@north-light/crouter 0.3.353 → 0.3.354

package/dist/core/feed/messages.d.ts

@@ -1,4 +1,5 @@
 import type { DatabaseSync } from 'node:sqlite';
+import type { EventName, Level, ListenDelivery } from '../graph/types.js';
 import { type InboxDisposition, type InboxKind, type InboxTier } from './inbox.js';
 export type { InboxDisposition, InboxKind, InboxTier } from './inbox.js';
 export interface NodeMailInput {
@@ -12,6 +13,8 @@ export interface NodeMailInput {
     urgency: InboxTier;
     wake: 0 | 1;
     operationId?: string;
+    /** Caller-chosen message id, so a request can know its id before the insert. */
+    messageId?: string;
     /** Optional caller-owned obligation identity, used by cron settlement replay. */
     idempotencyKey?: string;
     /** Runs with the mail insert, before the transaction commits. */
@@ -39,16 +42,40 @@ export interface EnqueuedExternalAction {
     messageId: string;
     deliveryId: string;
 }
-type Subscriber = {
-    node_id: string;
-    active: boolean;
-};
 /** Insert one immutable message and one node-inbox obligation into the caller's write transaction. */
 export declare function enqueueNodeMail(destinationNodeId: string, input: NodeMailInput): EnqueuedNodeMail;
-/** Fan out one immutable report message to the supplied subscriber snapshot. */
-export declare function enqueueSubscriberMail(subscribers: readonly Subscriber[], input: Omit<NodeMailInput, 'wake'>): Array<EnqueuedNodeMail & {
+export interface EventMailInput extends Omit<NodeMailInput, 'wake' | 'urgency' | 'idempotencyKey' | 'withinEnqueue'> {
+    event: EventName;
+    objectId: string;
+    level: Level;
+    actorId: string | null;
+}
+export interface EventMailDestination {
+    nodeId: string;
+    urgency: InboxTier;
+    wake: 0 | 1;
+}
+/** Contract §1: a listening delivery maps 1:1 onto an inbox tier; only `next-turn` does not wake. */
+export declare function listenDeliveryTier(delivery: ListenDelivery): {
+    urgency: InboxTier;
+    wake: 0 | 1;
+};
+/**
+ * Write one pushed event's `messages` row and a delivery per destination, inside the caller's
+ * write transaction. Terminal destinations get deferred/normal raised to urgent only for
+ * node reports and notices; each delivery settles a matching controller wait and a waking
+ * delivery cancels the destination's wake-cancellable crons.
+ */
+export declare function insertEventMail(db: DatabaseSync, input: EventMailInput, destinations: readonly EventMailDestination[]): Array<EnqueuedNodeMail & {
     destinationNodeId: string;
 }>;
+/** Queue one runtime notice to a node's inbox inside the caller's write transaction (no sender). */
+export declare function queueNodeNotice(db: DatabaseSync, nodeId: string, notice: {
+    body: string;
+    label?: string;
+    tier: InboxTier;
+    wake: 0 | 1;
+}): EnqueuedNodeMail;
 /** Insert one frozen external-action obligation. A duplicate idempotency key returns its original identity. */
 export declare function enqueueExternalAction(input: ExternalActionInput): EnqueuedExternalAction;
 /** Retract an obligation without fabricating a terminal receipt. */

package/dist/core/feed/messages.js

@@ -1,11 +1,14 @@
-var v=Object.defineProperty;var s=(n,e)=>v(n,"name",{value:e,configurable:!0});import{existsSync as S,mkdirSync as k,renameSync as O,writeFileSync as R}from"node:fs";import{randomBytes as A,randomUUID as h}from"node:crypto";import{join as T}from"node:path";import{cancelCronsOnWake as f}from"../canvas/crons.js";import{withCanvasWrite as c}from"../canvas/db.js";import{getRow as D}from"../canvas/canvas.js";import{messagesDir as L}from"../canvas/paths.js";import{syncDirectory as x,syncFile as C}from"../fs-utils.js";import{settleDeadControllerWait as b,settleMatchingControllerWait as g}from"../canvas/waits.js";import{generateOperationId as p,operationIdContext as u,validateOperationId as M}from"../events/operation-id.js";import{clipBody as J}from"./inbox.js";function y(){let n;do n=A(16).toString("hex");while(n==="00000000000000000000000000000000");return n}s(y,"newId");function E(n,e){const d=JSON.stringify(n);if(d===void 0)throw new TypeError(`${e} must be JSON-serializable`);return d}s(E,"stringify");function I(n,e){return e!=="normal"&&e!=="deferred"?e:D(n)?.lifecycle==="terminal"?"urgent":e}s(I,"effectiveTier");function W(n,e,d){const r=L(n);S(r)||k(r,{recursive:!0});const o=e.replace(/[^0-9]/g,""),t=T(r,`${o}-${h().slice(0,6)}.md`),i=`${t}.tmp`;return R(i,d,"utf8"),C(i),O(i,t),x(r),t}s(W,"writeMessageBody");function F(n){if(typeof n!="object"||n===null)return"";const e=n.body;return typeof e=="string"?e.trim():""}s(F,"inlineBody");function _(n,e){const d=e.messageId??y(),r=Number(n.prepare("SELECT COALESCE(MAX(seq), 0) AS seq FROM messages").get().seq)+1;return n.prepare(`INSERT INTO messages
-       (message_id, seq, operation_id, created_at, sender_node_id, sender_name, kind, label, body_ref, body_json, disposition)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(d,r,e.operationId,e.createdAt,e.senderNodeId,e.senderName,e.kind,e.label,e.bodyRef,e.bodyJson===void 0?null:E(e.bodyJson,"message body"),e.disposition),d}s(_,"insertMessage");function N(n,e,d,r,o,t,i){const a=y();return n.prepare(`INSERT INTO deliveries
+var h=Object.defineProperty;var l=(r,e)=>h(r,"name",{value:e,configurable:!0});import{existsSync as O,mkdirSync as T,renameSync as D,writeFileSync as L}from"node:fs";import{randomBytes as x,randomUUID as C}from"node:crypto";import{join as M}from"node:path";import{cancelCronsOnWake as f}from"../canvas/crons.js";import{withCanvasWrite as m}from"../canvas/db.js";import{getRow as W}from"../canvas/canvas.js";import{messagesDir as J}from"../canvas/paths.js";import{syncDirectory as F,syncFile as U}from"../fs-utils.js";import{settleDeadControllerWait as H,settleMatchingControllerWait as N}from"../canvas/waits.js";import{generateOperationId as w,operationIdContext as E,validateOperationId as j}from"../events/operation-id.js";import{clipBody as $}from"../../shared/inbox-entry-body.js";function _(){let r;do r=x(16).toString("hex");while(r==="00000000000000000000000000000000");return r}l(_,"newId");function v(r,e){const n=JSON.stringify(r);if(n===void 0)throw new TypeError(`${e} must be JSON-serializable`);return n}l(v,"stringify");function k(r,e){return e!=="normal"&&e!=="deferred"?e:W(r)?.lifecycle==="terminal"?"urgent":e}l(k,"effectiveTier");function q(r,e,n){const d=J(r);O(d)||T(d,{recursive:!0});const t=e.replace(/[^0-9]/g,""),o=M(d,`${t}-${C().slice(0,6)}.md`),i=`${o}.tmp`;return L(i,n,"utf8"),U(i),D(i,o),F(d),o}l(q,"writeMessageBody");function K(r){if(typeof r!="object"||r===null)return"";const e=r.body;return typeof e=="string"?e.trim():""}l(K,"inlineBody");function u(r,e){const n=e.messageId??_(),d=Number(r.prepare("SELECT COALESCE(MAX(seq), 0) AS seq FROM messages").get().seq)+1;return r.prepare(`INSERT INTO messages
+       (message_id, seq, operation_id, created_at, sender_node_id, sender_name, kind, label, body_ref, body_json, disposition,
+        event, object_id, level, actor_id)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(n,d,e.operationId,e.createdAt,e.senderNodeId,e.senderName,e.kind,e.label,e.bodyRef,e.bodyJson===void 0?null:v(e.bodyJson,"message body"),e.disposition,e.event?.event??null,e.event?.objectId??null,e.event?.level??null,e.event?.actorId??null),n}l(u,"insertMessage");function S(r,e,n,d,t,o,i){const a=_();return r.prepare(`INSERT INTO deliveries
        (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, idempotency_key, created_at, updated_at)
-     VALUES (?, ?, 'node_inbox', ?, ?, ?, 'pending', ?, ?, ?)`).run(a,e,d,r,o,i??null,t,t),a}s(N,"insertNodeDelivery");function w(n,e){const d=new Date().toISOString(),r=n.operationId===void 0?u.current()??p():M(n.operationId);let o=n.bodyRef??null,t=n.bodyJson;if(o===null&&n.senderNodeId!=="human"){const i=F(t),a=J(i);a.clipped&&(o=W(e,d,i),t={...t,body:a.text})}return{createdAt:d,operationId:r,bodyRef:o,bodyJson:t}}s(w,"finalizeNodeMail");function H(n,e){const d=w(e,n);return c(r=>{const o=r.prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(n);if(o?.run_id&&r.prepare("SELECT deleting_at FROM nodes WHERE node_id = ?").get(o.run_id)?.deleting_at)throw new Error("run is deleting");if(e.idempotencyKey!==void 0){const l=r.prepare(`SELECT d.delivery_id, d.message_id, d.urgency, m.created_at
-        FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE d.idempotency_key = ?`).get(e.idempotencyKey);if(l!==void 0)return{messageId:l.message_id,deliveryId:l.delivery_id,urgency:l.urgency,createdAt:l.created_at}}const t=Date.now(),i=I(n,e.urgency),a=_(r,{operationId:d.operationId,createdAt:d.createdAt,senderNodeId:e.senderNodeId??null,senderName:e.senderName??null,kind:e.kind,label:e.label,bodyRef:d.bodyRef,bodyJson:d.bodyJson,disposition:e.disposition??null}),m=N(r,a,n,i,e.wake,t,e.idempotencyKey);return g(n,e.senderNodeId??null,t,r),e.withinEnqueue?.(r,a),e.wake===1&&i!=="deferred"&&f(n),{messageId:a,deliveryId:m,urgency:i,createdAt:d.createdAt}})}s(H,"enqueueNodeMail");function Y(n,e){if(n.length===0)return[];const d=w(e,n[0].node_id);return c(r=>{const o=Date.now(),t=_(r,{operationId:d.operationId,createdAt:d.createdAt,senderNodeId:e.senderNodeId??null,senderName:e.senderName??null,kind:e.kind,label:e.label,bodyRef:d.bodyRef,bodyJson:d.bodyJson,disposition:e.disposition??null});return n.map(i=>{const a=I(i.node_id,e.urgency),m=i.active?1:0,l=N(r,t,i.node_id,a,m,o);return g(i.node_id,e.senderNodeId??null,o,r),m===1&&a!=="deferred"&&f(i.node_id),{destinationNodeId:i.node_id,messageId:t,deliveryId:l,urgency:a,createdAt:d.createdAt}})})}s(Y,"enqueueSubscriberMail");function Z(n){return c(e=>{const d=e.prepare("SELECT delivery_id, message_id FROM deliveries WHERE idempotency_key = ?").get(n.idempotencyKey);if(d!==void 0)return{messageId:d.message_id,deliveryId:d.delivery_id};const r=Date.now(),o=_(e,{operationId:u.current()??p(),createdAt:new Date(r).toISOString(),senderNodeId:null,senderName:null,kind:n.kind??"completed",label:n.label??n.destinationId,bodyRef:null,bodyJson:n.bodyJson,disposition:null}),t=y(),i=e.prepare(`INSERT INTO deliveries
+     VALUES (?, ?, 'node_inbox', ?, ?, ?, 'pending', ?, ?, ?)`).run(a,e,n,d,t,i??null,o,o),a}l(S,"insertNodeDelivery");function p(r,e){const n=new Date().toISOString(),d=r.operationId===void 0?E.current()??w():j(r.operationId);let t=r.bodyRef??null,o=r.bodyJson;if(t===null&&r.senderNodeId!=="human"){const i=K(o),a=$(i);a.clipped&&(t=q(e,n,i),o={...o,body:a.text})}return{createdAt:n,operationId:d,bodyRef:t,bodyJson:o}}l(p,"finalizeNodeMail");function P(r,e){const n=p(e,r);return m(d=>{const t=d.prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(r);if(t?.run_id&&d.prepare("SELECT deleting_at FROM nodes WHERE node_id = ?").get(t.run_id)?.deleting_at)throw new Error("run is deleting");if(e.idempotencyKey!==void 0){const c=d.prepare(`SELECT d.delivery_id, d.message_id, d.urgency, m.created_at
+        FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE d.idempotency_key = ?`).get(e.idempotencyKey);if(c!==void 0)return{messageId:c.message_id,deliveryId:c.delivery_id,urgency:c.urgency,createdAt:c.created_at}}const o=Date.now(),i=k(r,e.urgency),a=u(d,{messageId:e.messageId,operationId:n.operationId,createdAt:n.createdAt,senderNodeId:e.senderNodeId??null,senderName:e.senderName??null,kind:e.kind,label:e.label,bodyRef:n.bodyRef,bodyJson:n.bodyJson,disposition:e.disposition??null}),y=S(d,a,r,i,e.wake,o,e.idempotencyKey);return N(r,e.senderNodeId??null,o,d),e.withinEnqueue?.(d,a),e.wake===1&&i!=="deferred"&&f(r),{messageId:a,deliveryId:y,urgency:i,createdAt:n.createdAt}})}l(P,"enqueueNodeMail");function te(r){switch(r){case"interrupt":return{urgency:"critical",wake:1};case"steer":return{urgency:"urgent",wake:1};case"after-turn":return{urgency:"normal",wake:1};case"next-turn":return{urgency:"deferred",wake:0}}}l(te,"listenDeliveryTier");function oe(r,e,n){if(n.length===0)return[];const d=p({...e,urgency:"normal"},n[0].nodeId),t=Date.now(),o=u(r,{messageId:e.messageId,operationId:d.operationId,createdAt:d.createdAt,senderNodeId:e.senderNodeId??null,senderName:e.senderName??null,kind:e.kind,label:e.label,bodyRef:d.bodyRef,bodyJson:d.bodyJson,disposition:e.disposition??null,event:{event:e.event,objectId:e.objectId,level:e.level,actorId:e.actorId}}),i=e.event.startsWith("report.")||e.event.startsWith("notice."),a=e.senderNodeId??null,y=n.map(s=>s.nodeId),c=`(${y.map(()=>"?").join(",")})`,b=a===null?new Set:new Set(r.prepare(`SELECT DISTINCT node_id FROM waits WHERE kind = 'controller' AND target_id = ? AND satisfied_at IS NULL AND node_id IN ${c}`).all(a,...y).map(s=>s.node_id)),A=new Set(r.prepare(`SELECT DISTINCT anchor_node FROM crons WHERE cancel_on_wake = 1 AND anchor_node IN ${c}`).all(...y).map(s=>s.anchor_node)),R=r.prepare(`INSERT INTO deliveries
+       (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, idempotency_key, created_at, updated_at)
+     VALUES (?, ?, 'node_inbox', ?, ?, ?, 'pending', NULL, ?, ?)`);return n.map(s=>{const g=i?k(s.nodeId,s.urgency):s.urgency,I=_();return R.run(I,o,s.nodeId,g,s.wake,t,t),b.has(s.nodeId)&&N(s.nodeId,a,t,r),s.wake===1&&g!=="deferred"&&A.has(s.nodeId)&&f(s.nodeId),{destinationNodeId:s.nodeId,messageId:o,deliveryId:I,urgency:g,createdAt:d.createdAt}})}l(oe,"insertEventMail");function ae(r,e,n){const d={kind:"update",label:n.label??"notice",bodyJson:{body:n.body},urgency:n.tier,wake:n.wake},t=p(d,e),o=Date.now(),i=u(r,{operationId:t.operationId,createdAt:t.createdAt,senderNodeId:null,senderName:null,kind:d.kind,label:d.label,bodyRef:t.bodyRef,bodyJson:t.bodyJson,disposition:null}),a=S(r,i,e,n.tier,n.wake,o);return n.wake===1&&n.tier!=="deferred"&&f(e),{messageId:i,deliveryId:a,urgency:n.tier,createdAt:t.createdAt}}l(ae,"queueNodeNotice");function ie(r){return m(e=>{const n=e.prepare("SELECT delivery_id, message_id FROM deliveries WHERE idempotency_key = ?").get(r.idempotencyKey);if(n!==void 0)return{messageId:n.message_id,deliveryId:n.delivery_id};const d=Date.now(),t=u(e,{operationId:E.current()??w(),createdAt:new Date(d).toISOString(),senderNodeId:null,senderName:null,kind:r.kind??"completed",label:r.label??r.destinationId,bodyRef:null,bodyJson:r.bodyJson,disposition:null}),o=_(),i=e.prepare(`INSERT INTO deliveries
          (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, next_attempt_at,
           adapter_json, idempotency_key, created_at, updated_at)
        VALUES (?, ?, 'external_action', ?, 'normal', 0, 'pending', ?, ?, ?, ?, ?)
-       ON CONFLICT(idempotency_key) WHERE idempotency_key IS NOT NULL DO NOTHING`).run(t,o,n.destinationId,r,E(n.adapter,"external action adapter"),n.idempotencyKey,r,r);if(Number(i.changes)===1)return{messageId:o,deliveryId:t};const a=e.prepare("SELECT delivery_id, message_id FROM deliveries WHERE idempotency_key = ?").get(n.idempotencyKey);if(a===void 0)throw new Error(`external action idempotency winner disappeared: ${n.idempotencyKey}`);return{messageId:a.message_id,deliveryId:a.delivery_id}})}s(Z,"enqueueExternalAction");function ee(n,e=Date.now()){return c(d=>Number(d.prepare("UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id = ? AND canceled_at IS NULL").run(e,e,n).changes)===1)}s(ee,"cancelDelivery");function ne(n,e={}){return c(d=>{const r=["d.destination_kind = 'node_inbox'","d.destination_id = ?","d.canceled_at IS NULL","d.state IN ('pending', 'handed_off')"],o=[n];e.senderNodeId!==void 0&&(r.push("m.sender_node_id IS ?"),o.push(e.senderNodeId)),e.kind!==void 0&&(r.push("m.kind = ?"),o.push(e.kind));const t=d.prepare(`SELECT d.delivery_id FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE ${r.join(" AND ")}`).all(...o);if(t.length===0)return[];const i=Date.now();return d.prepare(`UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id IN (${t.map(()=>"?").join(",")})`).run(i,i,...t.map(a=>a.delivery_id)),t.map(a=>a.delivery_id)})}s(ne,"cancelPendingNodeMail");function de(n,e){return c(d=>{const r=Date.now(),o=d.prepare(`SELECT target.status AS controller_status FROM waits w LEFT JOIN nodes target ON target.node_id = w.target_id
-        WHERE w.node_id = ? AND w.kind = 'controller' AND w.target_id = ? AND w.satisfied_at IS NULL`).get(n,e);if(o===void 0||o.controller_status==="active"||o.controller_status==="idle")return null;const t=H(n,{kind:"urgent",label:"declared controller is no longer live",bodyJson:{body:`Controller ${e} is no longer live; the declared message wait was cleared.`},urgency:"urgent",wake:1});if(!b(n,e,r,d))throw new Error(`controller wait changed while notifying ${n}`);return t})}s(de,"enqueueControllerDeathNotice");export{ee as cancelDelivery,ne as cancelPendingNodeMail,de as enqueueControllerDeathNotice,Z as enqueueExternalAction,H as enqueueNodeMail,Y as enqueueSubscriberMail};
+       ON CONFLICT(idempotency_key) WHERE idempotency_key IS NOT NULL DO NOTHING`).run(o,t,r.destinationId,d,v(r.adapter,"external action adapter"),r.idempotencyKey,d,d);if(Number(i.changes)===1)return{messageId:t,deliveryId:o};const a=e.prepare("SELECT delivery_id, message_id FROM deliveries WHERE idempotency_key = ?").get(r.idempotencyKey);if(a===void 0)throw new Error(`external action idempotency winner disappeared: ${r.idempotencyKey}`);return{messageId:a.message_id,deliveryId:a.delivery_id}})}l(ie,"enqueueExternalAction");function se(r,e=Date.now()){return m(n=>Number(n.prepare("UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id = ? AND canceled_at IS NULL").run(e,e,r).changes)===1)}l(se,"cancelDelivery");function le(r,e={}){return m(n=>{const d=["d.destination_kind = 'node_inbox'","d.destination_id = ?","d.canceled_at IS NULL","d.state IN ('pending', 'handed_off')"],t=[r];e.senderNodeId!==void 0&&(d.push("m.sender_node_id IS ?"),t.push(e.senderNodeId)),e.kind!==void 0&&(d.push("m.kind = ?"),t.push(e.kind));const o=n.prepare(`SELECT d.delivery_id FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE ${d.join(" AND ")}`).all(...t);if(o.length===0)return[];const i=Date.now();return n.prepare(`UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id IN (${o.map(()=>"?").join(",")})`).run(i,i,...o.map(a=>a.delivery_id)),o.map(a=>a.delivery_id)})}l(le,"cancelPendingNodeMail");function ce(r,e){return m(n=>{const d=Date.now(),t=n.prepare(`SELECT target.status AS controller_status FROM waits w LEFT JOIN nodes target ON target.node_id = w.target_id
+        WHERE w.node_id = ? AND w.kind = 'controller' AND w.target_id = ? AND w.satisfied_at IS NULL`).get(r,e);if(t===void 0||t.controller_status==="active"||t.controller_status==="idle")return null;const o=P(r,{kind:"urgent",label:"declared controller is no longer live",bodyJson:{body:`Controller ${e} is no longer live; the declared message wait was cleared.`},urgency:"urgent",wake:1});if(!H(r,e,d,n))throw new Error(`controller wait changed while notifying ${r}`);return o})}l(ce,"enqueueControllerDeathNotice");export{se as cancelDelivery,le as cancelPendingNodeMail,ce as enqueueControllerDeathNotice,ie as enqueueExternalAction,P as enqueueNodeMail,oe as insertEventMail,te as listenDeliveryTier,ae as queueNodeNotice};

package/dist/core/feed/reports.d.ts

@@ -0,0 +1,10 @@
+/** Whether `nodeId` owns any live report document — proof it already did work. */
+export declare function hasReportDocuments(nodeId: string): boolean;
+/** `<nodeId>/<name>` of `nodeId`'s newest live report document — the name
+ *  `crtr canvas read` takes — or null when it pushed none. */
+export declare function newestReportName(nodeId: string): string | null;
+/** Body of `nodeId`'s newest live report document, trimmed; '' when it pushed none. */
+export declare function newestReportBody(nodeId: string): string;
+/** Body of the report document a push's `<nodeId>/reports/<name>` ref names;
+ *  null when the ref is not that shape or the document is gone. */
+export declare function reportBodyByName(ref: string): string | null;

package/dist/core/feed/reports.js

@@ -0,0 +1,2 @@
+var f=Object.defineProperty;var o=(t,e)=>f(t,"name",{value:e,configurable:!0});import{openDb as d}from"../canvas/db.js";import{get as s}from"../graph/bodies.js";import{heads as p}from"../graph/documents.js";import{getById as u}from"../graph/objects.js";function N(t){const e=d(),n=u(e,t);return n===null||n.type!=="node"?!1:e.prepare("SELECT 1 FROM objects WHERE owner = ? AND type = 'document' AND kind = 'report' AND deleted_at IS NULL LIMIT 1").get(n.rowid)!==void 0}o(N,"hasReportDocuments");function a(t){const e=d(),n=u(e,t);if(!(n===null||n.type!=="node"))return e.prepare(`SELECT * FROM objects WHERE owner = ? AND type = 'document' AND kind = 'report' AND deleted_at IS NULL
+    ORDER BY created_at DESC, name DESC LIMIT 1`).get(n.rowid)}o(a,"newestReport");function h(t){const e=a(t);return e===void 0?null:`${t}/${e.name}`}o(h,"newestReportName");function R(t){const e=d(),n=a(t);if(n===void 0)return"";const r=p(e,n)[0];if(r===void 0)return"";try{return s(r.body_hash).trim()}catch{return""}}o(R,"newestReportBody");function L(t){const e=t.indexOf("/");if(e<=0||!t.startsWith("reports/",e+1))return null;const n=d(),r=u(n,t.slice(0,e));if(r===null||r.type!=="node")return null;const c=n.prepare("SELECT * FROM objects WHERE owner = ? AND type = 'document' AND name = ? AND deleted_at IS NULL").get(r.rowid,t.slice(e+1)),i=c===void 0?void 0:p(n,c)[0];if(i===void 0)return null;try{return s(i.body_hash)}catch{return null}}o(L,"reportBodyByName");export{N as hasReportDocuments,R as newestReportBody,h as newestReportName,L as reportBodyByName};

package/dist/core/grants/remove.js

@@ -1 +1 @@
-var R=Object.defineProperty;var d=(r,i)=>R(r,"name",{value:i,configurable:!0});import{rmSync as h}from"node:fs";import{join as S}from"node:path";import{deleteNodes as w}from"../canvas/canvas.js";import{openDb as f,withCanvasWrite as c}from"../canvas/db.js";import{cancelCron as O}from"../canvas/crons.js";import{emitEvent as m}from"../events/emit.js";import{appSpace as D,appsRoot as p,secretsDir as T}from"../layout.js";import{notifyRunDeleted as C}from"../runs/events.js";import{cancelOpenQuestions as N}from"../runs/questions.js";import{removeTreeBeneath as L}from"../spaces/open-beneath.js";import{markGranteeUploadsDeletePending as W,releaseRunUploads as b,turnSharesOffFor as F}from"../storage/tables.js";import{stopNodeSandboxes as H}from"../spaces/stop.js";import{activeAppUser as E,markAppUserRemoved as A}from"../spaces/users.js";import{launcherRequest as M}from"../../launcher/client.js";import{LaunchRefused as y}from"../../launcher/spec.js";import{allGrants as I}from"./mirror.js";import{launcherPresent as u,listSandboxes as P,stopSandboxPid as U}from"./sandboxes.js";let g=Promise.resolve();function te(r=new Set){const i=g.then(async()=>{const n=I(),o=new Set(n.filter(t=>t.status==="removed").map(t=>t.grantee));for(const t of o)if(!n.some(a=>a.grantee===t&&a.status==="active")&&!(E(t)===null&&!r.has(t)))try{await x(t)}catch(a){m({level:"error",event:"daemon.grants.removal_failed",error:a,fields:{grantee:t}})}});return g=i.catch(()=>{}),i}d(te,"runRemovalCascades");async function x(r){if(r==="app:terminal")throw new Error("app:terminal cannot be removed");const i=D(r),n=E(r);m({level:"info",event:"daemon.grants.removal_started",fields:{grantee:r,uid:n?.uid??null}}),await N({grantee:r},"the app was removed");const o=c(e=>(e.prepare("UPDATE nodes SET deleting_at = COALESCE(deleting_at, ?) WHERE grantee = ?").run(new Date().toISOString(),r),e.prepare("SELECT node_id FROM nodes WHERE grantee = ? ORDER BY created DESC").all(r).map(s=>s.node_id)));for(const{cron_id:e}of f().prepare("SELECT cron_id FROM crons WHERE grantee = ?").all(r))O(e);const a=(await Promise.all(o.map(e=>H(e,"app_removed",{deleting:!0})))).filter(e=>!e.confirmed);if(a.length)throw new Error(`sandbox teardown could not be confirmed for ${a.length} node(s) of ${r}`);if(n&&u())for(const e of await P())e.uid===n.uid&&await U(e.pid);const v=o.filter(e=>f().prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(e)?.run_id===e);c(e=>{if(F(r,e),b(o,e),W(r,e),!o.length)return;const s=o.map(()=>"?").join(","),_=e.prepare(`SELECT message_id FROM messages WHERE sender_node_id IN (${s}) UNION SELECT message_id FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id IN (${s})`).all(...o,...o);e.prepare(`DELETE FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id IN (${s})`).run(...o);for(const{message_id:l}of _)e.prepare("DELETE FROM messages WHERE message_id = ? AND NOT EXISTS (SELECT 1 FROM deliveries WHERE message_id = ?)").run(l,l)}),w(o);for(const e of v)C(e);if(h(S(T(),"env",i.root.slice(p().length+1)),{recursive:!0,force:!0}),L(p(),i.root),n&&u())try{await M({operation:"user.delete",uid:n.uid})}catch(e){if(!(e instanceof y&&e.refusal==="invalid_uid"))throw e}n&&A(n.uid),m({level:"info",event:"daemon.grants.removal_completed",fields:{grantee:r,uid:n?.uid??null,nodes:o.length}})}d(x,"removeApp");export{x as removeApp,te as runRemovalCascades};
+var R=Object.defineProperty;var d=(r,i)=>R(r,"name",{value:i,configurable:!0});import{rmSync as w}from"node:fs";import{join as S}from"node:path";import{deleteNodes as h}from"../canvas/canvas.js";import{openDb as f,withCanvasWrite as c}from"../canvas/db.js";import{cancelCron as O}from"../canvas/crons.js";import{emitEvent as m}from"../events/emit.js";import{appSpace as T,appsRoot as E,secretsDir as C}from"../layout.js";import{notifyRunDeleted as D}from"../runs/events.js";import{cancelOpenQuestions as N}from"../runs/questions.js";import{removeTreeBeneath as L}from"../spaces/open-beneath.js";import{markGranteeUploadsDeletePending as W,releaseRunUploads as F,turnSharesOffFor as H}from"../storage/tables.js";import{stopNodeSandboxes as b}from"../spaces/stop.js";import{activeAppUser as p,markAppUserRemoved as M}from"../spaces/users.js";import{launcherRequest as A}from"../../launcher/client.js";import{LaunchRefused as I}from"../../launcher/spec.js";import{allGrants as y}from"./mirror.js";import{launcherPresent as u,listSandboxes as P,stopSandboxPid as U}from"./sandboxes.js";let _=Promise.resolve();function te(r=new Set){const i=_.then(async()=>{const n=y(),o=new Set(n.filter(t=>t.status==="removed").map(t=>t.grantee));for(const t of o)if(!n.some(a=>a.grantee===t&&a.status==="active")&&!(p(t)===null&&!r.has(t)))try{await x(t)}catch(a){m({level:"error",event:"daemon.grants.removal_failed",error:a,fields:{grantee:t}})}});return _=i.catch(()=>{}),i}d(te,"runRemovalCascades");async function x(r){if(r==="app:terminal")throw new Error("app:terminal cannot be removed");const i=T(r),n=p(r);m({level:"info",event:"daemon.grants.removal_started",fields:{grantee:r,uid:n?.uid??null}}),await N({grantee:r},"the app was removed");const o=c(e=>(e.prepare("UPDATE nodes SET deleting_at = COALESCE(deleting_at, ?) WHERE node_id IN (SELECT node_id FROM node_rows WHERE grantee = ?)").run(new Date().toISOString(),r),e.prepare("SELECT node_id FROM node_rows WHERE grantee = ? ORDER BY created DESC").all(r).map(s=>s.node_id)));for(const{cron_id:e}of f().prepare("SELECT cron_id FROM crons WHERE grantee = ?").all(r))O(e);const a=(await Promise.all(o.map(e=>b(e,"app_removed",{deleting:!0})))).filter(e=>!e.confirmed);if(a.length)throw new Error(`sandbox teardown could not be confirmed for ${a.length} node(s) of ${r}`);if(n&&u())for(const e of await P())e.uid===n.uid&&await U(e.pid);const g=o.filter(e=>f().prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(e)?.run_id===e);c(e=>{if(H(r,e),F(o,e),W(r,e),!o.length)return;const s=o.map(()=>"?").join(","),v=e.prepare(`SELECT message_id FROM messages WHERE sender_node_id IN (${s}) UNION SELECT message_id FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id IN (${s})`).all(...o,...o);e.prepare(`DELETE FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id IN (${s})`).run(...o);for(const{message_id:l}of v)e.prepare("DELETE FROM messages WHERE message_id = ? AND NOT EXISTS (SELECT 1 FROM deliveries WHERE message_id = ?)").run(l,l)}),h(o);for(const e of g)D(e);if(w(S(C(),"env",i.root.slice(E().length+1)),{recursive:!0,force:!0}),L(E(),i.root),n&&u())try{await A({operation:"user.delete",uid:n.uid})}catch(e){if(!(e instanceof I&&e.refusal==="invalid_uid"))throw e}n&&M(n.uid),m({level:"info",event:"daemon.grants.removal_completed",fields:{grantee:r,uid:n?.uid??null,nodes:o.length}})}d(x,"removeApp");export{x as removeApp,te as runRemovalCascades};

package/dist/core/graph/access.d.ts

@@ -0,0 +1,24 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { ObjectRow, Reader } from './types.js';
+/** The object's owners, nearest first, ending at its space; empty when the object is a space. */
+export declare function ownerChain(db: DatabaseSync, object: ObjectRow): ObjectRow[];
+export declare function spaceOf(db: DatabaseSync, object: ObjectRow): ObjectRow;
+/** A shipped document: one a package reconciler owns, read from its package file
+ *  (`documents.source_path` is set). Only the reconciler writes it. */
+export declare function isShipped(db: DatabaseSync, object: ObjectRow): boolean;
+/** The apps whose tools a run may use, `crtr` last. On a local runtime (v0) every
+ *  installed, enabled plugin's tools are usable by every run, and an installed
+ *  plugin is exactly an app holding live shipped documents. Hosted grants narrow
+ *  this per reader later; `mayUseTools` is the one question both ask. */
+export declare function toolApps(db: DatabaseSync, reader: Reader): ObjectRow[];
+/** May `reader` use any of `app`'s tool groups? v0: every run may use every installed plugin's tools. */
+export declare function mayUseTools(_db: DatabaseSync, _reader: Reader, app: ObjectRow): boolean;
+/** Callers turn `false` into `not_found`. A person reader reads everything. An app's
+ *  shipped documents are read by any run that may use that app's tools. */
+export declare function canRead(db: DatabaseSync, reader: Reader, object: ObjectRow): boolean;
+/** `canRead` for many readers of one object: the owner chain is walked once. */
+export declare function readCheck(db: DatabaseSync, object: ObjectRow): (reader: Reader) => boolean;
+/** Always asked of the space, also for a person: a repo never owns a non-public
+ *  document, whoever asks. A shipped document is changed by nobody, its own app
+ *  included — only the package reconciler writes it, and it asks no reader. */
+export declare function canChange(db: DatabaseSync, reader: Reader, object: ObjectRow): boolean;

package/dist/core/graph/access.js

@@ -0,0 +1,8 @@
+var u=Object.defineProperty;var o=(t,e)=>u(t,"name",{value:e,configurable:!0});import{SPACES as l}from"./spaces/index.js";function E(t,e){return t.prepare(`WITH RECURSIVE chain(rowid, depth) AS (
+      SELECT owner, 1 FROM objects WHERE rowid = ? AND owner IS NOT NULL
+      UNION ALL
+      SELECT o.owner, c.depth + 1 FROM objects o JOIN chain c ON o.rowid = c.rowid WHERE o.owner IS NOT NULL
+    ) SELECT o.* FROM chain c JOIN objects o ON o.rowid = c.rowid ORDER BY c.depth`).all(e.rowid)}o(E,"ownerChain");function w(t,e){return c(t,e).space}o(w,"spaceOf");function c(t,e){const r=E(t,e),n=r.length?r[r.length-1]:e,p=l[n.type];if(!p)throw new Error(`${e.type} ${e.id} has no space: its owner chain ends at ${n.type} ${n.id}`);const a=r.length?[...r.slice(0,-1).reverse(),e]:[];return{space:n,path:a,impl:p}}o(c,"locate");function i(t,e){return e.type!=="document"?!1:t.prepare("SELECT source_path FROM documents WHERE object = ?").get(e.rowid)?.source_path!=null}o(i,"isShipped");function f(t,e){return t.prepare(`SELECT a.* FROM objects a WHERE a.type = 'app' AND a.deleted_at IS NULL AND EXISTS (
+      SELECT 1 FROM objects o JOIN documents d ON d.object = o.rowid
+      WHERE o.owner = a.rowid AND o.type = 'document' AND o.deleted_at IS NULL AND d.source_path IS NOT NULL)
+    ORDER BY a.name = 'crtr', a.name`).all().filter(n=>s(t,e,n))}o(f,"toolApps");function s(t,e,r){return r.type==="app"}o(s,"mayUseTools");function O(t,e,r){return d(t,r)(e)}o(O,"canRead");function d(t,e){let r=null,n=null;return p=>p.class==="person"||(r??=c(t,e),r.space.type==="app"&&r.path.length>0&&(n??=i(t,e),n&&s(t,p,r.space)))?!0:r.impl.canRead(t,p,r.space,r.path,e)}o(d,"readCheck");function R(t,e,r){if(i(t,r))return!1;const{space:n,path:p,impl:a}=c(t,r);return a.canChange(t,e,n,p,r)}o(R,"canChange");export{R as canChange,O as canRead,i as isShipped,s as mayUseTools,E as ownerChain,d as readCheck,w as spaceOf,f as toolApps};

package/dist/core/graph/bodies.d.ts

@@ -0,0 +1,6 @@
+/** Store a body durably (temp + fsync + rename); call before the transaction that references it. */
+export declare function put(body: string): string;
+export declare function get(hash: string): string;
+/** A revision's body: a package document's (one with a `source_path`) is its file's body after
+ *  the frontmatter; every other document's comes from the body store. */
+export declare function bodyOf(hash: string, sourcePath: string | null): string;

package/dist/core/graph/bodies.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var o=(r,t)=>m(r,"name",{value:t,configurable:!0});import{createHash as p}from"node:crypto";import{closeSync as y,existsSync as s,fsyncSync as d,mkdirSync as a,openSync as l,readFileSync as c,renameSync as S,writeSync as w}from"node:fs";import{join as f}from"node:path";import{notFound as b}from"../errors.js";import{crtrHome as x}from"../canvas/paths.js";import{parseFrontmatterGeneric as $}from"../frontmatter.js";function u(r){if(!/^[0-9a-f]{64}$/.test(r))throw new Error(`invalid body hash: ${r}`);return f(x(),"bodies",r.slice(0,2),r)}o(u,"bodyPath");function j(r){const t=p("sha256").update(r,"utf8").digest("hex"),n=u(t);if(s(n))return t;a(f(n,".."),{recursive:!0});const i=`${n}.tmp-${process.pid}`,e=l(i,"w");try{w(e,r,null,"utf8"),d(e)}finally{y(e)}return S(i,n),t}o(j,"put");function h(r){try{return c(u(r),"utf8")}catch(t){throw t.code==="ENOENT"?b(`no body ${r}`):t}}o(h,"get");function k(r,t){return t===null?h(r):$(c(t,"utf8")).body}o(k,"bodyOf");export{k as bodyOf,h as get,j as put};

package/dist/core/graph/deletion.d.ts

@@ -0,0 +1,9 @@
+/** Deleting a node with what it owns (spec §6 "Deletion follows the owner", A9). Rows are kept
+ *  with `deleted_at` so every pointer resolves to "deleted" with the last preview; a document
+ *  that a kept document links to passes to the node's owner instead. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { ObjectRow } from './types.js';
+/** Mark the node and everything it owns deleted, move kept documents to the node's owner,
+ *  drop the node's watches (both ends) and its `nodes` row. One savepoint, so it runs as one
+ *  transaction or inside the caller's. Refuses a node whose managed worktree is unreconciled. */
+export declare function deleteNodeWithOwned(db: DatabaseSync, node: ObjectRow): void;

package/dist/core/graph/deletion.js

@@ -0,0 +1,5 @@
+var f=Object.defineProperty;var d=(e,o)=>f(e,"name",{value:o,configurable:!0});import{hasUnreconciledWorktree as R}from"../canvas/worktrees.js";import{deleteDocument as O}from"./documents.js";import{levelFor as a,publish as l}from"./events.js";import{getByRowid as w}from"./objects.js";import{setRulesOwner as m}from"./rules.js";let N=0;function I(e,o){if(o.type!=="node")throw new Error(`deleteNodeWithOwned: ${o.id} is a ${o.type}, not a node`);if(R(o.id))throw new Error(`refusing to delete node ${o.id}: its managed worktree is not reconciled`);const r=`graph_delete_${++N}`;e.exec(`SAVEPOINT ${r}`);try{S(e,o),e.exec(`RELEASE ${r}`)}catch(n){throw e.exec(`ROLLBACK TO ${r}`),e.exec(`RELEASE ${r}`),n}}d(I,"deleteNodeWithOwned");function S(e,o){const r=e.prepare(`WITH RECURSIVE sub(rowid) AS (
+      SELECT rowid FROM objects WHERE owner = ?
+      UNION SELECT o.rowid FROM objects o JOIN sub ON o.owner = sub.rowid)
+    SELECT o.* FROM objects o JOIN sub ON sub.rowid = o.rowid WHERE o.deleted_at IS NULL`).all(o.rowid),n=new Set(r.map(t=>t.rowid)),i=e.prepare(`SELECT e.src FROM edges e JOIN objects s ON s.rowid = e.src
+    WHERE e.type = 'links-to' AND e.dst = ? AND s.deleted_at IS NULL`),s=[];for(let t=!0;t;){t=!1;for(const E of r)E.type!=="document"||!n.has(E.rowid)||i.all(E.rowid).some(({src:u})=>!n.has(u))&&(n.delete(E.rowid),s.push(E),t=!0)}const p=w(e,o.owner);for(const t of s)h(e,t,p);const c=new Date().toISOString();for(const t of r)if(n.has(t.rowid)){if(t.type==="document"){O(e,null,t);continue}e.prepare("UPDATE objects SET deleted_at = ? WHERE rowid = ?").run(c,t.rowid),l(e,{event:"deleted",object:w(e,t.rowid),actor:null,level:a("deleted",void 0,t.type),attrs:{}}),e.prepare("DELETE FROM watches WHERE object = ? OR watcher = ?").run(t.rowid,t.rowid)}e.prepare("UPDATE objects SET deleted_at = ? WHERE rowid = ?").run(c,o.rowid),l(e,{event:"deleted",object:w(e,o.rowid),actor:null,level:a("deleted",void 0,"node"),attrs:{}}),e.prepare("DELETE FROM watches WHERE object = ? OR watcher = ?").run(o.rowid,o.rowid),e.prepare("DELETE FROM nodes WHERE node_id = ?").run(o.id)}d(S,"deleteInside");function h(e,o,r){const n=e.prepare("SELECT 1 FROM objects WHERE type = 'document' AND owner = ? AND name = ? AND deleted_at IS NULL");let i=o.name;for(let s=2;n.get(r.rowid,i)!==void 0;s++)i=`${o.name}-${s}`;e.prepare("UPDATE objects SET owner = ?, name = ? WHERE rowid = ?").run(r.rowid,i,o.rowid),m(e,w(e,o.rowid))}d(h,"moveToOwner");export{I as deleteNodeWithOwned};

package/dist/core/graph/diff.d.ts

@@ -0,0 +1,4 @@
+/** Unified diff between two document texts, computed at read time. Dependency
+ *  free (an LCS over lines) — documents are small, so the
+ *  quadratic table is never a cost. */
+export declare function unifiedDiff(before: string, after: string, context?: number): string;

package/dist/core/graph/diff.js

@@ -0,0 +1,4 @@
+var b=Object.defineProperty;var m=(n,f)=>b(n,"name",{value:f,configurable:!0});function W(n,f,o=3){const{lines:l,terminated:c}=w(n),{lines:a,terminated:e}=w(f),t=K(M(l,c),M(a,e)),s=[];for(let i=0;i<t.length;i+=1){if(t[i].tag===" ")continue;const p=Math.max(0,i-o),d=Math.min(t.length,i+o+1),u=s[s.length-1];u!==void 0&&p<=u.to?u.to=Math.max(u.to,d):s.push({from:p,to:d})}if(s.length===0)return"";const r=[],N=[];let A=0,E=0;for(const i of t)r.push(A),N.push(E),i.tag!=="+"&&(A+=1),i.tag!=="-"&&(E+=1);const x=[];for(const{from:i,to:p}of s){const d=t.slice(i,p),u=d.filter(h=>h.tag!=="+").length,L=d.filter(h=>h.tag!=="-").length;x.push(`@@ -${u===0?0:r[i]+1},${u} +${L===0?0:N[i]+1},${L} @@`);for(let h=i;h<p;h+=1){const g=t[h];x.push(g.tag+(g.tag==="+"?a[g.index]:l[g.index]));const _=g.tag!=="+"&&!c&&r[h]===l.length-1,$=g.tag!=="-"&&!e&&N[h]===a.length-1;(_||$)&&x.push(j)}}return x.join(`
+`)}m(W,"unifiedDiff");const j="\",y="\0no-newline-at-eof";function M(n,f){return f||n.length===0?n:n.map((o,l)=>l===n.length-1?o+y:o)}m(M,"diffKeys");function w(n){if(n==="")return{lines:[],terminated:!0};const f=n.endsWith(`
+`),o=n.split(`
+`);return f&&o.pop(),{lines:o,terminated:f}}m(w,"toLines");function K(n,f){const o=n.length,l=f.length,c=Array.from({length:o+1},()=>new Array(l+1).fill(0));for(let s=o-1;s>=0;s-=1)for(let r=l-1;r>=0;r-=1)c[s][r]=n[s]===f[r]?c[s+1][r+1]+1:Math.max(c[s+1][r],c[s][r+1]);const a=[];let e=0,t=0;for(;e<o&&t<l;)n[e]===f[t]?(a.push({tag:" ",index:e}),e+=1,t+=1):c[e+1][t]>=c[e][t+1]?(a.push({tag:"-",index:e}),e+=1):(a.push({tag:"+",index:t}),t+=1);for(;e<o;e+=1)a.push({tag:"-",index:e});for(;t<l;t+=1)a.push({tag:"+",index:t});return a}m(K,"diffOps");export{W as unifiedDiff};

package/dist/core/graph/documents.d.ts

@@ -0,0 +1,160 @@
+/** Documents: write, CAS edit, revisions and heads, links per revision, record fields, move,
+ *  delete, history, read, and the two import paths (migration, repo sync). Every act records
+ *  its actor's `acted-on` edge and watch and publishes its event in the caller's transaction. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { ReposFn } from './reader.js';
+import type { ObjectRow, Privacy, Reader, Revision, RuleSpec } from './types.js';
+export interface DocumentFields {
+    preview?: string;
+    summary?: string | null;
+    privacy?: Privacy;
+    rules?: readonly RuleSpec[];
+    whyItExists?: string | null;
+    unlisted?: boolean;
+    lintIgnore?: readonly string[] | null;
+    extensions?: Record<string, Record<string, unknown>> | null;
+}
+export interface WriteSpec extends DocumentFields {
+    owner: ObjectRow;
+    name: string;
+    kind: string;
+    preview: string;
+    privacy: Privacy;
+}
+export type DocumentChange = {
+    body: string;
+    verbatim?: boolean;
+} | {
+    replace: ReadonlyArray<{
+        old: string;
+        new: string;
+    }>;
+    verbatim?: boolean;
+};
+export interface DocumentRecord {
+    summary: string | null;
+    heads_key: string;
+    revision: number;
+    why_it_exists: string | null;
+    unlisted: boolean;
+    lint_ignore: string[] | null;
+    extensions: Record<string, Record<string, unknown>> | null;
+    source_path: string | null;
+}
+export interface Head extends Revision {
+    body: string;
+}
+export interface RenderedLink {
+    written_as: string;
+    object: ObjectRow;
+    deleted: boolean;
+}
+export interface DocumentRead {
+    object: ObjectRow;
+    record: DocumentRecord;
+    heads: Head[];
+    needsMerge: boolean;
+    links: RenderedLink[];
+}
+/** The object a reader acts as: its node, its app, or the person. */
+export declare function actorOf(reader: Reader): ObjectRow;
+/** Head revisions (no child), highest number first. More than one means the document needs a merge. */
+export declare function heads(db: DatabaseSync, doc: ObjectRow): Revision[];
+export declare function documentRecord(db: DatabaseSync, doc: ObjectRow): DocumentRecord;
+/** The `[[name]]` links a body names, in order, each once. */
+export declare function linksIn(body: string): string[];
+/** Derive the document's `links-to` edges from `body`, resolving each name in the writer's
+ *  view. A name that resolves to nothing or to several objects stays text and is returned;
+ *  one that may live on another runtime is neither linked nor reported. */
+export declare function setRevisionLinks(db: DatabaseSync, reader: Reader, doc: ObjectRow, body: string): string[];
+/** `body` with each `[[link]]` the document's `links-to` edges resolved shown under its target's
+ *  current name, so a rename rewrites no stored body yet every read shows the new name (spec §4).
+ *  A link written as the target's id, or to a deleted target, stays as written. */
+export declare function withCurrentNames(db: DatabaseSync, doc: ObjectRow, body: string): string;
+/** Write the record fields that are present; `null` clears a nullable one. Rules are
+ *  replaced when given. Does not publish; callers publish the act the fields belong to. */
+export declare function applyDocumentFields(db: DatabaseSync, doc: ObjectRow, fields: DocumentFields): ObjectRow;
+/** Create a document with its first revision. The actor becomes a watcher whose read base is
+ *  the new revision; `created` is published. Returns the names that stayed text. */
+export declare function writeDocument(db: DatabaseSync, reader: Reader, spec: WriteSpec, body: string, reposFn?: ReposFn): {
+    object: ObjectRow;
+    revision: number;
+    unresolved: string[];
+};
+/** The base of the reader's next edit: the heads it last read or wrote, or null when it never has. */
+export declare function readBase(db: DatabaseSync, reader: Reader, doc: ObjectRow): string | null;
+/** Apply exact-text replacements to one head's body; each `old` must occur exactly once. */
+export declare function applyReplacements(body: string, replace: ReadonlyArray<{
+    old: string;
+    new: string;
+}>): string;
+/**
+ * Commit a new revision made from `base` — the editor's read heads captured when it computed
+ * the change. No base → `read_first`. The commit is CAS on `documents.heads_key`: a base that is
+ * no longer current returns `{stale}` and writes nothing. The new revision's parents are every
+ * head, so an edit from a read that showed several heads merges them. `fields` are record
+ * changes applied with the edit.
+ */
+export declare function editDocument(db: DatabaseSync, reader: Reader, doc: ObjectRow, change: DocumentChange, rationale: string, base: string | null, fields?: DocumentFields, reposFn?: ReposFn): {
+    revision: number;
+    heads_key: string;
+    unresolved: string[];
+} | {
+    stale: {
+        heads_key: string;
+        revision: number;
+    };
+};
+/** Change record fields (preview, summary, privacy, rules, …) without a new revision. A null
+ *  reader is repo sync, which carries no reader and checks no access. */
+export declare function setDocumentRecord(db: DatabaseSync, reader: Reader | null, doc: ObjectRow, fields: DocumentFields): ObjectRow;
+/** Record that the reader holds the document's current heads: a `read` watch with that read
+ *  base, and a `read` push. Delivery's content load calls this without reading the body. */
+export declare function recordRead(db: DatabaseSync, reader: Reader, doc: ObjectRow, reposFn?: ReposFn): void;
+/** The document's record, each head with its body (several = needs merge) and its links under
+ *  their current names; records the read. */
+export declare function readDocument(db: DatabaseSync, reader: Reader, doc: ObjectRow, reposFn?: ReposFn): DocumentRead;
+/** Every revision, newest first, with authors, rationales and parents. Records nothing. */
+export declare function history(db: DatabaseSync, reader: Reader, doc: ObjectRow): Revision[];
+/** Rename and/or re-own a document. Only `objects` changes: links point at the id, so no body is
+ *  rewritten. A null actor is repo sync, which carries no reader and checks no access. */
+export declare function moveDocument(db: DatabaseSync, reader: Reader | null, doc: ObjectRow, to: {
+    name?: string;
+    owner?: ObjectRow;
+}): ObjectRow;
+/** Mark the document deleted; the row stays with its last preview. Publishes `deleted`
+ *  (level 8), then ends the watches on it and drops its rules. A null actor is repo sync. */
+export declare function deleteDocument(db: DatabaseSync, reader: Reader | null, doc: ObjectRow, reposFn?: ReposFn): ObjectRow;
+export interface ImportedRevision {
+    rev_id?: string;
+    body_hash: string;
+    author: ObjectRow | null;
+    rationale: string | null;
+    created_at: string;
+    verbatim?: boolean;
+}
+export interface ImportSpec extends WriteSpec {
+    id?: string;
+    revisions: readonly ImportedRevision[];
+}
+/** Migration: a document with its linear history (oldest first; bodies already in the body
+ *  store). Explicit authors and times; records no edge or watch and publishes nothing — the
+ *  caller adds links (`setRevisionLinks`), acted-on edges and watches. */
+export declare function importDocument(db: DatabaseSync, spec: ImportSpec): ObjectRow;
+export interface SyncedRevision {
+    rev_id: string;
+    parents: readonly string[];
+    body_hash: string;
+    rationale: string | null;
+    created_at: string;
+    verbatim?: boolean;
+}
+/** Repo sync: add revisions that arrived from another runtime, skipping known `rev_id`s. No
+ *  CAS, author NULL, publishes nothing; the caller publishes `edited` (with `needs_merge`
+ *  when `headCount > 1`) and re-derives links from the head it trusts. */
+export declare function insertImportedRevisions(db: DatabaseSync, doc: ObjectRow, revs: readonly SyncedRevision[]): {
+    heads_key: string;
+    headCount: number;
+};
+/** Look up a live document by id (convenience for handlers and importers). */
+export declare function documentById(db: DatabaseSync, id: string): ObjectRow;

package/dist/core/graph/documents.js

@@ -0,0 +1,7 @@
+var Q=Object.defineProperty;var a=(t,n)=>Q(t,"name",{value:n,configurable:!0});import{randomUUID as Z}from"node:crypto";import{CrtrError as j,notFound as y,usage as c}from"../errors.js";import{ExitCode as $}from"../../types.js";import{canChange as A,canRead as U,ownerChain as b}from"./access.js";import{bodyOf as ee,get as te,put as F}from"./bodies.js";import{recordActedOn as R,setLinks as ne}from"./edges.js";import{publish as S}from"./events.js";import{resolveName as re}from"./names.js";import{createObject as oe,getById as ie,getByRowid as f}from"./objects.js";import{replaceRules as B,setRulesOwner as se}from"./rules.js";import{recordWatch as k}from"./watches.js";function E(t){return t.class==="node"?t.node:t.class==="app"?t.app:t.person}a(E,"actorOf");let ae=0;function h(t,n){const e=`graph_doc_${++ae}`;t.exec(`SAVEPOINT ${e}`);try{const r=n();return t.exec(`RELEASE ${e}`),r}catch(r){throw t.exec(`ROLLBACK TO ${e}`),t.exec(`RELEASE ${e}`),r}}a(h,"atomic");function ue(t,n){return new j("conflict",t,$.GENERAL,n)}a(ue,"conflict");function _(t){if(t.type!=="document")throw c(`${t.type} ${t.id} is not a document`)}a(_,"assertDocument");function P(t,n){const e=b(t,n);return(e.length?e[e.length-1]:n).type}a(P,"spaceType");function I(t,n,e){if(e!=="public"&&P(t,n)==="repo")throw c(`a repo owns only public documents; ${n.name} cannot own a ${e} one`,{rule:"repo-public-only",next:"Write it as public, or give it another owner (your own documents can carry `if: {repo: <handle>}`)."})}a(I,"assertPublicInRepo");function J(t,n,e,r){if(e.trim()===""||e!==e.trim())throw c(`invalid document name ${JSON.stringify(e)}`);const o=t.prepare("SELECT id FROM objects WHERE type = 'document' AND owner = ? AND name = ? AND deleted_at IS NULL").get(n.rowid,e);if(o&&o.id!==r?.id)throw ue(`${n.name} already has a document named ${e}`,{name:e,holder:o.id})}a(J,"assertNameFree");function L(t,n,e){if(!U(t,n,e))throw y(`no document ${e.id}`)}a(L,"readable");function N(t,n,e){if(L(t,n,e),!A(t,n,e))throw new j("forbidden",`you cannot change ${e.name}`,$.GENERAL,{id:e.id})}a(N,"changeable");function K(t,n){const e=t.prepare(`SELECT p.rev_id FROM revision_parents rp JOIN revisions p ON p.rowid = rp.parent
+    WHERE rp.child = ? ORDER BY p.rev_id`).all(n.rowid);return{rowid:n.rowid,rev_id:n.rev_id,number:n.number,body_hash:n.body_hash,author:n.author===null?null:f(t,n.author)?.id??null,rationale:n.rationale,verbatim:n.verbatim===1,created_at:n.created_at,parents:e.map(r=>r.rev_id)}}a(K,"toRevision");function H(t,n){return t.prepare(`SELECT * FROM revisions r WHERE r.document = ?
+    AND NOT EXISTS (SELECT 1 FROM revision_parents p WHERE p.parent = r.rowid) ORDER BY r.number DESC, r.rev_id`).all(n.rowid).map(r=>K(t,r))}a(H,"heads");function ce(t){return t.map(n=>n.rev_id).sort().join(",")}a(ce,"headsKeyOf");function O(t,n){const e=t.prepare("SELECT * FROM documents WHERE object = ?").get(n.rowid);if(!e)throw y(`no document record for ${n.id}`);return{summary:e.summary,heads_key:e.heads_key,revision:e.revision,why_it_exists:e.why_it_exists,unlisted:e.unlisted===1,lint_ignore:e.lint_ignore_json===null?null:JSON.parse(e.lint_ignore_json),extensions:e.extensions_json===null?null:JSON.parse(e.extensions_json),source_path:e.source_path}}a(O,"documentRecord");function D(t,n,e){const r=t.prepare(`INSERT INTO revisions (document, rev_id, number, body_hash, author, rationale, verbatim, created_at)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(n.rowid,e.rev_id??Z(),e.number,e.body_hash,e.author?.rowid??null,e.rationale,e.verbatim?1:0,e.created_at??new Date().toISOString()),o=t.prepare("INSERT INTO revision_parents (child, parent) VALUES (?, ?)");for(const i of e.parents)o.run(r.rowid,i);return r}a(D,"insertRevision");function pe(t){const n=new Set;for(const e of t.matchAll(/\[\[([^[\]\n]+?)\]\]/g))n.add(e[1].trim());return[...n]}a(pe,"linksIn");function G(t,n,e,r){const o=[],i=[];for(const u of pe(r)){const s=re(t,n,u);"object"in s?o.push({written_as:u,dst:s.object}):"deleted"in s?o.push({written_as:u,dst:s.deleted}):"remote"in s||i.push(u)}return ne(t,e,o),i}a(G,"setRevisionLinks");function le(t,n,e){return n.type==="node"?n.id:t.prepare(`SELECT 1 FROM objects o JOIN objects d ON d.owner = o.rowid
+    WHERE o.name = ? AND o.type <> ? AND o.type IN ('person','app','repo','profile')
+      AND d.type = 'document' AND d.name = ? AND d.deleted_at IS NULL LIMIT 1`).get(n.name,n.type,e)?`${n.type}:${n.name}`:n.name}a(le,"ownerPrefix");function V(t,n,e){const r=t.prepare(`SELECT e.written_as, o.* FROM edges e JOIN objects o ON o.rowid = e.dst
+    WHERE e.type = 'links-to' AND e.src = ? AND e.written_as IS NOT NULL`).all(n.rowid);if(r.length===0)return e;const o=new Map;for(const i of r){if(i.deleted_at||i.written_as===i.id)continue;const u=!i.written_as.includes("/");if(u&&i.name===i.written_as)continue;const s=i.owner===null?null:f(t,i.owner),p=s?`${le(t,s,i.name)}/${i.name}`:i.name,l=u&&i.owner===n.owner?i.name:p;l!==i.written_as&&o.set(i.written_as,l)}return o.size===0?e:e.replace(/\[\[([^[\]\n]+?)\]\]/g,(i,u)=>{const s=o.get(u.trim());return s===void 0?i:`[[${s}]]`})}a(V,"withCurrentNames");function C(t,n,e){if(e.preview!==void 0){if(e.preview.trim()==="")throw c("a document needs a preview",{field:"preview"});t.prepare("UPDATE objects SET preview = ? WHERE rowid = ?").run(e.preview,n.rowid)}e.privacy!==void 0&&(I(t,f(t,n.owner),e.privacy),t.prepare("UPDATE objects SET privacy = ? WHERE rowid = ?").run(e.privacy,n.rowid));const r=a((i,u)=>t.prepare(`UPDATE documents SET ${i} = ? WHERE object = ?`).run(u,n.rowid),"set");e.summary!==void 0&&r("summary",e.summary),e.whyItExists!==void 0&&r("why_it_exists",e.whyItExists),e.unlisted!==void 0&&r("unlisted",e.unlisted?1:0),e.lintIgnore!==void 0&&r("lint_ignore_json",e.lintIgnore===null?null:JSON.stringify(e.lintIgnore)),e.extensions!==void 0&&r("extensions_json",e.extensions===null?null:JSON.stringify(e.extensions));const o=f(t,n.rowid);return e.rules!==void 0&&B(t,o,e.rules),o}a(C,"applyDocumentFields");function Y(t,n){if(n.owner.deleted_at)throw c(`${n.owner.name} is deleted`);if(n.preview.trim()==="")throw c("a document needs a preview",{field:"preview"});I(t,n.owner,n.privacy),J(t,n.owner,n.name);const e=oe(t,{...n.id?{id:n.id}:{},type:"document",kind:n.kind,owner:n.owner.rowid,privacy:n.privacy,name:n.name,preview:n.preview});return t.prepare("INSERT INTO documents (object, heads_key, revision) VALUES (?, '', 0)").run(e.rowid),C(t,e,{...n,preview:void 0,privacy:void 0,rules:n.rules??[]})}a(Y,"createDocument");function W(t,n){const e=H(t,n),r=ce(e),o=Math.max(0,...e.map(i=>i.number));return t.prepare("UPDATE documents SET heads_key = ?, revision = ? WHERE object = ?").run(r,o,n.rowid),{heads_key:r,revision:o,headCount:e.length}}a(W,"setHeads");function Oe(t,n,e,r,o){const i=F(r);return h(t,()=>{const u=E(n),s=Y(t,e),p=D(t,s,{number:1,body_hash:i,author:u,rationale:null,parents:[]}),{heads_key:l}=W(t,s);if(!A(t,n,s))throw y(`no owner ${e.owner.name} you can write to`);const w=G(t,n,s,r);return R(t,u,s),k(t,u,s,"write",{readHeadsKey:l}),S(t,{event:"created",object:s,actor:u,level:4,attrs:{revision:1},pointer:p.rev_id},o),{object:s,revision:1,unresolved:w}})}a(Oe,"writeDocument");function De(t,n,e){return t.prepare("SELECT read_heads_key FROM watches WHERE watcher = ? AND object = ?").get(E(n).rowid,e.rowid)?.read_heads_key??null}a(De,"readBase");function me(t,n){let e=t;for(const{old:r,new:o}of n){if(r==="")throw c("a replacement needs non-empty old text",{field:"replace"});const i=e.indexOf(r);if(i<0)throw c(`old text not found: ${JSON.stringify(r.slice(0,120))}`,{field:"replace",old:r});if(e.indexOf(r,i+1)>=0)throw c(`old text occurs more than once: ${JSON.stringify(r.slice(0,120))}`,{field:"replace",old:r});e=e.slice(0,i)+o+e.slice(i+r.length)}return e}a(me,"applyReplacements");function Te(t,n,e,r,o,i,u={},s){if(_(e),N(t,n,e),e.deleted_at)throw c(`${e.name} is deleted`);if(i===null)throw new j("read_first",`read ${e.name} before editing it`,$.GENERAL,{id:e.id});if(o.trim()==="")throw c("an edit needs a rationale",{field:"rationale"});const p=O(t,e);if(p.heads_key!==i)return{stale:{heads_key:p.heads_key,revision:p.revision}};const l=H(t,e);let w;if("body"in r)w=r.body;else{if(l.length!==1)throw c(`${e.name} has ${l.length} heads and needs a merge; pass the whole merged body`,{heads:l.length});w=me(V(t,e,te(l[0].body_hash)),r.replace)}const m=F(w);try{return h(t,()=>{const d=E(n),g=1+Math.max(0,...l.map(v=>v.number)),M=D(t,e,{number:g,body_hash:m,author:d,rationale:o,verbatim:r.verbatim===!0,parents:l.map(v=>v.rowid)}),T=M.rev_id,X=t.prepare("UPDATE documents SET heads_key = ?, revision = ? WHERE object = ? AND heads_key = ?").run(T,g,e.rowid,i);if(Number(X.changes)===0){const v=O(t,e);throw new z(v.heads_key,v.revision)}const x=C(t,e,u),q=G(t,n,x,w);return R(t,d,x),k(t,d,x,"write",{readHeadsKey:T}),S(t,{event:"edited",object:x,actor:d,level:8,pointer:M.rev_id,attrs:{revision:g,from_revision:p.revision,rationale:o}},s),{revision:g,heads_key:T,unresolved:q}})}catch(d){if(d instanceof z)return{stale:{heads_key:d.heads_key,revision:d.revision}};throw d}}a(Te,"editDocument");class z extends Error{static{a(this,"StaleEdit")}heads_key;revision;constructor(n,e){super("stale"),this.heads_key=n,this.revision=e}}function je(t,n,e,r){return _(e),n&&N(t,n,e),h(t,()=>{const o=C(t,e,r);return n&&R(t,E(n),o),o})}a(je,"setDocumentRecord");function we(t,n,e,r){const o=E(n),{heads_key:i}=O(t,e);k(t,o,e,"read",{readHeadsKey:i}),S(t,{event:"read",object:e,actor:o,level:1,attrs:{}},r)}a(we,"recordRead");function $e(t,n,e,r){return _(e),L(t,n,e),h(t,()=>{const o=O(t,e),i=H(t,e).map(s=>({...s,body:V(t,e,ee(s.body_hash,o.source_path))})),u=t.prepare("SELECT dst, written_as FROM edges WHERE type = 'links-to' AND src = ? ORDER BY written_as").all(e.rowid).map(s=>({written_as:s.written_as??"",object:f(t,s.dst)})).filter(s=>s.object&&U(t,n,s.object)).map(s=>({...s,deleted:s.object.deleted_at!==null}));return e.deleted_at||we(t,n,e,r),{object:e,record:o,heads:i,needsMerge:i.length>1,links:u}})}a($e,"readDocument");function Ae(t,n,e){return _(e),L(t,n,e),t.prepare("SELECT * FROM revisions WHERE document = ? ORDER BY number DESC, created_at DESC, rowid DESC").all(e.rowid).map(o=>K(t,o))}a(Ae,"history");function ke(t,n,e,r){if(_(e),e.deleted_at)throw c(`${e.name} is deleted`);return n&&N(t,n,e),h(t,()=>{const o=r.owner??f(t,e.owner),i=r.name??e.name;J(t,o,i,e),I(t,o,e.privacy),t.prepare("UPDATE objects SET name = ?, owner = ? WHERE rowid = ?").run(i,o.rowid,e.rowid);const u=f(t,e.rowid);if(o.rowid!==e.owner&&(se(t,u),n&&!A(t,n,u)))throw y(`no owner ${o.name} you can move documents to`);return n&&R(t,E(n),u),u})}a(ke,"moveDocument");function Ie(t,n,e,r){return _(e),e.deleted_at?e:(n&&N(t,n,e),h(t,()=>{t.prepare("UPDATE objects SET deleted_at = ? WHERE rowid = ?").run(new Date().toISOString(),e.rowid);const o=f(t,e.rowid),i=n?E(n):null;return i&&R(t,i,o),S(t,{event:"deleted",object:o,actor:i,level:8,attrs:{}},r),t.prepare("DELETE FROM watches WHERE object = ?").run(e.rowid),B(t,o,[]),o}))}a(Ie,"deleteDocument");function Le(t,n){if(n.revisions.length===0)throw c(`import of ${n.name}: no revisions`);return h(t,()=>{const e=Y(t,n);t.prepare("UPDATE objects SET created_at = ? WHERE rowid = ?").run(n.revisions[0].created_at,e.rowid);let r=null;return n.revisions.forEach((o,i)=>{r=D(t,e,{...o,number:i+1,parents:r===null?[]:[r]}).rowid}),W(t,e),f(t,e.rowid)})}a(Le,"importDocument");function He(t,n,e){if(_(n),n.privacy!=="public"&&P(t,n)==="repo")throw c(`a repo owns only public documents; refusing revisions of ${n.name}`);return h(t,()=>{const r=t.prepare("SELECT rowid, number, document FROM revisions WHERE rev_id = ?");let o=e.filter(s=>!r.get(s.rev_id));for(;o.length>0;){const s=[];for(const p of o){const l=p.parents.map(m=>r.get(m));if(l.some(m=>m===void 0)){s.push(p);continue}const w=l;if(w.some(m=>m.document!==n.rowid))throw c(`revision ${p.rev_id} names a parent of another document`);D(t,n,{...p,author:null,number:1+Math.max(0,...w.map(m=>m.number)),parents:w.map(m=>m.rowid)})}if(s.length===o.length)throw c(`revisions of ${n.name} name unknown parents: ${s.map(p=>p.rev_id).join(", ")}`);o=s}const{heads_key:i,headCount:u}=W(t,n);return{heads_key:i,headCount:u}})}a(He,"insertImportedRevisions");function Ce(t,n){const e=ie(t,n);if(!e||e.type!=="document")throw y(`no document ${n}`);return e}a(Ce,"documentById");export{E as actorOf,C as applyDocumentFields,me as applyReplacements,Ie as deleteDocument,Ce as documentById,O as documentRecord,Te as editDocument,H as heads,Ae as history,Le as importDocument,He as insertImportedRevisions,pe as linksIn,ke as moveDocument,De as readBase,$e as readDocument,we as recordRead,je as setDocumentRecord,G as setRevisionLinks,V as withCurrentNames,Oe as writeDocument};

package/dist/core/graph/edges.d.ts

@@ -0,0 +1,24 @@
+/** `acted-on` and `links-to` edges. An edge is visible only to a reader who may read both ends. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { ObjectRow, Reader } from './types.js';
+export type EdgeType = 'acted-on' | 'links-to';
+export interface Edge {
+    type: EdgeType;
+    src: ObjectRow;
+    dst: ObjectRow;
+    written_as: string | null;
+    created_at: string;
+}
+/** One row per actor and object however many times the actor acts. */
+export declare function recordActedOn(db: DatabaseSync, actor: ObjectRow, object: ObjectRow): void;
+/** Replace the document's `links-to` edges with the links of its current revision. */
+export declare function setLinks(db: DatabaseSync, doc: ObjectRow, links: ReadonlyArray<{
+    written_as: string;
+    dst: ObjectRow;
+}>): void;
+/** Documents whose body links to `object`. */
+export declare function backlinks(db: DatabaseSync, reader: Reader, object: ObjectRow): Edge[];
+export declare function edgesOf(db: DatabaseSync, reader: Reader, object: ObjectRow, opts?: {
+    type?: EdgeType;
+    direction?: 'out' | 'in' | 'both';
+}): Edge[];

package/dist/core/graph/edges.js

@@ -0,0 +1 @@
+var O=Object.defineProperty;var o=(t,n)=>O(t,"name",{value:n,configurable:!0});import{canRead as y}from"./access.js";import{getByRowid as R}from"./objects.js";function k(t,n,e){t.prepare("INSERT OR IGNORE INTO edges (type, src, dst, written_as, created_at) VALUES ('acted-on', ?, ?, NULL, ?)").run(n.rowid,e.rowid,new Date().toISOString())}o(k,"recordActedOn");function _(t,n,e){t.prepare("DELETE FROM edges WHERE type = 'links-to' AND src = ?").run(n.rowid);const s=t.prepare("INSERT OR IGNORE INTO edges (type, src, dst, written_as, created_at) VALUES ('links-to', ?, ?, ?, ?)"),i=new Date().toISOString();for(const c of e)s.run(n.rowid,c.dst.rowid,c.written_as,i)}o(_,"setLinks");function I(t,n,e){return S(t,n,e,{type:"links-to",direction:"in"})}o(I,"backlinks");function S(t,n,e,s={}){if(!y(t,n,e))return[];const i=s.direction??"both",c=s.type?[s.type]:["acted-on","links-to"],d=[];for(const r of c)i!=="in"&&d.push(...t.prepare("SELECT * FROM edges WHERE type = ? AND src = ?").all(r,e.rowid)),i!=="out"&&d.push(...t.prepare("SELECT * FROM edges WHERE type = ? AND dst = ?").all(r,e.rowid));const w=new Set,f=[];for(const r of d){const E=`${r.type}|${r.src}|${r.dst}`;if(w.has(E))continue;w.add(E);const a=r.src===e.rowid?e:R(t,r.src),p=r.dst===e.rowid?e:R(t,r.dst);if(!a||!p)continue;const u=a===e?p:a;u!==e&&!y(t,n,u)||f.push({type:r.type,src:a,dst:p,written_as:r.written_as,created_at:r.created_at})}return f}o(S,"edgesOf");export{I as backlinks,S as edgesOf,k as recordActedOn,_ as setLinks};

package/dist/core/graph/events.d.ts

@@ -0,0 +1,26 @@
+/** The event catalog, subject matching, listening-config resolution and `publish`: the one
+ *  path by which an event on an object reaches its watchers' inboxes. */
+import type { DatabaseSync } from 'node:sqlite';
+import { type ReposFn } from './reader.js';
+import { type Subscription } from './watches.js';
+import { type CanvasEvent, type EventName, type Level, type ListenConfig, type ListenDelivery, type ObjectRow, type ObjectType } from './types.js';
+/** The event's default level, or the caller's. Notices have no default: they carry the caller's tier. */
+export declare function levelFor(event: EventName, override?: Level, objectType?: ObjectType): Level;
+/** NATS-style match over dot-separated event names: `*` is one part, `>` the rest (at least one part). */
+export declare function matchSubject(pattern: string, event: string): boolean;
+/** Per config, the delivery of the highest threshold the level reaches; across configs, the
+ *  strongest. Null when the level is below every threshold of every config. */
+export declare function resolveDelivery(configs: readonly ListenConfig[], level: Level): ListenDelivery | null;
+/** A subscription's own config, else the watcher node's default, else the global default. */
+export declare function listenConfigFor(db: DatabaseSync, subscription: Pick<Subscription, 'config'>, watcher: ObjectRow): ListenConfig;
+/**
+ * Push `ev` to every node watching the object or a space or profile in its owner chain whose
+ * subscriptions receive it, inside the caller's write transaction. Document and job events reach
+ * only live (active|idle) watchers; node events also reach done ones without waking them. The
+ * actor is never pushed its own act, access is re-checked per watcher, and apps, persons and
+ * other non-node watchers get nothing. Writes a `messages` row only when a delivery results.
+ * `reposFn` resolves a watcher's repos when the object lives in a repo space.
+ */
+export declare function publish(db: DatabaseSync, ev: CanvasEvent, reposFn?: ReposFn): {
+    delivered: number;
+};

package/dist/core/graph/events.js

@@ -0,0 +1,6 @@
+var k=Object.defineProperty;var i=(t,e)=>k(t,"name",{value:e,configurable:!0});import{evalCondition as W}from"../predicate.js";import{insertEventMail as N,listenDeliveryTier as M}from"../feed/messages.js";import{ownerChain as J,readCheck as x}from"./access.js";import{publishLookups as H,readerForNode as $}from"./reader.js";import{configFromJson as g}from"./watches.js";import{DEFAULT_LISTEN as b}from"./types.js";const B={created:4,read:1,watched:1,edited:8,messaged:2,sent:1,configured:1,"report.update":5,"report.final":7,"report.result":5,exited:7,killed:7};function oe(t,e,o){if(e!==void 0)return e;if(t==="deleted")return o==="document"?8:5;if(t.startsWith("notice."))throw new Error(`${t} has no default level; pass the notice's tier as a level`);return B[t]}i(oe,"levelFor");function U(t,e){const o=t.split("."),r=e.split(".");for(let s=0;s<o.length;s++){if(o[s]===">")return s===o.length-1&&r.length>s;if(s>=r.length||o[s]!=="*"&&o[s]!==r[s])return!1}return o.length===r.length}i(U,"matchSubject");const S={"next-turn":1,"after-turn":2,steer:3,interrupt:4};function P(t,e){let o=null;for(const r of t){let s=null;for(const c of r)c.threshold<=e&&(!s||c.threshold>s.threshold)&&(s=c);s&&(!o||S[s.delivery]>S[o])&&(o=s.delivery)}return o}i(P,"resolveDelivery");function re(t,e,o){if(e.config)return e.config;const r=t.prepare("SELECT listen_default_json FROM nodes WHERE node_id = ?").get(o.id);return r?.listen_default_json?g(r.listen_default_json):b}i(re,"listenConfigFor");const V=new Set(["messaged","sent","configured","report.update","report.final","report.result","notice.crash","notice.deadline","notice.close"]),G=new Set(["person","app","repo","profile"]);function K(t){return t.event==="report.final"?"final":t.event==="report.result"?"completed":t.level>=7?"urgent":"update"}i(K,"inboxKind");function X(t,e,o){const r=e.object.owner===null?null:t.prepare("SELECT id FROM objects WHERE rowid = ?").get(e.object.owner).id;return{event:e.event,level:e.level,object:{id:e.object.id,type:e.object.type,kind:e.object.kind,owner:r,name:e.object.name},actor:e.actor?.id??null,attrs:o,...e.pointer===void 0?{}:{pointer:e.pointer}}}i(X,"pushFields");function O(t,e,o){const r=X(t,e,o),s=e.messageBody!==void 0&&(e.event.startsWith("report.")||e.event.startsWith("notice.")),c=s?typeof e.messageBody=="object"&&e.messageBody!==null&&!Array.isArray(e.messageBody)?{...e.messageBody,push:r}:{body:e.messageBody,push:r}:{push:r},a=s&&e.event.startsWith("report.")?e.messageBody:null;return{kind:K(e),label:a?.label??`${e.event} ${e.object.type} ${e.object.name}`,...a?.bodyRef===void 0?{}:{bodyRef:a.bodyRef},...a?.disposition===void 0?{}:{disposition:a.disposition},senderNodeId:e.actor?.type==="node"?e.actor.id:null,senderName:e.actor?.name??null,bodyJson:c,event:e.event,objectId:e.object.id,level:e.level,actorId:e.actor?.id??null}}i(O,"mailInput");function Y(t){const e=t.attrs.revision,o=t.attrs.from_revision??(typeof e=="number"?e-1:null),r=t.attrs.rationale;return{...t.attrs,from_revision:o,revision:e,authors:t.actor?[t.actor.id]:[],rationales:typeof r=="string"?[r]:[]}}i(Y,"editAttrs");function q(t,e){const o=[...t.authors??[],...e.authors.filter(r=>!(t.authors??[]).includes(r))];return{...e,from_revision:t.from_revision??null,authors:o,rationales:[...t.rationales??[],...e.rationales]}}i(q,"mergeEdits");function se(t,e,o=()=>[]){const r=J(t,e.object),s=[e.object.rowid,...r.filter(n=>G.has(n.type)).map(n=>n.rowid)],c=V.has(e.event),a=`w.object IN (${s.map(()=>"?").join(",")}) AND w.watcher != ?`,m="w.watcher, o.id AS watcher_id, n.status, n.listen_default_json, s.pattern, s.filter_json, s.config_json",_=t.prepare(c?`SELECT ${m} FROM watches w JOIN watch_subscriptions s ON s.watch = w.rowid
+        JOIN objects o ON o.rowid = w.watcher AND o.type = 'node' JOIN nodes n ON n.node_id = o.id WHERE ${a}`:`SELECT ${m} FROM nodes n CROSS JOIN objects o CROSS JOIN watches w CROSS JOIN watch_subscriptions s
+        WHERE n.status IN ('active','idle') AND o.id = n.node_id AND w.watcher = o.rowid AND s.watch = w.rowid AND ${a}`).all(...s,e.actor?.rowid??-1);if(_.length===0)return{delivered:0};const R={event:e.event,level:e.level,id:e.object.id,type:e.object.type,kind:e.object.kind,actor:e.actor?.id??null,...e.attrs},f=new Map;for(const n of _){if(!U(n.pattern,e.event)||n.filter_json!==null&&!W(JSON.parse(n.filter_json),R))continue;const l=n.config_json?g(n.config_json):n.listen_default_json?g(n.listen_default_json):b,d=f.get(n.watcher)??{id:n.watcher_id,status:n.status,configs:[]};d.configs.push(l),f.set(n.watcher,d)}const D=(r.length?r[r.length-1]:e.object).type==="repo",A=i(()=>[],"noRepos"),I=x(t,e.object),T=H(t),u=[];for(const n of f.values()){const l=P(n.configs,e.level);if(l===null||!I($(t,n.id,D?o:A,T)))continue;const d=M(l),p=n.status==="active"||n.status==="idle";u.push({nodeId:n.id,urgency:d.urgency,wake:p?d.wake:0})}if(u.length===0)return{delivered:0};if(e.event!=="edited")return N(t,O(t,e,e.attrs),u),{delivered:u.length};const E=Y(e),L=t.prepare(`SELECT d.delivery_id, d.message_id, m.body_json FROM deliveries d
+    JOIN messages m ON m.message_id = d.message_id
+    WHERE d.destination_kind = 'node_inbox' AND d.destination_id = ? AND d.state = 'pending' AND d.canceled_at IS NULL
+      AND m.event = 'edited' AND m.object_id = ?`),h=new Map,w=new Set,F=t.prepare("DELETE FROM deliveries WHERE delivery_id = ?");for(const n of u){const l=L.all(n.nodeId,e.object.id),d=l.at(-1);for(const j of l)F.run(j.delivery_id),w.add(j.message_id);const p=d?.message_id??null,y=h.get(p)??{prior:d?.body_json?JSON.parse(d.body_json).push?.attrs??null:null,destinations:[]};y.destinations.push(n),h.set(p,y)}for(const n of h.values())N(t,O(t,e,n.prior?q(n.prior,E):E),n.destinations);const C=t.prepare("DELETE FROM messages WHERE message_id = ? AND NOT EXISTS (SELECT 1 FROM deliveries WHERE message_id = ?)");for(const n of w)C.run(n,n);return{delivered:u.length}}i(se,"publish");export{oe as levelFor,re as listenConfigFor,U as matchSubject,se as publish,P as resolveDelivery};

package/dist/core/graph/exposures.d.ts

@@ -0,0 +1,53 @@
+/** The exposure ledger: what each node's loaded context already holds, per
+ *  channel (`system` = rebuilt system prompt, `transcript` = conversation), in
+ *  `exposures` and `context_sessions`. Rows cascade with the node. Callers
+ *  load, mutate in memory, and `saveLedger` inside their own transaction. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { RuleSpec } from './types.js';
+export type ExposureLevel = RuleSpec['deliver'];
+export type Channel = 'system' | 'transcript';
+export interface Held {
+    system?: ExposureLevel;
+    transcript?: ExposureLevel;
+    headsKey: string | null;
+    contentHash: string | null;
+}
+export type Listed = {
+    system?: ExposureLevel;
+    transcript?: ExposureLevel;
+};
+export interface Ledger {
+    node: number;
+    preferenceSnapshot: string | null;
+    objects: Map<number, Held>;
+    /** key = `<owner object id>/<prefix>` */
+    listed: Map<string, Listed>;
+}
+export interface Exposed {
+    object: number;
+    headsKey: string | null;
+    contentHash: string | null;
+}
+export declare function loadLedger(db: DatabaseSync, node: number): Ledger;
+/** Write what changed since `loadLedger` (a ledger never loaded is written whole). */
+export declare function saveLedger(db: DatabaseSync, ledger: Ledger): void;
+/** Whether the node has a ledger at all (a context session or any exposure). */
+export declare function hasLedger(db: DatabaseSync, node: number): boolean;
+/** End the node's context session: nothing is held any more. */
+export declare function clearLedger(db: DatabaseSync, node: number): void;
+/** Seed a fork with what the source's transcript holds; the fork builds its own
+ *  system prompt, so system rows and the preference snapshot are not copied. */
+export declare function forkLedger(db: DatabaseSync, source: number, fork: number): void;
+/** Held at `level` or above: this object, or any held object with the same body
+ *  (content hash). The object itself counts at content level only for the same revision. */
+export declare function heldAtOrAbove(ledger: Ledger, exposed: Exposed, level: ExposureLevel, channel?: Channel): boolean;
+/** Record that `channel` now holds the object at `level`; never lowers a level of the same revision. */
+export declare function hold(ledger: Ledger, channel: Channel, exposed: Exposed, level: ExposureLevel): void;
+export declare function listedAtOrAbove(ledger: Ledger, key: string, level: ExposureLevel, channel?: Channel): boolean;
+export declare function holdListing(ledger: Ledger, channel: Channel, key: string, level: ExposureLevel): void;
+/** Forget the transcript's copy of the object and of every held object with the
+ *  same body (compaction dropped it); system holdings stay. */
+export declare function demoteTranscript(ledger: Ledger, object: number): void;
+/** The byte-stable preference block: the first render is kept for the session. */
+export declare function freezePreferences(ledger: Ledger, rendered: string): string;
+export declare function hasTranscript(ledger: Ledger): boolean;