@plurnk/plurnk-service 1.3.12 → 1.4.0

package/dist/server/envelope.sql

@@ -1,8 +1,9 @@
--- Envelope lifecycle queries. SPEC §connection-lifecycle.
+-- Envelope lifecycle queries. SPEC {§connection-lifecycle}.
 
 -- PREP: envelope_insert_workspace
 INSERT INTO workspaces (name, project_root, settings)
 VALUES ($name, $project_root, $settings)
+ON CONFLICT(name) DO NOTHING
 RETURNING id, name, project_root;
 
 -- PREP: envelope_get_workspace
@@ -15,13 +16,18 @@ SELECT id FROM workspaces WHERE name = $name;
 
 -- PREP: envelope_set_workspace_name
 -- Used by workspace.rename. The workspace name is a MUTABLE handle (vs a worker's
--- immutable name, §machine-processes). Returns the updated row to refresh the
+-- immutable name, {§machine-processes}). Returns the updated row to refresh the
 -- caller's ClientEnvelope copy.
-UPDATE workspaces SET name = $name WHERE id = $id
+UPDATE workspaces SET name = $name
+WHERE id = $id
+  AND NOT EXISTS (
+    SELECT 1 FROM workspaces AS other
+    WHERE other.name = $name AND other.id <> $id
+  )
 RETURNING id, name;
 
 -- PREP: envelope_insert_worker
--- origin is the worker's actor (§machine-processes): 'model' (the conversation),
+-- origin is the worker's actor ({§machine-processes}): 'model' (the conversation),
 -- 'client' (a connection's own worker), or 'plurnk' (the runtime self-hosting worker).
 INSERT INTO workers (workspace_id, name, origin)
 VALUES ($workspace_id, $name, $origin)
@@ -30,12 +36,6 @@ RETURNING id, name, origin;
 -- PREP: envelope_get_worker_by_id
 SELECT id, name, workspace_id, origin FROM workers WHERE id = $id;
 
--- PREP: envelope_count_workers_by_prefix
--- {§worker-auto-name} — ever-created count for the per-workspace ordinal auto-name
--- (`<prefix>-<N>`); monotonic (counts terminated workers too), so a reclaimed name
--- never re-mints. The fork_count_branches pattern, workspace-wide.
-SELECT COUNT(*) AS n FROM workers WHERE workspace_id = $workspace_id AND name LIKE $name_prefix;
-
 -- PREP: envelope_get_worker_by_name
 SELECT id, name FROM workers WHERE workspace_id = $workspace_id AND name = $name;
 
@@ -46,10 +46,8 @@ WHERE workspace_id = $workspace_id
 ORDER BY created_at DESC;
 
 -- PREP: envelope_list_workspace_prompts
--- #238 — a workspace's user prompts for client up/down history: the conversation worker's
--- non-empty loop seeds, newest-first, capped. The conversation worker is origin='model' +
--- parentless; spawned/forked worker:// sub-runs (parent_worker_id set) are excluded — their
--- seed prompts are not user input.
+-- {§methods-workspace-prompts}: nonempty model-root loop seeds, newest-first;
+-- spawned and forked children are not workspace-level user prompt history.
 SELECT l.prompt
 FROM loops l
 JOIN workers r ON r.id = l.worker_id
@@ -62,21 +60,19 @@ LIMIT $limit;
 
 -- PREP: envelope_insert_client_loop
 -- sequence is auto-computed: 1 + max(existing sequence in this worker) so
--- multiple client connections attaching to the same run get distinct loops.
+-- multiple client connections attaching to the same worker get distinct loops.
 INSERT INTO loops (worker_id, sequence, status, prompt)
 VALUES ($worker_id, COALESCE((SELECT MAX(sequence) FROM loops WHERE worker_id = $worker_id), 0) + 1, 102, '')
-RETURNING id;
+RETURNING id, sequence;
 
 -- PREP: envelope_close_client_loop
-UPDATE loops SET status = $status WHERE id = $loop_id AND status = 102;
+UPDATE loops
+SET status = $status,
+    terminal_result = $result,
+    terminal_message = $message
+WHERE id = $loop_id AND status = 102;
 
 -- PREP: envelope_list_workspaces
 SELECT id, name, project_root, created_at, cost_usd
 FROM workspaces
 ORDER BY created_at DESC;
-
--- PREP: envelope_get_model_worker
--- #371 — the workspace's canonical model CONVERSATION run: the earliest model-origin ROOT run
--- (parent_worker_id NULL excludes forks and spawned workers, which inherit origin='model').
--- ensureModelWorker finds this first; only a workspace with none mints one.
-SELECT id FROM workers WHERE workspace_id = $workspace_id AND origin = 'model' AND parent_worker_id IS NULL ORDER BY id LIMIT 1;

package/dist/server/exec-poll-backoff.js

@@ -1,4 +1,4 @@
-// #521 (§exec-poll, owner-ruled) — the exponential backoff schedule for a parked exec stream with
+// {§exec-poll} — the exponential backoff schedule for a parked exec stream with
 // no explicit `<,P>` cadence. Wake N fires at base·2^min(N, turns-1) seconds — doubling for `turns`
 // steps, then holding at the cap forever (never reverts to blind). Pure so the curve is testable
 // without racing a real timer.

package/dist/server/exec-poll-backoff.js.map

@@ -1 +1 @@
-{"version":3,"file":"exec-poll-backoff.js","sourceRoot":"","sources":["../../src/server/exec-poll-backoff.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,oGAAoG;AACpG,iGAAiG;AACjG,+BAA+B;AAC/B,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,KAAa,EAAU,EAAE,CACtF,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC"}
+{"version":3,"file":"exec-poll-backoff.js","sourceRoot":"","sources":["../../src/server/exec-poll-backoff.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,oGAAoG;AACpG,iGAAiG;AACjG,+BAA+B;AAC/B,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,KAAa,EAAU,EAAE,CACtF,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC"}

package/dist/server/lifecycle-recovery.sql

@@ -7,9 +7,46 @@
 -- replaying its provider turn could duplicate effects whose commit boundary is unknown.
 UPDATE loops
 SET status = 500,
-    terminal_message = 'daemon restarted while this loop was active'
+    terminal_message = 'The daemon restarted while this loop was active; its process-local owner no longer exists.',
+    terminal_result = json_object(
+        'status', 500,
+        'problem', json_object(
+            'type', 'https://problems.plurnk.dev/lifecycle/recovery/owner-vanished',
+            'title', 'Owner vanished',
+            'status', 500,
+            'detail', 'The daemon restarted while this loop was active; its process-local owner no longer exists.',
+            'instance', 'loop:///' || id
+        )
+    )
 WHERE status = 102;
 
+-- PREP: recovery_fail_ownerless_proposals
+-- {§worker-lifecycle-restart-recovery} Every proposed row depended on a
+-- process-local resolution waiter. At boot that owner is necessarily gone, so
+-- terminalize the occurrence before {§proposal-list} can open to clients.
+UPDATE log_entries
+SET state = 'failed',
+    outcome = 'owner_vanished',
+    status_rx = 500,
+    rx = json_object(
+        'status', 500,
+        'problem', json_object(
+            'type', 'https://problems.plurnk.dev/lifecycle/recovery/owner-vanished',
+            'title', 'Owner vanished',
+            'status', 500,
+            'detail', 'The daemon restarted while this proposal was pending; its process-local owner no longer exists.',
+            'instance', printf(
+                'log:///%d/%d/%d/%s',
+                (SELECT sequence FROM loops WHERE id = log_entries.loop_id),
+                (SELECT sequence FROM turns WHERE id = log_entries.turn_id),
+                sequence,
+                op
+            )
+        )
+    ),
+    deep_hash = NULL
+WHERE state = 'proposed';
+
 -- PREP: recovery_error_orphan_subscription_channels
 -- Every open subscription belonged to a callable in the prior process. Mark its
 -- active content terminal before closing the durable row, so an interruption
@@ -24,7 +61,16 @@ WHERE state = 'active'
 -- PREP: recovery_fail_orphan_subscriptions
 UPDATE subscriptions
 SET closed_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
-    close_status = 500
+    close_status = 500,
+    close_result = json_object(
+        'status', 500,
+        'problem', json_object(
+            'type', 'https://problems.plurnk.dev/lifecycle/recovery/owner-vanished',
+            'title', 'Owner vanished',
+            'status', 500,
+            'detail', 'The daemon restarted while this stream was active; its process-local owner no longer exists.'
+        )
+    )
 WHERE closed_at IS NULL;
 
 -- PREP: recovery_resume_unblocked_parks
@@ -53,11 +99,42 @@ WHERE status = 202
         AND child_loop.status IN (100, 102, 202)
   );
 
+-- PREP: recovery_orphan_prompt_sources
+-- {§prompt-loop-containment}: finish an absent or partially staged orphan
+-- recovery before queued drains become visible at boot. A non-queued recovery
+-- already crossed its delivery boundary and must never be replayed.
+SELECT source.id AS loop_id, source.worker_id AS worker_id
+FROM loops source
+LEFT JOIN loops recovery ON recovery.orphan_source_loop_id = source.id
+WHERE source.status IN (200, 413, 429, 499, 500, 504, 508)
+  AND (recovery.id IS NULL OR recovery.status = 100)
+  AND EXISTS (
+      SELECT 1
+      FROM entries e
+      JOIN entry_channels c ON c.entry_id = e.id AND c.name = 'body'
+      WHERE e.scheme = 'prompt'
+        AND e.owner_id = source.worker_id
+        AND e.pathname LIKE '/' || source.sequence || '/%'
+        AND NOT EXISTS (
+            SELECT 1 FROM log_entries le
+            WHERE le.loop_id = source.id AND le.origin = 'plurnk' AND le.op = 'prompt'
+              AND le.scheme = 'prompt' AND le.pathname = e.pathname
+        )
+  )
+ORDER BY source.worker_id, source.sequence;
+
 -- PREP: recovery_queued_workers
 SELECT DISTINCT w.id AS worker_id, w.workspace_id
 FROM workers w
 JOIN loops l ON l.worker_id = w.id
 WHERE l.status = 100
+  AND NOT EXISTS (
+      SELECT 1
+      FROM branch_batch_items bi
+      JOIN branch_batches bb ON bb.id = bi.batch_id
+      WHERE bi.loop_id = l.id
+        AND bb.state IN ('collecting', 'queued', 'running', 'recovery_required')
+  )
 ORDER BY w.id;
 
 -- PREP: recovery_parked_workers

package/dist/server/logEntry.d.ts

@@ -9,6 +9,7 @@ export type LogEntryWire = {
     sequence: number;
     at: string;
     origin: string;
+    source: string | null;
     op: string;
     suffix: string;
     signal: unknown;
@@ -18,7 +19,7 @@ export type LogEntryWire = {
     hostname: string | null;
     port: number | null;
     pathname: string | null;
-    params: unknown;
+    query: string | null;
     fragment: string | null;
     lineMarker: unknown;
     tx: unknown;
@@ -27,6 +28,7 @@ export type LogEntryWire = {
     mimetype_rx: string;
     status_rx: number;
     tokens: number;
+    attrs: unknown;
 };
 export default class LogEntry {
     #private;

package/dist/server/logEntry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logEntry.d.ts","sourceRoot":"","sources":["../../src/server/logEntry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAMxC,MAAM,MAAM,YAAY,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,QAAQ;;IASzB,OAAa,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAgCpE;CACJ"}
+{"version":3,"file":"logEntry.d.ts","sourceRoot":"","sources":["../../src/server/logEntry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAMxC,MAAM,MAAM,YAAY,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,QAAQ;;IASzB,OAAa,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAkCpE;CACJ"}

package/dist/server/logEntry.js

@@ -1,5 +1,5 @@
 // Hydrate a log_entries row for the wire. Re-parses JSON-encoded columns
-// (signal, params, lineMarker, tx, rx) so the client receives
+// (signal, lineMarker, tx, rx, attrs) so the client receives
 // structured values, not opaque strings.
 export default class LogEntry {
     static #parseJsonOrNull(v) {
@@ -25,6 +25,7 @@ export default class LogEntry {
             sequence: row.sequence,
             at: row.at,
             origin: row.origin,
+            source: row.source,
             op: row.op,
             suffix: row.suffix,
             signal: LogEntry.#parseJsonOrNull(row.signal),
@@ -34,7 +35,7 @@ export default class LogEntry {
             hostname: row.hostname,
             port: row.port,
             pathname: row.pathname,
-            params: LogEntry.#parseJsonOrNull(row.params),
+            query: row.query,
             fragment: row.fragment,
             lineMarker: LogEntry.#parseJsonOrNull(row.lineMarker),
             tx: LogEntry.#parseJsonOrNull(row.tx),
@@ -43,6 +44,7 @@ export default class LogEntry {
             mimetype_rx: row.mimetype_rx,
             status_rx: row.status_rx,
             tokens: row.tokens,
+            attrs: LogEntry.#parseJsonOrNull(row.attrs),
         };
     }
 }

package/dist/server/logEntry.js.map

@@ -1 +1 @@
-{"version":3,"file":"logEntry.js","sourceRoot":"","sources":["../../src/server/logEntry.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,8DAA8D;AAC9D,yCAAyC;AAsCzC,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,MAAM,CAAC,gBAAgB,CAAC,CAAU;QAC9B,uFAAuF;QACvF,kFAAkF;QAClF,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAM,EAAE,EAAU;QACzC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,CAA0B,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;QAC1E,OAAO;YACH,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,SAAS,EAAE,GAAG,CAAC,SAAmB;YAClC,OAAO,EAAE,GAAG,CAAC,OAAiB;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAkB;YAChC,OAAO,EAAE,GAAG,CAAC,OAAiB;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAkB;YAChC,QAAQ,EAAE,GAAG,CAAC,QAAkB;YAChC,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,MAAM,EAAE,GAAG,CAAC,MAAgB;YAC5B,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,MAAM,EAAE,GAAG,CAAC,MAAgB;YAC5B,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7C,MAAM,EAAE,GAAG,CAAC,MAAuB;YACnC,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,IAAI,EAAE,GAAG,CAAC,IAAqB;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7C,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC;YACrD,EAAE,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,WAAW,EAAE,GAAG,CAAC,WAAqB;YACtC,EAAE,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,WAAW,EAAE,GAAG,CAAC,WAAqB;YACtC,SAAS,EAAE,GAAG,CAAC,SAAmB;YAClC,MAAM,EAAE,GAAG,CAAC,MAAgB;SAC/B,CAAC;IACN,CAAC;CACJ"}
+{"version":3,"file":"logEntry.js","sourceRoot":"","sources":["../../src/server/logEntry.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,6DAA6D;AAC7D,yCAAyC;AAwCzC,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,MAAM,CAAC,gBAAgB,CAAC,CAAU;QAC9B,uFAAuF;QACvF,kFAAkF;QAClF,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAM,EAAE,EAAU;QACzC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,CAA0B,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;QAC1E,OAAO;YACH,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,SAAS,EAAE,GAAG,CAAC,SAAmB;YAClC,OAAO,EAAE,GAAG,CAAC,OAAiB;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAkB;YAChC,OAAO,EAAE,GAAG,CAAC,OAAiB;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAkB;YAChC,QAAQ,EAAE,GAAG,CAAC,QAAkB;YAChC,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,MAAM,EAAE,GAAG,CAAC,MAAgB;YAC5B,MAAM,EAAE,GAAG,CAAC,MAAuB;YACnC,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,MAAM,EAAE,GAAG,CAAC,MAAgB;YAC5B,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7C,MAAM,EAAE,GAAG,CAAC,MAAuB;YACnC,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,IAAI,EAAE,GAAG,CAAC,IAAqB;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,KAAK,EAAE,GAAG,CAAC,KAAsB;YACjC,QAAQ,EAAE,GAAG,CAAC,QAAyB;YACvC,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC;YACrD,EAAE,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,WAAW,EAAE,GAAG,CAAC,WAAqB;YACtC,EAAE,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,WAAW,EAAE,GAAG,CAAC,WAAqB;YACtC,SAAS,EAAE,GAAG,CAAC,SAAmB;YAClC,MAAM,EAAE,GAAG,CAAC,MAAgB;YAC5B,KAAK,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;SAC9C,CAAC;IACN,CAAC;CACJ"}

package/dist/server/logEntry.sql

@@ -2,7 +2,7 @@
 
 -- PREP: log_entry_by_id
 -- loop_seq / turn_seq are the loop+turn ordinals (the logical coordinate clients
--- render, e.g. 01/02/03) — distinct from the loop_id/turn_id DB keys (#208).
+-- render, e.g. 01/02/03) — distinct from the loop_id/turn_id DB keys ({§methods-log-coordinate}).
 SELECT le.*, l.sequence AS loop_seq, t.sequence AS turn_seq
 FROM log_entries le
 JOIN loops l ON l.id = le.loop_id

package/dist/server/loop-model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loop-model.d.ts","sourceRoot":"","sources":["../../src/server/loop-model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAU9D,eAAO,MAAM,gBAAgB,UAClB,MAAM,GAAG,SAAS,SAClB,MAAM,GAAG,SAAS,YACf,SAAS,aAAa,EAAE,KACnC,aAAa,GAAG,IAclB,CAAC"}
+{"version":3,"file":"loop-model.d.ts","sourceRoot":"","sources":["../../src/server/loop-model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAW9D,eAAO,MAAM,gBAAgB,UAClB,MAAM,GAAG,SAAS,SAClB,MAAM,GAAG,SAAS,YACf,SAAS,aAAa,EAAE,KACnC,aAAa,GAAG,IA0ClB,CAAC"}

package/dist/server/loop-model.js

@@ -1,24 +1,37 @@
-// #414 — per-loop model selection: resolve a runLoop call's optional (alias, model) to the
+import Results, { OperationFailureError } from "../core/results.js";
+// {§methods-loop-run-model}: resolve a runLoop call's optional (alias, model) to the
 // ProviderAlias to instantiate, or null for "use the boot default". PURE (no env read, no
 // construction) so the precedence + parse contract is hermetically testable; the Daemon wraps it
 // with ProviderInstantiate + the #provider fallback.
 //
-// Precedence: `model` (client-resolved `<provider>/<model>`, #90) wins over a named `alias`,
-// matching how the legacy WS loop.run treated the pair. A malformed model spec or an undeclared
-// alias throws legibly — the daemon must never silently run the wrong model.
+// Precedence: `model` (client-resolved `<provider>/<model>`) wins over a named `alias`.
+// A malformed model spec or an undeclared alias throws legibly — the daemon must never silently
+// run the wrong model.
 export const resolveLoopAlias = (alias, model, declared) => {
     if (typeof model === "string" && model.length > 0) {
         const slash = model.indexOf("/");
-        if (slash <= 0)
-            throw new Error(`runLoop: model must be '<provider>/<model>' (got '${model}')`);
-        // A client-resolved spec is alias-independent (#90): the provider's own env carries the
+        if (slash <= 0 || slash === model.length - 1) {
+            throw new OperationFailureError(Results.failure("daemon:provider", "model-spec-invalid", 400, `Model '${model}' is not a provider/model specification.`, {}, {
+                model,
+                stage: "provider-selection",
+                recovery: "Use a provider/model specification.",
+                retryable: false,
+            }));
+        }
+        // A client-resolved spec is alias-independent: the provider's own env carries the
         // base URL, so the synthetic alias name is cosmetic (reuse the given alias if present).
         return { alias: alias ?? model, provider: model.slice(0, slash), model: model.slice(slash + 1) };
     }
     if (typeof alias === "string" && alias.length > 0) {
         const resolved = declared.find((a) => a.alias === alias.toLowerCase());
-        if (resolved === undefined)
-            throw new Error(`runLoop: alias '${alias}' is not declared (set PLURNK_MODEL_${alias}=<provider>/<model>)`);
+        if (resolved === undefined) {
+            throw new OperationFailureError(Results.failure("daemon:provider", "alias-not-found", 404, `Provider alias '${alias}' is not declared.`, {}, {
+                alias,
+                stage: "provider-selection",
+                recovery: "Select a declared provider alias.",
+                retryable: false,
+            }));
+        }
         return resolved;
     }
     return null; // neither → the daemon's boot default

package/dist/server/loop-model.js.map

@@ -1 +1 @@
-{"version":3,"file":"loop-model.js","sourceRoot":"","sources":["../../src/server/loop-model.ts"],"names":[],"mappings":"AAEA,2FAA2F;AAC3F,0FAA0F;AAC1F,iGAAiG;AACjG,qDAAqD;AACrD,EAAE;AACF,6FAA6F;AAC7F,gGAAgG;AAChG,6EAA6E;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC5B,KAAyB,EACzB,KAAyB,EACzB,QAAkC,EACd,EAAE;IACtB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,IAAI,CAAC,CAAC;QAChG,wFAAwF;QACxF,wFAAwF;QACxF,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;IACrG,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACvE,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,uCAAuC,KAAK,sBAAsB,CAAC,CAAC;QACxI,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,CAAE,sCAAsC;AACxD,CAAC,CAAC"}
+{"version":3,"file":"loop-model.js","sourceRoot":"","sources":["../../src/server/loop-model.ts"],"names":[],"mappings":"AACA,OAAO,OAAO,EAAE,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEpE,qFAAqF;AACrF,0FAA0F;AAC1F,iGAAiG;AACjG,qDAAqD;AACrD,EAAE;AACF,wFAAwF;AACxF,gGAAgG;AAChG,uBAAuB;AACvB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC5B,KAAyB,EACzB,KAAyB,EACzB,QAAkC,EACd,EAAE;IACtB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAC3C,iBAAiB,EACjB,oBAAoB,EACpB,GAAG,EACH,UAAU,KAAK,0CAA0C,EACzD,EAAE,EACF;gBACI,KAAK;gBACL,KAAK,EAAE,oBAAoB;gBAC3B,QAAQ,EAAE,qCAAqC;gBAC/C,SAAS,EAAE,KAAK;aACnB,CACJ,CAAC,CAAC;QACP,CAAC;QACD,kFAAkF;QAClF,wFAAwF;QACxF,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;IACrG,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAC3C,iBAAiB,EACjB,iBAAiB,EACjB,GAAG,EACH,mBAAmB,KAAK,oBAAoB,EAC5C,EAAE,EACF;gBACI,KAAK;gBACL,KAAK,EAAE,oBAAoB;gBAC3B,QAAQ,EAAE,mCAAmC;gBAC7C,SAAS,EAAE,KAAK;aACnB,CACJ,CAAC,CAAC;QACP,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,CAAE,sCAAsC;AACxD,CAAC,CAAC"}

package/dist/server/loopDocs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loopDocs.d.ts","sourceRoot":"","sources":["../../src/server/loopDocs.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAKxC,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,OAAa,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAenF;CACJ"}
+{"version":3,"file":"loopDocs.d.ts","sourceRoot":"","sources":["../../src/server/loopDocs.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAKxC,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,OAAa,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAenF;CACJ"}

package/dist/server/loopDocs.js

@@ -1,3 +1,4 @@
+import { UNKNOWN_POSITION } from "@plurnk/plurnk-contracts";
 import WorkspaceSettings from "../core/workspace-settings.js";
 import DispatchAsPlurnk from "./dispatch-as-plurnk.js";
 export default class LoopDocs {
@@ -5,14 +6,14 @@ export default class LoopDocs {
         const { mdDocs } = await WorkspaceSettings.read(db, workspaceId);
         const docStmts = (await WorkspaceSettings.resolveDocs(mdDocs)).map((doc) => ({
             op: "EDIT", suffix: "", signal: null,
-            target: { kind: "url", raw: `worker://plurnk/${doc.entryName}`, scheme: "worker", username: null, password: null, hostname: "plurnk", port: null, pathname: `/${doc.entryName}`, params: {}, fragment: null },
-            lineMarker: { marks: [1, -1] }, body: doc.content, position: { line: 1, column: 1 },
+            target: { kind: "url", raw: `worker://plurnk/${doc.entryName}`, scheme: "worker", username: null, password: null, hostname: "plurnk", port: null, pathname: `/${doc.entryName}`, query: null, fragment: null },
+            lineMarker: { marks: [1, -1] }, body: doc.content, position: UNKNOWN_POSITION,
         }));
         for (const { name, content } of await engine.docEntries(workspaceId)) {
             docStmts.push({
                 op: "EDIT", suffix: "", signal: null,
-                target: { kind: "url", raw: `worker://plurnk/docs/${name}.md`, scheme: "worker", username: null, password: null, hostname: "plurnk", port: null, pathname: `/docs/${name}.md`, params: {}, fragment: null },
-                lineMarker: { marks: [1, -1] }, body: content, position: { line: 1, column: 1 },
+                target: { kind: "url", raw: `worker://plurnk/docs/${name}.md`, scheme: "worker", username: null, password: null, hostname: "plurnk", port: null, pathname: `/docs/${name}.md`, query: null, fragment: null },
+                lineMarker: { marks: [1, -1] }, body: content, position: UNKNOWN_POSITION,
             });
         }
         if (docStmts.length > 0)

package/dist/server/loopDocs.js.map

@@ -1 +1 @@
-{"version":3,"file":"loopDocs.js","sourceRoot":"","sources":["../../src/server/loopDocs.ts"],"names":[],"mappings":"AAUA,OAAO,iBAAiB,MAAM,+BAA+B,CAAC;AAC9D,OAAO,gBAAgB,MAAM,yBAAyB,CAAC;AAEvD,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,EAAM,EAAE,WAAmB;QAChE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAoB,CAAC,MAAM,iBAAiB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1F,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI;YACpC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,mBAAmB,GAAG,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC7M,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;SACtF,CAAC,CAAC,CAAC;QACJ,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,MAAM,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI;gBACpC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,wBAAwB,IAAI,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,IAAI,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC3M,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;aAClF,CAAC,CAAC;QACP,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,QAA6B,CAAC,CAAC;IACrH,CAAC;CACJ"}
+{"version":3,"file":"loopDocs.js","sourceRoot":"","sources":["../../src/server/loopDocs.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAA4C,MAAM,0BAA0B,CAAC;AACtG,OAAO,iBAAiB,MAAM,+BAA+B,CAAC;AAC9D,OAAO,gBAAgB,MAAM,yBAAyB,CAAC;AAEvD,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,EAAM,EAAE,WAAmB;QAChE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAoB,CAAC,MAAM,iBAAiB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1F,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI;YACpC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,mBAAmB,GAAG,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC9M,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB;SAChF,CAAC,CAAC,CAAC;QACJ,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,MAAM,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI;gBACpC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,wBAAwB,IAAI,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,IAAI,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC5M,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB;aAC5E,CAAC,CAAC;QACP,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,QAA6B,CAAC,CAAC;IACrH,CAAC;CACJ"}

package/dist/server/seam-entry-read.sql

@@ -1,22 +1,27 @@
--- entry.read RPC queries. SPEC §methods.
+-- CoreSeam readEntry queries. SPEC {§methods-entry-read}.
 
 -- PREP: entry_read_lookup
 SELECT id, workspace_id, owner_id, scheme, pathname
 FROM entries
-WHERE workspace_id = $workspace_id AND scheme = $scheme AND pathname = $pathname
-LIMIT 1;
+WHERE workspace_id = $workspace_id
+  AND owner_id = $owner_id
+  AND scheme = $scheme
+  AND pathname = $pathname;
 
 -- PREP: entry_read_channels
-SELECT name, content, length(content) AS contentLength, mimetype, tokens, state
+SELECT name, content, 0 AS contentOffset, length(content) AS contentLength, mimetype, tokens, state
 FROM entry_channels
 WHERE entry_id = $entry_id;
 
--- entry.read({channel, offset}) — incremental delta read for streaming viewers
--- (#192): substr ships only content from $offset (chars — the unit contentLength
--- counts), and contentLength is the full length so the client's next offset
--- survives growth between a stream/event and this read. $offset=0 → whole channel;
--- $offset past the end → '' (caught up). SQLite substr is 1-indexed → $offset + 1.
+-- {§entry-read-result}: return the selected channel suffix in Unicode code points
+-- plus its complete current length. SQLite substr is 1-indexed, hence offset + 1.
 -- PREP: entry_read_channel_slice
-SELECT name, substr(content, $offset + 1) AS content, length(content) AS contentLength, mimetype, tokens, state
+SELECT name,
+       substr(content, $offset + 1) AS content,
+       min($offset, length(content)) AS contentOffset,
+       length(content) AS contentLength,
+       mimetype,
+       tokens,
+       state
 FROM entry_channels
 WHERE entry_id = $entry_id AND name = $channel;

package/dist/server/seam-log-read.sql

@@ -1,7 +1,7 @@
--- log.read RPC query. SPEC §methods.
+-- CoreSeam readLog query. SPEC {§methods-log-read}.
 -- Static query with IS-NULL guards on optional filters. The loops/turns joins
 -- resolve the DISPLAY coordinate (loop_seq/turn_seq/op-sequence) so a client can
--- target one entry by its `L/T/S` coordinate (plurnk-service#271) instead of
+-- target one entry by its `L/T/S` coordinate instead of
 -- fetching a worker and matching client-side. INNER JOINs are safe: log_entries
 -- carries worker_id/loop_id/turn_id NOT NULL, so no row is dropped; the coordinate
 -- guards are inert when their param is NULL (identical to the id-only filters).

package/dist/server/seam-loop.sql

@@ -1,4 +1,4 @@
--- loop.run RPC queries. SPEC §rpc.
+-- CoreSeam runLoop queries. SPEC {§methods-loop-run}.
 
 -- PREP: loop_run_next_sequence
 SELECT COALESCE(MAX(sequence), 0) + 1 AS next FROM loops WHERE worker_id = $worker_id;

package/dist/server/seam-proposal-list.sql

@@ -1,13 +1,23 @@
 -- PREP: proposal_list_pending
--- §proposal-list — every stopped-world proposal in the workspace (state='proposed'): file edits,
--- MCP auths, [300] questions. The ruling's mandatory companion ({§proposal-timeout-cancels}
--- ships indefinite): a world that can stay stopped for days MUST be discoverable by a
--- reconnecting client, or granted patience reads as a mystery hang.
-SELECT le.id AS logEntryId, le.worker_id AS workerId, le.loop_id AS loopId, le.turn_id AS turnId,
-    le.op, le.suffix, le.scheme, le.pathname, le.tx, le.attrs, le.at,
-    l.flags AS loop_flags
+-- {§proposal-list} — durable candidates in a workspace. ProposalLifecycle intersects
+-- them with its live resolution owners before projecting a stopped world; neither
+-- Daemon nor an interface module reconstructs authority from this persistence shape.
+SELECT le.id AS logEntryId, r.workspace_id AS workspaceId,
+    le.worker_id AS workerId, le.loop_id AS loopId, le.turn_id AS turnId,
+    le.op, le.signal, le.scheme, le.pathname, le.rx, le.attrs, l.flags AS loop_flags
 FROM log_entries le
 JOIN workers r ON r.id = le.worker_id
 JOIN loops l ON l.id = le.loop_id
 WHERE r.workspace_id = $workspace_id AND le.state = 'proposed'
 ORDER BY le.id;
+
+-- PREP: proposal_get_pending
+-- Same durable input as proposal_list_pending, selected by proposal identity for
+-- the live path. Both paths enter ProposalLifecycle's one projection function.
+SELECT le.id AS logEntryId, r.workspace_id AS workspaceId,
+    le.worker_id AS workerId, le.loop_id AS loopId, le.turn_id AS turnId,
+    le.op, le.signal, le.scheme, le.pathname, le.rx, le.attrs, l.flags AS loop_flags
+FROM log_entries le
+JOIN workers r ON r.id = le.worker_id
+JOIN loops l ON l.id = le.loop_id
+WHERE le.id = $log_entry_id AND le.state = 'proposed';

package/dist/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":";AAsBA,MAAM,CAAC,OAAO,OAAO,OAAO;;IA6OxB,OAAa,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAiFjC;CACJ"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":";AAyBA,MAAM,CAAC,OAAO,OAAO,OAAO;;IA4PxB,OAAa,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CA+EjC;CACJ"}