@omnitype-code/journal 2.0.0

package/dist/cloud/shipper.js

@@ -0,0 +1,177 @@
+/**
+ * CloudShipper — uploads pending journal events to the OmniType backend.
+ *
+ * Lifecycle:
+ *   shipper = new CloudShipper(journal, installInfo, journalRoot);
+ *   shipper.start();          // begins background loop
+ *   await shipper.flush();    // manual trigger (e.g. from CLI `push` command)
+ *   shipper.stop();           // graceful shutdown
+ *
+ * Gate: only org installs upload. Personal installs (org_id == null) are local-only.
+ *
+ * Retry policy:
+ *   - Failed upload: retry after RETRY_DELAYS[attempt] seconds
+ *   - Confirmed events are removed from PendingQueue immediately
+ *   - On daemon restart, PendingQueue.load() re-queues un-confirmed events
+ */
+import { promisify } from 'node:util';
+import { gzip } from 'node:zlib';
+import { PendingQueue } from './pending.js';
+const gzipAsync = promisify(gzip);
+const FLUSH_INTERVAL_MS = 30_000; // flush every 30s
+const BATCH_MAX = 200; // events per upload
+const RETRY_DELAYS_MS = [5_000, 30_000, 300_000]; // 5s, 30s, 5m
+const INGEST_URL = 'https://api.imrishav.life/v2/journal/ingest';
+export class CloudShipper {
+    journal;
+    install;
+    queue;
+    timer = null;
+    stopped = false;
+    flushInProgress = false;
+    url;
+    authToken;
+    orgId;
+    projectName;
+    installId;
+    allowPromptText;
+    unsubscribe;
+    constructor(journal, install, journalRoot, config = {}) {
+        this.journal = journal;
+        this.install = install;
+        this.queue = new PendingQueue(journalRoot);
+        this.url = config.ingestUrl ?? INGEST_URL;
+        this.authToken = config.authToken ?? process.env['OMNITYPE_TOKEN'] ?? '';
+        this.orgId = config.orgId ?? install.org_id ?? null;
+        this.projectName = config.projectName ?? install.project_name ?? 'default';
+        this.installId = install.install_id;
+        // Default OFF. Only true when the local user has explicitly enabled it.
+        this.allowPromptText = config.allowPromptText === true;
+    }
+    /**
+     * Strip fields that should never leave the developer's machine unless they
+     * have explicitly opted in. Currently scrubs PromptCapture.prompt_text.
+     * This is applied uniformly to every event before upload — there is no
+     * server-policy override path.
+     */
+    scrubForUpload(event) {
+        if (this.allowPromptText)
+            return event;
+        if (event.type !== 'PromptCapture')
+            return event;
+        const { prompt_text, ...rest } = event;
+        return rest;
+    }
+    start() {
+        if (!this.orgId) {
+            // Personal install — cloud sync disabled, nothing to do
+            return;
+        }
+        this.queue.load();
+        // Subscribe to new events
+        this.unsubscribe = this.journal.subscribe((evt) => {
+            this.queue.enqueue(evt);
+        });
+        // Periodic flush
+        this.timer = setInterval(() => {
+            if (!this.flushInProgress)
+                this.flush().catch(() => { });
+        }, FLUSH_INTERVAL_MS);
+        this.timer.unref();
+        // Initial flush for events that were pending before this start
+        if (this.queue.pendingCount > 0) {
+            this.flush().catch(() => { });
+        }
+    }
+    stop() {
+        this.stopped = true;
+        this.unsubscribe?.();
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    async flush() {
+        if (!this.orgId || this.stopped) {
+            return { accepted: 0, skipped: 0, pending: 0 };
+        }
+        if (!this.authToken) {
+            return { accepted: 0, skipped: 0, pending: this.queue.pendingCount };
+        }
+        this.flushInProgress = true;
+        try {
+            return await this.uploadWithRetry();
+        }
+        finally {
+            this.flushInProgress = false;
+        }
+    }
+    async uploadWithRetry() {
+        const batch = this.queue.drain(BATCH_MAX);
+        if (batch.length === 0) {
+            return { accepted: 0, skipped: 0, pending: 0 };
+        }
+        let lastError = null;
+        for (let attempt = 0; attempt <= RETRY_DELAYS_MS.length; attempt++) {
+            if (this.stopped)
+                break;
+            try {
+                const result = await this.upload(batch);
+                const highestSeq = batch[batch.length - 1].seq;
+                this.queue.confirm(highestSeq);
+                return { ...result, pending: this.queue.pendingCount };
+            }
+            catch (err) {
+                lastError = err instanceof Error ? err : new Error(String(err));
+                const delay = RETRY_DELAYS_MS[attempt];
+                if (delay == null || this.stopped)
+                    break;
+                await sleep(delay);
+            }
+        }
+        // All retries exhausted — log and leave in pending queue
+        console.error(`[omnitype-shipper] upload failed after retries: ${lastError?.message}`);
+        return { accepted: 0, skipped: 0, pending: this.queue.pendingCount };
+    }
+    async upload(events) {
+        // Scrub privacy-sensitive fields client-side before serialization.
+        const safeEvents = events.map((e) => this.scrubForUpload(e));
+        const body = JSON.stringify({
+            project_name: this.projectName,
+            install_id: this.installId,
+            events: safeEvents,
+        });
+        const compressed = await gzipAsync(Buffer.from(body, 'utf-8'));
+        const resp = await fetchWithTimeout(this.url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Content-Encoding': 'gzip',
+                'Authorization': `Bearer ${this.authToken}`,
+                'X-OmniType-Install': this.installId,
+            },
+            body: compressed,
+        }, 15_000);
+        if (!resp.ok) {
+            const text = await resp.text().catch(() => '');
+            throw new Error(`HTTP ${resp.status}: ${text.slice(0, 200)}`);
+        }
+        const json = await resp.json();
+        return { accepted: json.accepted ?? 0, skipped: json.skipped ?? 0 };
+    }
+}
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms).unref());
+}
+async function fetchWithTimeout(url, init, timeoutMs) {
+    const controller = new AbortController();
+    const id = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        return await fetch(url, { ...init, signal: controller.signal });
+    }
+    finally {
+        clearTimeout(id);
+    }
+}
+//# sourceMappingURL=shipper.js.map

package/dist/cloud/shipper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipper.js","sourceRoot":"","sources":["../../src/cloud/shipper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAG,kBAAkB;AACtD,MAAM,SAAS,GAAG,GAAG,CAAC,CAAe,oBAAoB;AACzD,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc;AAChE,MAAM,UAAU,GAAG,6CAA6C,CAAC;AAmBjE,MAAM,OAAO,YAAY;IAcJ;IACA;IAdX,KAAK,CAAe;IACpB,KAAK,GAA0C,IAAI,CAAC;IACpD,OAAO,GAAG,KAAK,CAAC;IAChB,eAAe,GAAG,KAAK,CAAC;IACf,GAAG,CAAS;IACZ,SAAS,CAAS;IAClB,KAAK,CAAgB;IACrB,WAAW,CAAS;IACpB,SAAS,CAAS;IAClB,eAAe,CAAU;IAClC,WAAW,CAAc;IAEjC,YACmB,OAAgB,EAChB,OAAoB,EACrC,WAAmB,EACnB,SAAwB,EAAE;QAHT,YAAO,GAAP,OAAO,CAAS;QAChB,YAAO,GAAP,OAAO,CAAa;QAIrC,IAAI,CAAC,KAAK,GAAG,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,UAAU,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QACzE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,IAAI,SAAS,CAAC;QAC3E,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;QACpC,wEAAwE;QACxE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,KAAmB;QACxC,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QACvC,IAAK,KAA2B,CAAC,IAAI,KAAK,eAAe;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,KAAgD,CAAC;QAClF,OAAO,IAAoB,CAAC;IAC9B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,wDAAwD;YACxD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAElB,0BAA0B;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;YAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,iBAAiB;QACjB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,IAAI,CAAC,eAAe;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1D,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAEnB,+DAA+D;QAC/D,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACvE,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACjD,CAAC;QAED,IAAI,SAAS,GAAiB,IAAI,CAAC;QACnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACnE,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM;YAExB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,CAAC;gBAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC/B,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChE,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACvC,IAAI,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO;oBAAE,MAAM;gBACzC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,OAAO,CAAC,KAAK,CAAC,mDAAmD,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,MAAsB;QACzC,mEAAmE;QACnE,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAE/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,MAAM;gBAC1B,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;gBAC3C,oBAAoB,EAAE,IAAI,CAAC,SAAS;aACrC;YACD,IAAI,EAAE,UAAU;SACjB,EAAE,MAAM,CAAC,CAAC;QAEX,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA6C,CAAC;QAC1E,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;IACtE,CAAC;CACF;AAED,iFAAiF;AAEjF,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAiB,EAAE,SAAiB;IAC/E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/crypto/chain.d.ts

@@ -0,0 +1,19 @@
+import type { Bytes16, Bytes32, EventBody, EventHeader } from '../schema/events.js';
+export declare const ZERO_HASH: Bytes32;
+export declare function loadOrCreateInstallKey(keysDir: string): Buffer;
+export interface NoteSigningKey {
+    publicKeyPem: string;
+    privateKeyPem: string;
+}
+export declare function loadOrCreateNoteSigningKey(keysDir: string): NoteSigningKey;
+export declare function signNote(noteSigningKey: NoteSigningKey, data: Buffer): Buffer;
+export declare function verifyNote(noteSigningKey: NoteSigningKey, data: Buffer, sig: Buffer): boolean;
+export declare function deriveAdapterSubkey(installKey: Buffer, adapterId: string): Buffer;
+export declare function canonicalize(obj: Record<string, unknown>): Buffer;
+export declare function signEvent(installKey: Buffer, header: Omit<EventHeader, 'sig'>, body: EventBody): Bytes32;
+export declare function verifyEventSig(installKey: Buffer, event: EventHeader & EventBody): boolean;
+export declare function hashEvent(event: EventHeader & EventBody): Bytes32;
+export declare function newNonce(): Bytes16;
+export declare function hashBytes(buf: Buffer | string): Bytes32;
+export declare function hashFile(path: string): Bytes32;
+//# sourceMappingURL=chain.d.ts.map

package/dist/crypto/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../../src/crypto/chain.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGpF,eAAO,MAAM,SAAS,EAAqB,OAAO,CAAC;AAInD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D;AAID,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAiB1E;AAED,wBAAgB,QAAQ,CAAC,cAAc,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAI7E;AAED,wBAAgB,UAAU,CAAC,cAAc,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAQ7F;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAIjF;AAQD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEjE;AAsCD,wBAAgB,SAAS,CACvB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAChC,IAAI,EAAE,SAAS,GACd,OAAO,CAGT;AAED,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,WAAW,GAAG,SAAS,GAC7B,OAAO,CAKT;AAID,wBAAgB,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,CAGjE;AAID,wBAAgB,QAAQ,IAAI,OAAO,CAElC;AAID,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAIvD;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO9C"}

package/dist/crypto/chain.js

@@ -0,0 +1,123 @@
+import { createHmac, createHash, randomBytes, generateKeyPairSync, createSign, createVerify } from 'node:crypto';
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { loadOrCreateInstallKeySecure } from '../security/keychain.js';
+export const ZERO_HASH = '0'.repeat(64);
+// ─── Key management ───────────────────────────────────────────────────────────
+export function loadOrCreateInstallKey(keysDir) {
+    return loadOrCreateInstallKeySecure(keysDir);
+}
+export function loadOrCreateNoteSigningKey(keysDir) {
+    mkdirSync(keysDir, { recursive: true, mode: 0o700 });
+    const pubPath = join(keysDir, 'notes.pub.pem');
+    const privPath = join(keysDir, 'notes.priv.pem');
+    if (existsSync(pubPath) && existsSync(privPath)) {
+        return {
+            publicKeyPem: readFileSync(pubPath, 'utf-8'),
+            privateKeyPem: readFileSync(privPath, 'utf-8'),
+        };
+    }
+    const { publicKey, privateKey } = generateKeyPairSync('ed25519', {
+        publicKeyEncoding: { type: 'spki', format: 'pem' },
+        privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
+    });
+    writeFileSync(pubPath, publicKey, { mode: 0o644 });
+    writeFileSync(privPath, privateKey, { mode: 0o600 });
+    return { publicKeyPem: publicKey, privateKeyPem: privateKey };
+}
+export function signNote(noteSigningKey, data) {
+    const signer = createSign('SHA256');
+    signer.update(data);
+    return signer.sign(noteSigningKey.privateKeyPem);
+}
+export function verifyNote(noteSigningKey, data, sig) {
+    try {
+        const verifier = createVerify('SHA256');
+        verifier.update(data);
+        return verifier.verify(noteSigningKey.publicKeyPem, sig);
+    }
+    catch {
+        return false;
+    }
+}
+export function deriveAdapterSubkey(installKey, adapterId) {
+    return createHmac('sha256', installKey)
+        .update(`adapter-subkey:${adapterId}`)
+        .digest();
+}
+// ─── Canonical serialization (RFC 8785 JCS subset) ───────────────────────────
+// Used for HMAC and hash computation. Must be deterministic across implementations.
+// Day 7 fix (§2.3): float numbers use ES6 Number-to-String to guarantee cross-platform
+// bit-identical output (IEEE 754 double, shortest representation via Grisu/Dragon4,
+// same as V8/SpiderMonkey/JavaScriptCore for values in the finite range).
+export function canonicalize(obj) {
+    return Buffer.from(jcsStringify(obj), 'utf-8');
+}
+function jcsStringify(val) {
+    if (val === null)
+        return 'null';
+    if (typeof val === 'boolean')
+        return val ? 'true' : 'false';
+    if (typeof val === 'number') {
+        if (!isFinite(val))
+            throw new Error(`JCS: non-finite number (${val}) cannot be canonicalized`);
+        // Integer check — avoids exponent form for whole numbers within safe range
+        if (Number.isInteger(val) && Math.abs(val) <= Number.MAX_SAFE_INTEGER) {
+            return val.toString();
+        }
+        // For floats: ES6 Number::toString gives the shortest round-trippable decimal.
+        // This is implementation-defined in the ES spec but identical across V8/SM/JSC/QuickJS
+        // for all IEEE-754 doubles — which is the JCS guarantee (RFC 8785 §3.2.2).
+        return val.toString();
+    }
+    if (typeof val === 'string')
+        return JSON.stringify(val);
+    if (Array.isArray(val)) {
+        return '[' + val.map(jcsStringify).join(',') + ']';
+    }
+    if (typeof val === 'object') {
+        const obj = val;
+        const keys = Object.keys(obj).sort();
+        const pairs = keys
+            .filter((k) => obj[k] !== undefined)
+            .map((k) => JSON.stringify(k) + ':' + jcsStringify(obj[k]));
+        return '{' + pairs.join(',') + '}';
+    }
+    throw new Error(`JCS: unsupported type ${typeof val}`);
+}
+// ─── Event signing ────────────────────────────────────────────────────────────
+export function signEvent(installKey, header, body) {
+    const payload = canonicalize({ ...header, ...body });
+    return createHmac('sha256', installKey).update(payload).digest('hex');
+}
+export function verifyEventSig(installKey, event) {
+    const { sig, ...rest } = event;
+    const payload = canonicalize(rest);
+    const expected = createHmac('sha256', installKey).update(payload).digest('hex');
+    return expected === sig;
+}
+// ─── Chain hash ───────────────────────────────────────────────────────────────
+export function hashEvent(event) {
+    const payload = canonicalize(event); // eslint-disable-line
+    return createHash('sha256').update(payload).digest('hex');
+}
+// ─── Nonce generation ─────────────────────────────────────────────────────────
+export function newNonce() {
+    return randomBytes(16).toString('hex');
+}
+// ─── File content hash ────────────────────────────────────────────────────────
+export function hashBytes(buf) {
+    return createHash('sha256')
+        .update(typeof buf === 'string' ? Buffer.from(buf, 'utf-8') : buf)
+        .digest('hex');
+}
+export function hashFile(path) {
+    try {
+        const buf = readFileSync(path);
+        return hashBytes(buf);
+    }
+    catch {
+        return ZERO_HASH;
+    }
+}
+//# sourceMappingURL=chain.js.map

package/dist/crypto/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../../src/crypto/chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEvE,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAY,CAAC;AAEnD,iFAAiF;AAEjF,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,4BAA4B,CAAC,OAAO,CAAC,CAAC;AAC/C,CAAC;AASD,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,YAAY,EAAE,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;YAC5C,aAAa,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;SAC/C,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,EAAE;QAC/D,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;KACrD,CAAC,CAAC;IACH,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,cAA8B,EAAE,IAAY;IACnE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,cAA8B,EAAE,IAAY,EAAE,GAAW;IAClF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,SAAiB;IACvE,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC;SACpC,MAAM,CAAC,kBAAkB,SAAS,EAAE,CAAC;SACrC,MAAM,EAAE,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,oFAAoF;AACpF,uFAAuF;AACvF,oFAAoF;AACpF,0EAA0E;AAE1E,MAAM,UAAU,YAAY,CAAC,GAA4B;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAE5D,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,2BAA2B,CAAC,CAAC;QAC/F,2EAA2E;QAC3E,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACtE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QACD,+EAA+E;QAC/E,uFAAuF;QACvF,2EAA2E;QAC3E,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAExD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACrD,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI;aACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACrC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,GAAG,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,SAAS,CACvB,UAAkB,EAClB,MAAgC,EAChC,IAAe;IAEf,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,EAA6B,CAAC,CAAC;IAChF,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAY,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,UAAkB,EAClB,KAA8B;IAE9B,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,KAA2C,CAAC;IACrE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,OAAO,QAAQ,KAAK,GAAG,CAAC;AAC1B,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,SAAS,CAAC,KAA8B;IACtD,MAAM,OAAO,GAAG,YAAY,CAAC,KAA2C,CAAC,CAAC,CAAC,sBAAsB;IACjG,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAY,CAAC;AACvE,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,QAAQ;IACtB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAY,CAAC;AACpD,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,SAAS,CAAC,GAAoB;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;SACjE,MAAM,CAAC,KAAK,CAAY,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/daemon/journal.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Journal — the single writer.
+ *
+ * Responsibilities:
+ *  1. Accept events from adapters and the VSCode extension via UDS.
+ *  2. Assign monotonic seq, chain hash, HMAC-sign, fsync to segment.
+ *  3. Broadcast persisted events to subscribers (materializer, cloud shipper).
+ *  4. Maintain chain state in memory; persist head to chain/head.json atomically.
+ *
+ * Single-writer invariant: all appends go through this class.
+ * The UDS server (daemon.ts) serializes concurrent callers.
+ */
+import type { Actor, EventBody, InstallInfo, JournalEvent, Tier, Bytes32 } from '../schema/events.js';
+export interface JournalPaths {
+    root: string;
+    keysDir: string;
+    segmentsDir: string;
+    indexDir: string;
+    snapshotsDir: string;
+    chainDir: string;
+    dbPath: string;
+}
+export declare function resolvePaths(journalRoot: string): JournalPaths;
+interface ChainState {
+    seq: number;
+    lastHash: Bytes32;
+    headTs: number;
+}
+type EventListener = (event: JournalEvent) => void;
+export declare class Journal {
+    private installKey;
+    private installInfo;
+    private chainState;
+    private writer;
+    private mat;
+    private listeners;
+    private paths;
+    private batch;
+    private batchTimer;
+    private readonly BATCH_DELAY_MS;
+    private readonly BATCH_MAX;
+    readonly hardened: boolean;
+    constructor(journalRoot: string, workspace: string, opts?: {
+        hardened?: boolean;
+    });
+    append(actor: Actor, body: EventBody, tier: Tier, adapterId: string, sync?: boolean): number;
+    appendSync(actor: Actor, body: EventBody, tier: Tier, adapterId: string): number;
+    subscribe(listener: EventListener): () => void;
+    getChainHead(): ChainState;
+    getInstallInfo(): InstallInfo;
+    getInstallKey(): Buffer;
+    close(): void;
+    private buildEvent;
+    private flushNow;
+    private flushBatch;
+    private persistHead;
+    private loadChainHead;
+    /** Scan all segments and return the head state from the last event. */
+    private scanSegmentHead;
+    private replaySince;
+    private recordTamper;
+    private loadOrCreateInstallInfo;
+    /**
+     * Called by DaemonServer when an adapter authenticates over UDS.
+     * Emits CapabilityClaim + AdapterInstalled events into the journal.
+     */
+    registerAdapter(adapterId: string, capabilities: Record<string, 'available' | 'degraded' | 'unavailable'>, manifestSigVerified: boolean, runtimeMode: 'co-process' | 'in-process' | 'out-of-process' | 'hook'): void;
+    /**
+     * Emits a TierShift event when an adapter is downgraded at runtime.
+     * Called by the adapter loader when a capability becomes degraded. (Day 6: §3.3)
+     */
+    emitTierShift(adapterId: string, fromTier: Tier, toTier: Tier, reason: string, capability?: string): void;
+    private computeTierBreakdown;
+    getSpans(path: string, minTier?: Tier): import("../schema/events.js").Span[];
+    getAttributionSummary(path: string): Record<import("../schema/events.js").Origin, number>;
+    getConcurrencyConflicts(path?: string): {
+        path: string;
+        conflicting_seq: number;
+        expected_hash: string;
+        actual_hash: string;
+    }[];
+    getHighestTierAttestations(path: string): {
+        byte_start: number;
+        byte_end: number;
+        origin: import("../schema/events.js").Origin;
+        tier: Tier;
+        confidence: number;
+        adapter_id: string;
+    }[];
+}
+export {};
+//# sourceMappingURL=journal.d.ts.map

package/dist/daemon/journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../src/daemon/journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,KAAK,EACV,KAAK,EACL,SAAS,EAET,WAAW,EACX,YAAY,EACZ,IAAI,EACJ,OAAO,EACR,MAAM,qBAAqB,CAAC;AAa7B,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,CAU9D;AAED,UAAU,UAAU;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,KAAK,aAAa,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;AAEnD,qBAAa,OAAO;IAClB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,GAAG,CAAe;IAC1B,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,KAAK,CAAsB;IACnC,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAK;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAM;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;gBAEf,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO;IAuDrF,MAAM,CACJ,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,IAAI,EACV,SAAS,EAAE,MAAM,EACjB,IAAI,UAAQ,GACX,MAAM;IAoBT,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAIhF,SAAS,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAK9C,YAAY,IAAI,UAAU;IAI1B,cAAc,IAAI,WAAW;IAI7B,aAAa,IAAI,MAAM;IAIvB,KAAK,IAAI,IAAI;IASb,OAAO,CAAC,UAAU;IAwBlB,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,aAAa;IAiCrB,uEAAuE;IACvE,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,WAAW;IAyCnB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,uBAAuB;IAqB/B;;;OAGG;IACH,eAAe,CACb,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC,EACtE,mBAAmB,EAAE,OAAO,EAC5B,WAAW,EAAE,YAAY,GAAG,YAAY,GAAG,gBAAgB,GAAG,MAAM,GACnE,IAAI;IA4BP;;;OAGG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAkBzG,OAAO,CAAC,oBAAoB;IAY5B,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI;IAIrC,qBAAqB,CAAC,IAAI,EAAE,MAAM;IAIlC,uBAAuB,CAAC,IAAI,CAAC,EAAE,MAAM;;;;;;IAIrC,0BAA0B,CAAC,IAAI,EAAE,MAAM;;;;;;;;CAGxC"}