@orc-brain/core 1.0.0

package/dist/safety/redact.js

@@ -0,0 +1,85 @@
+/**
+ * Secret scrubber (§8.6). Tool inputs are redacted before they are written to
+ * the append-only audit log. Pattern-based and conservative: it would rather
+ * over-redact than leak a token.
+ */
+const REDACTIONS = [
+    // Anthropic / OpenAI style keys.
+    { re: /\b(sk-[a-zA-Z0-9_-]{16,})\b/g, replacement: "sk-***REDACTED***" },
+    {
+        re: /\b(sk-ant-[a-zA-Z0-9_-]{16,})\b/g,
+        replacement: "sk-ant-***REDACTED***",
+    },
+    // AWS access key id / secret.
+    { re: /\b(AKIA[0-9A-Z]{16})\b/g, replacement: "AKIA***REDACTED***" },
+    {
+        re: /\baws_secret_access_key\s*=\s*\S+/gi,
+        replacement: "aws_secret_access_key=***REDACTED***",
+    },
+    // Generic bearer tokens & auth headers.
+    {
+        re: /\bBearer\s+[a-zA-Z0-9._-]{12,}/g,
+        replacement: "Bearer ***REDACTED***",
+    },
+    { re: /\b(gh[pousr]_[A-Za-z0-9]{16,})\b/g, replacement: "gh***REDACTED***" },
+    // KEY=value / TOKEN=value / PASSWORD=value / SECRET=value assignments.
+    {
+        re: /\b([A-Z0-9_]*(?:TOKEN|SECRET|PASSWORD|PASSWD|API_?KEY|PRIVATE_?KEY))\s*[=:]\s*("?)[^\s"']+\2/gi,
+        replacement: "$1=***REDACTED***",
+    },
+    // Connection strings with inline credentials: scheme://user:pass@host
+    {
+        re: /([a-z][a-z0-9+.-]*:\/\/[^:@\s/]+):[^@\s/]+@/gi,
+        replacement: "$1:***REDACTED***@",
+    },
+    // PEM private key blocks.
+    {
+        re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
+        replacement: "***REDACTED PRIVATE KEY***",
+    },
+];
+/**
+ * Exact secret values registered at runtime — plugin secrets (spec 003 §R5).
+ * Redacted from every string before the pattern pass, so a token that matches
+ * no pattern (e.g. a Linear API key) still never reaches logs or audit.
+ */
+const SECRET_VALUES = new Set();
+/** Registers a literal value for redaction (spec 003 §R5). Short values are ignored. */
+export function registerSecretValue(value) {
+    if (value.length >= 6)
+        SECRET_VALUES.add(value);
+}
+/** Clears runtime-registered secret values. Test-only. */
+export function clearRegisteredSecretValues() {
+    SECRET_VALUES.clear();
+}
+/** Redacts secrets from a plain string. */
+export function redactString(input) {
+    let out = input;
+    for (const value of SECRET_VALUES) {
+        if (out.includes(value))
+            out = out.split(value).join("***REDACTED***");
+    }
+    for (const { re, replacement } of REDACTIONS) {
+        out = out.replace(re, replacement);
+    }
+    return out;
+}
+/**
+ * Deep-redacts secrets from an arbitrary JSON-serializable value, returning a
+ * structurally-identical copy with string leaves scrubbed (§8.6).
+ */
+export function redactValue(value) {
+    if (typeof value === "string")
+        return redactString(value);
+    if (Array.isArray(value))
+        return value.map(redactValue);
+    if (value && typeof value === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(value))
+            out[k] = redactValue(v);
+        return out;
+    }
+    return value;
+}
+//# sourceMappingURL=redact.js.map

package/dist/safety/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/safety/redact.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,UAAU,GAA0C;IACxD,iCAAiC;IACjC,EAAE,EAAE,EAAE,8BAA8B,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACxE;QACE,EAAE,EAAE,kCAAkC;QACtC,WAAW,EAAE,uBAAuB;KACrC;IACD,8BAA8B;IAC9B,EAAE,EAAE,EAAE,yBAAyB,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACpE;QACE,EAAE,EAAE,qCAAqC;QACzC,WAAW,EAAE,sCAAsC;KACpD;IACD,wCAAwC;IACxC;QACE,EAAE,EAAE,iCAAiC;QACrC,WAAW,EAAE,uBAAuB;KACrC;IACD,EAAE,EAAE,EAAE,mCAAmC,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC5E,uEAAuE;IACvE;QACE,EAAE,EAAE,gGAAgG;QACpG,WAAW,EAAE,mBAAmB;KACjC;IACD,sEAAsE;IACtE;QACE,EAAE,EAAE,+CAA+C;QACnD,WAAW,EAAE,oBAAoB;KAClC;IACD,0BAA0B;IAC1B;QACE,EAAE,EAAE,6EAA6E;QACjF,WAAW,EAAE,4BAA4B;KAC1C;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;AAExC,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,2BAA2B;IACzC,aAAa,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,UAAU,EAAE,CAAC;QAC7C,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/spawnEnv.d.ts

@@ -0,0 +1,18 @@
+/** Builds a child-process environment with Claude provider credentials and routing flags stripped. */
+/**
+ * Keys removed from any child environment before spawning a worker. Workers must
+ * never inherit ambient provider credentials or provider-routing overrides — the
+ * orchestrator decides model/provider explicitly.
+ */
+export declare const STRIPPED_ENV_KEYS: readonly ["ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN", "CLAUDE_CODE_USE_BEDROCK", "CLAUDE_CODE_USE_VERTEX"];
+/** Adds keys to the worker-env strip set (spec 003 §R5). Idempotent. */
+export declare function registerStrippedEnvKeys(keys: Iterable<string>): void;
+/** Clears runtime-registered strip keys. Test-only. */
+export declare function clearRegisteredStrippedEnvKeys(): void;
+/**
+ * Returns a shallow copy of `base` with every {@link STRIPPED_ENV_KEYS} entry
+ * and every registered plugin secret key removed. Does not mutate the source
+ * environment.
+ */
+export declare function buildSpawnEnv(base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+//# sourceMappingURL=spawnEnv.d.ts.map

package/dist/spawnEnv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawnEnv.d.ts","sourceRoot":"","sources":["../src/spawnEnv.ts"],"names":[],"mappings":"AAAA,sGAAsG;AAEtG;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,6GAKpB,CAAC;AASX,wEAAwE;AACxE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,CAEpE;AAED,uDAAuD;AACvD,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,GAAE,MAAM,CAAC,UAAwB,GACpC,MAAM,CAAC,UAAU,CASnB"}

package/dist/spawnEnv.js

@@ -0,0 +1,43 @@
+/** Builds a child-process environment with Claude provider credentials and routing flags stripped. */
+/**
+ * Keys removed from any child environment before spawning a worker. Workers must
+ * never inherit ambient provider credentials or provider-routing overrides — the
+ * orchestrator decides model/provider explicitly.
+ */
+export const STRIPPED_ENV_KEYS = [
+    "ANTHROPIC_API_KEY",
+    "ANTHROPIC_AUTH_TOKEN",
+    "CLAUDE_CODE_USE_BEDROCK",
+    "CLAUDE_CODE_USE_VERTEX",
+];
+/**
+ * Additional keys registered at runtime — plugin-declared secret env keys
+ * (spec 003 §R5). Workers must never see a plugin's credentials (e.g.
+ * `LINEAR_API_KEY`), so every loaded plugin's `manifest.secrets` lands here.
+ */
+const EXTRA_STRIPPED_KEYS = new Set();
+/** Adds keys to the worker-env strip set (spec 003 §R5). Idempotent. */
+export function registerStrippedEnvKeys(keys) {
+    for (const key of keys)
+        EXTRA_STRIPPED_KEYS.add(key);
+}
+/** Clears runtime-registered strip keys. Test-only. */
+export function clearRegisteredStrippedEnvKeys() {
+    EXTRA_STRIPPED_KEYS.clear();
+}
+/**
+ * Returns a shallow copy of `base` with every {@link STRIPPED_ENV_KEYS} entry
+ * and every registered plugin secret key removed. Does not mutate the source
+ * environment.
+ */
+export function buildSpawnEnv(base = process.env) {
+    const env = { ...base };
+    for (const key of STRIPPED_ENV_KEYS) {
+        delete env[key];
+    }
+    for (const key of EXTRA_STRIPPED_KEYS) {
+        delete env[key];
+    }
+    return env;
+}
+//# sourceMappingURL=spawnEnv.js.map

package/dist/spawnEnv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawnEnv.js","sourceRoot":"","sources":["../src/spawnEnv.ts"],"names":[],"mappings":"AAAA,sGAAsG;AAEtG;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,mBAAmB;IACnB,sBAAsB;IACtB,yBAAyB;IACzB,wBAAwB;CAChB,CAAC;AAEX;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE9C,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CAAC,IAAsB;IAC5D,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,8BAA8B;IAC5C,mBAAmB,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,OAA0B,OAAO,CAAC,GAAG;IAErC,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/store/auditLog.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Append-only JSONL audit log (§8.6). One file per run; never rewritten; chmod
+ * 600. This is the recovery source of truth if SQLite is lost (§13.9), and the
+ * feed behind `orc audit tail -f`. A single sink routes each event to the file
+ * for its `run_id`, so the whole system can share one injected {@link AuditSink}.
+ */
+import type { AuditEvent } from "@orc-brain/shared";
+import type { AuditSink } from "../safety/index.js";
+/** Writes audit events as newline-delimited JSON, one file per run. */
+export declare class AuditLog implements AuditSink {
+    private readonly auditDir;
+    private readonly files;
+    constructor(auditDir: string);
+    /** Resolves (and lazily creates, chmod 600) the file for a run id. */
+    filePathFor(runId: string | null): string;
+    record(event: AuditEvent): void;
+}
+/**
+ * A no-op audit sink for tests / preflight that keeps events in memory, so a
+ * SafetyLayer can be constructed without touching disk.
+ */
+export declare class NullAuditLog implements AuditSink {
+    readonly events: AuditEvent[];
+    record(event: AuditEvent): void;
+}
+/** Resolves the audit directory under a repo's `.orc` state dir. */
+export declare function auditDirFor(stateDir: string): string;
+//# sourceMappingURL=auditLog.d.ts.map

package/dist/store/auditLog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditLog.d.ts","sourceRoot":"","sources":["../../src/store/auditLog.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,uEAAuE;AACvE,qBAAa,QAAS,YAAW,SAAS;IAG5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAFrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;gBAEd,QAAQ,EAAE,MAAM;IAI7C,sEAAsE;IACtE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;IAUzC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;CAShC;AAED;;;GAGG;AACH,qBAAa,YAAa,YAAW,SAAS;IAC5C,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,CAAM;IACnC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;CAGhC;AAED,oEAAoE;AACpE,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/dist/store/auditLog.js

@@ -0,0 +1,48 @@
+/**
+ * Append-only JSONL audit log (§8.6). One file per run; never rewritten; chmod
+ * 600. This is the recovery source of truth if SQLite is lost (§13.9), and the
+ * feed behind `orc audit tail -f`. A single sink routes each event to the file
+ * for its `run_id`, so the whole system can share one injected {@link AuditSink}.
+ */
+import { appendFileSync, chmodSync, closeSync, existsSync, mkdirSync, openSync, } from "node:fs";
+import { join } from "node:path";
+/** Writes audit events as newline-delimited JSON, one file per run. */
+export class AuditLog {
+    auditDir;
+    files = new Set();
+    constructor(auditDir) {
+        this.auditDir = auditDir;
+        mkdirSync(auditDir, { recursive: true });
+    }
+    /** Resolves (and lazily creates, chmod 600) the file for a run id. */
+    filePathFor(runId) {
+        const path = join(this.auditDir, `${runId ?? "orchestrator"}.jsonl`);
+        if (!this.files.has(path)) {
+            if (!existsSync(path))
+                closeSync(openSync(path, "a", 0o600));
+            chmodSync(path, 0o600);
+            this.files.add(path);
+        }
+        return path;
+    }
+    record(event) {
+        appendFileSync(this.filePathFor(event.run_id), JSON.stringify(event) + "\n", {
+            mode: 0o600,
+        });
+    }
+}
+/**
+ * A no-op audit sink for tests / preflight that keeps events in memory, so a
+ * SafetyLayer can be constructed without touching disk.
+ */
+export class NullAuditLog {
+    events = [];
+    record(event) {
+        this.events.push(event);
+    }
+}
+/** Resolves the audit directory under a repo's `.orc` state dir. */
+export function auditDirFor(stateDir) {
+    return join(stateDir, "audit");
+}
+//# sourceMappingURL=auditLog.js.map

package/dist/store/auditLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditLog.js","sourceRoot":"","sources":["../../src/store/auditLog.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,cAAc,EACd,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,uEAAuE;AACvE,MAAM,OAAO,QAAQ;IAGU;IAFZ,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;QAC3C,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,sEAAsE;IACtE,WAAW,CAAC,KAAoB;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,cAAc,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7D,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,KAAiB;QACtB,cAAc,CACZ,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAC5B;YACE,IAAI,EAAE,KAAK;SACZ,CACF,CAAC;IACJ,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,YAAY;IACd,MAAM,GAAiB,EAAE,CAAC;IACnC,MAAM,CAAC,KAAiB;QACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/store/index.d.ts

@@ -0,0 +1,140 @@
+/**
+ * State store (§4, §12): better-sqlite3 (WAL) for entities, indexes, and
+ * resumable state, plus bus-event persistence for SSE replay. Synchronous
+ * writes give trivially correct event ordering. The append-only JSONL audit
+ * log is separate ({@link ./auditLog.ts}).
+ */
+import type { BudgetLedgerEntry, BusEvent, Escalation, Goal, Project, Report, Run, Scope, SubagentRecord, Task, TaskStatus } from "@orc-brain/shared";
+/** A kanban card row from the board join (spec 002 §R17). */
+export interface BoardCardRow {
+    task_id: string;
+    title: string;
+    status: TaskStatus;
+    model_used: string | null;
+    priority: number;
+    attempt: number;
+    cost_usd: number;
+    scope_name: string;
+    goal_id: string;
+    goal_title: string;
+    project_id: string;
+    project_name: string;
+}
+/** The persistent state store. */
+export declare class Store {
+    private readonly db;
+    /** Whether the store is initialized and ready for reads/writes. */
+    readonly ready: boolean;
+    constructor(dbPath: string);
+    close(): void;
+    createProject(input: Omit<Project, "id" | "created_at" | "updated_at" | "auto_merge"> & Partial<Pick<Project, "auto_merge">>): Project;
+    /** Deserializes a project row, coercing the integer `auto_merge` to boolean. */
+    private rowToProject;
+    getProject(id: string): Project | null;
+    getProjectByRepoRoot(repoRoot: string): Project | null;
+    listProjects(): Project[];
+    updateProject(id: string, patch: Partial<Project>): void;
+    deleteProject(id: string): void;
+    createGoal(input: Omit<Goal, "id" | "created_at" | "updated_at" | "status" | "project_id" | "external_ref"> & Partial<Pick<Goal, "status" | "project_id" | "external_ref">>): Goal;
+    /**
+     * A non-terminal goal already imported from the same external task — the
+     * duplicate-import guard (spec 003 §R7). Terminal goals don't block a
+     * re-import.
+     */
+    findActiveGoalByExternalRef(provider: string, externalId: string): Goal | null;
+    getGoal(id: string): Goal | null;
+    listGoals(): Goal[];
+    updateGoalStatus(id: string, status: Goal["status"]): void;
+    createScope(input: Omit<Scope, "id" | "created_at" | "updated_at" | "status" | "worktree_path" | "branch_name"> & Partial<Pick<Scope, "status" | "worktree_path" | "branch_name">>): Scope;
+    getScope(id: string): Scope | null;
+    listScopesByGoal(goalId: string): Scope[];
+    updateScopeStatus(id: string, status: Scope["status"]): void;
+    /** Records/clears a scope's worktree binding (spec 002 §R8). */
+    setScopeWorktree(id: string, worktreePath: string | null, branchName: string | null): void;
+    /** Rewrites a scope's `depends_on` edges (used when materializing a plan). */
+    setScopeDependsOn(id: string, dependsOn: string[]): void;
+    listProposedScopesByGoal(goalId: string): Scope[];
+    /**
+     * One row per task of every project goal, joined for the kanban board
+     * (spec 002 §R17). One SQL join — the server adds run association on top.
+     */
+    listBoardCards(projectId?: string): BoardCardRow[];
+    /** Worktree paths still referenced by a scope — the non-orphans (spec 002 §R12). */
+    listActiveWorktreePaths(): string[];
+    /**
+     * Deletes every `proposed` scope of a goal and its tasks (used by `orc plan
+     * edit` to re-materialize an edited plan). Only proposed scopes are touched,
+     * so an approved/running plan is never disturbed.
+     */
+    deleteProposedPlan(goalId: string): void;
+    createTask(input: Omit<Task, "id" | "created_at" | "updated_at" | "status" | "priority" | "attempt" | "model_used" | "routing_reason" | "session_id" | "cost_usd" | "result_summary" | "error" | "dirty"> & Partial<Task>): Task;
+    /** Deserializes a task row, coercing the integer `dirty` column to boolean. */
+    private rowToTask;
+    getTask(id: string): Task | null;
+    listTasksByScope(scopeId: string): Task[];
+    listTasksByGoal(goalId: string): Task[];
+    /** Persists a kanban reprioritization (spec 002 v2). */
+    setTaskPriority(id: string, priority: number): void;
+    /** Partial task update. `result_summary`/`error` are JSON-serialized. */
+    updateTask(id: string, patch: Partial<Task>): void;
+    /** Rewrites a task's `depends_on` edges (used when materializing a plan). */
+    setTaskDependsOn(id: string, dependsOn: string[]): void;
+    countTasksByStatus(goalId: string): Partial<Record<TaskStatus, number>>;
+    createRun(input: {
+        goal_id: string;
+        budget_usd: number;
+        concurrency_limit: number;
+        base_branch?: string | null;
+        auto_loop?: boolean;
+    }): Run;
+    /** Deserializes a run row, coercing the integer `auto_loop` column to boolean. */
+    private rowToRun;
+    getRun(id: string): Run | null;
+    getActiveRunForGoal(goalId: string): Run | null;
+    listRuns(): Run[];
+    /**
+     * Returns an active run touching the same `repo_root` (§13.11): two runs on
+     * one repo would race. `excludeRunId` skips the run being started.
+     */
+    getActiveRunForRepo(repoRoot: string, excludeRunId?: string): Run | null;
+    updateRun(id: string, patch: Partial<Run>): void;
+    /** Demotes any Running/Pausing run to Paused on startup (§5 crash recovery). */
+    demoteActiveRunsOnStartup(): Run[];
+    upsertSubagent(rec: SubagentRecord): void;
+    listSubagentsByTask(taskId: string): SubagentRecord[];
+    insertLedgerEntry(input: Omit<BudgetLedgerEntry, "id" | "created_at" | "updated_at">): BudgetLedgerEntry;
+    sumCostForRun(runId: string): number;
+    sumCostForTask(taskId: string): number;
+    insertReport(input: Omit<Report, "id" | "created_at" | "updated_at">): Report;
+    listReports(runId: string): Report[];
+    getReport(id: string): Report | null;
+    latestReport(runId: string): Report | null;
+    insertEscalation(input: Omit<Escalation, "id" | "created_at" | "updated_at" | "status" | "action" | "message" | "resolved_at">): Escalation;
+    getEscalation(id: string): Escalation | null;
+    listOpenEscalations(runId?: string): Escalation[];
+    resolveEscalation(id: string, action: Escalation["action"], message: string | null): void;
+    /** Persists a bus event before fan-out and returns its assigned `seq` (§3). */
+    appendEvent(event: Omit<BusEvent, "seq">): number;
+    /**
+     * Dispatch events recorded for a run — the durable base of the per-run task
+     * ceiling (spec 002 §R15). Counts every attempt, including retries.
+     */
+    countDispatchesForRun(runId: string): number;
+    /**
+     * Wipes the whole database — goals, scopes, tasks, runs, subagents, ledger,
+     * reports, escalations, and the persisted event log — in one transaction,
+     * child tables first so foreign keys hold. With `keep_projects` the project
+     * registry survives; everything else always goes. Returns rows deleted per
+     * table. The caller must ensure no run is active (workers would settle into
+     * deleted rows).
+     */
+    purge(opts?: {
+        keep_projects?: boolean;
+    }): Record<string, number>;
+    /** Returns persisted events with `seq` greater than `afterSeq` for SSE replay. */
+    listEventsSince(afterSeq: number, runId?: string): BusEvent[];
+}
+/** Constructs the state store at `dbPath` (§4). */
+export declare function createStore(dbPath: string): Store;
+export { AuditLog, NullAuditLog, auditDirFor } from "./auditLog.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/store/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EACV,iBAAiB,EACjB,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,OAAO,EACP,MAAM,EACN,GAAG,EAEH,KAAK,EACL,cAAc,EACd,IAAI,EACJ,UAAU,EACX,MAAM,mBAAmB,CAAC;AAK3B,6DAA6D;AAC7D,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AA2CD,kCAAkC;AAClC,qBAAa,KAAK;IAChB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;gBAEZ,MAAM,EAAE,MAAM;IAkB1B,KAAK,IAAI,IAAI;IAMb,aAAa,CACX,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,CAAC,GACrE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,GACrC,OAAO;IAqBV,gFAAgF;IAChF,OAAO,CAAC,YAAY;IAOpB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI;IAMtC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI;IAQtD,YAAY,IAAI,OAAO,EAAE;IAQzB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI;IAgBxD,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAM/B,UAAU,CACR,KAAK,EAAE,IAAI,CACT,IAAI,EACF,IAAI,GACJ,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,YAAY,GACZ,cAAc,CACjB,GACC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY,GAAG,cAAc,CAAC,CAAC,GAC9D,IAAI;IAuBP;;;;OAIG;IACH,2BAA2B,CACzB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,IAAI,GAAG,IAAI;IAed,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAOhC,SAAS,IAAI,IAAI,EAAE;IAQnB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI;IAQ1D,WAAW,CACT,KAAK,EAAE,IAAI,CACT,KAAK,EACH,IAAI,GACJ,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,eAAe,GACf,aAAa,CAChB,GACC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,GAAG,eAAe,GAAG,aAAa,CAAC,CAAC,GACjE,KAAK;IAyBR,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI;IAOlC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE;IAQzC,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI;IAM5D,gEAAgE;IAChE,gBAAgB,CACd,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,GACxB,IAAI;IAQP,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAMxD,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE;IAIjD;;;OAGG;IACH,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IAkBlD,oFAAoF;IACpF,uBAAuB,IAAI,MAAM,EAAE;IAUnC;;;;OAIG;IACH,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAexC,UAAU,CACR,KAAK,EAAE,IAAI,CACT,IAAI,EACF,IAAI,GACJ,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,UAAU,GACV,SAAS,GACT,YAAY,GACZ,gBAAgB,GAChB,YAAY,GACZ,UAAU,GACV,gBAAgB,GAChB,OAAO,GACP,OAAO,CACV,GACC,OAAO,CAAC,IAAI,CAAC,GACd,IAAI;IAgCP,+EAA+E;IAC/E,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAMhC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE;IAYzC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE;IAWvC,wDAAwD;IACxD,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAMnD,yEAAyE;IACzE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAgBlD,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAMvD,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAcvE,SAAS,CAAC,KAAK,EAAE;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GAAG,GAAG;IAkCP,kFAAkF;IAClF,OAAO,CAAC,QAAQ;IAOhB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAM9B,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAY/C,QAAQ,IAAI,GAAG,EAAE;IAQjB;;;OAGG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAaxE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI;IAkBhD,gFAAgF;IAChF,yBAAyB,IAAI,GAAG,EAAE;IAgBlC,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI;IAezC,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE;IAYrD,iBAAiB,CACf,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,GAAG,YAAY,GAAG,YAAY,CAAC,GACjE,iBAAiB;IAkBpB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IASpC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAWtC,YAAY,CACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,YAAY,GAAG,YAAY,CAAC,GACtD,MAAM;IAgBT,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE;IAQpC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQpC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAY1C,gBAAgB,CACd,KAAK,EAAE,IAAI,CACT,UAAU,EACR,IAAI,GACJ,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,aAAa,CAChB,GACA,UAAU;IAsBb,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAQ5C,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE;IAgBjD,iBAAiB,CACf,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,IAAI;IAWP,+EAA+E;IAC/E,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM;IASjD;;;OAGG;IACH,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAW5C;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,GAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAuBrE,kFAAkF;IAClF,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE;CAoB9D;AAED,mDAAmD;AACnD,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAEjD;AAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}