@plurnk/plurnk-service 1.0.0

package/dist/server/envelope.js

@@ -0,0 +1,172 @@
+// Envelope lifecycle helpers for client connections. SPEC §connection-lifecycle.
+//
+// Every connected client gets a (session, run, client-loop) envelope. Either
+// the client picks the session explicitly (session.create / session.attach)
+// or the daemon auto-creates one on first requiresInit RPC. In both cases
+// the daemon opens a NEW run within the session and a NEW client loop within
+// that run; the client loop closes on disconnect.
+import GitMembership from "../core/git-membership.js";
+export default class Envelope {
+    // Run names reserved for non-client actors: a client must not create OR
+    // attach to a run under a reserved name (origin-impersonation — `plurnk`
+    // is the runtime actor, §authority-terms/§actor-boundary). Checked case-insensitively, before
+    // lookup, so a client can neither forge nor hijack one (SPEC §methods).
+    static RESERVED_RUN_NAMES = new Set(["plurnk"]); // §methods-run-name-reserved
+    // Grammar 0.5.0 (#10): Session and Run carry user-renameable string names.
+    // Defaults are `session-{unixtime}` and `run-{unixtime}`; random suffix avoids
+    // collisions when two creations land in the same second.
+    static #tsName(prefix) {
+        const ts = Math.floor(Date.now() / 1000);
+        const rand = Math.floor(Math.random() * 0xFFFFFF).toString(36).padStart(4, "0");
+        return `${prefix}-${ts}-${rand}`;
+    }
+    static generateSessionName() {
+        return Envelope.#tsName("session");
+    }
+    static generateRunName() {
+        return Envelope.#tsName("run");
+    }
+    static async createClientEnvelope(db, opts = {}) {
+        const name = opts.name ?? Envelope.#tsName(opts.prefix ?? "session");
+        const projectRoot = opts.projectRoot ?? null;
+        const session = await db.envelope_insert_session.get({ name, project_root: projectRoot, settings: opts.settings ?? "{}" });
+        if (session === undefined)
+            throw new Error("createClientEnvelope: session insert returned no row");
+        // SPEC §membership D4 — establish git-ls-files membership at workspace setup so
+        // tracked files are members before the first op. No-op when projectRoot is
+        // null (headless) or not a git working tree.
+        await GitMembership.resolveGitMembership(db, session.id, undefined);
+        const runName = Envelope.generateRunName();
+        const run = await db.envelope_insert_run.get({ session_id: session.id, name: runName, origin: "client" });
+        if (run === undefined)
+            throw new Error("createClientEnvelope: run insert returned no row");
+        return {
+            sessionId: session.id, sessionName: session.name,
+            projectRoot: session.project_root,
+            runId: run.id, runName: run.name,
+            modelRunId: null,
+            clientLoopId: null,
+        };
+    }
+    // Resolve the run inside a session. Three modes:
+    // - opts.runId given: lookup by id, verify session ownership (else throw).
+    // - opts.runName given: lookup by (sessionId, name); reuse if found, create otherwise.
+    // - neither: create a new run with an auto-generated name (current behavior).
+    // `runId` and `runName` are alternatives — passing both throws (use one).
+    static async #resolveRun(db, sessionId, opts) {
+        if (opts.runId !== undefined && opts.runName !== undefined) {
+            throw new Error("attachToSession: pass runId OR runName, not both");
+        }
+        if (opts.runId !== undefined) {
+            const existing = await db.envelope_get_run_by_id.get({ id: opts.runId });
+            if (existing === undefined)
+                throw new Error(`run ${opts.runId} not found`);
+            if (existing.session_id !== sessionId)
+                throw new Error(`run ${opts.runId} belongs to session ${existing.session_id}, not ${sessionId}`);
+            return { id: existing.id, name: existing.name };
+        }
+        if (opts.runName !== undefined) {
+            if (Envelope.RESERVED_RUN_NAMES.has(opts.runName.toLowerCase())) {
+                throw new Error(`run name "${opts.runName}" is reserved for a non-client actor`);
+            }
+            const existing = await db.envelope_get_run_by_name.get({ session_id: sessionId, name: opts.runName });
+            if (existing !== undefined)
+                return existing;
+            const created = await db.envelope_insert_run.get({ session_id: sessionId, name: opts.runName, origin: "client" });
+            if (created === undefined)
+                throw new Error("resolveRun: run insert returned no row");
+            return created;
+        }
+        const created = await db.envelope_insert_run.get({ session_id: sessionId, name: Envelope.generateRunName(), origin: "client" });
+        if (created === undefined)
+            throw new Error("resolveRun: run insert returned no row");
+        return created;
+    }
+    static async attachToSession(db, sessionId, opts = {}) {
+        const session = await db.envelope_get_session.get({ id: sessionId });
+        if (session === undefined)
+            throw new Error(`session ${sessionId} not found`);
+        const run = await Envelope.#resolveRun(db, session.id, opts);
+        return {
+            sessionId: session.id, sessionName: session.name,
+            projectRoot: session.project_root,
+            runId: run.id, runName: run.name,
+            modelRunId: null,
+            clientLoopId: null,
+        };
+    }
+    // Lazy client-loop allocator. Called from dispatchAsClient on the first
+    // client-origin op for this connection; subsequent ops reuse the same
+    // loop until the connection closes.
+    static async ensureClientLoop(db, runId) {
+        const loop = await db.envelope_insert_client_loop.get({ run_id: runId });
+        if (loop === undefined)
+            throw new Error("ensureClientLoop: loop insert returned no row");
+        return loop.id;
+    }
+    // Lazy model-run allocator (§connection-lifecycle, §machine-processes — the client writes to its own run).
+    // The model's conversation lives in its OWN run, distinct from the connection's
+    // (client) run, so the packet — rendered from the model's run — never carries
+    // the client's op.*. Created on the first loop.run; reused for the connection.
+    // #366 — a FRESH conversation over the same world (§machine-processes: two runs are two
+    // conversations about one curated workspace): a named, empty-log, model-origin ROOT run.
+    // Distinct from ensureModelRun (the stable default conversation) and forkRun (copies history).
+    static async createModelRun(db, sessionId, name) {
+        const run = await db.envelope_insert_run.get({ session_id: sessionId, name: name ?? Envelope.#tsName("model"), origin: "model" });
+        if (run === undefined)
+            throw new Error("createModelRun: run insert returned no row");
+        return run;
+    }
+    static async ensureModelRun(db, sessionId) {
+        // #371 — ensure means FIND-FIRST (the WS connection's per-session cache used to hide the
+        // insert-only bug; the seam has no connection state, so idempotence lives HERE): reuse the
+        // session's canonical conversation run — the earliest model-origin root (forks/workers
+        // inherit origin and are excluded by parent_run_id). #366 is the explicit fresh-run door.
+        const existing = await db.envelope_get_model_run.get({ session_id: sessionId });
+        if (existing !== undefined)
+            return existing.id;
+        const run = await db.envelope_insert_run.get({ session_id: sessionId, name: Envelope.#tsName("model"), origin: "model" });
+        if (run === undefined)
+            throw new Error("ensureModelRun: run insert returned no row");
+        return run.id;
+    }
+    // Self-hosting keystone (§actor-boundary): the session's reserved `plurnk` run, where the
+    // runtime acts as an ordinary actor (doc materialization today; fs/git work
+    // later). One per session, reused; its log is the runtime's own — invisible
+    // to other runs except through the shared session filesystem.
+    static async ensurePlurnkRun(db, sessionId) {
+        const existing = await db.envelope_get_run_by_name.get({ session_id: sessionId, name: "plurnk" });
+        if (existing !== undefined)
+            return existing.id;
+        const run = await db.envelope_insert_run.get({ session_id: sessionId, name: "plurnk", origin: "plurnk" });
+        if (run === undefined)
+            throw new Error("ensurePlurnkRun: run insert returned no row");
+        return run.id;
+    }
+    static async listRunsForSession(db, sessionId) {
+        return await db.envelope_list_runs_for_session.all({ session_id: sessionId });
+    }
+    // #238 — a session's prior user prompts, newest-first, capped. The conversation run's
+    // loop seeds (engine_get_loop_prompt is the per-loop read); exposed directly so a
+    // client seeds up/down history without log archaeology.
+    static async listPromptsForSession(db, sessionId, limit) {
+        const rows = await db.envelope_list_session_prompts.all({ session_id: sessionId, limit });
+        return rows.map((r) => r.prompt);
+    }
+    static async closeClientLoop(db, loopId, status) {
+        await db.envelope_close_client_loop.run({ status, loop_id: loopId });
+    }
+    static async listSessions(db) {
+        return await db.envelope_list_sessions.all();
+    }
+    // session.rename — the session name is a mutable handle (vs a run's immutable
+    // name, §machine-processes). Mutates sessions.name only; the UNIQUE constraint is
+    // the real guard against collision (the handler pre-checks for a clean error).
+    static async updateSessionName(db, sessionId, name) {
+        const row = await db.envelope_set_session_name.get({ id: sessionId, name });
+        if (row === undefined)
+            throw new Error(`session ${sessionId} not found`);
+        return row.name;
+    }
+}
+//# sourceMappingURL=envelope.js.map

package/dist/server/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/server/envelope.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,kDAAkD;AAGlD,OAAO,aAAa,MAAM,2BAA2B,CAAC;AAkCtD,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,wEAAwE;IACxE,yEAAyE;IACzE,8FAA8F;IAC9F,wEAAwE;IACxE,MAAM,CAAU,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,6BAA6B;IAE5G,2EAA2E;IAC3E,+EAA+E;IAC/E,yDAAyD;IACzD,MAAM,CAAC,OAAO,CAAC,MAAc;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChF,OAAO,GAAG,MAAM,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,mBAAmB;QACtB,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,eAAe;QAClB,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAM,EAAE,IAAI,GAAuF,EAAE;QACnI,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAO,EAAE,CAAC,uBAAsC,CAAC,GAAG,CAA4D,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;QACtM,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACnG,gFAAgF;QAChF,2EAA2E;QAC3E,6CAA6C;QAC7C,MAAM,aAAa,CAAC,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAO,EAAE,CAAC,mBAAkC,CAAC,GAAG,CAA+B,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxJ,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAC3F,OAAO;YACH,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI;YAChD,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI;YAChC,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;SACrB,CAAC;IACN,CAAC;IAED,iDAAiD;IACjD,2EAA2E;IAC3E,uFAAuF;IACvF,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAM,EAAE,SAAiB,EAAE,IAA0C;QAC1F,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAO,EAAE,CAAC,sBAAqC,CAAC,GAAG,CAAmD,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3I,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC;YAC3E,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,uBAAuB,QAAQ,CAAC,UAAU,SAAS,SAAS,EAAE,CAAC,CAAC;YACxI,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,OAAO,sCAAsC,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,QAAQ,GAAG,MAAO,EAAE,CAAC,wBAAuC,CAAC,GAAG,CAA+B,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACpJ,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAO,EAAE,CAAC,mBAAkC,CAAC,GAAG,CAA+B,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChK,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACrF,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,MAAO,EAAE,CAAC,mBAAkC,CAAC,GAAG,CAA+B,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9K,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACrF,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAM,EAAE,SAAiB,EAAE,IAAI,GAAyC,EAAE;QACnG,MAAM,OAAO,GAAG,MAAO,EAAE,CAAC,oBAAmC,CAAC,GAAG,CAA4D,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAChJ,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,YAAY,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO;YACH,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI;YAChD,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI;YAChC,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;SACrB,CAAC;IACN,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,oCAAoC;IACpC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAM,EAAE,KAAa;QAC/C,MAAM,IAAI,GAAG,MAAO,EAAE,CAAC,2BAA0C,CAAC,GAAG,CAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzG,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC,EAAE,CAAC;IACnB,CAAC;IAED,2GAA2G;IAC3G,gFAAgF;IAChF,8EAA8E;IAC9E,+EAA+E;IAC/E,wFAAwF;IACxF,yFAAyF;IACzF,+FAA+F;IAC/F,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAM,EAAE,SAAiB,EAAE,IAAa;QAChE,MAAM,GAAG,GAAG,MAAO,EAAE,CAAC,mBAAkC,CAAC,GAAG,CAA+B,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAChL,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAM,EAAE,SAAiB;QACjD,yFAAyF;QACzF,2FAA2F;QAC3F,uFAAuF;QACvF,0FAA0F;QAC1F,MAAM,QAAQ,GAAG,MAAO,EAAE,CAAC,sBAAqC,CAAC,GAAG,CAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAChH,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAO,EAAE,CAAC,mBAAkC,CAAC,GAAG,CAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1J,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,0FAA0F;IAC1F,4EAA4E;IAC5E,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAM,EAAE,SAAiB;QAClD,MAAM,QAAQ,GAAG,MAAO,EAAE,CAAC,wBAAuC,CAAC,GAAG,CAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClI,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAO,EAAE,CAAC,mBAAkC,CAAC,GAAG,CAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1I,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACtF,OAAO,GAAG,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAM,EAAE,SAAiB;QACrD,OAAO,MAAO,EAAE,CAAC,8BAA6C,CAAC,GAAG,CAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,sFAAsF;IACtF,kFAAkF;IAClF,wDAAwD;IACxD,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAM,EAAE,SAAiB,EAAE,KAAa;QACvE,MAAM,IAAI,GAAG,MAAO,EAAE,CAAC,6BAA4C,CAAC,GAAG,CAAqB,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9H,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAM,EAAE,MAAc,EAAE,MAAiB;QAClE,MAAO,EAAE,CAAC,0BAAyC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAM;QAC5B,OAAO,MAAO,EAAE,CAAC,sBAAqC,CAAC,GAAG,EAAc,CAAC;IAC7E,CAAC;IAED,8EAA8E;IAC9E,kFAAkF;IAClF,+EAA+E;IAC/E,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAM,EAAE,SAAiB,EAAE,IAAY;QAClE,MAAM,GAAG,GAAG,MAAO,EAAE,CAAC,yBAAwC,CAAC,GAAG,CAA+B,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1H,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,YAAY,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC,IAAI,CAAC;IACpB,CAAC;CACJ"}

package/dist/server/envelope.sql

@@ -0,0 +1,76 @@
+-- Envelope lifecycle queries. SPEC §connection-lifecycle.
+
+-- PREP: envelope_insert_session
+INSERT INTO sessions (name, project_root, settings)
+VALUES ($name, $project_root, $settings)
+RETURNING id, name, project_root;
+
+-- PREP: envelope_get_session
+SELECT id, name, project_root FROM sessions WHERE id = $id;
+
+
+-- PREP: envelope_get_session_by_name
+-- session.rename collision check — sessions.name is UNIQUE.
+SELECT id FROM sessions WHERE name = $name;
+
+-- PREP: envelope_set_session_name
+-- Used by session.rename. The session name is a MUTABLE handle (vs a run's
+-- immutable name, §machine-processes). Returns the updated row to refresh the
+-- caller's ClientEnvelope copy.
+UPDATE sessions SET name = $name WHERE id = $id
+RETURNING id, name;
+
+-- PREP: envelope_insert_run
+-- origin is the run's actor (§machine-processes): 'model' (the conversation),
+-- 'client' (a connection's own run), or 'plurnk' (the runtime self-hosting run).
+INSERT INTO runs (session_id, name, origin)
+VALUES ($session_id, $name, $origin)
+RETURNING id, name, origin;
+
+-- PREP: envelope_get_run_by_id
+SELECT id, name, session_id, origin FROM runs WHERE id = $id;
+
+-- PREP: envelope_get_run_by_name
+SELECT id, name FROM runs WHERE session_id = $session_id AND name = $name;
+
+-- PREP: envelope_list_runs_for_session
+SELECT id, name, created_at, cost_pico, origin
+FROM runs
+WHERE session_id = $session_id
+ORDER BY created_at DESC;
+
+-- PREP: envelope_list_session_prompts
+-- #238 — a session's user prompts for client up/down history: the conversation run's
+-- non-empty loop seeds, newest-first, capped. The conversation run is origin='model' +
+-- parentless; spawned/forked run:// sub-runs (parent_run_id set) are excluded — their
+-- seed prompts are not user input.
+SELECT l.prompt
+FROM loops l
+JOIN runs r ON r.id = l.run_id
+WHERE r.session_id = $session_id
+  AND r.origin = 'model'
+  AND r.parent_run_id IS NULL
+  AND length(l.prompt) > 0
+ORDER BY l.id DESC
+LIMIT $limit;
+
+-- PREP: envelope_insert_client_loop
+-- sequence is auto-computed: 1 + max(existing sequence in this run) so
+-- multiple client connections attaching to the same run get distinct loops.
+INSERT INTO loops (run_id, sequence, status, prompt)
+VALUES ($run_id, COALESCE((SELECT MAX(sequence) FROM loops WHERE run_id = $run_id), 0) + 1, 102, '')
+RETURNING id;
+
+-- PREP: envelope_close_client_loop
+UPDATE loops SET status = $status WHERE id = $loop_id AND status = 102;
+
+-- PREP: envelope_list_sessions
+SELECT id, name, project_root, created_at, cost_pico
+FROM sessions
+ORDER BY created_at DESC;
+
+-- PREP: envelope_get_model_run
+-- #371 — the session's canonical model CONVERSATION run: the earliest model-origin ROOT run
+-- (parent_run_id NULL excludes forks and spawned workers, which inherit origin='model').
+-- ensureModelRun finds this first; only a session with none mints one.
+SELECT id FROM runs WHERE session_id = $session_id AND origin = 'model' AND parent_run_id IS NULL ORDER BY id LIMIT 1;

package/dist/server/logEntry.d.ts

@@ -0,0 +1,35 @@
+import type { Db } from "../core/Db.ts";
+export type LogEntryWire = {
+    id: number;
+    run_id: number;
+    loop_id: number;
+    loop_seq: number;
+    turn_id: number;
+    turn_seq: number;
+    sequence: number;
+    at: string;
+    origin: string;
+    op: string;
+    suffix: string;
+    signal: unknown;
+    scheme: string | null;
+    username: string | null;
+    password: string | null;
+    hostname: string | null;
+    port: number | null;
+    pathname: string | null;
+    params: unknown;
+    fragment: string | null;
+    lineMarker: unknown;
+    tx: unknown;
+    mimetype_tx: string;
+    rx: unknown;
+    mimetype_rx: string;
+    status_rx: number;
+    tokens: number;
+};
+export default class LogEntry {
+    #private;
+    static fetchLogEntry(db: Db, id: number): Promise<LogEntryWire>;
+}
+//# sourceMappingURL=logEntry.d.ts.map

package/dist/server/logEntry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logEntry.d.ts","sourceRoot":"","sources":["../../src/server/logEntry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,EAAE,EAAc,MAAM,eAAe,CAAC;AAMpD,MAAM,MAAM,YAAY,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,QAAQ;;IASzB,OAAa,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAgCpE;CACJ"}

package/dist/server/logEntry.js

@@ -0,0 +1,49 @@
+// Hydrate a log_entries row for the wire. Re-parses JSON-encoded columns
+// (signal, params, lineMarker, tx, rx) so the client receives
+// structured values, not opaque strings.
+export default class LogEntry {
+    static #parseJsonOrNull(v) {
+        // "" is the actionless-row sentinel for "no statement" (error/model rows store tx="");
+        // JSON.parse("") throws, so an empty string is no-value → null, like NULL itself.
+        if (v === null || v === undefined || v === "")
+            return null;
+        if (typeof v !== "string")
+            return v;
+        return JSON.parse(v);
+    }
+    static async fetchLogEntry(db, id) {
+        const row = await db.log_entry_by_id.get({ id });
+        if (row === undefined)
+            throw new Error(`log_entries row ${id} not found`);
+        return {
+            id: row.id,
+            run_id: row.run_id,
+            loop_id: row.loop_id,
+            loop_seq: row.loop_seq,
+            turn_id: row.turn_id,
+            turn_seq: row.turn_seq,
+            sequence: row.sequence,
+            at: row.at,
+            origin: row.origin,
+            op: row.op,
+            suffix: row.suffix,
+            signal: LogEntry.#parseJsonOrNull(row.signal),
+            scheme: row.scheme,
+            username: row.username,
+            password: row.password,
+            hostname: row.hostname,
+            port: row.port,
+            pathname: row.pathname,
+            params: LogEntry.#parseJsonOrNull(row.params),
+            fragment: row.fragment,
+            lineMarker: LogEntry.#parseJsonOrNull(row.lineMarker),
+            tx: LogEntry.#parseJsonOrNull(row.tx),
+            mimetype_tx: row.mimetype_tx,
+            rx: LogEntry.#parseJsonOrNull(row.rx),
+            mimetype_rx: row.mimetype_rx,
+            status_rx: row.status_rx,
+            tokens: row.tokens,
+        };
+    }
+}
+//# sourceMappingURL=logEntry.js.map

package/dist/server/logEntry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logEntry.js","sourceRoot":"","sources":["../../src/server/logEntry.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,8DAA8D;AAC9D,yCAAyC;AAsCzC,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,MAAM,CAAC,gBAAgB,CAAC,CAAU;QAC9B,uFAAuF;QACvF,kFAAkF;QAClF,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAM,EAAE,EAAU;QACzC,MAAM,GAAG,GAAG,MAAO,EAAE,CAAC,eAA8B,CAAC,GAAG,CAA0B,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1F,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;QAC1E,OAAO;YACH,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,MAAM,EAAE,GAAG,CAAC,MAAgB;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAiB;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAkB;YAChC,OAAO,EAAE,GAAG,CAAC,OAAiB;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAkB;YAChC,QAAQ,EAAE,GAAG,CAAC,QAAkB;YAChC,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,MAAM,EAAE,GAAG,CAAC,MAAgB;YAC5B,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,MAAM,EAAE,GAAG,CAAC,MAAgB;YAC5B,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7C,MAAM,EAAE,GAAG,CAAC,MAAuB;YACnC,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,IAAI,EAAE,GAAG,CAAC,IAAqB;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7C,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC;YACrD,EAAE,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,WAAW,EAAE,GAAG,CAAC,WAAqB;YACtC,EAAE,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,WAAW,EAAE,GAAG,CAAC,WAAqB;YACtC,SAAS,EAAE,GAAG,CAAC,SAAmB;YAClC,MAAM,EAAE,GAAG,CAAC,MAAgB;SAC/B,CAAC;IACN,CAAC;CACJ"}

package/dist/server/logEntry.sql

@@ -0,0 +1,10 @@
+-- Log-entry hydration for wire surfacing.
+
+-- PREP: log_entry_by_id
+-- loop_seq / turn_seq are the loop+turn ordinals (the logical coordinate clients
+-- render, e.g. 01/02/03) — distinct from the loop_id/turn_id DB keys (#208).
+SELECT le.*, l.sequence AS loop_seq, t.sequence AS turn_seq
+FROM log_entries le
+JOIN loops l ON l.id = le.loop_id
+JOIN turns t ON t.id = le.turn_id
+WHERE le.id = $id;

package/dist/server/loopDocs.d.ts

@@ -0,0 +1,6 @@
+import type Engine from "../core/Engine.ts";
+import type { Db } from "../core/Db.ts";
+export default class LoopDocs {
+    static materialize(engine: Engine, db: Db, sessionId: number): Promise<void>;
+}
+//# sourceMappingURL=loopDocs.d.ts.map

package/dist/server/loopDocs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopDocs.d.ts","sourceRoot":"","sources":["../../src/server/loopDocs.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAKxC,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,OAAa,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAejF;CACJ"}

package/dist/server/loopDocs.js

@@ -0,0 +1,22 @@
+import SessionSettings from "../core/session-settings.js";
+import DispatchAsPlurnk from "./dispatch-as-plurnk.js";
+export default class LoopDocs {
+    static async materialize(engine, db, sessionId) {
+        const { mdDocs } = await SessionSettings.read(db, sessionId);
+        const docStmts = (await SessionSettings.resolveDocs(mdDocs)).map((doc) => ({
+            op: "EDIT", suffix: "", signal: null,
+            target: { kind: "url", raw: `plurnk:///${doc.entryName}`, scheme: "plurnk", username: null, password: null, hostname: null, port: null, pathname: `/${doc.entryName}`, params: {}, fragment: null },
+            lineMarker: null, body: doc.content, position: { line: 1, column: 1 },
+        }));
+        for (const { name, content } of await engine.docEntries(sessionId)) {
+            docStmts.push({
+                op: "EDIT", suffix: "", signal: null,
+                target: { kind: "url", raw: `plurnk://docs/${name}.md`, scheme: "plurnk", username: null, password: null, hostname: "docs", port: null, pathname: `/${name}.md`, params: {}, fragment: null },
+                lineMarker: null, body: content, position: { line: 1, column: 1 },
+            });
+        }
+        if (docStmts.length > 0)
+            await DispatchAsPlurnk.dispatch(engine, db, sessionId, docStmts);
+    }
+}
+//# sourceMappingURL=loopDocs.js.map

package/dist/server/loopDocs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopDocs.js","sourceRoot":"","sources":["../../src/server/loopDocs.ts"],"names":[],"mappings":"AASA,OAAO,eAAe,MAAM,6BAA6B,CAAC;AAC1D,OAAO,gBAAgB,MAAM,yBAAyB,CAAC;AAEvD,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,EAAM,EAAE,SAAiB;QAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAoB,CAAC,MAAM,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxF,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI;YACpC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,GAAG,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YACnM,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;SACxE,CAAC,CAAC,CAAC;QACJ,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,QAAQ,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI;gBACpC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,IAAI,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC7L,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;aACpE,CAAC,CAAC;QACP,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAA6B,CAAC,CAAC;IACnH,CAAC;CACJ"}

package/dist/server/noProposals.d.ts

@@ -0,0 +1,6 @@
+import type Engine from "../core/Engine.ts";
+import type { Db } from "../core/Db.ts";
+export default class NoProposals {
+    static attachNoProposals(engine: Engine, _db: Db): void;
+}
+//# sourceMappingURL=noProposals.d.ts.map

package/dist/server/noProposals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"noProposals.d.ts","sourceRoot":"","sources":["../../src/server/noProposals.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAE5C,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,CAAC,OAAO,OAAO,WAAW;IAC5B,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAUtD;CACJ"}

package/dist/server/noProposals.js

@@ -0,0 +1,37 @@
+// Server-side noProposals listener — the exact inverse of yolo.ts. When a
+// loop's persisted flags.noProposals === true, proposals auto-REJECT
+// in-process, mirroring server-YOLO's auto-ACCEPT. No client roundtrip; no
+// human review.
+//
+// Invisibility is the whole point. The model sees only the ordinary
+// post-resolution result — identical to a human declining the proposal or a
+// client's no_tty_review reject. The `outcome` reason is forensics-only,
+// never in the rx (see ProposalResolution), so a reject under noProposals is
+// indistinguishable, to the model, from any other reject. How a proposal is
+// handled — manual review, client YOLO, server YOLO, noProposals — leaves no
+// fingerprint in the model's experience.
+//
+// Use case: a client with no review channel (no TTY — piped, scripted,
+// redirected) sets noProposals so side-effecting ops fail closed WITHOUT a
+// client roundtrip per proposal. The client, which set the flag, owns any
+// end-user "edits were blocked, no review channel" messaging; the model is
+// mode-blind.
+//
+// yolo wins if both are (nonsensically) set — the explicit auto-accept
+// opt-in takes precedence over the auto-reject.
+export default class NoProposals {
+    static attachNoProposals(engine, _db) {
+        engine.onProposalPending((event) => {
+            if (event.flags.yolo || !event.flags.noProposals)
+                return;
+            try {
+                engine.resolveProposal(event.logEntryId, { decision: "reject", outcome: "no_review_channel" });
+            }
+            catch {
+                // Errors here don't abort dispatch — the proposal stays
+                // pending and falls through to the RPC / timeout path.
+            }
+        });
+    }
+}
+//# sourceMappingURL=noProposals.js.map

package/dist/server/noProposals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noProposals.js","sourceRoot":"","sources":["../../src/server/noProposals.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,2EAA2E;AAC3E,gBAAgB;AAChB,EAAE;AACF,oEAAoE;AACpE,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,yCAAyC;AACzC,EAAE;AACF,uEAAuE;AACvE,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,cAAc;AACd,EAAE;AACF,uEAAuE;AACvE,gDAAgD;AAMhD,MAAM,CAAC,OAAO,OAAO,WAAW;IAC5B,MAAM,CAAC,iBAAiB,CAAC,MAAc,EAAE,GAAO;QAC5C,MAAM,CAAC,iBAAiB,CAAC,CAAC,KAA2B,EAAE,EAAE;YACrD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW;gBAAE,OAAO;YACzD,IAAI,CAAC;gBACD,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACnG,CAAC;YAAC,MAAM,CAAC;gBACL,wDAAwD;gBACxD,uDAAuD;YAC3D,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/server/seam-entry-read.sql

@@ -0,0 +1,21 @@
+-- entry.read RPC queries. SPEC §methods.
+
+-- PREP: entry_read_lookup
+SELECT id, scope, session_id, scheme, pathname
+FROM entries
+WHERE session_id = $session_id AND scheme = $scheme AND pathname = $pathname;
+
+-- PREP: entry_read_channels
+SELECT name, content, length(content) AS contentLength, mimetype, tokens, state
+FROM entry_channels
+WHERE entry_id = $entry_id;
+
+-- entry.read({channel, offset}) — incremental delta read for streaming viewers
+-- (#192): substr ships only content from $offset (chars — the unit contentLength
+-- counts), and contentLength is the full length so the client's next offset
+-- survives growth between a stream/event and this read. $offset=0 → whole channel;
+-- $offset past the end → '' (caught up). SQLite substr is 1-indexed → $offset + 1.
+-- PREP: entry_read_channel_slice
+SELECT name, substr(content, $offset + 1) AS content, length(content) AS contentLength, mimetype, tokens, state
+FROM entry_channels
+WHERE entry_id = $entry_id AND name = $channel;

package/dist/server/seam-log-read.sql

@@ -0,0 +1,21 @@
+-- log.read RPC query. SPEC §methods.
+-- Static query with IS-NULL guards on optional filters. The loops/turns joins
+-- resolve the DISPLAY coordinate (loop_seq/turn_seq/op-sequence) so a client can
+-- target one entry by its `L/T/S` coordinate (plurnk-service#271) instead of
+-- fetching a run and matching client-side. INNER JOINs are safe: log_entries
+-- carries run_id/loop_id/turn_id NOT NULL, so no row is dropped; the coordinate
+-- guards are inert when their param is NULL (identical to the id-only filters).
+
+-- PREP: log_read_recent_ids
+SELECT le.id FROM log_entries le
+JOIN turns t ON t.id = le.turn_id
+JOIN loops l ON l.id = t.loop_id
+WHERE le.run_id = $run_id
+  AND ($loop_id IS NULL OR le.loop_id = $loop_id)
+  AND ($turn_id IS NULL OR le.turn_id = $turn_id)
+  AND ($since_id IS NULL OR le.id > $since_id)
+  AND ($loop_seq IS NULL OR l.sequence = $loop_seq)
+  AND ($turn_seq IS NULL OR t.sequence = $turn_seq)
+  AND ($sequence IS NULL OR le.sequence = $sequence)
+ORDER BY le.at DESC
+LIMIT $limit;

package/dist/server/seam-loop.sql

@@ -0,0 +1,9 @@
+-- loop.run RPC queries. SPEC §rpc.
+
+-- PREP: loop_run_next_sequence
+SELECT COALESCE(MAX(sequence), 0) + 1 AS next FROM loops WHERE run_id = $run_id;
+
+-- PREP: loop_run_insert_loop
+INSERT INTO loops (run_id, sequence, status, prompt)
+VALUES ($run_id, $sequence, 102, $prompt)
+RETURNING id;

package/dist/server/seam-proposal-list.sql

@@ -0,0 +1,13 @@
+-- PREP: proposal_list_pending
+-- §proposal-list — every stopped-world proposal in the session (state='proposed'): file edits,
+-- MCP auths, [300] questions. The ruling's mandatory companion ({§proposal-timeout-cancels}
+-- ships indefinite): a world that can stay stopped for days MUST be discoverable by a
+-- reconnecting client, or granted patience reads as a mystery hang.
+SELECT le.id AS logEntryId, le.run_id AS runId, le.loop_id AS loopId, le.turn_id AS turnId,
+    le.op, le.suffix, le.scheme, le.pathname, le.tx, le.attrs, le.at,
+    l.flags AS loop_flags
+FROM log_entries le
+JOIN runs r ON r.id = le.run_id
+JOIN loops l ON l.id = le.loop_id
+WHERE r.session_id = $session_id AND le.state = 'proposed'
+ORDER BY le.id;

package/dist/server/version-info.d.ts

@@ -0,0 +1,14 @@
+export type Versions = {
+    service: {
+        installed: string;
+        latest?: string;
+    };
+    client: {
+        latest?: string;
+    };
+};
+export default class VersionInfo {
+    #private;
+    static get(): Promise<Versions>;
+}
+//# sourceMappingURL=version-info.d.ts.map

package/dist/server/version-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-info.d.ts","sourceRoot":"","sources":["../../src/server/version-info.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,QAAQ,GAAG;IAAE,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAExG,MAAM,CAAC,OAAO,OAAO,WAAW;;IAQ5B,OAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAQpC;CA0CJ"}

package/dist/server/version-info.js

@@ -0,0 +1,69 @@
+// #235 — version advertising for the client's update notifier. The daemon is the
+// long-lived, already-network-capable process, so it owns the registry poll: a one-shot
+// CLI does zero registry IO and just renders what `discover` hands it. We self-report the
+// installed version and poll npm for `latest` of the service + client packages — CACHED
+// (TTL) and BEST-EFFORT (offline / registry-down omits `latest`; never blocks `discover`).
+import { readFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import { dirname, resolve, join } from "node:path";
+const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..", "..");
+const SERVICE_PKG = "@plurnk/plurnk-service";
+const CLIENT_PKG = "@plurnk/plurnk";
+export default class VersionInfo {
+    static #installed;
+    static #cache = { service: undefined, client: undefined, at: 0 };
+    static #inflight = false;
+    // `discover` rides this. Returns immediately with whatever is cached; a stale/cold
+    // cache triggers a background refresh (never awaited), so the call never blocks on the
+    // network. `installed` is the daemon's honest self-report; `latest` is best-effort.
+    static async get() {
+        const installed = await VersionInfo.#installedVersion();
+        VersionInfo.#maybeRefresh();
+        const { service, client } = VersionInfo.#cache;
+        return {
+            service: service === undefined ? { installed } : { installed, latest: service },
+            client: client === undefined ? {} : { latest: client },
+        };
+    }
+    static async #installedVersion() {
+        if (VersionInfo.#installed === undefined) {
+            const raw = await readFile(join(PACKAGE_ROOT, "package.json"), "utf8");
+            VersionInfo.#installed = JSON.parse(raw).version;
+        }
+        return VersionInfo.#installed;
+    }
+    static #maybeRefresh() {
+        const ttl = VersionInfo.#envMs("PLURNK_SERVICE_VERSION_POLL_TTL", 0);
+        const timeout = VersionInfo.#envMs("PLURNK_PROVIDERS_FETCH_TIMEOUT", 1);
+        if (VersionInfo.#inflight || Date.now() - VersionInfo.#cache.at < ttl)
+            return;
+        VersionInfo.#inflight = true;
+        void VersionInfo.#refresh(timeout).finally(() => { VersionInfo.#inflight = false; });
+    }
+    // No code fallback hides a magic number — the law-file (.env.defaults) carries it.
+    static #envMs(name, min) {
+        const raw = process.env[name];
+        const n = raw === undefined ? Number.NaN : Number.parseInt(raw, 10);
+        if (!Number.isFinite(n) || n < min)
+            throw new Error(`${name} must be an integer >= ${min} (ms), got ${JSON.stringify(raw)}`);
+        return n;
+    }
+    static async #refresh(timeout) {
+        const [service, client] = await Promise.all([VersionInfo.#poll(SERVICE_PKG, timeout), VersionInfo.#poll(CLIENT_PKG, timeout)]);
+        // Keep the prior cached value on a failed poll (don't clobber a good `latest` with undefined).
+        VersionInfo.#cache = { service: service ?? VersionInfo.#cache.service, client: client ?? VersionInfo.#cache.client, at: Date.now() };
+    }
+    static async #poll(pkg, timeout) {
+        try {
+            const res = await fetch(`https://registry.npmjs.org/${pkg.replace("/", "%2F")}/latest`, { signal: AbortSignal.timeout(timeout) });
+            if (!res.ok)
+                return undefined;
+            const body = (await res.json());
+            return typeof body.version === "string" ? body.version : undefined;
+        }
+        catch {
+            return undefined; // best-effort: offline / registry-down / abort → omit `latest`
+        }
+    }
+}
+//# sourceMappingURL=version-info.js.map

package/dist/server/version-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-info.js","sourceRoot":"","sources":["../../src/server/version-info.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,wFAAwF;AACxF,0FAA0F;AAC1F,wFAAwF;AACxF,2FAA2F;AAE3F,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEnD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAClF,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAC7C,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAIpC,MAAM,CAAC,OAAO,OAAO,WAAW;IAC5B,MAAM,CAAC,UAAU,CAAqB;IACtC,MAAM,CAAC,MAAM,GAAsD,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IACpH,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;IAEzB,mFAAmF;IACnF,uFAAuF;IACvF,oFAAoF;IACpF,MAAM,CAAC,KAAK,CAAC,GAAG;QACZ,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACxD,WAAW,CAAC,aAAa,EAAE,CAAC;QAC5B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC;QAC/C,OAAO;YACH,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;YAC/E,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;SACzD,CAAC;IACN,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,iBAAiB;QAC1B,IAAI,WAAW,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;YACvE,WAAW,CAAC,UAAU,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC,OAAO,CAAC;QAC9E,CAAC;QACD,OAAO,WAAW,CAAC,UAAU,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,aAAa;QAChB,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,iCAAiC,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,gCAAgC,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG;YAAE,OAAO;QAC9E,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC;QAC7B,KAAK,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,mFAAmF;IACnF,MAAM,CAAC,MAAM,CAAC,IAAY,EAAE,GAAW;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,GAAG,cAAc,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7H,OAAO,CAAC,CAAC;IACb,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAe;QACjC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/H,+FAA+F;QAC/F,WAAW,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACzI,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,OAAe;QAC3C,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClI,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;YACzD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,SAAS,CAAC,CAAC,+DAA+D;QACrF,CAAC;IACL,CAAC;CACJ"}