@plurnk/plurnk-service 1.4.0 → 1.5.0

package/migrations/001_schema.sql

@@ -71,13 +71,19 @@ CREATE TABLE IF NOT EXISTS ambient_events (
     rx                 TEXT,
     attrs              TEXT    NOT NULL DEFAULT '{}' CHECK (json_valid(attrs)),
     status_rx          INTEGER NOT NULL CHECK (status_rx BETWEEN 100 AND 599),
-    prompt             TEXT,
     terminated_by      TEXT             CHECK (terminated_by IS NULL OR terminated_by = 'cancel'),
     created_at         TEXT    NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
     CHECK (
-        (kind = 'edit' AND op = 'EDIT' AND rx IS NOT NULL AND prompt IS NULL AND terminated_by IS NULL)
+        (kind = 'edit' AND op = 'EDIT' AND rx IS NOT NULL AND terminated_by IS NULL)
         OR
-        (kind = 'loop_termination' AND op = 'SEND' AND scheme = 'worker' AND prompt IS NOT NULL)
+        (kind = 'loop_termination'
+            AND op = 'SEND'
+            AND scheme = 'worker'
+            AND rx IS NOT NULL
+            AND json_valid(rx)
+            AND json_type(rx) = 'object'
+            AND json_type(rx, '$.status') = 'integer'
+            AND json_extract(rx, '$.status') = status_rx)
     ),
     FOREIGN KEY (workspace_id)       REFERENCES workspaces(id) ON DELETE CASCADE,
     FOREIGN KEY (producer_worker_id) REFERENCES workers(id)    ON DELETE CASCADE
@@ -102,6 +108,7 @@ CREATE TABLE IF NOT EXISTS loops (
     prompt   TEXT    NOT NULL,
     flags    TEXT    NOT NULL DEFAULT '{}' CHECK (json_valid(flags)),
     provider_spec TEXT NOT NULL DEFAULT 'null' CHECK (json_valid(provider_spec)),
+    child_provider_spec TEXT NOT NULL DEFAULT 'null' CHECK (json_valid(child_provider_spec)),
     max_turns INTEGER NOT NULL DEFAULT 50 CHECK (max_turns >= -1),
     -- {§methods-loop-run-open-paths}: the initial prompt frame's selected paths,
     -- held here until turn 1 materializes that frame (string[] JSON).
@@ -110,22 +117,56 @@ CREATE TABLE IF NOT EXISTS loops (
     -- complete orphan frame set of one concluded source loop.
     orphan_source_loop_id INTEGER,
     -- {§worker-scheme} loop-termination delta: terminated_at is stamped by the trigger
-    -- below when status crosses into terminal (every death-path, uniformly);
-    -- terminal_message is the deliverable — the SEND[200] body or the abandonment
-    -- reason — set by the guarded terminal lifecycle transition.
+    -- below when status crosses into terminal (every death-path, uniformly).
     terminated_at    TEXT,
-    terminal_message TEXT,
-    terminal_result  TEXT                      CHECK (terminal_result IS NULL OR json_valid(terminal_result)),
+    terminal_result  TEXT,
     -- {§loop-terminal-authorship}: 'cancel' names an external loop.cancel;
     -- NULL covers model terminals and engine verdicts whose result carries the story.
     terminated_by    TEXT                      CHECK (terminated_by IS NULL OR terminated_by = 'cancel'),
+    CONSTRAINT loops_terminal_result_contract CHECK (
+        CASE
+            WHEN status IN (100, 102, 202) THEN terminal_result IS NULL
+            WHEN terminal_result IS NULL OR NOT json_valid(terminal_result) THEN 0
+            ELSE
+                json_type(terminal_result) IS 'object'
+                AND json_type(terminal_result, '$.status') IS 'integer'
+                AND (
+                    json_extract(terminal_result, '$.status') = status
+                    OR (
+                        status = 200
+                        AND json_extract(terminal_result, '$.status') BETWEEN 200 AND 399
+                        AND json_extract(terminal_result, '$.status') != 202
+                    )
+                    OR (
+                        status = 500
+                        AND json_extract(terminal_result, '$.status') BETWEEN 400 AND 599
+                    )
+                )
+                AND CASE
+                    WHEN json_extract(terminal_result, '$.status') < 400 THEN
+                        json_type(terminal_result, '$.problem') IS NULL
+                    ELSE
+                        json_type(terminal_result, '$.problem') IS 'object'
+                        AND json_type(terminal_result, '$.problem.status') IS 'integer'
+                        AND json_extract(terminal_result, '$.problem.status')
+                            = json_extract(terminal_result, '$.status')
+                        AND json_type(terminal_result, '$.problem.type') IS 'text'
+                        AND length(json_extract(terminal_result, '$.problem.type')) > 0
+                        AND json_type(terminal_result, '$.problem.title') IS 'text'
+                        AND length(json_extract(terminal_result, '$.problem.title')) > 0
+                        AND json_type(terminal_result, '$.problem.detail') IS 'text'
+                        AND length(json_extract(terminal_result, '$.problem.detail')) > 0
+                        AND json_type(terminal_result, '$.problem.instance') IS 'text'
+                        AND length(json_extract(terminal_result, '$.problem.instance')) > 0
+                END
+        END
+    ),
     FOREIGN KEY (worker_id) REFERENCES workers(id) ON DELETE CASCADE,
     FOREIGN KEY (orphan_source_loop_id) REFERENCES loops(id)
 ) STRICT;
 
 CREATE UNIQUE INDEX IF NOT EXISTS loops_worker_id_sequence ON loops (worker_id, sequence);
 CREATE UNIQUE INDEX IF NOT EXISTS loops_orphan_source_loop_id ON loops (orphan_source_loop_id);
-
 -- {§worker-scheme}: a loop crossing into a terminal status stamps terminated_at, so sibling
 -- workers pull the termination as a folded ambient delta — caught uniformly across every
 -- death-path (SEND, grinder, max-turns, strike, KILL). The stamp updates terminated_at,
@@ -147,96 +188,15 @@ WHEN NEW.status IN (200, 413, 429, 499, 500, 504, 508) AND OLD.status NOT IN (20
 BEGIN
     INSERT INTO ambient_events (
         workspace_id, producer_worker_id, kind, source_record_id, source,
-        op, scheme, pathname, rx, status_rx, prompt, terminated_by
+        op, scheme, pathname, rx, status_rx, terminated_by
     )
     SELECT w.workspace_id, NEW.worker_id, 'loop_termination', NEW.id, NULL,
-           'SEND', 'worker', '/' || w.name, NEW.terminal_message, NEW.status, NEW.prompt, NEW.terminated_by
+           'SEND', 'worker', '/' || w.name, NEW.terminal_result,
+           json_extract(NEW.terminal_result, '$.status'), NEW.terminated_by
     FROM workers w
     WHERE w.id = NEW.worker_id;
 END;
 
-CREATE TRIGGER IF NOT EXISTS loops_result_contract_insert
-BEFORE INSERT ON loops
-WHEN NEW.status IN (100, 102, 200, 202, 413, 429, 499, 500, 504, 508)
-AND NOT (
-    (NEW.status IN (100, 102, 202) AND NEW.terminal_result IS NULL)
-    OR (
-        NEW.status IN (200, 413, 429, 499, 500, 504, 508)
-        AND NEW.terminal_result IS NOT NULL
-        AND json_valid(NEW.terminal_result)
-        AND json_type(NEW.terminal_result, '$.status') = 'integer'
-        AND (
-            json_extract(NEW.terminal_result, '$.status') = NEW.status
-            OR (
-                NEW.status = 200
-                AND json_extract(NEW.terminal_result, '$.status') BETWEEN 200 AND 399
-                AND json_extract(NEW.terminal_result, '$.status') != 202
-            )
-            OR (
-                NEW.status = 500
-                AND json_extract(NEW.terminal_result, '$.status') BETWEEN 400 AND 599
-            )
-        )
-        AND (
-            (NEW.status < 400 AND json_type(NEW.terminal_result, '$.problem') IS NULL)
-            OR (
-                NEW.status >= 400
-                AND json_type(NEW.terminal_result, '$.problem') = 'object'
-                AND json_extract(NEW.terminal_result, '$.problem.status')
-                    = json_extract(NEW.terminal_result, '$.status')
-                AND length(json_extract(NEW.terminal_result, '$.problem.type')) > 0
-                AND length(json_extract(NEW.terminal_result, '$.problem.title')) > 0
-                AND length(json_extract(NEW.terminal_result, '$.problem.detail')) > 0
-                AND length(json_extract(NEW.terminal_result, '$.problem.instance')) > 0
-            )
-        )
-    )
-)
-BEGIN
-    SELECT RAISE(ABORT, 'loop terminal result violates the operation-result contract');
-END;
-
-CREATE TRIGGER IF NOT EXISTS loops_result_contract_update
-BEFORE UPDATE OF status, terminal_result ON loops
-WHEN NEW.status IN (100, 102, 200, 202, 413, 429, 499, 500, 504, 508)
-AND NOT (
-    (NEW.status IN (100, 102, 202) AND NEW.terminal_result IS NULL)
-    OR (
-        NEW.status IN (200, 413, 429, 499, 500, 504, 508)
-        AND NEW.terminal_result IS NOT NULL
-        AND json_valid(NEW.terminal_result)
-        AND json_type(NEW.terminal_result, '$.status') = 'integer'
-        AND (
-            json_extract(NEW.terminal_result, '$.status') = NEW.status
-            OR (
-                NEW.status = 200
-                AND json_extract(NEW.terminal_result, '$.status') BETWEEN 200 AND 399
-                AND json_extract(NEW.terminal_result, '$.status') != 202
-            )
-            OR (
-                NEW.status = 500
-                AND json_extract(NEW.terminal_result, '$.status') BETWEEN 400 AND 599
-            )
-        )
-        AND (
-            (NEW.status < 400 AND json_type(NEW.terminal_result, '$.problem') IS NULL)
-            OR (
-                NEW.status >= 400
-                AND json_type(NEW.terminal_result, '$.problem') = 'object'
-                AND json_extract(NEW.terminal_result, '$.problem.status')
-                    = json_extract(NEW.terminal_result, '$.status')
-                AND length(json_extract(NEW.terminal_result, '$.problem.type')) > 0
-                AND length(json_extract(NEW.terminal_result, '$.problem.title')) > 0
-                AND length(json_extract(NEW.terminal_result, '$.problem.detail')) > 0
-                AND length(json_extract(NEW.terminal_result, '$.problem.instance')) > 0
-            )
-        )
-    )
-)
-BEGIN
-    SELECT RAISE(ABORT, 'loop terminal result violates the operation-result contract');
-END;
-
 -- turns
 -- finish_reason / model: provider-call metadata from the provider response contract.
 -- Properties of the call, not of the model's emission payload — kept on
@@ -305,23 +265,46 @@ CREATE TABLE IF NOT EXISTS turn_attempts (
     id               INTEGER NOT NULL PRIMARY KEY,
     turn_id          INTEGER NOT NULL,
     sequence         INTEGER NOT NULL CHECK (sequence >= 1),
-    accepted         INTEGER NOT NULL CHECK (accepted IN (0, 1)),
-    response         TEXT    NOT NULL CHECK (json_valid(response)),
+    state            TEXT    NOT NULL DEFAULT 'pending' CHECK (state IN ('pending', 'response', 'error')),
+    accepted         INTEGER          CHECK (accepted IS NULL OR accepted IN (0, 1)),
+    response         TEXT             CHECK (response IS NULL OR json_valid(response)),
+    failure          TEXT             CHECK (failure IS NULL OR json_valid(failure)),
     parse_errors     TEXT    NOT NULL DEFAULT '[]' CHECK (json_valid(parse_errors)),
-    -- Exact opaque tag set forwarded with this response-bearing provider call.
+    -- Exact opaque tag set forwarded with this provider call.
     -- {§attribution}
     attributions     TEXT    NOT NULL DEFAULT '[]' CHECK (
         json_valid(attributions) AND json_type(attributions) = 'array'
     ),
-    usage_prompt     INTEGER NOT NULL DEFAULT 0 CHECK (usage_prompt >= 0),
-    usage_completion INTEGER NOT NULL DEFAULT 0 CHECK (usage_completion >= 0),
-    usage_reasoning  INTEGER NOT NULL DEFAULT 0 CHECK (usage_reasoning >= 0),
-    usage_cached     INTEGER NOT NULL DEFAULT 0 CHECK (usage_cached >= 0),
-    usage_cost       TEXT    NOT NULL CHECK (json_valid(usage_cost) AND json_type(usage_cost) = 'object'),
+    usage_prompt     INTEGER          CHECK (usage_prompt IS NULL OR usage_prompt >= 0),
+    usage_completion INTEGER          CHECK (usage_completion IS NULL OR usage_completion >= 0),
+    usage_reasoning  INTEGER          CHECK (usage_reasoning IS NULL OR usage_reasoning >= 0),
+    usage_cached     INTEGER          CHECK (usage_cached IS NULL OR usage_cached >= 0),
+    usage_cost       TEXT             CHECK (usage_cost IS NULL OR (json_valid(usage_cost) AND json_type(usage_cost) = 'object')),
     usage_cost_usd   REAL             CHECK (usage_cost_usd IS NULL OR usage_cost_usd >= 0),
     finish_reason    TEXT,
     model            TEXT    NOT NULL CHECK (length(model) >= 1),
     timestamp        TEXT    NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+    completed_at     TEXT,
+    CHECK (
+        (state = 'pending'
+            AND accepted IS NULL AND response IS NULL AND failure IS NULL
+            AND usage_prompt IS NULL AND usage_completion IS NULL
+            AND usage_reasoning IS NULL AND usage_cached IS NULL
+            AND usage_cost IS NULL AND usage_cost_usd IS NULL
+            AND finish_reason IS NULL AND completed_at IS NULL)
+        OR
+        (state = 'response'
+            AND response IS NOT NULL
+            AND usage_prompt IS NOT NULL AND usage_completion IS NOT NULL
+            AND usage_reasoning IS NOT NULL AND usage_cached IS NOT NULL
+            AND usage_cost IS NOT NULL AND completed_at IS NOT NULL)
+        OR
+        (state = 'error'
+            AND accepted IS NULL AND response IS NULL AND failure IS NOT NULL
+            AND usage_prompt = 0 AND usage_completion = 0
+            AND usage_reasoning = 0 AND usage_cached = 0
+            AND usage_cost IS NOT NULL AND completed_at IS NOT NULL)
+    ),
     UNIQUE (turn_id, sequence),
     FOREIGN KEY (turn_id) REFERENCES turns(id) ON DELETE CASCADE
 ) STRICT;
@@ -331,6 +314,94 @@ CREATE UNIQUE INDEX IF NOT EXISTS turn_attempts_one_accepted_per_turn
     ON turn_attempts (turn_id)
     WHERE accepted = 1;
 
+CREATE TRIGGER IF NOT EXISTS turn_attempts_request_identity_immutable
+BEFORE UPDATE OF turn_id, sequence, attributions, timestamp ON turn_attempts
+BEGIN
+    SELECT RAISE(ABORT, 'provider attempt request identity is immutable');
+END;
+
+CREATE TRIGGER IF NOT EXISTS turn_attempts_state_forward_only
+BEFORE UPDATE OF state ON turn_attempts
+WHEN NOT (
+    NEW.state = OLD.state
+    OR (OLD.state = 'pending' AND NEW.state IN ('response', 'error'))
+)
+BEGIN
+    SELECT RAISE(ABORT, 'provider attempt state may only close once');
+END;
+
+CREATE TRIGGER IF NOT EXISTS turn_attempts_observation_immutable
+BEFORE UPDATE OF response, usage_prompt, usage_completion, usage_reasoning,
+                 usage_cached, finish_reason, model, completed_at
+ON turn_attempts
+WHEN OLD.state != 'pending'
+BEGIN
+    SELECT RAISE(ABORT, 'provider attempt observation is immutable');
+END;
+
+CREATE TRIGGER IF NOT EXISTS turn_attempts_classification_once
+BEFORE UPDATE OF accepted, parse_errors, failure, usage_cost, usage_cost_usd
+ON turn_attempts
+WHEN OLD.state = 'error' OR (OLD.state = 'response' AND OLD.accepted IS NOT NULL)
+BEGIN
+    SELECT RAISE(ABORT, 'provider attempt classification is immutable');
+END;
+
+-- Attempt rows are the monetary and provider-usage authority. Turns retain a
+-- denormalized projection for their public read contract, maintained here so a
+-- crash between provider I/O and engine closure cannot leave a false zero.
+CREATE VIEW IF NOT EXISTS turn_attempt_rollups AS
+SELECT t.id AS turn_id,
+       COALESCE(SUM(a.usage_prompt), 0) AS usage_prompt,
+       COALESCE(SUM(a.usage_completion), 0) AS usage_completion,
+       COALESCE(SUM(a.usage_reasoning), 0) AS usage_reasoning,
+       COALESCE(SUM(a.usage_cached), 0) AS usage_cached,
+       COALESCE((
+           SELECT json_group_array(json(ordered.usage_cost))
+           FROM (
+               SELECT observed.usage_cost
+               FROM turn_attempts observed
+               WHERE observed.turn_id = t.id AND observed.usage_cost IS NOT NULL
+               ORDER BY observed.sequence
+           ) ordered
+       ), '[]') AS usage_cost,
+       CASE
+           WHEN COUNT(a.id) = 0 THEN 0
+           WHEN COUNT(a.id) FILTER (WHERE a.usage_cost_usd IS NULL) > 0 THEN NULL
+           ELSE COALESCE(SUM(a.usage_cost_usd), 0)
+       END AS usage_cost_usd
+FROM turns t
+LEFT JOIN turn_attempts a ON a.turn_id = t.id
+GROUP BY t.id;
+
+CREATE TRIGGER IF NOT EXISTS turn_attempts_rollup_insert
+AFTER INSERT ON turn_attempts
+BEGIN
+    UPDATE turns SET
+        usage_prompt = (SELECT usage_prompt FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id),
+        usage_completion = (SELECT usage_completion FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id),
+        usage_reasoning = (SELECT usage_reasoning FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id),
+        usage_cached = (SELECT usage_cached FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id),
+        usage_cost = (SELECT usage_cost FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id),
+        usage_cost_usd = (SELECT usage_cost_usd FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id)
+    WHERE id = NEW.turn_id;
+END;
+
+CREATE TRIGGER IF NOT EXISTS turn_attempts_rollup_update
+AFTER UPDATE OF state, usage_prompt, usage_completion, usage_reasoning,
+                usage_cached, usage_cost, usage_cost_usd
+ON turn_attempts
+BEGIN
+    UPDATE turns SET
+        usage_prompt = (SELECT usage_prompt FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id),
+        usage_completion = (SELECT usage_completion FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id),
+        usage_reasoning = (SELECT usage_reasoning FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id),
+        usage_cached = (SELECT usage_cached FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id),
+        usage_cost = (SELECT usage_cost FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id),
+        usage_cost_usd = (SELECT usage_cost_usd FROM turn_attempt_rollups WHERE turn_id = NEW.turn_id)
+    WHERE id = NEW.turn_id;
+END;
+
 -- derivations
 -- Content-addressed deep projections. Entries point at a COMPLETE artifact by
 -- deep_hash; graph, FTS, and vectors are stored once regardless of how many
@@ -377,7 +448,8 @@ CREATE TABLE IF NOT EXISTS entries (
     -- unchanged entry is skipped, never re-metadatafied every turn.
     deep_hash TEXT,
     -- SPEC {§membership-change-gated-sync} — the per-member sync stat-detect:
-    -- "<mtimeMs>:<size>" of the disk file at its last materialization. The pre-turn
+    -- "<mtimeMs>:<size>" of the disk file at its last materialization, or `absent`
+    -- after an observed deletion. The pre-turn
     -- sync stat()s every member but re-reads/re-tokenizes/rewrites only one whose
     -- signature changed; an unchanged member is a no-op. NULL = never synced.
     synced_sig TEXT,
@@ -409,6 +481,36 @@ CREATE TABLE IF NOT EXISTS entry_channels (
     -- NULL). The per-tokenizer token cache it once keyed was retired — {§tokenomics-agnostic-ruler}.
     content_hash TEXT,
     state    TEXT    NOT NULL DEFAULT 'static' CHECK (state IN ('static', 'active', 'closed', 'errored')),
+    -- Exact terminal producer evidence for this representation channel. NULL is
+    -- the ordinary implicit {status:200}; selection/projection metadata belongs
+    -- to core and is never stored here.
+    producer_result TEXT,
+    CONSTRAINT entry_channel_producer_result_contract CHECK (
+        CASE
+            WHEN producer_result IS NULL THEN 1
+            WHEN NOT json_valid(producer_result) THEN 0
+            ELSE
+                json_type(producer_result) IS 'object'
+                AND json_type(producer_result, '$.status') IS 'integer'
+                AND json_extract(producer_result, '$.status') BETWEEN 200 AND 599
+                AND json_extract(producer_result, '$.status') != 202
+                AND CASE
+                    WHEN json_extract(producer_result, '$.status') < 400 THEN
+                        json_type(producer_result, '$.problem') IS NULL
+                    ELSE
+                        json_type(producer_result, '$.problem') IS 'object'
+                        AND json_type(producer_result, '$.problem.status') IS 'integer'
+                        AND json_extract(producer_result, '$.problem.status')
+                            = json_extract(producer_result, '$.status')
+                        AND json_type(producer_result, '$.problem.type') IS 'text'
+                        AND length(json_extract(producer_result, '$.problem.type')) > 0
+                        AND json_type(producer_result, '$.problem.title') IS 'text'
+                        AND length(json_extract(producer_result, '$.problem.title')) > 0
+                        AND json_type(producer_result, '$.problem.detail') IS 'text'
+                        AND length(json_extract(producer_result, '$.problem.detail')) > 0
+                END
+        END
+    ),
     PRIMARY KEY (entry_id, name),
     FOREIGN KEY (entry_id) REFERENCES entries(id) ON DELETE CASCADE
 ) STRICT, WITHOUT ROWID;
@@ -525,14 +627,13 @@ CREATE TABLE IF NOT EXISTS log_entries (
     -- 'error' is an ACTIONLESS row ({§operation-results} — errors are log items): a parse failure that
     -- produced no op still records a log entry (op='error', status_rx≥400, no target) so the model
     -- can fold/kill/recall its own mistakes like any other log row — one budget surface, the log.
-    -- 'model' is an ACTIONLESS row too ({§model-entry}): the model's own verbatim emission, mirrored
-    -- back as a foldable log item so it can finally SEE its prior output (born folded; the turn-0
-    -- exemplar is born open). text/vnd.plurnk-typed; OPEN/FOLD/KILL-able like any row.
+    -- A model-emission artifact ({§model-entry}) carries NULL here and
+    -- attrs.kind='model_emission': no operation was executed or fabricated.
     -- No op enum here: the grammar op set is grammar's contract (PlurnkOp), and this column is written
-    -- only by the PlurnkOp-typed engine (grammar ops) or with the two service markers ('error','model').
+    -- only by the PlurnkOp-typed engine (grammar ops), service row selectors, or NULL for no op.
     -- A SQL enum would be a hand-copy of grammar's op list that silently goes stale on every new verb
     -- (it did — FORK/WORK). Validity lives at the parse + type layer, not duplicated in DDL.
-    op              TEXT    NOT NULL,
+    op              TEXT,
     suffix          TEXT    NOT NULL DEFAULT '',
     signal          TEXT                       CHECK (signal IS NULL OR json_valid(signal)),
 
@@ -564,6 +665,8 @@ CREATE TABLE IF NOT EXISTS log_entries (
 
     expanded         INTEGER NOT NULL DEFAULT 1 CHECK (expanded IN (0, 1)),
 
+    CHECK ((op IS NULL) = COALESCE(json_extract(attrs, '$.kind') = 'model_emission', 0)),
+
     FOREIGN KEY (worker_id)  REFERENCES workers(id)  ON DELETE CASCADE,
     FOREIGN KEY (loop_id) REFERENCES loops(id) ON DELETE CASCADE,
     FOREIGN KEY (turn_id) REFERENCES turns(id) ON DELETE CASCADE
@@ -667,6 +770,18 @@ BEGIN
     UPDATE log_entries SET ambient_event_id = last_insert_rowid() WHERE id = NEW.id;
 END;
 
+-- One loop's cost is the complete sum of its provider attempts. One unknown
+-- contributing turn makes the aggregate unknown rather than silently zero.
+CREATE VIEW IF NOT EXISTS loop_costs AS
+SELECT l.id, l.worker_id,
+       CASE
+           WHEN COUNT(t.id) FILTER (WHERE t.usage_cost_usd IS NULL) > 0 THEN NULL
+           ELSE COALESCE(SUM(t.usage_cost_usd), 0)
+       END AS cost_usd
+FROM loops l
+LEFT JOIN turns t ON t.loop_id = l.id
+GROUP BY l.id;
+
 -- cost_rollups
 -- Triggers maintaining denormalized USD totals on workers and workspaces
 -- as turns insert/update. Pure denormalization (textbook trigger use);
@@ -676,10 +791,10 @@ AFTER INSERT ON turns
 BEGIN
     UPDATE workers
        SET cost_usd = (
-           SELECT CASE WHEN COUNT(*) FILTER (WHERE t.usage_cost_usd IS NULL) > 0
-                       THEN NULL ELSE COALESCE(SUM(t.usage_cost_usd), 0) END
-             FROM turns t JOIN loops l ON l.id = t.loop_id
-            WHERE l.worker_id = workers.id
+           SELECT CASE WHEN COUNT(*) FILTER (WHERE lc.cost_usd IS NULL) > 0
+                       THEN NULL ELSE COALESCE(SUM(lc.cost_usd), 0) END
+             FROM loop_costs lc
+            WHERE lc.worker_id = workers.id
        )
      WHERE id = (SELECT worker_id FROM loops WHERE id = NEW.loop_id);
 END;
@@ -689,11 +804,10 @@ AFTER INSERT ON turns
 BEGIN
     UPDATE workspaces
        SET cost_usd = (
-           SELECT CASE WHEN COUNT(*) FILTER (WHERE t.usage_cost_usd IS NULL) > 0
-                       THEN NULL ELSE COALESCE(SUM(t.usage_cost_usd), 0) END
-             FROM turns t
-             JOIN loops l ON l.id = t.loop_id
-             JOIN workers r ON r.id = l.worker_id
+           SELECT CASE WHEN COUNT(*) FILTER (WHERE lc.cost_usd IS NULL) > 0
+                       THEN NULL ELSE COALESCE(SUM(lc.cost_usd), 0) END
+             FROM loop_costs lc
+             JOIN workers r ON r.id = lc.worker_id
             WHERE r.workspace_id = workspaces.id
        )
      WHERE id = (
@@ -710,10 +824,10 @@ WHEN NEW.usage_cost_usd IS NOT OLD.usage_cost_usd
 BEGIN
     UPDATE workers
        SET cost_usd = (
-           SELECT CASE WHEN COUNT(*) FILTER (WHERE t.usage_cost_usd IS NULL) > 0
-                       THEN NULL ELSE COALESCE(SUM(t.usage_cost_usd), 0) END
-             FROM turns t JOIN loops l ON l.id = t.loop_id
-            WHERE l.worker_id = workers.id
+           SELECT CASE WHEN COUNT(*) FILTER (WHERE lc.cost_usd IS NULL) > 0
+                       THEN NULL ELSE COALESCE(SUM(lc.cost_usd), 0) END
+             FROM loop_costs lc
+            WHERE lc.worker_id = workers.id
        )
      WHERE id = (SELECT worker_id FROM loops WHERE id = NEW.loop_id);
 END;
@@ -724,11 +838,10 @@ WHEN NEW.usage_cost_usd IS NOT OLD.usage_cost_usd
 BEGIN
     UPDATE workspaces
        SET cost_usd = (
-           SELECT CASE WHEN COUNT(*) FILTER (WHERE t.usage_cost_usd IS NULL) > 0
-                       THEN NULL ELSE COALESCE(SUM(t.usage_cost_usd), 0) END
-             FROM turns t
-             JOIN loops l ON l.id = t.loop_id
-             JOIN workers r ON r.id = l.worker_id
+           SELECT CASE WHEN COUNT(*) FILTER (WHERE lc.cost_usd IS NULL) > 0
+                       THEN NULL ELSE COALESCE(SUM(lc.cost_usd), 0) END
+             FROM loop_costs lc
+             JOIN workers r ON r.id = lc.worker_id
             WHERE r.workspace_id = workspaces.id
        )
      WHERE id = (

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@plurnk/plurnk-service",
-    "version": "1.4.0",
+    "version": "1.5.0",
     "description": "Plurnk agent runtime — the server / engine / core. Implements the @plurnk/plurnk-contracts contract.",
     "type": "module",
     "license": "MIT",
@@ -37,22 +37,22 @@
     "scripts": {
         "start": "node --conditions=plurnk-dev src/service.ts",
         "types:sqlrite": "node scripts/sqlrite-types.mjs --write",
-        "test:sqlrite-types": "node scripts/sqlrite-types.mjs",
-        "test:artifacts:begin": "node ../scripts/test-artifacts.mjs begin",
-        "pretest:intg": "npm run test:artifacts:begin",
-        "test:lint": "npm run test:sqlrite-types && tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
-        "test:unit": "node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-timeout=30000 src/**/*.test.ts",
+        "types:sqlrite:check": "node scripts/sqlrite-types.mjs",
+        "artifacts:begin": "node ../scripts/test-artifacts.mjs begin",
+        "pretest:intg": "npm run artifacts:begin",
+        "test:lint": "npm run types:sqlrite:check && tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
+        "test:unit": "node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-timeout=30000 scripts/*.test.mjs src/**/*.test.ts",
         "test:intg": "PLURNK_SERVICE_FILES_ITEMS=0 node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-concurrency=8 --test-timeout=30000 test/intg/*.test.ts",
-        "test:live": "PLURNK_SERVICE_POLICY=../plurnk-meta/PLURNK_PERSONALITY.md node --conditions=plurnk-dev --import=./test/floor.ts --env-file-if-exists=.env.defaults --env-file-if-exists=$HOME/.plurnk/.env --env-file-if-exists=.env --env-file-if-exists=.env.test --test --test-concurrency=1 test/live/*.test.ts",
-        "test:live:specimen": "node --conditions=plurnk-dev bin/live-specimen.ts",
-        "test:live:zeropin": "PLURNK_ZERO_PIN=1 PLURNK_SERVICE_POLICY=../plurnk-meta/PLURNK_PERSONALITY.md node --conditions=plurnk-dev --import=./test/floor.ts --env-file-if-exists=.env.defaults --env-file-if-exists=$HOME/.plurnk/.env --env-file-if-exists=.env --env-file-if-exists=.env.test --test --test-concurrency=1 test/live/*.test.ts",
-        "test:demo": "PLURNK_SERVICE_POLICY=../plurnk-meta/PLURNK_PERSONALITY.md node --conditions=plurnk-dev --import=./test/floor.ts --env-file-if-exists=.env.defaults --env-file-if-exists=$HOME/.plurnk/.env --env-file-if-exists=.env --env-file-if-exists=.env.test --test --test-concurrency=1 test/demo/*.test.ts",
-        "test:demo:zeropin": "PLURNK_ZERO_PIN=1 PLURNK_SERVICE_POLICY=../plurnk-meta/PLURNK_PERSONALITY.md node --conditions=plurnk-dev --import=./test/floor.ts --env-file-if-exists=.env.defaults --env-file-if-exists=$HOME/.plurnk/.env --env-file-if-exists=.env --env-file-if-exists=.env.test --test --test-concurrency=1 test/demo/*.test.ts",
+        "test:live": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/live.mjs",
+        "test:live:specimen": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/live.mjs --specimen",
+        "test:live:zeropin": "PLURNK_ZERO_PIN=1 npm run test:live",
+        "test:demo": "bash ../scripts/operator-environment.sh env PLURNK_SERVICE_POLICY=../plurnk-meta/PLURNK_PERSONALITY.md node --conditions=plurnk-dev --import=./test/floor.ts --env-file-if-exists=.env.defaults --env-file-if-exists=$HOME/.plurnk/.env --env-file-if-exists=.env --env-file-if-exists=.env.test --test --test-concurrency=1 test/demo/*.test.ts",
+        "test:demo:zeropin": "bash ../scripts/operator-environment.sh env PLURNK_ZERO_PIN=1 PLURNK_SERVICE_POLICY=../plurnk-meta/PLURNK_PERSONALITY.md node --conditions=plurnk-dev --import=./test/floor.ts --env-file-if-exists=.env.defaults --env-file-if-exists=$HOME/.plurnk/.env --env-file-if-exists=.env --env-file-if-exists=.env.test --test --test-concurrency=1 test/demo/*.test.ts",
+        "test:benchlet": "node scripts/benchlet.mjs",
         "fixture:demo": "node --conditions=plurnk-dev test/demo/_fixture.ts",
-        "test:all": "npm run test:lint && npm run test:unit && npm run test:intg && npm run test:demo",
-        "test:digest": "node --conditions=plurnk-dev bin/digest.ts",
+        "test": "npm run test:lint && npm run test:unit && npm run test:intg",
         "digest:missing": "node --conditions=plurnk-dev bin/digest-missing.ts",
-        "test:clean-tmp": "node ../scripts/test-artifacts.mjs clean",
+        "artifacts:clean": "node ../scripts/test-artifacts.mjs clean",
         "dev:digest": "node --conditions=plurnk-dev bin/digest.ts",
         "build:clean": "rm -rf dist",
         "build:dist": "tsc -p tsconfig.build.json",
@@ -65,6 +65,7 @@
         "build:local:uninstall": "node --conditions=plurnk-dev scripts/install-sandbox.mjs uninstall",
         "test:installation": "node --conditions=plurnk-dev scripts/test-installation.mjs",
         "deps:audit": "node --conditions=plurnk-dev scripts/deps-audit.ts",
+        "release:check": "npm run deps:audit && npm run test:installation",
         "prepublishOnly": "npm run deps:audit && npm run test:installation",
         "prepack": "npm run build"
     },
@@ -76,41 +77,42 @@
         "@opentelemetry/resources": "^2.10.0",
         "@opentelemetry/sdk-metrics": "^2.10.0",
         "@opentelemetry/sdk-trace-base": "^2.10.0",
-        "@plurnk/gbnf": "1.4.0",
-        "@plurnk/plurnk-agui": "1.4.0",
-        "@plurnk/plurnk-contracts": "1.4.0",
-        "@plurnk/plurnk-execs": "1.4.0",
-        "@plurnk/plurnk-execs-common": "1.4.0",
-        "@plurnk/plurnk-execs-git": "1.4.0",
-        "@plurnk/plurnk-execs-jq": "1.4.0",
-        "@plurnk/plurnk-execs-search": "1.4.0",
-        "@plurnk/plurnk-execs-sqlite": "1.4.0",
-        "@plurnk/plurnk-execs-wasm": "1.4.0",
-        "@plurnk/plurnk-mcp": "1.4.0",
-        "@plurnk/plurnk-meta": "1.4.0",
-        "@plurnk/plurnk-mimetypes": "1.4.0",
-        "@plurnk/plurnk-mimetypes-application-ipynb": "1.4.0",
-        "@plurnk/plurnk-mimetypes-application-json": "1.4.0",
-        "@plurnk/plurnk-mimetypes-application-jsonl": "1.4.0",
-        "@plurnk/plurnk-mimetypes-application-pdf": "1.4.0",
-        "@plurnk/plurnk-mimetypes-application-xml": "1.4.0",
-        "@plurnk/plurnk-mimetypes-embeddings": "1.4.0",
-        "@plurnk/plurnk-mimetypes-text-csv": "1.4.0",
-        "@plurnk/plurnk-mimetypes-text-diff": "1.4.0",
-        "@plurnk/plurnk-mimetypes-text-dotenv": "1.4.0",
-        "@plurnk/plurnk-mimetypes-text-html": "1.4.0",
-        "@plurnk/plurnk-mimetypes-text-ini": "1.4.0",
-        "@plurnk/plurnk-mimetypes-text-markdown": "1.4.0",
-        "@plurnk/plurnk-mimetypes-text-plain": "1.4.0",
-        "@plurnk/plurnk-mimetypes-tokenizers": "1.4.0",
-        "@plurnk/plurnk-models": "1.4.0",
-        "@plurnk/plurnk-providers": "1.4.0",
-        "@plurnk/plurnk-schemes": "1.4.0",
-        "@plurnk/plurnk-schemes-http": "1.4.0",
+        "@plurnk/gbnf": "1.5.0",
+        "@plurnk/plurnk-agui": "1.5.0",
+        "@plurnk/plurnk-contracts": "1.5.0",
+        "@plurnk/plurnk-execs": "1.5.0",
+        "@plurnk/plurnk-execs-common": "1.5.0",
+        "@plurnk/plurnk-execs-git": "1.5.0",
+        "@plurnk/plurnk-execs-jq": "1.5.0",
+        "@plurnk/plurnk-execs-search": "1.5.0",
+        "@plurnk/plurnk-execs-sqlite": "1.5.0",
+        "@plurnk/plurnk-execs-wasm": "1.5.0",
+        "@plurnk/plurnk-hooks": "1.5.0",
+        "@plurnk/plurnk-mcp": "1.5.0",
+        "@plurnk/plurnk-meta": "1.5.0",
+        "@plurnk/plurnk-mimetypes": "1.5.0",
+        "@plurnk/plurnk-mimetypes-application-ipynb": "1.5.0",
+        "@plurnk/plurnk-mimetypes-application-json": "1.5.0",
+        "@plurnk/plurnk-mimetypes-application-jsonl": "1.5.0",
+        "@plurnk/plurnk-mimetypes-application-pdf": "1.5.0",
+        "@plurnk/plurnk-mimetypes-application-xml": "1.5.0",
+        "@plurnk/plurnk-mimetypes-embeddings": "1.5.0",
+        "@plurnk/plurnk-mimetypes-text-csv": "1.5.0",
+        "@plurnk/plurnk-mimetypes-text-diff": "1.5.0",
+        "@plurnk/plurnk-mimetypes-text-dotenv": "1.5.0",
+        "@plurnk/plurnk-mimetypes-text-html": "1.5.0",
+        "@plurnk/plurnk-mimetypes-text-ini": "1.5.0",
+        "@plurnk/plurnk-mimetypes-text-markdown": "1.5.0",
+        "@plurnk/plurnk-mimetypes-text-plain": "1.5.0",
+        "@plurnk/plurnk-mimetypes-tokenizers": "1.5.0",
+        "@plurnk/plurnk-models": "1.5.0",
+        "@plurnk/plurnk-providers": "1.5.0",
+        "@plurnk/plurnk-schemes": "1.5.0",
+        "@plurnk/plurnk-schemes-http": "1.5.0",
         "@possumtech/sqlrite": "^6.5.2",
         "diff": "^9.0.0",
         "ignore": "7.0.6",
-        "isomorphic-git": "1.40.0"
+        "isomorphic-git": "1.41.3"
     },
     "devDependencies": {
         "@opentelemetry/core": "^2.10.0",

package/dist/matrix/live-specimen.d.ts

@@ -1,9 +0,0 @@
-declare const LIVE_ENV: {
-    readonly PLURNK_SERVICE_POLICY: "../plurnk-meta/PLURNK_PERSONALITY.md";
-};
-export declare const liveSpecimenInvocation: (pattern: string) => {
-    args: string[];
-    env: typeof LIVE_ENV;
-};
-export {};
-//# sourceMappingURL=live-specimen.d.ts.map

package/dist/matrix/live-specimen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"live-specimen.d.ts","sourceRoot":"","sources":["../../src/matrix/live-specimen.ts"],"names":[],"mappings":"AAUA,QAAA,MAAM,QAAQ;aACV,qBAAqB,EAAE,sCAAsC;CACvD,CAAC;AAKX,eAAO,MAAM,sBAAsB,YAAa,MAAM,KAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,OAAO,QAAQ,CAAA;CAoB9F,CAAC"}