@opensip-cli/session-store 0.1.0

package/dist/session-payload-decode.js

@@ -0,0 +1,178 @@
+/**
+ * session-payload-decode — the shared, generic decoder for a stored session's
+ * opaque `payload` blob (the inverse of each tool's `build*SessionPayload`).
+ *
+ * Session replay needs every tool (`fit`/`graph`/`sim`)
+ * to read a persisted session back into a {@link SignalEnvelope} projection. The
+ * persisted detail shares ONE structural shape — `{ summary, checks[] }`, each
+ * check a `{ checkSlug, passed, violationCount?, durationMs, findings[] }` — so
+ * the decode of THAT structure lives here once, parameterised by the few
+ * per-tool differences (error-label, whether `filePath`/`violationCount` are
+ * required, whether findings carry a metadata bag).
+ *
+ * This holds NO tool vocabulary: it does not know about fit checks, graph rules,
+ * severity→category mapping, or signal IDs. Those projections stay in each
+ * engine's `session-replay.ts` (`replaySignal`). What lives here is purely the
+ * structural shape session-store persists — a faithful counterpart to the
+ * package's opaque-payload charter: session-store owns persistence AND the
+ * structural decode for replay, while tool semantics remain in the engines.
+ *
+ * The decoder tolerates legacy payloads that lack a top-level `__version`
+ * (treated as v1 with best-effort projection). Tools should prefer their own
+ * `*ReplayFromSession` functions (which call this decoder) for full projection
+ * to their live result types; this module only gives the common structural
+ * skeleton + the detected `payloadVersion` when present.
+ */
+import { extractPayloadVersion } from '@opensip-cli/core';
+/**
+ * Decode a stored session payload into its structural {@link DecodedSessionPayload}.
+ *
+ * @param payload - the opaque `StoredSession.payload` blob.
+ * @param opts - per-tool decode options (label + required-field toggles).
+ * @returns the decoded `{ summary, checks[] }` structure, plus `payloadVersion`
+ *   (the detected inner `__version` if present and valid; undefined for legacy
+ *   payloads that pre-date the convention — callers treat missing as v1).
+ * @throws {TypeError} when `payload`/`checks`/`findings` are not the expected
+ *   object/array shapes.
+ * @throws {Error} when a required scalar field is missing or mistyped, or a
+ *   finding severity is not `error`/`warning`.
+ */
+export function decodeSessionPayload(payload, opts) {
+    if (payload === null || typeof payload !== 'object') {
+        throw new Error(`${opts.tool} session has no replay payload`);
+    }
+    const candidate = payload;
+    const summary = decodeSummary(candidate.summary, `${opts.tool} session summary`);
+    if (!Array.isArray(candidate.checks)) {
+        throw new TypeError(`${opts.tool} session payload is missing checks[]`);
+    }
+    const payloadVersion = extractPayloadVersion(payload);
+    return {
+        summary,
+        checks: candidate.checks.map((check) => decodeCheck(check, opts)),
+        ...(payloadVersion === undefined ? {} : { payloadVersion }),
+    };
+}
+/**
+ * Decode the `summary` verdict-counts block.
+ *
+ * @throws {Error} when the value is missing or any count is not a number.
+ */
+export function decodeSummary(value, label) {
+    if (value === null || typeof value !== 'object') {
+        throw new Error(`${label} is missing`);
+    }
+    const summary = value;
+    return {
+        total: numberField(summary, 'total', label),
+        passed: numberField(summary, 'passed', label),
+        failed: numberField(summary, 'failed', label),
+        errors: numberField(summary, 'errors', label),
+        warnings: numberField(summary, 'warnings', label),
+    };
+}
+/**
+ * Decode one check row.
+ *
+ * @throws {Error} when the row is not an object or a required field is mistyped.
+ * @throws {TypeError} when `findings` is not an array.
+ */
+function decodeCheck(value, opts) {
+    if (value === null || typeof value !== 'object') {
+        throw new Error(`${opts.tool} session check row is invalid`);
+    }
+    const check = value;
+    const label = `${opts.tool} session check`;
+    const checkSlug = stringField(check, 'checkSlug', label);
+    let violationCount;
+    if (opts.requireViolationCount) {
+        violationCount = numberField(check, 'violationCount', label);
+    }
+    else if (typeof check.violationCount === 'number') {
+        violationCount = check.violationCount;
+    }
+    if (!Array.isArray(check.findings)) {
+        throw new TypeError(`${opts.tool} session check ${checkSlug} is missing findings[]`);
+    }
+    return {
+        checkSlug,
+        passed: booleanField(check, 'passed', label),
+        ...(violationCount === undefined ? {} : { violationCount }),
+        durationMs: numberField(check, 'durationMs', label),
+        findings: check.findings.map((finding) => decodeFinding(finding, opts)),
+    };
+}
+/**
+ * Decode one finding row.
+ *
+ * @throws {Error} when the row is not an object, a required string is mistyped,
+ *   or the severity is not `error`/`warning`.
+ */
+function decodeFinding(value, opts) {
+    if (value === null || typeof value !== 'object') {
+        throw new Error(`${opts.tool} session finding is invalid`);
+    }
+    const finding = value;
+    const label = `${opts.tool} session finding`;
+    const severity = finding.severity;
+    if (severity !== 'error' && severity !== 'warning') {
+        throw new Error(`${opts.tool} session finding has invalid severity`);
+    }
+    const filePath = opts.requireFilePath
+        ? stringField(finding, 'filePath', label)
+        : optionalString(finding.filePath);
+    const line = optionalNumber(finding.line);
+    const column = optionalNumber(finding.column);
+    const suggestion = optionalString(finding.suggestion);
+    const metadata = opts.allowMetadata ? decodeMetadata(finding.metadata) : undefined;
+    return {
+        ruleId: stringField(finding, 'ruleId', label),
+        message: stringField(finding, 'message', label),
+        severity,
+        ...(filePath === undefined ? {} : { filePath }),
+        ...(line === undefined ? {} : { line }),
+        ...(column === undefined ? {} : { column }),
+        ...(suggestion === undefined ? {} : { suggestion }),
+        ...(metadata === undefined ? {} : { metadata }),
+    };
+}
+/** Narrow an open metadata bag to its scalar subset; undefined when nothing survives. */
+function decodeMetadata(value) {
+    if (value === null || typeof value !== 'object')
+        return undefined;
+    const out = {};
+    for (const [key, entry] of Object.entries(value)) {
+        if (typeof entry === 'string' || typeof entry === 'number' || typeof entry === 'boolean') {
+            out[key] = entry;
+        }
+    }
+    return Object.keys(out).length === 0 ? undefined : out;
+}
+/** @throws {Error} when the field is not a number. */
+export function numberField(source, field, label) {
+    const value = source[field];
+    if (typeof value !== 'number')
+        throw new Error(`${label}.${field} must be a number`);
+    return value;
+}
+/** @throws {Error} when the field is not a string. */
+export function stringField(source, field, label) {
+    const value = source[field];
+    if (typeof value !== 'string')
+        throw new Error(`${label}.${field} must be a string`);
+    return value;
+}
+/** @throws {Error} when the field is not a boolean. */
+export function booleanField(source, field, label) {
+    const value = source[field];
+    if (typeof value !== 'boolean')
+        throw new Error(`${label}.${field} must be a boolean`);
+    return value;
+}
+function optionalString(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+function optionalNumber(value) {
+    return typeof value === 'number' ? value : undefined;
+}
+//# sourceMappingURL=session-payload-decode.js.map

package/dist/session-payload-decode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-payload-decode.js","sourceRoot":"","sources":["../src/session-payload-decode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAoD1D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgB,EAChB,IAAiC;IAEjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,gCAAgC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,SAAS,GAAG,OAAkD,CAAC;IACrE,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,kBAAkB,CAAC,CAAC;IACjF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,sCAAsC,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO;QACL,OAAO;QACP,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACjE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,KAAa;IACzD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,OAAO;QACL,KAAK,EAAE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC;QAC3C,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC;QAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC;QAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC;QAC7C,QAAQ,EAAE,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,KAAc,EAAE,IAAiC;IACpE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,+BAA+B,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,IAAI,gBAAgB,CAAC;IAC3C,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,cAAkC,CAAC;IACvC,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC/B,cAAc,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;SAAM,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QACpD,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,kBAAkB,SAAS,wBAAwB,CAAC,CAAC;IACvF,CAAC;IACD,OAAO;QACL,SAAS;QACT,MAAM,EAAE,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC;QAC5C,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;QAC3D,UAAU,EAAE,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC;QACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;KACxE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,KAAc,EAAE,IAAiC;IACtE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,6BAA6B,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,IAAI,kBAAkB,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe;QACnC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC;QACzC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC;QAC7C,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC;QAC/C,QAAQ;QACR,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,cAAc,CACrB,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,GAAG,GAAyC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACzF,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AACzD,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,WAAW,CAAC,MAA+B,EAAE,KAAa,EAAE,KAAa;IACvF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,KAAK,mBAAmB,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,WAAW,CAAC,MAA+B,EAAE,KAAa,EAAE,KAAa;IACvF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,KAAK,mBAAmB,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,YAAY,CAC1B,MAA+B,EAC/B,KAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,KAAK,oBAAoB,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC"}

package/dist/session-repo.d.ts

@@ -0,0 +1,60 @@
+import { type DataStore } from '@opensip-cli/datastore';
+import type { StoredSession, StoredSessionHostMetrics } from '@opensip-cli/contracts';
+import type { ToolShortId } from '@opensip-cli/core';
+/** Filters for {@link SessionRepo.list}: tool short-id and/or max row count. */
+export interface SessionListOptions {
+    readonly tool?: ToolShortId;
+    readonly limit?: number;
+}
+/**
+ * Persistence layer for tool-run sessions. Stores generic session columns plus
+ * one opaque per-tool `payload` blob; holds ZERO tool vocabulary — it never
+ * inspects/validates the payload shape (the producing tool owns that). (Audit
+ * 2026-05-29, session split.)
+ */
+export declare class SessionRepo {
+    private readonly datastore;
+    constructor(datastore: DataStore);
+    /**
+     * Persist a completed session row and its tool payload. Writes the generic
+     * columns including host-owned `startedAt` / `completedAt` (mapped to the
+     * physical `timestamp*` / `completed_at*` columns); `session.hostMetrics` is
+     * IGNORED here — metrics arrive later and attach via {@link SessionRepo.upsertHostMetrics}.
+     *
+     * @throws {ValidationError} When `startedAt` / `completedAt` are not finite
+     *   dates — guarded eagerly so a bad value never corrupts the durable log.
+     */
+    save(session: StoredSession): void;
+    list(opts?: SessionListOptions): readonly StoredSession[];
+    get(id: string): StoredSession | null;
+    latest(opts?: {
+        tool?: ToolShortId;
+    }): StoredSession | null;
+    count(): number;
+    /** Delete sessions older than the given Date. Returns affected rowcount. */
+    purge(before: Date): number;
+    /** Delete every session. Returns affected rowcount. */
+    clearAll(): number;
+    /**
+     * Delete ONE tool's sessions (`tools data purge`, ADR-0042). Associated
+     * `session_tool_payload` rows go via the schema's `onDelete: 'cascade'` FK
+     * (the sqlite backend runs `PRAGMA foreign_keys = ON`). Returns the deleted
+     * session count.
+     */
+    clearForTool(toolId: string): number;
+    private hydrateSession;
+    /**
+     * Read the sibling host-metrics record for a session, or `undefined` when no
+     * metrics row exists. Null columns are dropped so the projection only carries
+     * metrics that were actually captured.
+     */
+    private readHostMetrics;
+    /**
+     * Best-effort upsert of host-side overhead metrics for a session
+     * (host-owned-run-timing §5.3). The host run plane calls this as render /
+     * persist / egress metrics become known; only the provided fields are written,
+     * merging onto any existing row. Never throws — metrics are observability.
+     */
+    upsertHostMetrics(sessionId: string, metrics: StoredSessionHostMetrics): void;
+}
+//# sourceMappingURL=session-repo.d.ts.map

package/dist/session-repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-repo.d.ts","sourceRoot":"","sources":["../src/session-repo.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,SAAS,EAEf,MAAM,wBAAwB,CAAC;AAKhC,OAAO,KAAK,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;gBAEjC,SAAS,EAAE,SAAS;IAIhC;;;;;;;;OAQG;IACH,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAkFlC,IAAI,CAAC,IAAI,GAAE,kBAAuB,GAAG,SAAS,aAAa,EAAE;IA6B7D,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IAKrC,MAAM,CAAC,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,WAAW,CAAA;KAAO,GAAG,aAAa,GAAG,IAAI;IAK/D,KAAK,IAAI,MAAM;IAKf,4EAA4E;IAC5E,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM;IA0B3B,uDAAuD;IACvD,QAAQ,IAAI,MAAM;IAWlB;;;;;OAKG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAYpC,OAAO,CAAC,cAAc;IA4EtB;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAgBvB;;;;;OAKG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,GAAG,IAAI;CAiC9E"}

package/dist/session-repo.js

@@ -0,0 +1,328 @@
+import { SystemError, ValidationError, currentScope, extractPayloadVersion, isToolShortId, logger, } from '@opensip-cli/core';
+import { requireDrizzleDataStore, } from '@opensip-cli/datastore';
+import { desc, eq, lt } from 'drizzle-orm';
+import { sessionHostMetrics, sessions, sessionToolPayload } from './schema/sessions.js';
+const MODULE_NAME = 'session-store:session-repo';
+/**
+ * Persistence layer for tool-run sessions. Stores generic session columns plus
+ * one opaque per-tool `payload` blob; holds ZERO tool vocabulary — it never
+ * inspects/validates the payload shape (the producing tool owns that). (Audit
+ * 2026-05-29, session split.)
+ */
+export class SessionRepo {
+    datastore;
+    constructor(datastore) {
+        this.datastore = requireDrizzleDataStore(datastore);
+    }
+    /**
+     * Persist a completed session row and its tool payload. Writes the generic
+     * columns including host-owned `startedAt` / `completedAt` (mapped to the
+     * physical `timestamp*` / `completed_at*` columns); `session.hostMetrics` is
+     * IGNORED here — metrics arrive later and attach via {@link SessionRepo.upsertHostMetrics}.
+     *
+     * @throws {ValidationError} When `startedAt` / `completedAt` are not finite
+     *   dates — guarded eagerly so a bad value never corrupts the durable log.
+     */
+    save(session) {
+        try {
+            // Validate timing eagerly: a bad value becomes a clear ValidationError
+            // instead of silent NaN/"Invalid Date" corruption in the durable log.
+            const startedMs = new Date(session.startedAt).getTime();
+            const completedMs = new Date(session.completedAt).getTime();
+            if (!Number.isFinite(startedMs) || !Number.isFinite(completedMs)) {
+                // @fitness-ignore-next-line result-pattern-consistency -- persistence boundary (DEC-015): invalid run timing is a write-time data-integrity guard the caller cannot recover from, so throw (not Result) is correct
+                throw new ValidationError(`Invalid session timing for session ${session.id} (tool=${session.tool}): startedAt=${JSON.stringify(session.startedAt)} completedAt=${JSON.stringify(session.completedAt)}`, { code: 'VALIDATION.SESSION.INVALID_TIMESTAMP' });
+            }
+            this.datastore.transaction((tx) => {
+                tx.insert(sessions)
+                    .values({
+                    id: session.id,
+                    tool: session.tool,
+                    timestamp: startedMs,
+                    timestamp_iso: session.startedAt, // preserve original for fidelity (avoids Date roundtrip loss of sub-ms/lexical form)
+                    completed_at: completedMs,
+                    completed_at_iso: session.completedAt,
+                    cwd: session.cwd,
+                    recipe: session.recipe ?? null,
+                    score: session.score,
+                    passed: session.passed,
+                    durationMs: session.durationMs,
+                })
+                    .run();
+                // Tool-owned opaque detail (contracts never inspects the shape).
+                if (session.payload !== undefined) {
+                    const hasInnerVersion = extractPayloadVersion(session.payload) !== undefined;
+                    if (!hasInnerVersion) {
+                        // Encourage tools to adopt the __version convention on new writes.
+                        logger.warn({
+                            evt: 'session.payload.missing_version',
+                            module: MODULE_NAME,
+                            sessionId: session.id,
+                            tool: session.tool,
+                            msg: "Tool wrote a session payload without top-level __version (treated as legacy v1). Update the tool's build*SessionPayload to include __version: 1.",
+                        });
+                        const scope = currentScope();
+                        scope?.diagnostics?.event('persist', 'warn', 'session payload written without __version (legacy v1 treatment)', { sessionId: session.id, tool: session.tool });
+                    }
+                    tx.insert(sessionToolPayload)
+                        .values({
+                        sessionId: session.id,
+                        tool: session.tool,
+                        payload: session.payload,
+                        payload_version: 1, // outer storage contract version (inner __version lives inside the JSON blob)
+                    })
+                        .run();
+                }
+            });
+            logger.info({
+                evt: 'session.save.complete',
+                module: MODULE_NAME,
+                msg: 'Session saved',
+                sessionId: session.id,
+                tool: session.tool,
+                hasPayload: session.payload !== undefined,
+            });
+        }
+        catch (error) {
+            logger.error({
+                evt: 'session.save.error',
+                module: MODULE_NAME,
+                msg: 'Failed to save session',
+                sessionId: session.id,
+                error: error instanceof Error ? error.message : String(error),
+                ...(error instanceof Error && error.stack ? { stack: error.stack } : {}),
+            });
+            throw error;
+        }
+    }
+    list(opts = {}) {
+        try {
+            const baseQuery = opts.tool
+                ? this.datastore.db.select().from(sessions).where(eq(sessions.tool, opts.tool))
+                : this.datastore.db.select().from(sessions);
+            const ordered = baseQuery.orderBy(desc(sessions.timestamp));
+            const sessionRows = opts.limit ? ordered.limit(opts.limit).all() : ordered.all();
+            const results = [];
+            for (const row of sessionRows) {
+                results.push(this.hydrateSession(row));
+            }
+            logger.info({
+                evt: 'session.list.complete',
+                module: MODULE_NAME,
+                msg: 'Listed sessions',
+                count: results.length,
+            });
+            return results;
+        }
+        catch (error) {
+            logger.error({
+                evt: 'session.list.error',
+                module: MODULE_NAME,
+                msg: 'Failed to list sessions',
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw error;
+        }
+    }
+    get(id) {
+        const row = this.datastore.db.select().from(sessions).where(eq(sessions.id, id)).get();
+        return row ? this.hydrateSession(row) : null;
+    }
+    latest(opts = {}) {
+        const rows = this.list({ ...opts, limit: 1 });
+        return rows[0] ?? null;
+    }
+    count() {
+        const rows = this.datastore.db.select({ id: sessions.id }).from(sessions).all();
+        return rows.length;
+    }
+    /** Delete sessions older than the given Date. Returns affected rowcount. */
+    purge(before) {
+        try {
+            const cutoff = before.getTime();
+            const removed = this.datastore.db
+                .delete(sessions)
+                .where(lt(sessions.timestamp, cutoff))
+                .run();
+            logger.info({
+                evt: 'session.purge.complete',
+                module: MODULE_NAME,
+                msg: 'Purged sessions older than cutoff',
+                cutoff: before.toISOString(),
+                deleted: removed.changes,
+            });
+            return removed.changes;
+        }
+        catch (error) {
+            logger.error({
+                evt: 'session.purge.error',
+                module: MODULE_NAME,
+                msg: 'Failed to purge sessions',
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw error;
+        }
+    }
+    /** Delete every session. Returns affected rowcount. */
+    clearAll() {
+        const removed = this.datastore.db.delete(sessions).run();
+        logger.info({
+            evt: 'session.clear.complete',
+            module: MODULE_NAME,
+            msg: 'Cleared all sessions',
+            deleted: removed.changes,
+        });
+        return removed.changes;
+    }
+    /**
+     * Delete ONE tool's sessions (`tools data purge`, ADR-0042). Associated
+     * `session_tool_payload` rows go via the schema's `onDelete: 'cascade'` FK
+     * (the sqlite backend runs `PRAGMA foreign_keys = ON`). Returns the deleted
+     * session count.
+     */
+    clearForTool(toolId) {
+        const removed = this.datastore.db.delete(sessions).where(eq(sessions.tool, toolId)).run();
+        logger.info({
+            evt: 'session.clear_for_tool.complete',
+            module: MODULE_NAME,
+            msg: 'Cleared sessions for tool',
+            tool: toolId,
+            deleted: removed.changes,
+        });
+        return removed.changes;
+    }
+    hydrateSession(row) {
+        // Validate row.tool against the documented union — the SQLite column
+        // is plain text with no CHECK constraint, so a legacy or hand-edited
+        // row could carry a value outside the type. Casting blindly would
+        // silently misroute downstream consumers that branch on `tool`.
+        if (!isToolShortId(row.tool)) {
+            throw new SystemError(`Session ${row.id} has unknown tool value: ${JSON.stringify(row.tool)}`, { code: 'SYSTEM.DATA.UNKNOWN_TOOL' });
+        }
+        // Tool-owned opaque detail. drizzle returns the JSON column already
+        // parsed; contracts does not inspect or validate the shape — that is
+        // the owning tool's responsibility.
+        const payloadRow = this.datastore.db
+            .select({
+            payload: sessionToolPayload.payload,
+            payload_version: sessionToolPayload.payload_version,
+        })
+            .from(sessionToolPayload)
+            .where(eq(sessionToolPayload.sessionId, row.id))
+            .get();
+        const outerVersion = payloadRow?.payload_version ?? 1;
+        const innerVersion = extractPayloadVersion(payloadRow?.payload);
+        if (outerVersion > 1 || (innerVersion !== undefined && innerVersion > 1)) {
+            logger.warn({
+                evt: 'session.payload.future_version',
+                module: MODULE_NAME,
+                sessionId: row.id,
+                outerVersion,
+                innerVersion: innerVersion ?? null,
+                msg: 'Payload schema version newer than this CLI knows; treating as opaque (may lose fields on display).',
+            });
+            // Emit on the per-run DiagnosticsBus for --json / CommandOutcome consumers (cross-cutting observability).
+            // Uses currentScope per RunScope rules; safe no-op when no scope (e.g. some tests).
+            const scope = currentScope();
+            scope?.diagnostics?.event('load', 'warn', `session payload future version (outer=${outerVersion}, inner=${innerVersion ?? 'legacy'})`, {
+                sessionId: row.id,
+                outerVersion,
+                innerVersion: innerVersion ?? undefined,
+            });
+        }
+        const startedAt = row.timestamp_iso ?? new Date(row.timestamp).toISOString(); // prefer original for fidelity
+        // completedAt: prefer the stored ISO, else the stored ms, else (legacy rows
+        // written before completedAt existed) synthesize startedAt + durationMs.
+        const completedAt = row.completed_at_iso ??
+            (row.completed_at == null
+                ? new Date(row.timestamp + row.durationMs).toISOString() // legacy synth
+                : new Date(row.completed_at).toISOString());
+        const hostMetrics = this.readHostMetrics(row.id);
+        return {
+            id: row.id,
+            tool: row.tool,
+            startedAt,
+            completedAt,
+            cwd: row.cwd,
+            recipe: row.recipe ?? undefined,
+            score: row.score,
+            passed: row.passed,
+            durationMs: row.durationMs,
+            ...(hostMetrics ? { hostMetrics } : {}),
+            payload: payloadRow?.payload,
+        };
+    }
+    /**
+     * Read the sibling host-metrics record for a session, or `undefined` when no
+     * metrics row exists. Null columns are dropped so the projection only carries
+     * metrics that were actually captured.
+     */
+    readHostMetrics(sessionId) {
+        const row = this.datastore.db
+            .select()
+            .from(sessionHostMetrics)
+            .where(eq(sessionHostMetrics.sessionId, sessionId))
+            .get();
+        if (!row)
+            return undefined;
+        const metrics = {};
+        if (row.ttyBusyMs != null)
+            metrics.ttyBusyMs = row.ttyBusyMs;
+        if (row.renderMs != null)
+            metrics.renderMs = row.renderMs;
+        if (row.persistMs != null)
+            metrics.persistMs = row.persistMs;
+        if (row.egressMs != null)
+            metrics.egressMs = row.egressMs;
+        if (row.totalCommandMs != null)
+            metrics.totalCommandMs = row.totalCommandMs;
+        return Object.keys(metrics).length > 0 ? metrics : undefined;
+    }
+    /**
+     * Best-effort upsert of host-side overhead metrics for a session
+     * (host-owned-run-timing §5.3). The host run plane calls this as render /
+     * persist / egress metrics become known; only the provided fields are written,
+     * merging onto any existing row. Never throws — metrics are observability.
+     */
+    upsertHostMetrics(sessionId, metrics) {
+        try {
+            // `set` keys are the Drizzle COLUMN PROPERTY names (camelCase), NOT the
+            // SQL column names — Drizzle silently ignores unknown keys, so snake_case
+            // here would no-op the ON CONFLICT update and the merge would be lost.
+            const patch = {};
+            if (metrics.ttyBusyMs !== undefined)
+                patch.ttyBusyMs = metrics.ttyBusyMs;
+            if (metrics.renderMs !== undefined)
+                patch.renderMs = metrics.renderMs;
+            if (metrics.persistMs !== undefined)
+                patch.persistMs = metrics.persistMs;
+            if (metrics.egressMs !== undefined)
+                patch.egressMs = metrics.egressMs;
+            if (metrics.totalCommandMs !== undefined)
+                patch.totalCommandMs = metrics.totalCommandMs;
+            if (Object.keys(patch).length === 0)
+                return;
+            this.datastore.db
+                .insert(sessionHostMetrics)
+                .values({
+                sessionId,
+                ttyBusyMs: metrics.ttyBusyMs ?? null,
+                renderMs: metrics.renderMs ?? null,
+                persistMs: metrics.persistMs ?? null,
+                egressMs: metrics.egressMs ?? null,
+                totalCommandMs: metrics.totalCommandMs ?? null,
+            })
+                .onConflictDoUpdate({ target: sessionHostMetrics.sessionId, set: patch })
+                .run();
+        }
+        catch (error) {
+            logger.warn({
+                evt: 'session.host_metrics.upsert_failed',
+                module: MODULE_NAME,
+                sessionId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+}
+//# sourceMappingURL=session-repo.js.map

package/dist/session-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-repo.js","sourceRoot":"","sources":["../src/session-repo.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,eAAe,EACf,YAAY,EACZ,qBAAqB,EACrB,aAAa,EACb,MAAM,GACP,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,GAGxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAKxF,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAQjD;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IACL,SAAS,CAAmB;IAE7C,YAAY,SAAoB;QAC9B,IAAI,CAAC,SAAS,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;OAQG;IACH,IAAI,CAAC,OAAsB;QACzB,IAAI,CAAC;YACH,uEAAuE;YACvE,sEAAsE;YACtE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YACxD,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjE,mNAAmN;gBACnN,MAAM,IAAI,eAAe,CACvB,sCAAsC,OAAO,CAAC,EAAE,UAAU,OAAO,CAAC,IAAI,gBAAgB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAC5K,EAAE,IAAI,EAAE,sCAAsC,EAAE,CACjD,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;gBAChC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;qBAChB,MAAM,CAAC;oBACN,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,qFAAqF;oBACvH,YAAY,EAAE,WAAW;oBACzB,gBAAgB,EAAE,OAAO,CAAC,WAAW;oBACrC,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;oBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC;qBACD,GAAG,EAAE,CAAC;gBACT,iEAAiE;gBACjE,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAClC,MAAM,eAAe,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;oBAC7E,IAAI,CAAC,eAAe,EAAE,CAAC;wBACrB,mEAAmE;wBACnE,MAAM,CAAC,IAAI,CAAC;4BACV,GAAG,EAAE,iCAAiC;4BACtC,MAAM,EAAE,WAAW;4BACnB,SAAS,EAAE,OAAO,CAAC,EAAE;4BACrB,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,GAAG,EAAE,kJAAkJ;yBACxJ,CAAC,CAAC;wBACH,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;wBAC7B,KAAK,EAAE,WAAW,EAAE,KAAK,CACvB,SAAS,EACT,MAAM,EACN,iEAAiE,EACjE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAC9C,CAAC;oBACJ,CAAC;oBAED,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC;yBAC1B,MAAM,CAAC;wBACN,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,eAAe,EAAE,CAAC,EAAE,8EAA8E;qBACnG,CAAC;yBACD,GAAG,EAAE,CAAC;gBACX,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,uBAAuB;gBAC5B,MAAM,EAAE,WAAW;gBACnB,GAAG,EAAE,eAAe;gBACpB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC;gBACX,GAAG,EAAE,oBAAoB;gBACzB,MAAM,EAAE,WAAW;gBACnB,GAAG,EAAE,wBAAwB;gBAC7B,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,GAAG,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAA2B,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI;gBACzB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/E,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjF,MAAM,OAAO,GAAoB,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,uBAAuB;gBAC5B,MAAM,EAAE,WAAW;gBACnB,GAAG,EAAE,iBAAiB;gBACtB,KAAK,EAAE,OAAO,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC;gBACX,GAAG,EAAE,oBAAoB;gBACzB,MAAM,EAAE,WAAW;gBACnB,GAAG,EAAE,yBAAyB;gBAC9B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACvF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAED,MAAM,CAAC,OAA+B,EAAE;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzB,CAAC;IAED,KAAK;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,MAAY;QAChB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE;iBAC9B,MAAM,CAAC,QAAQ,CAAC;iBAChB,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;iBACrC,GAAG,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,wBAAwB;gBAC7B,MAAM,EAAE,WAAW;gBACnB,GAAG,EAAE,mCAAmC;gBACxC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC;gBACX,GAAG,EAAE,qBAAqB;gBAC1B,MAAM,EAAE,WAAW;gBACnB,GAAG,EAAE,0BAA0B;gBAC/B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,QAAQ;QACN,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,wBAAwB;YAC7B,MAAM,EAAE,WAAW;YACnB,GAAG,EAAE,sBAAsB;YAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,MAAc;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1F,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,iCAAiC;YACtC,MAAM,EAAE,WAAW;YACnB,GAAG,EAAE,2BAA2B;YAChC,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAEO,cAAc,CAAC,GAAiC;QACtD,qEAAqE;QACrE,qEAAqE;QACrE,kEAAkE;QAClE,gEAAgE;QAChE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,WAAW,CACnB,WAAW,GAAG,CAAC,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EACvE,EAAE,IAAI,EAAE,0BAA0B,EAAE,CACrC,CAAC;QACJ,CAAC;QACD,oEAAoE;QACpE,qEAAqE;QACrE,oCAAoC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE;aACjC,MAAM,CAAC;YACN,OAAO,EAAE,kBAAkB,CAAC,OAAO;YACnC,eAAe,EAAE,kBAAkB,CAAC,eAAe;SACpD,CAAC;aACD,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;aAC/C,GAAG,EAAE,CAAC;QAET,MAAM,YAAY,GAAG,UAAU,EAAE,eAAe,IAAI,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEhE,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,YAAY,GAAG,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,gCAAgC;gBACrC,MAAM,EAAE,WAAW;gBACnB,SAAS,EAAE,GAAG,CAAC,EAAE;gBACjB,YAAY;gBACZ,YAAY,EAAE,YAAY,IAAI,IAAI;gBAClC,GAAG,EAAE,oGAAoG;aAC1G,CAAC,CAAC;YAEH,0GAA0G;YAC1G,oFAAoF;YACpF,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;YAC7B,KAAK,EAAE,WAAW,EAAE,KAAK,CACvB,MAAM,EACN,MAAM,EACN,yCAAyC,YAAY,WAAW,YAAY,IAAI,QAAQ,GAAG,EAC3F;gBACE,SAAS,EAAE,GAAG,CAAC,EAAE;gBACjB,YAAY;gBACZ,YAAY,EAAE,YAAY,IAAI,SAAS;aACxC,CACF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,+BAA+B;QAC7G,4EAA4E;QAC5E,yEAAyE;QACzE,MAAM,WAAW,GACf,GAAG,CAAC,gBAAgB;YACpB,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI;gBACvB,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,eAAe;gBACxE,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEjD,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS;YACT,WAAW;YACX,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YAC/B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,UAAU,EAAE,OAAO;SAC7B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,SAAiB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aAClD,GAAG,EAAE,CAAC;QACT,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,IAAI,IAAI;YAAE,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1D,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,IAAI,IAAI;YAAE,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1D,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI;YAAE,OAAO,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,SAAiB,EAAE,OAAiC;QACpE,IAAI,CAAC;YACH,wEAAwE;YACxE,0EAA0E;YAC1E,uEAAuE;YACvE,MAAM,KAAK,GAAoD,EAAE,CAAC;YAClE,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;gBAAE,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAAE,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YACtE,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;gBAAE,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAAE,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YACtE,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;gBAAE,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;YACxF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC5C,IAAI,CAAC,SAAS,CAAC,EAAE;iBACd,MAAM,CAAC,kBAAkB,CAAC;iBAC1B,MAAM,CAAC;gBACN,SAAS;gBACT,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;gBAClC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;gBAClC,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;aAC/C,CAAC;iBACD,kBAAkB,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;iBACxE,GAAG,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,oCAAoC;gBACzC,MAAM,EAAE,WAAW;gBACnB,SAAS;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/store.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Session id / filename runtime helpers.
+ *
+ * Moved out of `@opensip-cli/contracts` (audit 2026-05-29, contracts
+ * split) so contracts carries no runtime. The `StoredSession` type stays
+ * in contracts as the cross-tool contract surface.
+ */
+/** Generate a unique session ID */
+export declare function generateSessionId(): string;
+/** Sanitize a string for use in a filename — strip path separators and special chars */
+export declare function sanitizeForFilename(s: string): string;
+//# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,mCAAmC;AACnC,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/dist/store.js

@@ -0,0 +1,17 @@
+/**
+ * Session id / filename runtime helpers.
+ *
+ * Moved out of `@opensip-cli/contracts` (audit 2026-05-29, contracts
+ * split) so contracts carries no runtime. The `StoredSession` type stays
+ * in contracts as the cross-tool contract surface.
+ */
+import { randomUUID } from 'node:crypto';
+/** Generate a unique session ID */
+export function generateSessionId() {
+    return randomUUID();
+}
+/** Sanitize a string for use in a filename — strip path separators and special chars */
+export function sanitizeForFilename(s) {
+    return s.replaceAll('..', '-').replaceAll(/[/\\:*?"<>|.]/g, '-');
+}
+//# sourceMappingURL=store.js.map

package/dist/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,mCAAmC;AACnC,MAAM,UAAU,iBAAiB;IAC/B,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;AACnE,CAAC"}