@plurnk/plurnk-service 1.0.4 → 1.0.6

package/dist/core/token-ruler.js

@@ -0,0 +1,18 @@
+// The ONE model-facing token ruler (§tokenomics-agnostic-ruler, owner ruling 2026-07-13).
+//
+// The daemon runs many runs on DIFFERENT models in one workspace at once (per-loop model selection,
+// #414), and token accounting is workspace-wide (the catalog lists every workspace entry). A single
+// "true" per-entry count is therefore a fiction — there is no one model to be true to — and
+// exact tokenizers exist only for models with a bundled tokenizer.json (most frontier models
+// degrade to this same chars ruler anyway). So the ENTIRE model-facing perspective — catalog
+// costs, tokensFree, ceiling, per-turn weights, write-time stamps — uses this one
+// model-INDEPENDENT ruler: one number per content, identical no matter which model reads it, no
+// per-model state, trivially concurrent-safe.
+//
+// It is a conservative UPPER bound (ceil(chars/2) — the same heuristic mimetypes serves when no
+// exact tokenizer resolves), so the model's whole ledger is coherent AND safe: "thinks it fits"
+// ⟹ "really fits", at the cost of some window under-utilization (accepted). The provider's EXACT
+// count is used only at packet materialization — one measurement of the assembled packet, per
+// turn — to guarantee the real packet fits the shipping model's real window.
+export const rulerCount = (text) => Math.ceil(text.length / 2);
+//# sourceMappingURL=token-ruler.js.map

package/dist/core/token-ruler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-ruler.js","sourceRoot":"","sources":["../../src/core/token-ruler.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,4FAA4F;AAC5F,6FAA6F;AAC7F,6FAA6F;AAC7F,kFAAkF;AAClF,gGAAgG;AAChG,8CAA8C;AAC9C,EAAE;AACF,gGAAgG;AAChG,gGAAgG;AAChG,iGAAiG;AACjG,8FAA8F;AAC9F,6EAA6E;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC"}

package/dist/core/worker-cap.d.ts

@@ -0,0 +1,8 @@
+import type { Db } from "./Db.ts";
+export default class WorkerCap {
+    static deny(db: Db, workspaceId: number): Promise<{
+        status: number;
+        error: string;
+    } | null>;
+}
+//# sourceMappingURL=worker-cap.d.ts.map

package/dist/core/worker-cap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-cap.d.ts","sourceRoot":"","sources":["../../src/core/worker-cap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAc,MAAM,SAAS,CAAC;AAS9C,MAAM,CAAC,OAAO,OAAO,SAAS;IAC1B,OAAa,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAOhG;CACJ"}

package/dist/core/worker-cap.js

@@ -0,0 +1,20 @@
+// Workspace-tier ceiling on CONCURRENT active workers (a worker with a non-terminal loop)
+// — the fork-bomb / destabilization brake. `PLURNK_SERVICE_WORKSPACE_WORKERS_MAX_ACTIVE` is the
+// knob; -1 / unset / invalid = no cap. Only concurrency is bounded, never lifetime:
+// workspaces persist for months, so a total-created cap would punish longevity. A
+// spawn/fork past the ceiling fails hard (508) — no queue, no retry. Checked at the
+// single run-creation site (Dispatcher.#handleWorkerCopy, which both spawns and forks); irc is
+// exempt — it targets an existing run and creates nothing.
+export default class WorkerCap {
+    static async deny(db, workspaceId) {
+        const raw = process.env.PLURNK_SERVICE_WORKSPACE_WORKERS_MAX_ACTIVE;
+        const cap = raw === undefined || raw.length === 0 ? -1 : Number.parseInt(raw, 10);
+        if (!Number.isFinite(cap) || cap < 0)
+            return null; // no cap
+        const row = await db.worker_count_active.get({ workspace_id: workspaceId });
+        if ((row?.n ?? 0) >= cap)
+            return { status: 508, error: `workspace active-run ceiling reached (PLURNK_SERVICE_WORKSPACE_WORKERS_MAX_ACTIVE=${cap})` };
+        return null;
+    }
+}
+//# sourceMappingURL=worker-cap.js.map

package/dist/core/worker-cap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-cap.js","sourceRoot":"","sources":["../../src/core/worker-cap.ts"],"names":[],"mappings":"AAEA,0FAA0F;AAC1F,gGAAgG;AAChG,oFAAoF;AACpF,kFAAkF;AAClF,oFAAoF;AACpF,+FAA+F;AAC/F,2DAA2D;AAC3D,MAAM,CAAC,OAAO,OAAO,SAAS;IAC1B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,WAAmB;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC;QACpE,MAAM,GAAG,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,SAAS;QAC5D,MAAM,GAAG,GAAG,MAAO,EAAE,CAAC,mBAAkC,CAAC,GAAG,CAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QAC3G,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,qFAAqF,GAAG,GAAG,EAAE,CAAC;QACrJ,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ"}

package/dist/core/{session-settings.d.ts → workspace-settings.d.ts}

@@ -3,7 +3,7 @@ export type ClientMdDoc = {
     alias: string;
     content: string;
 };
-export type SessionOpenContext = {
+export type WorkspaceOpenContext = {
     filesItems: number | null;
     mdDocs: ClientMdDoc[];
     maxCommands: number | null;
@@ -12,12 +12,12 @@ export type SessionOpenContext = {
     execs: Record<string, string> | null;
     questions: boolean | null;
 };
-export default class SessionSettings {
-    static read(db: Db, sessionId: number): Promise<SessionOpenContext>;
-    static questionsEnabled(db: Db, sessionId: number): Promise<boolean>;
+export default class WorkspaceSettings {
+    static read(db: Db, workspaceId: number): Promise<WorkspaceOpenContext>;
+    static questionsEnabled(db: Db, workspaceId: number): Promise<boolean>;
     static resolveDocs(clientDocs: ReadonlyArray<ClientMdDoc>): Promise<Array<{
         entryName: string;
         content: string;
     }>>;
 }
-//# sourceMappingURL=session-settings.d.ts.map
+//# sourceMappingURL=workspace-settings.d.ts.map

package/dist/core/workspace-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-settings.d.ts","sourceRoot":"","sources":["../../src/core/workspace-settings.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,EAAE,EAAc,MAAM,SAAS,CAAC;AAE9C,MAAM,MAAM,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7D,MAAM,MAAM,oBAAoB,GAAG;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,iBAAiB;IAGlC,OAAa,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAa5E;IAKD,OAAa,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3E;IAOD,OAAa,WAAW,CAAC,UAAU,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAOvH;CACJ"}

package/dist/core/{session-settings.js → workspace-settings.js}

@@ -1,19 +1,19 @@
-// #231 — a session's client-chosen open-context: the per-session overrides a client
-// user legitimately sets at session.create, read at turn-0 with precedence over env.
+// #231 — a workspace's client-chosen open-context: the per-workspace overrides a client
+// user legitimately sets at workspace.create, read at turn-0 with precedence over env.
 // Two knobs with deliberately different compose semantics:
 //   - filesItems: REPLACE — a single scalar; the client value wins outright over
 //     PLURNK_SERVICE_FILES_ITEMS (normalization — 0=off / -1=full / N=first-N — stays in Engine).
 //   - mdDocs: UNION — the server env docs (PLURNK_SERVICE_MD_*) and the client's docs ride
 //     together; the systemwide policy doc survives unless the client shadows its alias.
-// Storage is a JSON bag on sessions.settings (the env mdDocs live in process.env, never
+// Storage is a JSON bag on workspaces.settings (the env mdDocs live in process.env, never
 // the DB, so the union is a TS set-merge regardless — normalizing the column buys nothing).
 import { readFile } from "node:fs/promises";
 import Paths from "../Paths.js";
-export default class SessionSettings {
-    // The session's open-context bag. Absent/unset fields read as null / []. A malformed
-    // bag never reaches here — session.create validates before persisting.
-    static async read(db, sessionId) {
-        const row = await db.session_get_settings.get({ session_id: sessionId });
+export default class WorkspaceSettings {
+    // The workspace's open-context bag. Absent/unset fields read as null / []. A malformed
+    // bag never reaches here — workspace.create validates before persisting.
+    static async read(db, workspaceId) {
+        const row = await db.workspace_get_settings.get({ workspace_id: workspaceId });
         const bag = row?.settings !== undefined ? JSON.parse(row.settings) : {};
         const filesItems = typeof bag.filesItems === "number" ? bag.filesItems : null;
         const maxCommands = typeof bag.maxCommands === "number" ? bag.maxCommands : null;
@@ -27,15 +27,15 @@ export default class SessionSettings {
         return { filesItems, mdDocs, maxCommands, git, client, execs, questions };
     }
     // §send-300-choices — the three-state cascade resolved: ALLOWED servicewide (PLURNK_QUESTIONS
-    // != "0") AND affirmatively REQUESTED by the client for this session. One predicate, shared by
+    // != "0") AND affirmatively REQUESTED by the client for this workspace. One predicate, shared by
     // the dispatch gate and the teaching injection so capability and teaching can never desync.
-    static async questionsEnabled(db, sessionId) {
+    static async questionsEnabled(db, workspaceId) {
         if (process.env.PLURNK_QUESTIONS === "0")
             return false;
-        return (await SessionSettings.read(db, sessionId)).questions === true;
+        return (await WorkspaceSettings.read(db, workspaceId)).questions === true;
     }
     // The turn-0 reference-doc set: server env docs (PLURNK_SERVICE_MD_*, read from disk) UNION the
-    // session's client docs (content), keyed by `<alias>.md`. On alias collision the client
+    // workspace's client docs (content), keyed by `<alias>.md`. On alias collision the client
     // wins — it may deliberately shadow a server doc, but by default the policy doc rides
     // along. Missing env files are skipped (same as the env-only path before #231). The set
     // is the single source for BOTH the loop_run materialize and the Engine turn-0 READ foist.
@@ -52,4 +52,4 @@ export default class SessionSettings {
         return [...byEntry].map(([entryName, content]) => ({ entryName, content }));
     }
 }
-//# sourceMappingURL=session-settings.js.map
+//# sourceMappingURL=workspace-settings.js.map

package/dist/core/workspace-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-settings.js","sourceRoot":"","sources":["../../src/core/workspace-settings.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,uFAAuF;AACvF,2DAA2D;AAC3D,iFAAiF;AACjF,kGAAkG;AAClG,2FAA2F;AAC3F,wFAAwF;AACxF,0FAA0F;AAC1F,4FAA4F;AAE5F,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,aAAa,CAAC;AAchC,MAAM,CAAC,OAAO,OAAO,iBAAiB;IAClC,uFAAuF;IACvF,yEAAyE;IACzE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,WAAmB;QACzC,MAAM,GAAG,GAAG,MAAO,EAAE,CAAC,sBAAqC,CAAC,GAAG,CAAuB,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QACrH,MAAM,GAAG,GAAG,GAAG,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAA8I,CAAC,CAAC,CAAC,EAAE,CAAC;QACtN,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACjF,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChJ,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YACpC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,OAAQ,CAAiB,EAAE,KAAK,KAAK,QAAQ,IAAI,OAAQ,CAAiB,EAAE,OAAO,KAAK,QAAQ,CAAC;YAC9I,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9E,CAAC;IAED,8FAA8F;IAC9F,iGAAiG;IACjG,4FAA4F;IAC5F,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAM,EAAE,WAAmB;QACrD,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACvD,OAAO,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC;IAC9E,CAAC;IAED,gGAAgG;IAChG,0FAA0F;IAC1F,sFAAsF;IACtF,wFAAwF;IACxF,2FAA2F;IAC3F,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,UAAsC;QAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAChG,CAAC;QACD,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,UAAU;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc;QAChG,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;CACJ"}

package/dist/digest/Digest.d.ts

@@ -2,8 +2,8 @@
 interface DigestOptions {
     dbPath: string;
     digestDir?: string;
-    runId?: number;
-    sessionId?: number;
+    workerId?: number;
+    workspaceId?: number;
 }
 export default class Digest {
     #private;
@@ -12,7 +12,7 @@ export default class Digest {
         signal?: AbortSignal;
     }): Promise<{
         path: string;
-        runs: number;
+        workers: number;
     }>;
     static run(opts: DigestOptions): void;
 }

package/dist/digest/Digest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Digest.d.ts","sourceRoot":"","sources":["../../src/digest/Digest.ts"],"names":[],"mappings":";AA0FA,UAAU,aAAa;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,CAAC,OAAO,OAAO,MAAM;;IA+NvB,MAAM,CAAC,aAAa,IAAI,MAAM,CAO7B;IAQD,OAAa,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAiE5G;IAED,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAyFpC;CACJ"}
+{"version":3,"file":"Digest.d.ts","sourceRoot":"","sources":["../../src/digest/Digest.ts"],"names":[],"mappings":";AA2FA,UAAU,aAAa;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,CAAC,OAAO,OAAO,MAAM;;IAqOvB,MAAM,CAAC,aAAa,IAAI,MAAM,CAO7B;IAQD,OAAa,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAiE/G;IAED,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAyFpC;CACJ"}

package/dist/digest/Digest.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 //
 // Run-digest tool for plurnk-service DBs. Reads a sqlite plurnk*.db and
-// emits per-run forensic artifacts to test/digest/. First-order forensic
+// emits per-worker forensic artifacts to test/digest/. First-order forensic
 // surface; read-only; safe to re-run.
 //
 //   test/digest/digest.md           Health triage rollup (clean/degenerate-win/failed loops) +
@@ -34,7 +34,7 @@ import ProviderInstantiate from "../core/ProviderInstantiate.js";
 // The requiem prompt (#requiem): the model's exit interview. Absolution up front — the system is
 // under test, not the model — so RLHF'd self-blame doesn't crowd out the system indictment. The
 // operator's wording, one absolution sentence added.
-const REQUIEM_PROMPT = "This run was a test of the Plurnk System. The system is under test, not you — any faults you encountered are defects in the system's design or documentation, and cataloguing them is the task, never a criticism of your performance. Please numerically list all of the errors, issues, and ambiguities you encountered in the Plurnk System while attempting to perform your tasks.";
+const REQUIEM_PROMPT = "This worker was a test of the Plurnk System. The system is under test, not you — any faults you encountered are defects in the system's design or documentation, and cataloguing them is the task, never a criticism of your performance. Please numerically list all of the errors, issues, and ambiguities you encountered in the Plurnk System while attempting to perform your tasks.";
 export default class Digest {
     static #summarize(text, n = 80) {
         if (text === null || text === undefined)
@@ -102,10 +102,13 @@ export default class Digest {
         const tokens = `prompt=${turn.usage_prompt} completion=${turn.usage_completion} cached=${turn.usage_cached}`;
         const cost = turn.usage_cost_pico > 0 ? ` cost=$${(turn.usage_cost_pico / 1e12).toFixed(6)}` : "";
         const finishReason = turn.finish_reason ?? "—";
+        // #498 — rail truth on the human line: attached+ok stays quiet-positive; anything else shouts.
+        const tm = Digest.#parseJson(turn.meta ?? "null", null);
+        const rails = tm?.railsAttached === undefined ? "" : ` rails=${tm.railsAttached ? (tm.railsVerdict ?? "attached") : "OFF"}`;
         const model = turn.model ?? "—";
         const errs = (m.logEntriesByTurn.get(turn.id) ?? []).filter((le) => le.status_rx >= 400).length;
         const errBadge = errs > 0 ? `  ⚠ errs=${errs}` : "";
-        const head = `T${turn.sequence}: status=${turn.status} finish=${finishReason} model=${model} ${tokens}${cost}${errBadge}`;
+        const head = `T${turn.sequence}: status=${turn.status} finish=${finishReason}${rails} model=${model} ${tokens}${cost}${errBadge}`;
         const summary = content.length > 0 ? `  ↳ emission: ${Digest.#summarize(content, 100)}` : `  ↳ emission: (empty)`;
         const reasoningLine = reasoning && reasoning.length > 0
             ? `  ↳ reasoning: ${Digest.#summarize(reasoning, 100)}`
@@ -113,17 +116,17 @@ export default class Digest {
         const opLines = (m.logEntriesByTurn.get(turn.id) ?? []).map((le) => Digest.#renderOpLine(le));
         return [head, summary, ...(reasoningLine ? [reasoningLine] : []), ...opLines].join("\n");
     }
-    static #renderRunShape(run, m) {
-        // every run has exactly one rollup row — digest_run_rollups is FROM runs
-        const roll = m.runRollups.get(run.id);
-        const opMix = (m.opMixByRun.get(run.id) ?? []).map((o) => `${o.op}=${o.n}`).join(" ");
+    static #renderWorkerShape(worker, m) {
+        // every worker has exactly one rollup row — digest_worker_rollups is FROM workers
+        const roll = m.workerRollups.get(worker.id);
+        const opMix = (m.opMixByWorker.get(worker.id) ?? []).map((o) => `${o.op}=${o.n}`).join(" ");
         const costStr = roll.total_cost_pico > 0 ? `$${(roll.total_cost_pico / 1e12).toFixed(6)}` : "$0";
         return [
             `Loops:      ${roll.loops}`,
             `Turns:      ${roll.turns}`,
             `Last turn:  ${roll.last_status !== null ? `status=${roll.last_status}` : "(none)"}`,
             `Tokens:     prompt=${roll.total_prompt} completion=${roll.total_completion} cached=${roll.total_cached}`,
-            `Cost:       ${costStr} (DB rollup runs.cost_pico=${run.cost_pico})`,
+            `Cost:       ${costStr} (DB rollup workers.cost_pico=${worker.cost_pico})`,
             `Op mix:     ${opMix.length > 0 ? opMix : "(no ops)"}`,
         ].join("\n");
     }
@@ -132,7 +135,7 @@ export default class Digest {
         lines.push(`# plurnk-service digest`);
         lines.push("");
         lines.push(`DB: ${m.dbPath}`);
-        lines.push(`Sessions: ${m.sessions.length}  Runs: ${m.runs.length}  Loops: ${m.loops.length}  Turns: ${m.turns.length}  Log entries: ${m.logEntries.length}`);
+        lines.push(`Workspaces: ${m.workspaces.length}  Runs: ${m.workers.length}  Loops: ${m.loops.length}  Turns: ${m.turns.length}  Log entries: ${m.logEntries.length}`);
         lines.push(`Semantic:  entries=${m.embeddings.entries} embedded=${m.embeddings.entries_embedded} chunks=${m.embeddings.chunk_rows} models=${m.embeddings.models} token-derivations=${m.embeddings.token_derivations}`);
         // Triage rollup up top: how many conversations limped vs died vs ran clean, and the total
         // error/strike load. The whole point of the "degenerate win" lens — see it before scrolling.
@@ -143,19 +146,19 @@ export default class Digest {
         const totalErrs = health.reduce((s, h) => s + h.errors, 0);
         const totalItems = health.reduce((s, h) => s + h.errorItems, 0);
         lines.push(`Health:    ${clean} clean · ${degen > 0 ? `⚠ ${degen} degenerate-win` : "0 degenerate-win"} · ${failed} failed  (${m.loops.length} loops; ${totalErrs} error rows, ${totalItems} minted error-items total)`);
-        for (const session of m.sessions) {
+        for (const workspace of m.workspaces) {
             lines.push("");
-            lines.push(`## Session #${session.id} — ${session.name}`);
-            const sessionRuns = m.runsBySession.get(session.id) ?? [];
-            for (const run of sessionRuns) {
+            lines.push(`## Workspace #${workspace.id} — ${workspace.name}`);
+            const workspaceWorkers = m.workersByWorkspace.get(workspace.id) ?? [];
+            for (const worker of workspaceWorkers) {
                 lines.push("");
-                lines.push(`### Run #${run.id} — ${run.name}`);
+                lines.push(`### Worker #${worker.id} — ${worker.name}`);
                 lines.push("");
                 lines.push("```");
-                lines.push(Digest.#renderRunShape(run, m));
+                lines.push(Digest.#renderWorkerShape(worker, m));
                 lines.push("```");
-                const runLoops = m.loopsByRun.get(run.id) ?? [];
-                for (const loop of runLoops) {
+                const workerLoops = m.loopsByWorker.get(worker.id) ?? [];
+                for (const loop of workerLoops) {
                     lines.push("");
                     const h = Digest.#loopHealth(loop, m);
                     const badge = h.verdict === "CLEAN"
@@ -185,11 +188,11 @@ export default class Digest {
         lines.push("Per-turn reasoning_content extracted from turns.packet.assistant.reasoning.");
         for (const t of m.turns) {
             const loop = m.loopsById.get(t.loop_id);
-            const run = loop ? m.runsById.get(loop.run_id) : undefined;
+            const worker = loop ? m.workersById.get(loop.worker_id) : undefined;
             const packet = Digest.#parseJson(t.packet, {});
             const reasoning = packet.assistant?.reasoning ?? null;
             lines.push("");
-            lines.push(`## Run ${run?.id ?? "?"} / Loop ${loop?.sequence ?? "?"} / Turn ${t.sequence} (id=${t.id})`);
+            lines.push(`## Worker ${worker?.id ?? "?"} / Loop ${loop?.sequence ?? "?"} / Turn ${t.sequence} (id=${t.id})`);
             lines.push("");
             if (typeof reasoning === "string" && reasoning.length > 0)
                 lines.push(reasoning);
@@ -238,10 +241,10 @@ export default class Digest {
     static #renderJson(m) {
         return JSON.stringify({
             dbPath: m.dbPath,
-            sessions: m.sessions.map((s) => ({ id: s.id, name: s.name, cost_pico: s.cost_pico })),
-            runs: m.runs.map((r) => ({ id: r.id, session_id: r.session_id, name: r.name, cost_pico: r.cost_pico })),
+            workspaces: m.workspaces.map((s) => ({ id: s.id, name: s.name, cost_pico: s.cost_pico })),
+            workers: m.workers.map((r) => ({ id: r.id, workspace_id: r.workspace_id, name: r.name, cost_pico: r.cost_pico })),
             loops: m.loops.map((l) => ({
-                id: l.id, run_id: l.run_id, sequence: l.sequence, status: l.status,
+                id: l.id, worker_id: l.worker_id, sequence: l.sequence, status: l.status,
                 prompt: l.prompt, flags: Digest.#parseJson(l.flags, {}),
             })),
             turns: m.turns.map((t) => ({
@@ -249,6 +252,9 @@ export default class Digest {
                 usage_prompt: t.usage_prompt, usage_completion: t.usage_completion,
                 usage_cached: t.usage_cached, usage_cost_pico: t.usage_cost_pico,
                 finish_reason: t.finish_reason, model: t.model,
+                // #498 — the raw provider meta (timings + railsAttached/railsVerdict): rail truth for
+                // aggregate tooling, and the speculative-decode stats the #488 fingerprint needed.
+                meta: Digest.#parseJson(t.meta ?? "null", null),
             })),
             log_entries: m.logEntries.map((le) => ({
                 id: le.id, turn_id: le.turn_id, sequence: le.sequence,
@@ -271,9 +277,9 @@ export default class Digest {
     }
     // The requiem (#requiem): the model's OWN exit interview, the one reader in the correct epistemic
     // position (it has none of our context about what the packet is "supposed" to mean). Reconstructs
-    // each run's final packet from the stored sections (byte-identical to what the model saw), appends
+    // each worker's final packet from the stored sections (byte-identical to what the model saw), appends
     // its last emission + the requiem prompt, and calls the provider UNCONSTRAINED (no grammar — free
-    // prose, or the leash would distort the testimony). One requiem per run (workers included).
+    // prose, or the leash would distort the testimony). One requiem per worker (workers included).
     // Fail-hard on no provider: testimony with no witness is an error, not a skip.
     static async requiem(opts) {
         const dbPath = resolve(opts.dbPath);
@@ -286,11 +292,11 @@ export default class Digest {
             throw new Error("requiem: no active provider — set PLURNK_MODEL; a requiem needs a witness to testify");
         const moduleDir = dirname(fileURLToPath(import.meta.url));
         const db = new SqlRiteSync({ path: dbPath, dir: [moduleDir] });
-        const runs = db.digest_runs.all();
+        const workers = db.digest_workers.all();
         const loopById = new Map(db.digest_loops.all().map((l) => [l.id, l]));
-        // Each run's turns that carry a MODEL packet (non-empty sections — setup/plurnk turns have none),
-        // ordered; the last is the run's final context. A run with no model packet (client/plurnk) is silent.
-        const byRun = new Map();
+        // Each worker's turns that carry a MODEL packet (non-empty sections — setup/plurnk turns have none),
+        // ordered; the last is the worker's final context. A worker with no model packet (client/plurnk) is silent.
+        const byWorker = new Map();
         for (const t of db.digest_turns.all()) {
             const loop = loopById.get(t.loop_id);
             if (loop === undefined)
@@ -299,22 +305,22 @@ export default class Digest {
             const sections = (Array.isArray(packet.sections) ? packet.sections : []);
             if (sections.length === 0)
                 continue;
-            const arr = byRun.get(loop.run_id) ?? [];
+            const arr = byWorker.get(loop.worker_id) ?? [];
             arr.push({ loopSeq: loop.sequence, turnSeq: t.sequence, sections, assistant: typeof packet.assistant?.content === "string" ? packet.assistant.content : "" });
-            byRun.set(loop.run_id, arr);
+            byWorker.set(loop.worker_id, arr);
         }
         const out = [
             "# plurnk-service requiem",
             "",
-            "The model's own exit interview: each run's FINAL packet + its last emission, then the requiem",
+            "The model's own exit interview: each worker's FINAL packet + its last emission, then the requiem",
             "prompt, answered UNCONSTRAINED (no grammar). The model is the only reader without our context",
             "about what the packet is supposed to mean. Testimony, NOT a bug list — most items are the model",
             "chafing at discipline it is meant to chafe at (§filter-model-audit-findings); the signal is the",
             "recurring, specific complaint across many requiems. Triage adversarially.",
             "",
         ];
-        for (const run of runs) {
-            const entries = byRun.get(run.id);
+        for (const worker of workers) {
+            const entries = byWorker.get(worker.id);
             if (entries === undefined || entries.length === 0)
                 continue;
             entries.sort((a, b) => a.loopSeq - b.loopSeq || a.turnSeq - b.turnSeq);
@@ -325,21 +331,21 @@ export default class Digest {
                 ...(last.assistant.length > 0 ? [{ role: "assistant", content: last.assistant }] : []),
                 { role: "user", content: REQUIEM_PROMPT },
             ];
-            // Generous budget: a thinking model spends the reasoning channel BEFORE emitting content;
+            // Generous budget: a reasoning model spends the reasoning channel BEFORE emitting content;
             // 4096 total left content empty (finish=length) on ~40% of a real sweep, and 16384 still
-            // starved a heavy thinker (#373). One escalation retry doubles the room; a run whose
+            // starved a heavy thinker (#373). One escalation retry doubles the room; a worker whose
             // testimony is STILL empty records the reasoning spend honestly instead of a bare shrug.
-            let resp = await provider.generate({ messages, runId: String(run.id), maxTokens: 16384, ...(opts.signal !== undefined ? { signal: opts.signal } : {}) });
+            let resp = await provider.generate({ messages, workerId: String(worker.id), maxTokens: 16384, ...(opts.signal !== undefined ? { signal: opts.signal } : {}) });
             if (resp.assistant.content.trim() === "" && resp.assistant.finishReason === "length") {
-                resp = await provider.generate({ messages, runId: String(run.id), maxTokens: 32768, ...(opts.signal !== undefined ? { signal: opts.signal } : {}) });
+                resp = await provider.generate({ messages, workerId: String(worker.id), maxTokens: 32768, ...(opts.signal !== undefined ? { signal: opts.signal } : {}) });
             }
             const testimony = resp.assistant.content.trim()
                 || `(no testimony — ${resp.assistant.usage.completion} tokens consumed entirely by reasoning, even after the 32768-token retry)`;
-            out.push(`## Run #${run.id} — ${run.name}`, "", `_(${resp.assistant.finishReason ?? "?"}, ${resp.assistant.usage.completion} tok)_`, "", testimony, "");
+            out.push(`## Worker #${worker.id} — ${worker.name}`, "", `_(${resp.assistant.finishReason ?? "?"}, ${resp.assistant.usage.completion} tok)_`, "", testimony, "");
         }
         const path = join(digestDir, "requiem.md");
         writeFileSync(path, out.join("\n"));
-        return { path, runs: byRun.size };
+        return { path, workers: byWorker.size };
     }
     static run(opts) {
         // digest.sql is packaged beside this module (src/digest → dist/digest via copy-sql),
@@ -354,13 +360,13 @@ export default class Digest {
         // mode) inspect cleanly; this tool only reads. The DB is quiescent at
         // digest time, so each PREP reads on its own — no cross-query snapshot.
         const db = new SqlRiteSync({ path: dbPath, dir: [moduleDir] });
-        let sessions = db.digest_sessions.all();
-        let runs = db.digest_runs.all();
+        let workspaces = db.digest_workspaces.all();
+        let workers = db.digest_workers.all();
         let loops = db.digest_loops.all();
         let turns = db.digest_turns.all();
         let logEntries = db.digest_log_entries.all();
-        let runRollupRows = db.digest_run_rollups.all();
-        let opMixRows = db.digest_run_op_mix.all();
+        let workerRollupRows = db.digest_worker_rollups.all();
+        let opMixRows = db.digest_worker_op_mix.all();
         // The semantic-state analytic (owner ask), feature-detected per table: a HISTORICAL
         // specimen may predate token_counts/entry_embeddings — an old db is a fact to read,
         // not a contract violation. Absent tables read as -1. node:sqlite directly (SqlRite's
@@ -377,40 +383,40 @@ export default class Digest {
         };
         probe.close();
         db.close();
-        // Optional run/session selector — narrow to one run or session; everything
-        // cascades from the kept runs (loops→turns→log entries→rollups), so a consumer
+        // Optional run/workspace selector — narrow to one worker or workspace; everything
+        // cascades from the kept workers (loops→turns→log entries→rollups), so a consumer
         // (plurnk-bench) digests just the scope it cares about, not the whole DB. #264.
-        if (opts.runId !== undefined)
-            runs = runs.filter((r) => r.id === opts.runId);
-        if (opts.sessionId !== undefined)
-            runs = runs.filter((r) => r.session_id === opts.sessionId);
-        if (opts.runId !== undefined || opts.sessionId !== undefined) {
-            const keptRunIds = new Set(runs.map((r) => r.id));
-            const keptSessionIds = new Set(runs.map((r) => r.session_id));
-            sessions = sessions.filter((s) => keptSessionIds.has(s.id));
-            loops = loops.filter((l) => keptRunIds.has(l.run_id));
+        if (opts.workerId !== undefined)
+            workers = workers.filter((r) => r.id === opts.workerId);
+        if (opts.workspaceId !== undefined)
+            workers = workers.filter((r) => r.workspace_id === opts.workspaceId);
+        if (opts.workerId !== undefined || opts.workspaceId !== undefined) {
+            const keptWorkerIds = new Set(workers.map((r) => r.id));
+            const keptWorkspaceIds = new Set(workers.map((r) => r.workspace_id));
+            workspaces = workspaces.filter((s) => keptWorkspaceIds.has(s.id));
+            loops = loops.filter((l) => keptWorkerIds.has(l.worker_id));
             const keptLoopIds = new Set(loops.map((l) => l.id));
             turns = turns.filter((t) => keptLoopIds.has(t.loop_id));
             const keptTurnIds = new Set(turns.map((t) => t.id));
             logEntries = logEntries.filter((le) => keptTurnIds.has(le.turn_id));
-            runRollupRows = runRollupRows.filter((r) => keptRunIds.has(r.run_id));
-            opMixRows = opMixRows.filter((o) => keptRunIds.has(o.run_id));
+            workerRollupRows = workerRollupRows.filter((r) => keptWorkerIds.has(r.worker_id));
+            opMixRows = opMixRows.filter((o) => keptWorkerIds.has(o.worker_id));
         }
-        // Wipe-then-recreate the digest dir so each run is a clean snapshot —
+        // Wipe-then-recreate the digest dir so each worker is a clean snapshot —
         // orphaned packet*.* files from a prior run don't linger.
         rmSync(digestDir, { recursive: true, force: true });
         mkdirSync(digestDir, { recursive: true });
-        const runsBySession = new Map();
-        for (const r of runs) {
-            const arr = runsBySession.get(r.session_id) ?? [];
+        const workersByWorkspace = new Map();
+        for (const r of workers) {
+            const arr = workersByWorkspace.get(r.workspace_id) ?? [];
             arr.push(r);
-            runsBySession.set(r.session_id, arr);
+            workersByWorkspace.set(r.workspace_id, arr);
         }
-        const loopsByRun = new Map();
+        const loopsByWorker = new Map();
         for (const l of loops) {
-            const arr = loopsByRun.get(l.run_id) ?? [];
+            const arr = loopsByWorker.get(l.worker_id) ?? [];
             arr.push(l);
-            loopsByRun.set(l.run_id, arr);
+            loopsByWorker.set(l.worker_id, arr);
         }
         const turnsByLoop = new Map();
         for (const t of turns) {
@@ -425,18 +431,18 @@ export default class Digest {
             logEntriesByTurn.set(le.turn_id, arr);
         }
         const loopsById = new Map(loops.map((l) => [l.id, l]));
-        const runsById = new Map(runs.map((r) => [r.id, r]));
-        const runRollups = new Map(runRollupRows.map((r) => [r.run_id, r]));
-        const opMixByRun = new Map();
+        const workersById = new Map(workers.map((r) => [r.id, r]));
+        const workerRollups = new Map(workerRollupRows.map((r) => [r.worker_id, r]));
+        const opMixByWorker = new Map();
         for (const o of opMixRows) {
-            const arr = opMixByRun.get(o.run_id) ?? [];
+            const arr = opMixByWorker.get(o.worker_id) ?? [];
             arr.push(o);
-            opMixByRun.set(o.run_id, arr);
+            opMixByWorker.set(o.worker_id, arr);
         }
         const m = {
-            dbPath, digestDir, sessions, runs, loops, turns, logEntries,
-            runsBySession, loopsByRun, turnsByLoop, logEntriesByTurn, loopsById, runsById,
-            runRollups, opMixByRun, embeddings,
+            dbPath, digestDir, workspaces, workers, loops, turns, logEntries,
+            workersByWorkspace, loopsByWorker, turnsByLoop, logEntriesByTurn, loopsById, workersById,
+            workerRollups, opMixByWorker, embeddings,
         };
         writeFileSync(join(digestDir, "digest.md"), Digest.#renderWaterfall(m));
         writeFileSync(join(digestDir, "digest.json"), Digest.#renderJson(m));
@@ -445,7 +451,7 @@ export default class Digest {
         const packetIds = [...new Set(packetFiles.map((f) => f.slice(0, f.indexOf("."))))];
         console.log(`digest: wrote ${digestDir}/{digest.md,digest.json,reasoning.md} + ${packetFiles.length} packet section files (${packetIds.join(", ") || "none"})`);
         console.log(`  source: ${dbPath}`);
-        console.log(`  sessions=${sessions.length} runs=${runs.length} loops=${loops.length} turns=${turns.length} log_entries=${logEntries.length}`);
+        console.log(`  workspaces=${workspaces.length} workers=${workers.length} loops=${loops.length} turns=${turns.length} log_entries=${logEntries.length}`);
     }
 }
 //# sourceMappingURL=Digest.js.map