local",E,a?.client_id??r.client_id,r.scopes_json,s),i.set(n,_)}t(x,"mintNodeToken");function A(e){const n=i.get(e);if(i.delete(e),!n)throw new Error(`missing node token for execution ${e}`);return n}t(A,"takeNodeToken");function f(e){i.delete(e)}t(f,"forgetNodeToken");function D(e){if(!/^[A-Za-z0-9_-]{43}$/.test(e))return null;const n=u().prepare(`SELECT t.node_id, t.grantee, t.uid, t.sub, t.grant, t.client_id, t.scopes_json, n.run_id
     FROM node_tokens t JOIN executions e ON e.execution_id = t.broker_process_id
     JOIN nodes n ON n.node_id = t.node_id
     WHERE t.token_hash = ? AND t.revoked_at IS NULL AND e.state != 'exited'`).get(l(e));return n?{app:n.grantee,node:n.node_id,run:n.run_id,uid:n.uid,sub:n.sub,grant:n.grant,client_id:n.client_id,scopes:n.scopes_json===null?null:JSON.parse(n.scopes_json)}:null}t(D,"resolveNodeToken");function v(e){f(e),S(u(),"broker_process_id",e,new Date().toISOString())}t(v,"revokeExitedNodeToken");function U(e){u().prepare(`UPDATE node_tokens SET revoked_at = ? WHERE revoked_at IS NULL

package/dist/core/canvas/paths.d.ts

@@ -47,7 +47,6 @@ export declare function contextDir(nodeId: string, grantee?: string): string;
 export declare function interpolateNodePaths(text: string, nodeId: string, grantee?: string): string;
 export declare function jobDir(nodeId: string): string;
 export declare function nodeRunJobDir(nodeId: string): string;
-export declare function reportsDir(nodeId: string, grantee?: string): string;
 /** Overflow store for inbox entries whose inline body exceeds the digest's
  *  bounded preview (a direct `node message send` or a close/cancel doctrine
  *  wake) — the full body spills here, mirroring how a
@@ -61,9 +60,6 @@ export declare function situationalContextPath(nodeId: string): string;
 export declare function passivePath(nodeId: string): string;
 export declare function transcriptPath(nodeId: string): string;
 export declare function sessionPtrPath(nodeId: string): string;
-/** Frozen preference snapshot and rank-aware exposure state for the node's
- * currently loaded LLM context. The filename remains stable across schema versions. */
-export declare function injectedDocsPath(nodeId: string): string;
 /** Create the full directory skeleton for a node. Idempotent. The agent and
  *  run folders are app-writable, so their subfolders are made beneath them. */
 export declare function ensureNodeDirs(nodeId: string, grantee: string): void;