@nurix/nustack 0.24.0 → 0.25.2

package/dist/program.js

@@ -34,7 +34,8 @@ import { runHarnessMount, runHarnessStatus } from "./commands/harness.js";
 import { runCheck } from "./commands/check.js";
 import { runSessionsList, runSessionsPrune, runSessionsRecord, runSessionsServe, } from "./commands/sessions.js";
 import { registerReviewCommands } from "./commands/review.js";
-import { registerRecordsCommands, startDrainIfDue } from "./commands/records.js";
+import { registerRecordsCommands } from "./commands/records.js";
+import { registerStoreCommands, startDrainIfDue } from "./commands/store.js";
 import { registerSessionCommands } from "./commands/session.js";
 import { isPartCheckStale, startTelemetryReconcile } from "./lib/telemetry/part_state.js";
 import { RECORD_ALIAS_GROUPS, registerRecordAliases } from "./commands/recordAliases.js";
@@ -92,7 +93,7 @@ program
 program
     .command("sync")
     .description("Project this Project's Service credentials into the managed .env block (not Documents or Git)")
-    .option("--project <id>", "the Project to act as (defaults to nustack.service.json / NUSTACK_WORKSPACE_ID)")
+    .option("--project <id>", "the Project to act as (defaults to nustack.service.json / NUSTACK_PROJECT_ID)")
     .option("--json", "emit the versioned machine envelope instead of interactive output")
     .action(async (options) => runSync({ ...program.opts(), ...options }));
 program
@@ -260,10 +261,11 @@ registerProjectSetCommand(project, () => program.opts());
 registerActivityCommand(project, () => program.opts());
 registerProjectSyncCommands(project, () => program.opts());
 registerReviewCommands(program.command("review").description("Read and mirror NuStack Review items"), () => program.opts());
-registerRecordsCommands(program.command("records").description("Emit, send and list harness records"), () => program.opts());
+registerRecordsCommands(program.command("records").description("Emit and list harness records"), () => program.opts());
+registerStoreCommands(program.command("store").description("Sync this machine's NuStack database"), () => program.opts());
 registerRecordAliases(program, () => program.opts());
 const LOCAL_ONLY_COMMANDS = ["census", "check"];
-const UNDRAINED_GROUPS = ["records", "gate", "session", "read", "lane", ...RECORD_ALIAS_GROUPS];
+const UNDRAINED_GROUPS = ["records", "store", "gate", "session", "read", "lane", ...RECORD_ALIAS_GROUPS];
 const HOOK_PATH_COMMANDS = ["context"];
 program.hook("preAction", async (_program, action) => {
     if (program.opts().nonInteractive)
@@ -363,7 +365,7 @@ harness
 const toolkit = program.command("toolkit").description("Inspect and reconcile the Project's toolkit pin");
 toolkit
     .command("status")
-    .description("Compare the cloud pin against .nustack/workspace.json and nustack.service.json (F-026)")
+    .description("Compare the cloud pin against .nustack/project.json and nustack.service.json (F-026)")
     .option("--project <id>", "the Project to act as (defaults to the bound repository)")
     .option("--json", "emit the versioned machine envelope")
     .action(async (options) => runToolkitStatus(options, program.opts()));
@@ -467,7 +469,7 @@ lane.command("remove")
 function describeError(error) {
     const directCode = error?.code;
     if (directCode === "PROJECT_CONTEXT_MISSING") {
-        return "no Project in context — run inside a bound repository (`.nustack/workspace.json`) or pass `--project <id>`.";
+        return "no Project in context — run inside a bound repository (`.nustack/project.json`) or pass `--project <id>`.";
     }
     if (directCode === "ORGANIZATION_CONTEXT_MISSING") {
         return "no Organization in context — run `nustack organization use <id>` or pass `--organization <id>`.";

package/dist/records.schema.json

@@ -48,6 +48,7 @@
               "type": "string",
               "enum": [
                 "open",
+                "in_progress",
                 "removed"
               ]
             }
@@ -129,6 +130,7 @@
           "type": "string",
           "enum": [
             "open",
+            "in_progress",
             "removed"
           ]
         }
@@ -1508,6 +1510,7 @@
                   "type": "string",
                   "enum": [
                     "open",
+                    "in_progress",
                     "removed"
                   ]
                 }
@@ -2375,6 +2378,7 @@
                         "type": "string",
                         "enum": [
                           "open",
+                          "in_progress",
                           "removed"
                         ]
                       }

package/dist/spec_schema.json

@@ -5,7 +5,7 @@
   "description": "Manifest grammar v1 for an NuStack repo. Declares repo identity plus one or more service entries.",
   "type": "object",
   "required": ["spec", "name", "description", "repository", "services"],
-  "not": { "required": ["nustackApp", "nustackWorkspace"] },
+  "not": { "required": ["nustackApp", "nustackProject"] },
   "additionalProperties": false,
   "properties": {
     "$schema": { "type": "string" },
@@ -39,14 +39,14 @@
         "workspaceId": { "type": "string", "minLength": 1 }
       }
     },
-    "nustackWorkspace": {
+    "nustackProject": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["v", "workspaceId", "organizationId"],
-      "description": "The v2 Workspace binding the CLI writes (AD-025). `workspaceId` here is the WORKSPACE, not the tenant — `v` is what tells the two apart from nustackApp's identically named key. A manifest carrying both blocks is refused.",
+      "required": ["v", "projectId", "organizationId"],
+      "description": "The v2 Project binding the CLI writes. `projectId` names the Project; nustackApp's `workspaceId` names the tenant. A manifest carrying both blocks is refused.",
       "properties": {
         "v": { "const": 2 },
-        "workspaceId": { "type": "string", "minLength": 1 },
+        "projectId": { "type": "string", "minLength": 1 },
         "organizationId": { "type": "string", "minLength": 1 }
       }
     },

package/dist/vendor/harness/rules/docsRoot.js

@@ -1,9 +1,9 @@
-// packages/harness/src/rules/docsRoot.ts - The repository's docs root: `.nustack/workspace.json` docsRoot, else
+// packages/harness/src/rules/docsRoot.ts - The repository's docs root: `.nustack/project.json` docsRoot, else
 // `.claude/harness.json` docsRoot, else `docs`. One function for the rules and the mount, applying the declaration
 // rule the `project-contract` conformance seam binds every reader to. docs/architecture/systems/harness-records.md
 // speaks for it.
 export const DEFAULT_DOCS_ROOT = 'docs';
-export const DOCS_ROOT_SOURCES = ['.nustack/workspace.json', '.claude/harness.json'];
+export const DOCS_ROOT_SOURCES = ['.nustack/project.json', '.claude/harness.json'];
 /** A `docsRoot` value as a declaration: trimmed, trailing slashes stripped; empty, absolute or `..`-segmented is none. */
 export function docsRootDeclaration(value) {
     if (typeof value !== 'string')

package/dist/vendor/harness/rules/index.js

@@ -59,7 +59,7 @@ export const RULE_ALIASES = {
 const SESSION_RULES = ['branch-worktree', 'live-command', 'commit-claim', 'foreign-claim', 'open-denials', 'exit-stop', 'queue'];
 /** Change rules judge trees and a change set; session rules judge one session's action or facts, at the hook. */
 export const RULE_SCOPES = Object.fromEntries(RULE_IDS.map((id) => [id, SESSION_RULES.includes(id) ? 'session' : 'change']));
-const DOCS_SOURCES = ['.nustack/workspace.json', '.claude/harness.json'];
+const DOCS_SOURCES = ['.nustack/project.json', '.claude/harness.json'];
 const DIRECT_READS = {
     ownership: ['**'],
     'plan-gate': [...DOCS_SOURCES, '@docs/history/plans/*.md'],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nurix/nustack",
-  "version": "0.24.0",
+  "version": "0.25.2",
   "description": "The nustack CLI — bootstrap NuStack services into a repo via the NuStack discovery plane.",
   "type": "module",
   "private": false,
@@ -34,7 +34,7 @@
     "@types/node": "^22.19.20",
     "typescript": "^5.7.2",
     "vitest": "^4.1.11",
-    "@nurix/contracts": "2.0.3",
+    "@nurix/contracts": "3.0.1",
     "@nurix/nustack.studio": "0.0.0",
     "@nurix/nustack.ui": "0.0.0",
     "@nurix/harness": "0.0.0"

package/dist/lib/local_store/migrations.js

@@ -1,399 +0,0 @@
-const MIGRATION_V1 = {
-    version: 1,
-    statements: [
-        `CREATE TABLE local_device_state (
-            id INTEGER PRIMARY KEY CHECK (id = 1),
-            device_ref TEXT,
-            api_base_url TEXT,
-            active_user_id TEXT,
-            active_user_email TEXT,
-            keychain_service TEXT,
-            keychain_account TEXT,
-            schema_version INTEGER NOT NULL DEFAULT 1,
-            last_auth_refresh_at_ms INTEGER,
-            created_at_ms INTEGER NOT NULL,
-            updated_at_ms INTEGER NOT NULL
-        )`,
-        `CREATE TABLE local_bindings (
-            id TEXT PRIMARY KEY,
-            app_id TEXT NOT NULL,
-            workspace_id TEXT NOT NULL,
-            repository_root TEXT NOT NULL,
-            git_dir TEXT NOT NULL,
-            git_common_dir TEXT NOT NULL,
-            repository_fingerprint TEXT NOT NULL,
-            bound_branch TEXT NOT NULL,
-            last_processed_commit_id TEXT,
-            last_applied_app_sequence INTEGER NOT NULL DEFAULT 0,
-            whitelist_manifest_id TEXT,
-            whitelist_manifest_sha256 TEXT,
-            whitelist_cache_path TEXT,
-            etna_profile_json TEXT CHECK (etna_profile_json IS NULL OR json_valid(etna_profile_json)),
-            status TEXT NOT NULL CHECK (status IN ('creating','active','paused','failed','removed')),
-            last_error_code TEXT,
-            last_error_detail TEXT,
-            created_at_ms INTEGER NOT NULL,
-            updated_at_ms INTEGER NOT NULL
-        )`,
-        `CREATE UNIQUE INDEX local_bindings_repository_root_live_unique
-            ON local_bindings (repository_root)
-            WHERE status IN ('creating','active','paused')`,
-        `CREATE INDEX local_bindings_app_idx ON local_bindings (app_id)`,
-        `CREATE TABLE local_commit_origins (
-            binding_id TEXT NOT NULL REFERENCES local_bindings(id),
-            commit_id TEXT NOT NULL,
-            handoff_id TEXT NOT NULL,
-            origin TEXT NOT NULL CHECK (origin = 'cloud_handoff'),
-            created_at_ms INTEGER NOT NULL,
-            PRIMARY KEY (binding_id, commit_id)
-        )`,
-        `CREATE TABLE inbound_handoff_applications (
-            handoff_id TEXT NOT NULL,
-            binding_id TEXT NOT NULL REFERENCES local_bindings(id),
-            state TEXT NOT NULL CHECK (state IN (
-                'received','evaluating','no_op','technical_wait','decision_required',
-                'approved','applying','committed','undo_requested','reverted',
-                'revert_conflict','superseded'
-            )),
-            manifest_sha256 TEXT,
-            base_manifest_json TEXT CHECK (base_manifest_json IS NULL OR json_valid(base_manifest_json)),
-            target_manifest_json TEXT CHECK (target_manifest_json IS NULL OR json_valid(target_manifest_json)),
-            local_state_fingerprint TEXT,
-            technical_wait_reason TEXT,
-            decision_state TEXT,
-            approved_by_user_id TEXT,
-            generated_commit_id TEXT,
-            notification_state TEXT,
-            recovery_bundle_id TEXT,
-            revert_commit_id TEXT,
-            superseded_by_handoff_id TEXT,
-            error_code TEXT,
-            error_detail TEXT,
-            created_at_ms INTEGER NOT NULL,
-            updated_at_ms INTEGER NOT NULL,
-            PRIMARY KEY (handoff_id, binding_id)
-        )`,
-        `CREATE TABLE local_recovery_bundles (
-            id TEXT PRIMARY KEY,
-            binding_id TEXT NOT NULL,
-            handoff_id TEXT NOT NULL,
-            bundle_path TEXT NOT NULL,
-            manifest_sha256 TEXT NOT NULL,
-            state TEXT NOT NULL CHECK (state IN ('active','restored','expired','deleted')),
-            created_at_ms INTEGER NOT NULL,
-            expires_at_ms INTEGER NOT NULL
-        )`,
-        `CREATE INDEX local_recovery_bundles_binding_idx ON local_recovery_bundles (binding_id)`,
-        `CREATE TABLE pending_uploads (
-            binding_id TEXT NOT NULL,
-            commit_id TEXT NOT NULL,
-            manifest_sha256 TEXT,
-            whitelist_manifest_sha256 TEXT,
-            idempotency_key TEXT NOT NULL,
-            attempts INTEGER NOT NULL DEFAULT 0,
-            next_retry_at_ms INTEGER,
-            last_error_code TEXT,
-            last_error_detail TEXT,
-            created_at_ms INTEGER NOT NULL,
-            updated_at_ms INTEGER NOT NULL,
-            PRIMARY KEY (binding_id, commit_id)
-        )`,
-        `CREATE UNIQUE INDEX pending_uploads_idempotency_key_unique
-            ON pending_uploads (idempotency_key)`,
-        `CREATE TABLE cached_app_events (
-            binding_id TEXT NOT NULL,
-            app_sequence INTEGER NOT NULL,
-            event_type TEXT NOT NULL,
-            payload_json TEXT CHECK (payload_json IS NULL OR json_valid(payload_json)),
-            applied_at_ms INTEGER,
-            created_at_ms INTEGER NOT NULL,
-            PRIMARY KEY (binding_id, app_sequence)
-        )`,
-        `CREATE TABLE local_filebeat_state (
-            id INTEGER PRIMARY KEY CHECK (id = 1),
-            binary_path TEXT,
-            config_dir TEXT,
-            desired_version TEXT,
-            observed_version TEXT,
-            desired_config_hash TEXT,
-            observed_config_hash TEXT,
-            process_state TEXT,
-            last_health_at_ms INTEGER,
-            created_at_ms INTEGER NOT NULL,
-            updated_at_ms INTEGER NOT NULL
-        )`,
-        `CREATE TABLE local_activity_bindings (
-            id TEXT PRIMARY KEY,
-            binding_id TEXT NOT NULL,
-            provider TEXT NOT NULL CHECK (provider IN ('claude_code','codex')),
-            provider_project_path TEXT NOT NULL,
-            path_fingerprint TEXT NOT NULL,
-            state TEXT NOT NULL CHECK (state IN ('active','missing','disabled')),
-            last_observed_at_ms INTEGER,
-            created_at_ms INTEGER NOT NULL,
-            updated_at_ms INTEGER NOT NULL
-        )`,
-        `CREATE UNIQUE INDEX local_activity_bindings_binding_provider_path_unique
-            ON local_activity_bindings (binding_id, provider, path_fingerprint)`,
-    ],
-};
-const MIGRATION_V2 = {
-    version: 2,
-    statements: [
-        `ALTER TABLE local_filebeat_state ADD COLUMN telemetry_enabled INTEGER NOT NULL DEFAULT 1`,
-        `ALTER TABLE local_filebeat_state ADD COLUMN last_error_code TEXT`,
-    ],
-};
-const MIGRATION_V3 = {
-    version: 3,
-    statements: [
-        `CREATE TABLE local_history_decisions (
-            id TEXT PRIMARY KEY,
-            binding_id TEXT NOT NULL REFERENCES local_bindings(id),
-            decision TEXT NOT NULL CHECK (decision IN ('publish_current_state','adopt_without_publishing')),
-            old_baseline_commit_id TEXT,
-            new_baseline_commit_id TEXT NOT NULL,
-            handoff_id TEXT,
-            created_at_ms INTEGER NOT NULL
-        )`,
-        `CREATE INDEX local_history_decisions_binding_idx
-            ON local_history_decisions (binding_id, created_at_ms)`,
-        `CREATE TABLE local_accepted_uploads (
-            binding_id TEXT NOT NULL REFERENCES local_bindings(id),
-            commit_id TEXT NOT NULL,
-            handoff_id TEXT NOT NULL,
-            app_sequence INTEGER NOT NULL,
-            manifest_sha256 TEXT NOT NULL,
-            created_at_ms INTEGER NOT NULL,
-            PRIMARY KEY (binding_id, commit_id)
-        )`,
-        `CREATE INDEX local_accepted_uploads_handoff_idx
-            ON local_accepted_uploads (handoff_id)`,
-    ],
-};
-const MIGRATION_V4 = {
-    version: 4,
-    statements: [`ALTER TABLE local_device_state ADD COLUMN active_workspace_id TEXT`],
-};
-const MIGRATION_V5 = {
-    version: 5,
-    statements: [`ALTER TABLE local_bindings ADD COLUMN telemetry_enabled INTEGER NOT NULL DEFAULT 1`],
-};
-const MIGRATION_V6 = {
-    version: 6,
-    statements: [
-        `ALTER TABLE local_bindings RENAME COLUMN workspace_id TO organization_id`,
-        `ALTER TABLE local_device_state RENAME COLUMN active_workspace_id TO active_organization_id`,
-        `ALTER TABLE local_bindings RENAME COLUMN app_id TO workspace_id`,
-        `ALTER TABLE local_bindings RENAME COLUMN last_applied_app_sequence TO last_applied_workspace_sequence`,
-        `ALTER TABLE cached_app_events RENAME COLUMN app_sequence TO workspace_sequence`,
-        `ALTER TABLE local_accepted_uploads RENAME COLUMN app_sequence TO workspace_sequence`,
-        `ALTER TABLE cached_app_events RENAME TO cached_workspace_events`,
-        `DROP INDEX IF EXISTS local_bindings_app_idx`,
-        `CREATE INDEX local_bindings_workspace_idx ON local_bindings (workspace_id)`,
-    ],
-};
-const MIGRATION_V7 = {
-    version: 7,
-    statements: [
-        `ALTER TABLE local_bindings RENAME COLUMN workspace_id TO project_id`,
-        `ALTER TABLE local_bindings RENAME COLUMN last_applied_workspace_sequence TO last_applied_project_sequence`,
-        `ALTER TABLE cached_workspace_events RENAME COLUMN workspace_sequence TO project_sequence`,
-        `ALTER TABLE local_accepted_uploads RENAME COLUMN workspace_sequence TO project_sequence`,
-        `ALTER TABLE cached_workspace_events RENAME TO cached_project_events`,
-        `DROP INDEX IF EXISTS local_bindings_workspace_idx`,
-        `CREATE INDEX local_bindings_project_idx ON local_bindings (project_id)`,
-    ],
-};
-const MIGRATION_V8 = {
-    version: 8,
-    statements: [
-        `CREATE TABLE record_outbox (
-            id TEXT PRIMARY KEY,
-            project_id TEXT NOT NULL,
-            kind TEXT NOT NULL CHECK (kind IN ('backlog','backlog.remove','bookkeeping','gate_event')),
-            idempotency_key TEXT NOT NULL,
-            door_url TEXT NOT NULL,
-            row_json TEXT NOT NULL CHECK (json_valid(row_json)),
-            attempts INTEGER NOT NULL DEFAULT 0,
-            next_retry_at_ms INTEGER,
-            last_error TEXT,
-            created_at_ms INTEGER NOT NULL,
-            updated_at_ms INTEGER NOT NULL
-        )`,
-        `CREATE UNIQUE INDEX record_outbox_idempotency_key_unique ON record_outbox (idempotency_key)`,
-        `CREATE TABLE record_store (
-            id TEXT PRIMARY KEY,
-            project_id TEXT,
-            repository_root TEXT NOT NULL,
-            kind TEXT NOT NULL CHECK (kind IN ('backlog','backlog.remove','bookkeeping','gate_event')),
-            idempotency_key TEXT NOT NULL,
-            row_json TEXT NOT NULL CHECK (json_valid(row_json)),
-            created_at_ms INTEGER NOT NULL,
-            updated_at_ms INTEGER NOT NULL
-        )`,
-        `CREATE UNIQUE INDEX record_store_idempotency_key_unique ON record_store (idempotency_key)`,
-    ],
-};
-const V9_LEGACY_BOOKKEEPING_ORIGIN = "'session:legacy-bookkeeping'";
-const V9_BOOKKEEPING_ORIGIN = `(CASE WHEN json_type(row_json, '$.planAnchor') = 'text'
-    THEN 'plan:' || json_extract(row_json, '$.planAnchor') ELSE ${V9_LEGACY_BOOKKEEPING_ORIGIN} END)`;
-const V9_NEW_KIND = `(CASE kind WHEN 'backlog.remove' THEN 'backlog' WHEN 'bookkeeping' THEN 'obligation' ELSE kind END)`;
-const V9_NATURAL_KEY = `COALESCE(CASE kind
-    WHEN 'bookkeeping' THEN ${V9_BOOKKEEPING_ORIGIN} || '#documentation:' || json_extract(row_json, '$.anchor')
-    ELSE json_extract(row_json, '$.anchor') END, '')`;
-const V9_PAYLOAD = `(CASE kind
-    WHEN 'backlog' THEN json_remove(row_json, '$.idempotencyKey', '$.planAnchor')
-    WHEN 'backlog.remove' THEN json_set(json_remove(row_json, '$.idempotencyKey', '$.planAnchor'), '$.state', 'removed')
-    WHEN 'bookkeeping' THEN (CASE WHEN json_type(row_json, '$.text') = 'text'
-        THEN json_object('origin', ${V9_BOOKKEEPING_ORIGIN}, 'type', 'documentation',
-            'subject', json_extract(row_json, '$.anchor'), 'claim', json_extract(row_json, '$.text'), 'state', 'open')
-        ELSE json_object('origin', ${V9_BOOKKEEPING_ORIGIN}, 'type', 'documentation',
-            'subject', json_extract(row_json, '$.anchor'), 'state', 'open') END)
-    ELSE json_remove(row_json, '$.idempotencyKey') END)`;
-const V9_SOURCE = `(
-    SELECT id, project_id, repository_root, NULL AS door_url, 0 AS attempts, NULL AS next_attempt_at,
-        NULL AS last_error, created_at_ms, updated_at_ms, json_extract(row_json, '$.planAnchor') AS plan_anchor,
-        ${V9_NEW_KIND} AS new_kind, ${V9_NATURAL_KEY} AS natural_key, ${V9_PAYLOAD} AS payload_json
-    FROM record_store
-    UNION ALL
-    SELECT id, project_id, NULL AS repository_root, NULLIF(door_url, '') AS door_url, attempts,
-        next_retry_at_ms AS next_attempt_at, last_error, created_at_ms, updated_at_ms,
-        json_extract(row_json, '$.planAnchor') AS plan_anchor,
-        ${V9_NEW_KIND} AS new_kind, ${V9_NATURAL_KEY} AS natural_key, ${V9_PAYLOAD} AS payload_json
-    FROM record_outbox
-)`;
-const V9_KEY = `COALESCE(project_id, repository_root) || ':' || new_kind || ':' || natural_key`;
-const MIGRATION_V9 = {
-    version: 9,
-    statements: [
-        `CREATE TABLE records (
-            id TEXT PRIMARY KEY,
-            kind TEXT NOT NULL,
-            schema_version INTEGER NOT NULL,
-            project_id TEXT,
-            session_id TEXT,
-            plan_anchor TEXT,
-            natural_key TEXT NOT NULL,
-            idempotency_key TEXT NOT NULL,
-            payload_json TEXT NOT NULL CHECK (json_valid(payload_json)),
-            sync_state TEXT NOT NULL,
-            attempts INTEGER NOT NULL DEFAULT 0,
-            next_attempt_at INTEGER,
-            last_error TEXT,
-            created_at INTEGER NOT NULL,
-            repository_root TEXT,
-            door_url TEXT,
-            placement TEXT,
-            credential TEXT
-        )`,
-        `CREATE UNIQUE INDEX records_idempotency_key_unique ON records (idempotency_key)`,
-        `CREATE INDEX records_sync_state_next_attempt_idx ON records (sync_state, next_attempt_at)`,
-        `INSERT OR REPLACE INTO records (id, kind, schema_version, project_id, session_id, plan_anchor, natural_key,
-            idempotency_key, payload_json, sync_state, attempts, next_attempt_at, last_error, created_at,
-            repository_root, door_url, placement, credential)
-         SELECT id, new_kind, 1, project_id, NULL, plan_anchor, natural_key, ${V9_KEY}, payload_json, 'pending',
-            attempts, next_attempt_at, last_error, created_at_ms, repository_root, door_url, NULL, NULL
-         FROM ${V9_SOURCE}
-         ORDER BY created_at_ms, updated_at_ms`,
-        `CREATE TEMP TABLE records_v9_guard (shortfall INTEGER NOT NULL CONSTRAINT records_v9_guard CHECK (shortfall = 0))`,
-        `INSERT INTO records_v9_guard SELECT count(*) FROM records
-            WHERE kind = 'backlog' AND json_extract(payload_json, '$.anchor') IS NULL`,
-        `INSERT INTO records_v9_guard SELECT count(*) FROM records
-            WHERE kind = 'obligation' AND (json_extract(payload_json, '$.origin') IS NULL
-                OR json_extract(payload_json, '$.subject') IS NULL OR json_extract(payload_json, '$.state') IS NULL)`,
-        `INSERT INTO records_v9_guard SELECT
-            (SELECT count(DISTINCT ${V9_KEY}) FROM ${V9_SOURCE}) - (SELECT count(*) FROM records)`,
-        `DROP TABLE records_v9_guard`,
-        `DROP TABLE record_outbox`,
-        `DROP TABLE record_store`,
-    ],
-};
-const MIGRATION_V10 = {
-    version: 10,
-    statements: [
-        `CREATE TABLE routing_latch (
-            session_id TEXT,
-            job_kind TEXT,
-            failures INTEGER NOT NULL DEFAULT 0,
-            budget_misses INTEGER NOT NULL DEFAULT 0,
-            latched_at INTEGER,
-            PRIMARY KEY (session_id, job_kind)
-        )`,
-        `CREATE TABLE label_rows (
-            id TEXT PRIMARY KEY,
-            session_id TEXT,
-            agent_type TEXT,
-            path TEXT,
-            estimated_tokens INTEGER,
-            returned_tokens INTEGER,
-            handler TEXT,
-            check_result TEXT,
-            bypass_used INTEGER,
-            latency_ms INTEGER,
-            tokens_kept_out INTEGER,
-            created_at INTEGER,
-            sync_state TEXT NOT NULL DEFAULT 'pending'
-        )`,
-        `CREATE INDEX label_rows_sync_state_created_at_idx ON label_rows (sync_state, created_at)`,
-        `CREATE TABLE gated_paths (
-            session_id TEXT,
-            path TEXT,
-            gated_at INTEGER,
-            PRIMARY KEY (session_id, path)
-        )`,
-    ],
-};
-export const MIGRATIONS = [
-    MIGRATION_V1,
-    MIGRATION_V2,
-    MIGRATION_V3,
-    MIGRATION_V4,
-    MIGRATION_V5,
-    MIGRATION_V6,
-    MIGRATION_V7,
-    MIGRATION_V8,
-    MIGRATION_V9,
-    MIGRATION_V10,
-];
-export const LATEST_SCHEMA_VERSION = MIGRATIONS[MIGRATIONS.length - 1].version;
-export class LocalSchemaTooNewError extends Error {
-    foundVersion;
-    supportedVersion;
-    constructor(foundVersion, supportedVersion) {
-        super(`This machine's NuStack local store is at schema version ${foundVersion}, but this CLI only supports up to ${supportedVersion}. Update the nustack CLI to continue.`);
-        this.name = "LocalSchemaTooNewError";
-        this.foundVersion = foundVersion;
-        this.supportedVersion = supportedVersion;
-    }
-}
-function readUserVersion(db) {
-    const row = db.prepare("PRAGMA user_version").get();
-    return typeof row?.user_version === "number" ? row.user_version : 0;
-}
-export function migrateToLatest(db) {
-    const current = readUserVersion(db);
-    if (current > LATEST_SCHEMA_VERSION) {
-        throw new LocalSchemaTooNewError(current, LATEST_SCHEMA_VERSION);
-    }
-    for (const migration of MIGRATIONS) {
-        if (migration.version <= current)
-            continue;
-        db.exec("BEGIN IMMEDIATE");
-        if (readUserVersion(db) >= migration.version) {
-            db.exec("COMMIT");
-            continue;
-        }
-        try {
-            for (const statement of migration.statements) {
-                db.exec(statement);
-            }
-            db.exec(`PRAGMA user_version = ${migration.version}`);
-            db.exec("COMMIT");
-        }
-        catch (error) {
-            db.exec("ROLLBACK");
-            throw error;
-        }
-    }
-}

package/dist/lib/records/door.js

@@ -1,79 +0,0 @@
-import { assertCredentialOrigin, resolveNuStackOrigin } from "../nustack_client.js";
-import { resolveProjectId } from "../project_context.js";
-import { readProjectContract } from "../project_contract.js";
-import { originOf } from "../origin_guard.js";
-export const RECORD_KINDS = ["obligation", "gate_event", "changelog", "memory", "backlog", "proposal", "triage"];
-export const LEGACY_KIND_TRANSLATION = { "backlog.remove": "backlog", bookkeeping: "obligation" };
-export const RECORDS_BATCH_CAP = 200;
-export const RECORD_SCHEMA_VERSION = 1;
-const REQUEST_TIMEOUT_MS = 10_000;
-const RETRY_BASE_MS = 30_000;
-const RETRY_CEILING_MS = 60 * 60 * 1000;
-export function isRecordKind(value) {
-    return typeof value === "string" && RECORD_KINDS.includes(value);
-}
-export function isLegacyKind(value) {
-    return typeof value === "string" && Object.hasOwn(LEGACY_KIND_TRANSLATION, value);
-}
-export function isEmitKind(value) {
-    return isRecordKind(value) || isLegacyKind(value);
-}
-export function translatedKindOf(kind) {
-    return isLegacyKind(kind) ? LEGACY_KIND_TRANSLATION[kind] : kind;
-}
-export async function readMountDoor(root) {
-    return (await readProjectContract(root)).door;
-}
-export async function resolveDoor(root, globals, projectFlag) {
-    const project = await resolveProjectId(root, projectFlag ? { project: projectFlag } : {});
-    if (!project.ok)
-        return { kind: "store", projectId: null, root, reason: "this folder is not bound to a Project" };
-    const contract = await readProjectContract(root);
-    const door = contract.door;
-    if (door === null)
-        return { kind: "store", projectId: project.projectId, root, reason: "the harness manifest configures no door" };
-    let origin;
-    try {
-        origin = resolveNuStackOrigin(globals, root).url;
-    }
-    catch (error) {
-        return { kind: "store", projectId: project.projectId, root, reason: error instanceof Error ? error.message : String(error) };
-    }
-    if (door !== undefined && contract.doorSource === "contract" && originOf(door) !== originOf(origin)) {
-        const reason = `the contract's door ${door} is not on the resolved origin ${origin}; records stay local`;
-        process.stderr.write(`nustack: ${reason}\n`);
-        return { kind: "store", projectId: project.projectId, root, reason };
-    }
-    return { kind: "door", projectId: project.projectId, doorUrl: door ?? origin, isPlatformDefault: door === undefined, root };
-}
-export function retryDelayMs(attempts) {
-    return Math.min(RETRY_BASE_MS * 2 ** Math.max(0, attempts - 1), RETRY_CEILING_MS);
-}
-export async function postRecords(doorUrl, projectId, request, bearer) {
-    try {
-        await assertCredentialOrigin(doorUrl);
-    }
-    catch (error) {
-        const code = typeof error.code === "string" ? error.code : null;
-        return { ok: false, status: 0, code, message: error instanceof Error ? error.message : String(error) };
-    }
-    let response;
-    try {
-        response = await fetch(`${doorUrl}/api/v2/projects/${encodeURIComponent(projectId)}/records`, {
-            method: "POST",
-            headers: { "content-type": "application/json", authorization: `Bearer ${bearer}` },
-            body: JSON.stringify(request),
-            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
-        });
-    }
-    catch (error) {
-        return { ok: false, status: 0, code: null, message: `the door did not answer: ${error instanceof Error ? error.message : String(error)}` };
-    }
-    const body = (await response.json().catch(() => null));
-    if (!response.ok) {
-        const code = typeof body?.error?.code === "string" ? body.error.code : null;
-        const detail = typeof body?.error?.message === "string" ? body.error.message : `HTTP ${response.status}`;
-        return { ok: false, status: response.status, code, message: `${code ?? `HTTP ${response.status}`}: ${detail}` };
-    }
-    return { ok: true, landed: body?.data?.landed ?? 0, skipped: body?.data?.skipped ?? 0 };
-}