@plurnk/plurnk-service 1.17.0 → 1.19.0

package/migrations/005_entries.sql

@@ -3,6 +3,23 @@
 -- Version numbers order the chapters on a fresh database; they are not history. A shape
 -- change edits the chapter in place; existing development databases are recreated.
 
+-- {§content-store} Every settled body is stored once, addressed by its sha256, however many
+-- channels, workspaces, forks or full-text rows carry it. Rows are immutable; retention collects
+-- what nothing references.
+-- The ONE engine-imposed constraint (SPEC {§stream-constraints}, {§stream-constraints-engine-one-cap}): 100 MiB char-length cap
+-- per content body. All other limits are extrinsic.
+CREATE TABLE IF NOT EXISTS contents (
+    id      INTEGER NOT NULL PRIMARY KEY,
+    hash    TEXT    NOT NULL UNIQUE CHECK (length(hash) = 64),
+    content TEXT    NOT NULL CHECK (length(content) <= 104857600)
+) STRICT;
+
+CREATE TRIGGER IF NOT EXISTS contents_immutable
+BEFORE UPDATE ON contents
+BEGIN
+    SELECT RAISE(ABORT, 'content is immutable');
+END;
+
 -- derivations
 -- Content-addressed deep projections. Entry channels and log projections point
 -- at a COMPLETE artifact by deep_hash; graph and FTS are stored once
@@ -15,6 +32,8 @@ CREATE TABLE IF NOT EXISTS derivations (
     disposition TEXT    CHECK (disposition IN ('indexed', 'excluded', 'unsearchable', 'failed')),
     reason      TEXT,
     parse_issues INTEGER CHECK (parse_issues IS NULL OR parse_issues > 0),
+    -- {§content-store} The text this artifact full-text indexes; NULL = nothing indexed.
+    content_id  INTEGER REFERENCES contents(id),
     summary     TEXT    CHECK (
         summary IS NULL OR (
             length(summary) > 0
@@ -37,9 +56,7 @@ CREATE TABLE IF NOT EXISTS entries (
     authority  TEXT    NOT NULL DEFAULT '',
     pathname   TEXT    NOT NULL,
     workspace_id INTEGER NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
-    -- Entry-private metadata. Prompt frames use `openPaths` to carry selected
-    -- workspace paths into the exact turn that publishes the frame
-    -- ({§methods-loop-run-open-paths}).
+    -- Scheme-owned entry metadata.
     attributes TEXT    NOT NULL DEFAULT '{}' CHECK (json_valid(attributes)),
     default_channel TEXT NOT NULL DEFAULT 'body' CHECK (length(default_channel) > 0),
     output INTEGER NOT NULL DEFAULT 0 CHECK (output IN (0, 1)),
@@ -65,17 +82,20 @@ CREATE TABLE IF NOT EXISTS entries (
 -- {§entry-owner}, {§execution-output-identity}: one canonical resource key.
 CREATE UNIQUE INDEX IF NOT EXISTS entries_identity ON entries (workspace_id, scheme, authority, pathname);
 
--- The ONE engine-imposed constraint (SPEC {§stream-constraints}, {§stream-constraints-engine-one-cap}): 100 MiB char-length cap
--- per channel content body. All other limits are extrinsic.
-CREATE TABLE IF NOT EXISTS entry_channels (
+-- entry_channel_rows: the stored shape of a channel. A settled channel points at its body in
+-- `contents`; an active stream's body is a private buffer that is interned when it settles.
+-- Everything reads and writes channels through the `entry_channels` view below.
+CREATE TABLE IF NOT EXISTS entry_channel_rows (
     entry_id INTEGER NOT NULL,
     name     TEXT    NOT NULL             CHECK (length(name) > 0),
-    content  TEXT    NOT NULL             CHECK (length(content) <= 104857600),
+    content_id INTEGER REFERENCES contents(id),
+    buffer   TEXT                         CHECK (buffer IS NULL OR length(buffer) <= 104857600),
     mimetype TEXT    NOT NULL             CHECK (length(mimetype) > 0),
     weight   INTEGER NOT NULL DEFAULT 0   CHECK (weight >= 0),
-    -- Content identity: sha256 of content, stamped at static writes; streamed
-    -- appends leave it NULL. Curation weight remains model-independent.
-    content_hash TEXT,
+    -- Line count of the body, kept at every write so a catalog lists extent without reading
+    -- bodies: a trailing newline terminates the last line; empty content has none
+    -- ({§tokenomics-weight-stored-at-write}).
+    lines    INTEGER NOT NULL             CHECK (lines >= 0),
     -- Search derivation for this exact addressable channel representation.
     -- Content or mimetype changes invalidate it at the owning channel row.
     deep_hash TEXT,
@@ -110,13 +130,92 @@ CREATE TABLE IF NOT EXISTS entry_channels (
                 END
         END
     ),
+    CHECK ((content_id IS NULL) <> (buffer IS NULL)),
     PRIMARY KEY (entry_id, name),
     FOREIGN KEY (entry_id) REFERENCES entries(id) ON DELETE CASCADE,
     FOREIGN KEY (deep_hash) REFERENCES derivations(deep_hash)
 ) STRICT, WITHOUT ROWID;
 
 -- {§db-fk-indexes} Derivation replacement checks channels by hash; catalog joins drive on it too.
-CREATE INDEX IF NOT EXISTS entry_channels_deep_hash ON entry_channels (deep_hash) WHERE deep_hash IS NOT NULL;
+CREATE INDEX IF NOT EXISTS entry_channel_rows_deep_hash ON entry_channel_rows (deep_hash) WHERE deep_hash IS NOT NULL;
+-- {§db-fk-indexes} Content collection asks whether any channel still points at a body.
+CREATE INDEX IF NOT EXISTS entry_channel_rows_content ON entry_channel_rows (content_id) WHERE content_id IS NOT NULL;
+
+-- {§content-store} The channel as every reader and writer sees it. content_hash is the stored
+-- body's identity (NULL while a stream is active); a writer may bind it, and a bound hash must
+-- be the content's.
+CREATE VIEW IF NOT EXISTS entry_channels AS
+SELECT entry_channel_rows.entry_id, entry_channel_rows.name,
+       COALESCE(entry_channel_rows.buffer, contents.content) AS content,
+       entry_channel_rows.mimetype, entry_channel_rows.weight, entry_channel_rows.lines,
+       contents.hash AS content_hash, entry_channel_rows.deep_hash, entry_channel_rows.state,
+       entry_channel_rows.producer_result
+FROM entry_channel_rows
+LEFT JOIN contents ON contents.id = entry_channel_rows.content_id;
+
+CREATE TRIGGER IF NOT EXISTS entry_channels_insert
+INSTEAD OF INSERT ON entry_channels
+BEGIN
+    SELECT RAISE(ABORT, 'a channel requires content') WHERE NEW.content IS NULL;
+    SELECT RAISE(ABORT, 'content_hash does not match content')
+    WHERE NEW.content_hash IS NOT NULL AND NEW.content_hash IS NOT sha256(NEW.content);
+    INSERT INTO contents (hash, content)
+    SELECT COALESCE(NEW.content_hash, sha256(NEW.content)), NEW.content
+    WHERE COALESCE(NEW.state, 'static') <> 'active'
+    ON CONFLICT (hash) DO NOTHING;
+    INSERT INTO entry_channel_rows (entry_id, name, content_id, buffer, mimetype, weight, lines, deep_hash, state, producer_result)
+    VALUES (
+        NEW.entry_id, NEW.name,
+        CASE WHEN COALESCE(NEW.state, 'static') <> 'active'
+             THEN (SELECT id FROM contents WHERE hash = COALESCE(NEW.content_hash, sha256(NEW.content))) END,
+        CASE WHEN COALESCE(NEW.state, 'static') = 'active' THEN NEW.content END,
+        NEW.mimetype, COALESCE(NEW.weight, 0),
+        CASE WHEN length(NEW.content) = 0 THEN 0
+             WHEN substr(NEW.content, -1) = char(10) THEN length(NEW.content) - length(replace(NEW.content, char(10), ''))
+             ELSE length(NEW.content) - length(replace(NEW.content, char(10), '')) + 1 END,
+        NEW.deep_hash, COALESCE(NEW.state, 'static'), NEW.producer_result
+    );
+END;
+
+-- Each column group is written only when it changed, so a search attachment never reads as a
+-- representation write and a lifecycle write never re-stores a body.
+CREATE TRIGGER IF NOT EXISTS entry_channels_update
+INSTEAD OF UPDATE ON entry_channels
+BEGIN
+    SELECT RAISE(ABORT, 'a channel is addressed by (entry_id, name)')
+    WHERE NEW.entry_id IS NOT OLD.entry_id OR NEW.name IS NOT OLD.name;
+    SELECT RAISE(ABORT, 'a channel requires content') WHERE NEW.content IS NULL;
+    SELECT RAISE(ABORT, 'content_hash does not match content')
+    WHERE NEW.content_hash IS NOT NULL AND NEW.content_hash IS NOT OLD.content_hash
+      AND NEW.content_hash IS NOT sha256(NEW.content);
+    INSERT INTO contents (hash, content)
+    SELECT sha256(NEW.content), NEW.content
+    WHERE NEW.state <> 'active' AND (NEW.content IS NOT OLD.content OR OLD.state = 'active')
+    ON CONFLICT (hash) DO NOTHING;
+    UPDATE entry_channel_rows
+    SET content_id = CASE WHEN NEW.state <> 'active'
+                          THEN (SELECT id FROM contents WHERE hash = sha256(NEW.content)) END,
+        buffer = CASE WHEN NEW.state = 'active' THEN NEW.content END,
+        lines = CASE WHEN length(NEW.content) = 0 THEN 0
+             WHEN substr(NEW.content, -1) = char(10) THEN length(NEW.content) - length(replace(NEW.content, char(10), ''))
+             ELSE length(NEW.content) - length(replace(NEW.content, char(10), '')) + 1 END
+    WHERE entry_id = OLD.entry_id AND name = OLD.name
+      AND (NEW.content IS NOT OLD.content OR (NEW.state = 'active') IS NOT (OLD.state = 'active'));
+    UPDATE entry_channel_rows
+    SET mimetype = NEW.mimetype, weight = NEW.weight, state = NEW.state, producer_result = NEW.producer_result
+    WHERE entry_id = OLD.entry_id AND name = OLD.name
+      AND (NEW.mimetype IS NOT OLD.mimetype OR NEW.weight IS NOT OLD.weight
+           OR NEW.state IS NOT OLD.state OR NEW.producer_result IS NOT OLD.producer_result);
+    UPDATE entry_channel_rows
+    SET deep_hash = NEW.deep_hash
+    WHERE entry_id = OLD.entry_id AND name = OLD.name AND NEW.deep_hash IS NOT OLD.deep_hash;
+END;
+
+CREATE TRIGGER IF NOT EXISTS entry_channels_delete
+INSTEAD OF DELETE ON entry_channels
+BEGIN
+    DELETE FROM entry_channel_rows WHERE entry_id = OLD.entry_id AND name = OLD.name;
+END;
 
 -- {§crud} A publication is one SQL statement: failure rolls back metadata and
 -- every channel. The view is an input boundary, not a second persisted copy.
@@ -141,14 +240,28 @@ BEGIN
     DELETE FROM entry_channels WHERE entry_id = (
         SELECT id FROM entries WHERE workspace_id = NEW.workspace_id
           AND scheme = NEW.scheme AND authority = NEW.authority AND pathname = NEW.pathname
-    );
+    ) AND name NOT IN (SELECT key FROM json_each(NEW.channels));
+    UPDATE entry_channels
+    SET content = json_extract(c.value, '$.content'),
+        mimetype = json_extract(c.value, '$.mimetype'),
+        weight = json_extract(c.value, '$.weight'),
+        content_hash = json_extract(c.value, '$.content_hash'),
+        state = json_extract(c.value, '$.state'),
+        producer_result = json_extract(c.value, '$.producer_result')
+    FROM (SELECT key, value FROM json_each(NEW.channels)) AS c
+    WHERE entry_channels.name = c.key
+      AND entry_channels.entry_id = (
+        SELECT id FROM entries WHERE workspace_id = NEW.workspace_id
+          AND scheme = NEW.scheme AND authority = NEW.authority AND pathname = NEW.pathname
+      );
     INSERT INTO entry_channels (entry_id, name, content, mimetype, weight, content_hash, state, producer_result)
     SELECT e.id, c.key, json_extract(c.value, '$.content'), json_extract(c.value, '$.mimetype'),
            json_extract(c.value, '$.weight'), json_extract(c.value, '$.content_hash'),
            json_extract(c.value, '$.state'), json_extract(c.value, '$.producer_result')
     FROM entries e, json_each(NEW.channels) c
     WHERE e.workspace_id = NEW.workspace_id AND e.scheme = NEW.scheme
-      AND e.authority = NEW.authority AND e.pathname = NEW.pathname;
+      AND e.authority = NEW.authority AND e.pathname = NEW.pathname
+      AND NOT EXISTS (SELECT 1 FROM entry_channel_rows r WHERE r.entry_id = e.id AND r.name = c.key);
 END;
 
 -- symbol_defs
@@ -192,7 +305,15 @@ CREATE INDEX IF NOT EXISTS symbol_refs_source ON symbol_refs (derivation_id, con
 
 -- {§find-fulltext-selection} Native full-text index of the addressed READ body.
 -- rowid is the content-addressed derivation id.
-CREATE VIRTUAL TABLE IF NOT EXISTS derivation_fts USING fts5(content);
+-- {§content-store} The index reads its text from the content store instead of keeping a copy:
+-- external content, kept in step by the derivation triggers in _entry-fts.sql.
+CREATE VIEW IF NOT EXISTS derivation_texts AS
+SELECT derivations.id AS id, contents.content AS content
+FROM derivations
+JOIN contents ON contents.id = derivations.content_id;
+CREATE VIRTUAL TABLE IF NOT EXISTS derivation_fts USING fts5(content, content='derivation_texts', content_rowid='id');
+-- {§db-fk-indexes} Content collection asks whether any derivation still indexes a body.
+CREATE INDEX IF NOT EXISTS derivations_content ON derivations (content_id) WHERE content_id IS NOT NULL;
 
 -- {§packet-attachment-parts}: READ snapshots survive source changes and log curation.
 CREATE TABLE IF NOT EXISTS native_contents (

package/migrations/006_log.sql

@@ -112,22 +112,73 @@ CREATE        INDEX IF NOT EXISTS log_entries_loop_id          ON log_entries (l
 -- {§db-fk-indexes} Derivation replacement checks the rows that cite the hash.
 CREATE        INDEX IF NOT EXISTS log_entries_deep_hash        ON log_entries (deep_hash) WHERE deep_hash IS NOT NULL;
 
--- {§loop-response-messages}: executed messages survive curation. This projection
--- is also used inside atomic cancellation; no second response accumulator exists.
-CREATE VIEW IF NOT EXISTS loop_responses AS
-SELECT le.loop_id,
-    group_concat(json_extract(le.tx, '$.body.raw'), char(10) || char(10)
-        ORDER BY t.sequence, le.sequence) AS content
-FROM log_entries le JOIN turns t ON t.id = le.turn_id
-WHERE le.op = 'SEND' AND le.state = 'resolved' AND le.status_rx BETWEEN 200 AND 299
-  AND le.source IS NULL AND le.inherited_history = 0
-  AND json_valid(le.tx)
-  -- {§send-prompt-acceptance}: a SEND to one of this loop's own prompts is the response too;
-  -- the dispatcher admits only own-loop prompt addresses, so the scheme alone identifies them.
-  AND (json_type(le.tx, '$.target') = 'null' OR json_extract(le.tx, '$.target.scheme') = 'prompt')
-  AND json_type(le.tx, '$.body.raw') = 'text'
-  AND length(json_extract(le.tx, '$.body.raw')) > 0
-GROUP BY le.loop_id;
+-- {§loop-response-messages}: delivered messages remain executed evidence;
+-- curation and loop termination cannot retract or replace them.
+CREATE VIEW IF NOT EXISTS log_responses AS
+SELECT le.id, le.loop_id, le.turn_id, le.worker_id, le.sequence, le.source, le.origin,
+       CASE WHEN json_valid(le.rx) THEN le.rx END AS rx,
+       CASE WHEN json_valid(le.tx) THEN COALESCE(json_extract(le.tx, '$.body.raw'), '') END AS content
+FROM log_entries le
+    WHERE le.state = 'resolved'
+      AND le.op = 'SEND' AND le.status_rx BETWEEN 200 AND 299
+      AND le.source IS NULL AND le.inherited_history = 0
+      AND json_valid(le.tx)
+      AND json_type(CASE WHEN json_valid(le.rx) THEN le.rx END, '$.answers') = 'array'
+      AND typeof(content) = 'text';
+
+CREATE VIEW IF NOT EXISTS message_responses AS
+SELECT DISTINCT r.id, m.loop_id, m.worker_id, r.source, r.content, r.rx
+FROM log_responses r
+JOIN workers producer ON producer.id = r.worker_id
+JOIN json_each(r.rx, '$.answers') answer
+JOIN message_sources m ON m.path = answer.value AND m.workspace_id = producer.workspace_id
+UNION ALL
+SELECT r.id, r.loop_id, r.worker_id, r.source, r.content, r.rx
+FROM log_responses r WHERE json_array_length(r.rx, '$.answers') = 0;
+
+CREATE VIEW IF NOT EXISTS unanswered_messages AS
+SELECT m.* FROM message_sources m
+WHERE NOT EXISTS (
+    SELECT 1 FROM log_responses r
+    JOIN workers w ON w.id = r.worker_id, json_each(r.rx, '$.answers') answer
+    WHERE w.workspace_id = m.workspace_id AND answer.value = m.path
+);
+
+-- {§message-reply-delivery}: notify the sender and the assigned conversation.
+-- UNION prevents duplicate delivery when both roles belong to the same worker.
+-- {§loop-answer}: a child's answer to the very task its parent delegated is NOT delivered here;
+-- the parent receives it once, as the child's termination row, which carries that answer at
+-- ops://<child>/<loop> (operator, 2026-09-19). Replies to any other message still deliver.
+CREATE VIEW IF NOT EXISTS delegated_task_answers AS
+SELECT r.id AS source_record_id, parent.id AS recipient_worker_id
+FROM log_responses r
+JOIN workers producer ON producer.id = r.worker_id
+JOIN workers parent ON parent.id = producer.parent_worker_id
+JOIN json_each(r.rx, '$.answers') answer
+JOIN message_sources m ON m.path = answer.value AND m.workspace_id = producer.workspace_id
+WHERE m.loop_id = r.loop_id AND m.ordinal = 1 AND m.source = 'worker://' || parent.name;
+
+CREATE VIEW IF NOT EXISTS message_reply_deliveries AS
+SELECT DISTINCT r.id AS source_record_id, r.loop_id, m.workspace_id,
+       r.worker_id AS producer_worker_id, m.worker_id AS recipient_worker_id
+FROM log_responses r
+JOIN workers producer ON producer.id = r.worker_id
+JOIN json_each(r.rx, '$.answers') answer
+JOIN message_sources m ON m.path = answer.value AND m.workspace_id = producer.workspace_id
+UNION
+SELECT r.id, r.loop_id, m.workspace_id, r.worker_id, sender.id
+FROM log_responses r
+JOIN workers producer ON producer.id = r.worker_id
+JOIN json_each(r.rx, '$.answers') answer
+JOIN message_sources m ON m.path = answer.value AND m.workspace_id = producer.workspace_id
+JOIN workers sender ON sender.workspace_id = m.workspace_id AND m.source = 'worker://' || sender.name;
+
+CREATE VIEW IF NOT EXISTS delivered_message_replies AS
+SELECT d.* FROM message_reply_deliveries d
+WHERE NOT EXISTS (
+    SELECT 1 FROM delegated_task_answers t
+    WHERE t.source_record_id = d.source_record_id AND t.recipient_worker_id = d.recipient_worker_id
+);
 
 CREATE UNIQUE INDEX IF NOT EXISTS log_entries_model_call_id
     ON log_entries (model_call_id)
@@ -514,8 +565,12 @@ FROM (
            -- private to the worker it serves and never crosses to the parent.
            CASE
                WHEN t.producer = '_plurnk' AND t.kind IN ('operation', 'initialization', 'maintenance') THEN NULL
+               WHEN EXISTS (
+                   SELECT 1 FROM message_reply_deliveries d
+                   WHERE d.source_record_id = le.id AND d.recipient_worker_id = w.parent_worker_id
+               ) THEN NULL
                ELSE w.parent_worker_id
-           END AS target_parent_worker_id,
+           END AS recipient_worker_id,
            CASE
                WHEN le.state = 'resolved'
                 AND NOT (t.producer = '_plurnk' AND t.kind = 'maintenance')
@@ -564,15 +619,15 @@ FROM (
            json_remove(le.attrs, '$.__plurnk_curation') AS attrs
     FROM log_entries le
     JOIN workers w ON w.id = le.worker_id
-    JOIN loops l ON l.id = le.loop_id
     JOIN turns t ON t.id = le.turn_id
     WHERE le.ambient_event_id IS NULL
       AND le.inherited_history = 0
-      AND le.op IS NOT NULL
-      AND le.state != 'proposed'
-      AND NOT (
-          le.op IN ('NEXT', 'WAIT', 'DONE', 'FAIL')
-          AND l.status IN (200, 413, 429, 499, 500, 504, 508)
+      AND COALESCE(json_extract(le.attrs, '$.kind'), '') != 'message'
+      AND (
+          le.op IN ('EDIT', 'COPY', 'MOVE', 'SEND', 'WORK', 'FORK')
+          OR CASE WHEN json_valid(le.tx) THEN json_type(le.tx, '$.runtime') END = 'text'
+          OR (le.op = 'KILL' AND COALESCE(le.scheme, 'file') != 'log')
       )
+      AND le.state != 'proposed'
 ) candidate
-WHERE target_parent_worker_id IS NOT NULL OR workspace_broadcast = 1;
+WHERE recipient_worker_id IS NOT NULL OR workspace_broadcast = 1;

package/migrations/007_subscriptions.sql

@@ -1,5 +1,5 @@
 -- MIGRATE: 7 subscriptions
--- Chapter 7 of the schema baseline ({§db-schema-baseline}): Subscriptions to streams and their publication cursors.
+-- Chapter 7 of the schema baseline ({§db-schema-baseline}): held streams, events and their observation cursors.
 -- Version numbers order the chapters on a fresh database; they are not history. A shape
 -- change edits the chapter in place; existing development databases are recreated.
 
@@ -19,13 +19,10 @@ CREATE TABLE IF NOT EXISTS subscriptions (
     published_channel TEXT          CHECK (published_channel IS NULL OR length(published_channel) > 0),
     source       TEXT             CHECK (source IS NULL OR length(source) > 0),
     opened_at    TEXT    NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
-    -- EXEC `<T,P>` poll policy: NULL = default backoff, 0 = disabled, positive = fixed cadence.
-    -- While the owning loop hibernates (202), an armed policy wakes it to inspect the stream ({§exec-poll}).
-    poll_seconds INTEGER          CHECK (poll_seconds IS NULL OR poll_seconds >= 0),
-    -- EXEC `<0>` — turn-scoped: the stream is reaped at the worker's next pre-turn so it never survives
-    -- into the subsequent turn; its terminal output surfaces initially visible like any conclusion. {§exec-poll}
+    -- `[{"lifetime":"turn"}]`: the stream is reaped at the worker's next pre-turn so it never survives
+    -- into the subsequent turn; its terminal output surfaces initially visible like any conclusion. {§exec-lifetime}
     turn_scoped  INTEGER NOT NULL DEFAULT 0 CHECK (turn_scoped IN (0, 1)),
-    -- {§worker-obligations}: a `<-1>` spawn outlives its loop and is nobody's obligation ({§exec-timeout}).
+    -- {§worker-obligations}: a `[{"lifetime":"detached"}]` spawn outlives its loop and is nobody's obligation.
     detached     INTEGER NOT NULL DEFAULT 0 CHECK (detached IN (0, 1)),
     closed_at    TEXT,
     close_status INTEGER          CHECK (close_status IS NULL OR (close_status BETWEEN 100 AND 599)),
@@ -140,14 +137,7 @@ BEGIN
     SELECT RAISE(ABORT, 'subscription channel result violates the channel producer contract');
 END;
 
--- One durable publication cursor per selected subscription channel. Log rows
--- are curated model context and therefore cannot own this lifecycle fact.
--- The row survives KILLing any generated observation and disappears only with
--- its subscription. {§exec-stream}
--- {§worker-obligations}: what a worker still holds — an open stream that is not detached, or a
--- child with an unresolved loop (the same liveness the Delegation section shows, so the 409 gate
--- and the section the model reads never disagree, {§child-orientation}). The one definition the
--- completion gate, the wait matrix, and the drain's wake settlement all read.
+-- {§worker-obligations}: the shared worker work a loop is held on.
 CREATE VIEW IF NOT EXISTS worker_obligations AS
 SELECT w.id AS worker_id,
        EXISTS (
@@ -160,6 +150,11 @@ SELECT w.id AS worker_id,
        ) AS workers
 FROM workers w;
 
+CREATE VIEW IF NOT EXISTS loop_obligations AS
+SELECT l.id AS loop_id, held.streams, held.workers
+FROM loops l JOIN worker_obligations held ON held.worker_id = l.worker_id;
+
+-- {§exec-stream}: publication cursors survive curation of generated observations.
 CREATE TABLE IF NOT EXISTS subscription_publications (
     id                 INTEGER NOT NULL PRIMARY KEY,
     version            INTEGER NOT NULL DEFAULT 0 CHECK (version >= 0),

package/package.json

@@ -1,7 +1,16 @@
 {
     "name": "@plurnk/plurnk-service",
-    "version": "1.17.0",
+    "version": "1.19.0",
     "description": "Plurnk agent runtime — the server / engine / core. Implements the @plurnk/plurnk-contracts contract.",
+    "keywords": [
+        "plurnk",
+        "agent",
+        "llm",
+        "daemon",
+        "agui",
+        "sqlite",
+        "harness"
+    ],
     "type": "module",
     "license": "MIT",
     "engines": {
@@ -39,12 +48,11 @@
         "start": "node --conditions=plurnk-dev src/service.ts",
         "types:sqlrite": "node scripts/sqlrite-types.mjs --write",
         "types:sqlrite:check": "node scripts/sqlrite-types.mjs",
-        "artifacts:begin": "node ../scripts/test-artifacts.mjs begin",
-        "pretest:intg": "npm run artifacts:begin",
         "test:lint": "npm run types:sqlrite:check && tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
         "test:unit": "node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-timeout=30000 scripts/*.test.mjs src/**/*.test.ts",
-        "test:intg": "PLURNK_SERVICE_FILES_ITEMS=0 node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-concurrency=8 --test-timeout=30000 test/intg/*.test.ts",
+        "test:intg": "PLURNK_TEST_RUN=$(date -u +%Y%m%dT%H%M%SZ) PLURNK_SERVICE_FILES_ITEMS=0 node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-concurrency=8 --test-timeout=30000 test/intg/*.test.ts",
         "test:mcp:dogfood": "PLURNK_MCP_DOGFOOD=1 node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-concurrency=1 --test-timeout=120000 test/intg/mcp-agui-composition.test.ts",
+        "test:a2a:tck": "node scripts/a2a-tck.mjs",
         "test:live": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/live.mjs",
         "test:live:specimen": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/live.mjs --specimen",
         "test:live:zeropin": "PLURNK_ZERO_PIN=1 npm run test:live",
@@ -55,7 +63,6 @@
         "fixture:demo": "node --conditions=plurnk-dev test/demo/_fixture.ts",
         "test": "npm run test:lint && npm run test:unit && npm run test:intg",
         "digest:missing": "node --conditions=plurnk-dev bin/digest-missing.ts",
-        "artifacts:clean": "node ../scripts/test-artifacts.mjs clean",
         "dev:digest": "node --conditions=plurnk-dev bin/digest.ts",
         "build:clean": "rm -rf dist",
         "build:dist": "tsc -p tsconfig.build.json",
@@ -81,22 +88,24 @@
         "@opentelemetry/resources": "^2.11.0",
         "@opentelemetry/sdk-metrics": "^2.11.0",
         "@opentelemetry/sdk-trace-base": "^2.11.0",
-        "@plurnk/plurnk-a2a": "1.17.0",
-        "@plurnk/plurnk-agui": "1.17.0",
-        "@plurnk/plurnk-contracts": "1.17.0",
-        "@plurnk/plurnk-execs": "1.17.0",
-        "@plurnk/plurnk-execs-common": "1.17.0",
-        "@plurnk/plurnk-execs-jq": "1.17.0",
-        "@plurnk/plurnk-execs-sqlite": "1.17.0",
-        "@plurnk/plurnk-hooks": "1.17.0",
-        "@plurnk/plurnk-mcp": "1.17.0",
-        "@plurnk/plurnk-meta": "1.17.0",
-        "@plurnk/plurnk-agent-skills": "1.17.0",
-        "@plurnk/plurnk-mimetypes": "1.17.0",
-        "@plurnk/plurnk-mimetypes-application-ipynb": "1.17.0",
-        "@plurnk/plurnk-mimetypes-application-json": "1.17.0",
-        "@plurnk/plurnk-mimetypes-application-jsonl": "1.17.0",
-        "@plurnk/plurnk-mimetypes-application-xml": "1.17.0",
+        "@plurnk/plurnk-a2a": "1.19.0",
+        "@plurnk/plurnk-agui": "1.19.0",
+        "@plurnk/plurnk-contracts": "1.19.0",
+        "@plurnk/plurnk-parser": "1.19.0",
+        "@plurnk/plurnk-schedule": "1.19.0",
+        "@plurnk/plurnk-execs": "1.19.0",
+        "@plurnk/plurnk-execs-common": "1.19.0",
+        "@plurnk/plurnk-execs-jq": "1.19.0",
+        "@plurnk/plurnk-execs-sqlite": "1.19.0",
+        "@plurnk/plurnk-hooks": "1.19.0",
+        "@plurnk/plurnk-mcp": "1.19.0",
+        "@plurnk/plurnk-meta": "1.19.0",
+        "@plurnk/plurnk-agent-skills": "1.19.0",
+        "@plurnk/plurnk-mimetypes": "1.19.0",
+        "@plurnk/plurnk-mimetypes-application-ipynb": "1.19.0",
+        "@plurnk/plurnk-mimetypes-application-json": "1.19.0",
+        "@plurnk/plurnk-mimetypes-application-jsonl": "1.19.0",
+        "@plurnk/plurnk-mimetypes-application-xml": "1.19.0",
         "@plurnk/plurnk-mimetypes-grammar-bash": "1.16.1",
         "@plurnk/plurnk-mimetypes-grammar-c": "1.16.1",
         "@plurnk/plurnk-mimetypes-grammar-cpp": "1.16.1",
@@ -123,27 +132,27 @@
         "@plurnk/plurnk-mimetypes-grammar-typescript": "1.16.1",
         "@plurnk/plurnk-mimetypes-grammar-yaml": "1.16.1",
         "@plurnk/plurnk-mimetypes-grammar-zig": "1.16.1",
-        "@plurnk/plurnk-mimetypes-application-pdf": "1.17.0",
-        "@plurnk/plurnk-mimetypes-image": "1.17.0",
-        "@plurnk/plurnk-mimetypes-text-csv": "1.17.0",
-        "@plurnk/plurnk-mimetypes-text-diff": "1.17.0",
-        "@plurnk/plurnk-mimetypes-text-dotenv": "1.17.0",
-        "@plurnk/plurnk-mimetypes-text-html": "1.17.0",
-        "@plurnk/plurnk-mimetypes-text-ini": "1.17.0",
-        "@plurnk/plurnk-mimetypes-text-markdown": "1.17.0",
-        "@plurnk/plurnk-mimetypes-text-plain": "1.17.0",
-        "@plurnk/plurnk-models": "1.17.0",
-        "@plurnk/plurnk-providers": "1.17.0",
-        "@plurnk/plurnk-schemes": "1.17.0",
-        "@plurnk/plurnk-schemes-http": "1.17.0",
+        "@plurnk/plurnk-mimetypes-application-pdf": "1.19.0",
+        "@plurnk/plurnk-mimetypes-image": "1.19.0",
+        "@plurnk/plurnk-mimetypes-audio": "1.19.0",
+        "@plurnk/plurnk-mimetypes-text-csv": "1.19.0",
+        "@plurnk/plurnk-mimetypes-text-diff": "1.19.0",
+        "@plurnk/plurnk-mimetypes-text-dotenv": "1.19.0",
+        "@plurnk/plurnk-mimetypes-text-html": "1.19.0",
+        "@plurnk/plurnk-mimetypes-text-ini": "1.19.0",
+        "@plurnk/plurnk-mimetypes-text-markdown": "1.19.0",
+        "@plurnk/plurnk-mimetypes-text-plain": "1.19.0",
+        "@plurnk/plurnk-models": "1.19.0",
+        "@plurnk/plurnk-providers": "1.19.0",
+        "@plurnk/plurnk-schemes": "1.19.0",
+        "@plurnk/plurnk-schemes-http": "1.19.0",
         "@plurnk/plurnk-schemes-http-tavily": "^1.8.0",
-        "@possumtech/sqlrite": "^6.5.2",
+        "@possumtech/sqlrite": "^6.5.3",
         "diff": "^9.0.0",
         "yaml": "^2.9.0"
     },
     "devDependencies": {
         "@opentelemetry/core": "^2.11.0",
-        "@plurnk/plurnk-mimetypes-tokenizers": "1.17.0",
         "@types/diff": "^7.0.2"
     },
     "homepage": "https://github.com/plurnk/plurnk-service/tree/main/plurnk-core#readme",

package/dist/core/PromptFrames.d.ts

@@ -1,12 +0,0 @@
-import type { PlurnkSchemeContext } from "./scheme-types.ts";
-export default class PromptFrames {
-    static write(ctx: PlurnkSchemeContext, frame: {
-        loopSequence: number;
-        ordinal: number;
-        content: string;
-        openPaths: readonly string[];
-        source?: string | null;
-        pathname?: string | null;
-    }): Promise<string>;
-}
-//# sourceMappingURL=PromptFrames.d.ts.map

package/dist/core/PromptFrames.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PromptFrames.d.ts","sourceRoot":"","sources":["../../src/core/PromptFrames.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAM7D,MAAM,CAAC,OAAO,OAAO,YAAY;IAC7B,OAAa,KAAK,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE;QAChD,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBlB;CACJ"}

package/dist/core/PromptFrames.js

@@ -1,28 +0,0 @@
-import EntryCrud from "../schemes/_entry-crud.js";
-import WorkerName from "./WorkerName.js";
-import { promptPathname } from "./plurnk-uri.js";
-import { OperationFailureError } from "./results.js";
-// {§prompt-address}: claim new identities atomically; reuse already-published identities.
-export default class PromptFrames {
-    static async write(ctx, frame) {
-        const authority = await WorkerName.forId(ctx.db, ctx.workerId);
-        const createOnly = frame.pathname == null;
-        while (true) {
-            const pathname = frame.pathname ?? promptPathname(frame.loopSequence);
-            const result = await EntryCrud.writeEntry({ authority, pathname }, {
-                channels: { body: { content: frame.content, mimetype: "text/markdown" } },
-                attributes: {
-                    ordinal: frame.ordinal,
-                    openPaths: frame.openPaths,
-                    ...(frame.source == null ? {} : { source: frame.source }),
-                },
-            }, ctx, "prompt", { createOnly });
-            if (createOnly && result.status === 409)
-                continue;
-            if (result.status >= 400)
-                throw new OperationFailureError(result);
-            return pathname;
-        }
-    }
-}
-//# sourceMappingURL=PromptFrames.js.map

package/dist/core/PromptFrames.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PromptFrames.js","sourceRoot":"","sources":["../../src/core/PromptFrames.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,2BAA2B,CAAC;AAElD,OAAO,UAAU,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD,0FAA0F;AAC1F,MAAM,CAAC,OAAO,OAAO,YAAY;IAC7B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAwB,EAAE,KAO5C;QACG,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC;QAC1C,OAAO,IAAI,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;gBAC/D,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE;gBACzE,UAAU,EAAE;oBACR,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBAC5D;aACJ,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAClC,IAAI,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;gBAAE,SAAS;YAClD,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAClE,OAAO,QAAQ,CAAC;QACpB,CAAC;IACL,CAAC;CACJ"}

package/dist/schemes/Prompt.d.ts

@@ -1,8 +0,0 @@
-import type { EntryEditResult, EntryFindResult, ResolvedEditStatement, SchemeCtx, SchemeHandler, SchemeManifest } from "@plurnk/plurnk-schemes";
-import type { FindStatement } from "@plurnk/plurnk-contracts";
-export default class Prompt implements SchemeHandler {
-    static manifest: SchemeManifest;
-    editBatch(statements: readonly ResolvedEditStatement[], ctx: SchemeCtx): Promise<EntryEditResult>;
-    find(statement: FindStatement, ctx: SchemeCtx): Promise<EntryFindResult>;
-}
-//# sourceMappingURL=Prompt.d.ts.map

package/dist/schemes/Prompt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Prompt.d.ts","sourceRoot":"","sources":["../../src/schemes/Prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,qBAAqB,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAChJ,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAI9D,MAAM,CAAC,OAAO,OAAO,MAAO,YAAW,aAAa;IAChD,MAAM,CAAC,QAAQ,EAAE,cAAc,CAW7B;IAGI,SAAS,CAAC,UAAU,EAAE,SAAS,qBAAqB,EAAE,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,CAGtG;IAEK,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,CAE7E;CACJ"}

package/dist/schemes/Prompt.js

@@ -1,25 +0,0 @@
-import LineAnchors from "../content/line-anchors.js";
-// {§prompt-address}: immutable-to-model task frames at literal workspace addresses.
-export default class Prompt {
-    static manifest = {
-        name: "prompt",
-        authority: "resource",
-        channels: { body: "text/markdown" },
-        defaultChannel: "body",
-        category: "data",
-        writableBy: ["client", "_plurnk"],
-        volatile: false,
-        modelVisible: true,
-        folderScopes: true,
-        textEditScopes: true,
-    };
-    // The actionless prompt log row is written separately from its source entry.
-    async editBatch(statements, ctx) {
-        LineAnchors.assertResolved(statements);
-        return ctx.entries.operations.editBatch(statements);
-    }
-    async find(statement, ctx) {
-        return ctx.entries.operations.find(statement);
-    }
-}
-//# sourceMappingURL=Prompt.js.map

package/dist/schemes/Prompt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Prompt.js","sourceRoot":"","sources":["../../src/schemes/Prompt.ts"],"names":[],"mappings":"AAEA,OAAO,WAAW,MAAM,4BAA4B,CAAC;AAErD,oFAAoF;AACpF,MAAM,CAAC,OAAO,OAAO,MAAM;IACvB,MAAM,CAAC,QAAQ,GAAmB;QAC9B,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;QACnC,cAAc,EAAE,MAAM;QACtB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;QACjC,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;KACvB,CAAC;IAEF,6EAA6E;IAC7E,KAAK,CAAC,SAAS,CAAC,UAA4C,EAAE,GAAc;QACxE,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAwB,EAAE,GAAc;QAC/C,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACJ"}