@plurnk/plurnk-service 3.2.0 → 3.3.0

package/dist/server/Rollback.js

@@ -0,0 +1,111 @@
+// {§rollback} — undo a worker's settled file mutations after one of its log coordinates. Each row's
+// patch ({§log-mutation-patch}) is reversed against the file as it is now and written back as an
+// ordinary operation of the acting client, so every step is a proposal, a row and a patch of its
+// own; the first file that no longer holds what its mutation wrote stops the rollback where it is.
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { applyPatch, parsePatch, reversePatch } from "diff";
+import { PlurnkParser } from "@plurnk/plurnk-parser";
+import { entryAddress } from "../core/plurnk-uri.js";
+import { daemonFailure } from "./daemon-results.js";
+export default class Rollback {
+    // `<loop>/<turn>/<item>`, with or without the `log:///` prefix and a trailing `/<OP>`.
+    static coordinate(to) {
+        const match = /^(?:log:\/\/\/)?(\d+)\/(\d+)\/(\d+)(?:\/[A-Za-z]+)?$/u.exec(to.trim());
+        if (match === null)
+            return null;
+        const [loopSeq, turnSeq, sequence] = match.slice(1).map(Number);
+        return loopSeq > 0 && turnSeq > 0 && sequence > 0 ? { loopSeq: loopSeq, turnSeq: turnSeq, sequence: sequence } : null;
+    }
+    static async run(seam, args) {
+        const coordinate = Rollback.coordinate(args.to);
+        if (coordinate === null) {
+            throw daemonFailure("daemon:rollback", "coordinate-invalid", 400, `'${args.to}' is not a log coordinate.`, {
+                to: args.to, recovery: "Name the coordinate as <loop>/<turn>/<item>, as the log shows it.",
+            });
+        }
+        const at = `${coordinate.loopSeq}/${coordinate.turnSeq}/${coordinate.sequence}`;
+        const anchor = await seam.db.log_id_by_coordinate.get({
+            worker_id: args.workerId, loop_seq: coordinate.loopSeq, turn_seq: coordinate.turnSeq, sequence: coordinate.sequence,
+        });
+        if (anchor === undefined) {
+            throw daemonFailure("daemon:rollback", "coordinate-not-found", 404, `No log entry exists at log:///${at}.`, { to: at });
+        }
+        const root = await seam.projectRoot(args.workspaceId);
+        if (root === null) {
+            throw daemonFailure("daemon:rollback", "project-root-required", 400, "Rollback restores files, and this workspace has no project root.", {});
+        }
+        const rows = await seam.db.log_file_mutations_after.all({
+            worker_id: args.workerId, loop_seq: coordinate.loopSeq, turn_seq: coordinate.turnSeq, sequence: coordinate.sequence,
+        });
+        const restored = [];
+        const skipped = [];
+        const executors = seam.executorTags(args.workspaceId);
+        for (const row of rows) {
+            const rowCoordinate = `${row.loop_seq}/${row.turn_seq}/${row.sequence}`;
+            if (row.patch === null) {
+                // A file mutation that kept no patch: nothing is invented for it ({§log-mutation-patch}).
+                if (row.scheme === null || row.scheme === "file")
+                    skipped.push({ coordinate: rowCoordinate, reason: "no-patch" });
+                continue;
+            }
+            // A row that wrote several files is reversed last file first.
+            for (const file of parsePatch(row.patch).toReversed()) {
+                const outcome = await Rollback.#reverse(seam, { root, executors, file, coordinate: rowCoordinate }, restored);
+                if (outcome === "already-reversed") {
+                    skipped.push({ coordinate: rowCoordinate, reason: "already-reversed" });
+                    continue;
+                }
+                if (outcome !== null)
+                    return { to: at, restored, skipped, stopped: outcome };
+            }
+        }
+        return { to: at, restored, skipped, stopped: null };
+    }
+    static async #reverse(seam, { root, executors, file, coordinate }, restored) {
+        const path = file.oldFileName;
+        if (typeof path !== "string" || path.length === 0)
+            throw new Error(`log:///${coordinate} keeps a patch that names no file.`);
+        let current;
+        try {
+            current = await readFile(join(root, path), "utf8");
+        }
+        catch (cause) {
+            if (cause.code !== "ENOENT")
+                throw cause;
+            current = null;
+        }
+        const created = file.hunks.every((hunk) => hunk.oldLines === 0);
+        const removed = !created && file.hunks.every((hunk) => hunk.newLines === 0);
+        // A row whose forward patch still applies was reversed already, by an earlier rollback whose
+        // own rows live in the client's log: nothing to do for it, and nothing invented.
+        const alreadyReversed = () => applyPatch(current ?? "", file) !== false;
+        if (removed ? current !== null : current === null) {
+            if (alreadyReversed())
+                return "already-reversed";
+            return { coordinate, path, reason: "drift", detail: `'${path}' ${current === null ? "no longer exists" : "exists again"}; log:///${coordinate} ${removed ? "removed" : "wrote"} it.` };
+        }
+        const previous = applyPatch(current ?? "", reversePatch(file));
+        if (previous === false) {
+            if (alreadyReversed())
+                return "already-reversed";
+            return { coordinate, path, reason: "drift", detail: `'${path}' no longer holds what log:///${coordinate} wrote.` };
+        }
+        const action = created ? "delete" : removed ? "create" : "update";
+        const target = entryAddress("file", "", path, root);
+        const source = action === "delete"
+            ? `\`\`\`\`KILL (${target})\`\`\`\``
+            : `\`\`\`\`EDIT (${target})${action === "update" ? " <1,-1>" : ""}\n${previous}\n\`\`\`\``;
+        const { items } = PlurnkParser.parseClient(source, { executors: [...executors] });
+        const item = items[0];
+        if (items.length !== 1 || item?.kind !== "statement")
+            throw new Error(`rollback of log:///${coordinate} built an operation the parser refused: ${source.slice(0, 120)}`);
+        const result = await seam.apply(item.statement);
+        if (result.status >= 300) {
+            return { coordinate, path, reason: "refused", detail: result.problem?.detail ?? `The reversing operation answered ${result.status}.` };
+        }
+        restored.push({ coordinate, path, action });
+        return null;
+    }
+}
+//# sourceMappingURL=Rollback.js.map

package/dist/server/Rollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Rollback.js","sourceRoot":"","sources":["../../src/server/Rollback.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,iGAAiG;AACjG,iGAAiG;AACjG,mGAAmG;AACnG,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAwB,MAAM,MAAM,CAAC;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAmBpD,MAAM,CAAC,OAAO,OAAO,QAAQ;IACzB,uFAAuF;IACvF,MAAM,CAAC,UAAU,CAAC,EAAU;QACxB,MAAM,KAAK,GAAG,uDAAuD,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACtF,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChE,OAAO,OAAQ,GAAG,CAAC,IAAI,OAAQ,GAAG,CAAC,IAAI,QAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,EAAE,OAAQ,EAAE,QAAQ,EAAE,QAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChI,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAkB,EAAE,IAA2D;QAC5F,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,aAAa,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,EAAE,4BAA4B,EAAE;gBACvG,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,mEAAmE;aAC7F,CAAC,CAAC;QACP,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAiB;YAClE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ;SACtH,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,aAAa,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,GAAG,EAAE,iCAAiC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,aAAa,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,GAAG,EAAE,kEAAkE,EAAE,EAAE,CAAC,CAAC;QACjJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAc;YACjE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ;SACtH,CAAC,CAAC;QACH,MAAM,QAAQ,GAAe,EAAE,CAAC;QAChC,MAAM,OAAO,GAAwC,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACxE,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBACrB,0FAA0F;gBAC1F,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBAClH,SAAS;YACb,CAAC;YACD,8DAA8D;YAC9D,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAC9G,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC1H,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YACjF,CAAC;QACL,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,QAAQ,CACjB,IAAkB,EAClB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAA6F,EAChI,QAAoB;QAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,oCAAoC,CAAC,CAAC;QAC7H,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACD,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,OAAO,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;QAC5E,6FAA6F;QAC7F,iFAAiF;QACjF,MAAM,eAAe,GAAG,GAAY,EAAE,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,KAAK,CAAC;QACjF,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAChD,IAAI,eAAe,EAAE;gBAAE,OAAO,kBAAkB,CAAC;YACjD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,KAAK,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,YAAY,UAAU,IAAI,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC;QAC3L,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,IAAI,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACrB,IAAI,eAAe,EAAE;gBAAE,OAAO,kBAAkB,CAAC;YACjD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,iCAAiC,UAAU,SAAS,EAAE,CAAC;QACvH,CAAC;QACD,MAAM,MAAM,GAAuB,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtF,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,KAAK,QAAQ;YAC9B,CAAC,CAAC,iBAAiB,MAAM,WAAW;YACpC,CAAC,CAAC,iBAAiB,MAAM,IAAI,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,YAAY,CAAC;QAC/F,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,EAAE,IAAI,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,2CAA2C,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACzK,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAA4B,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACvB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,oCAAoC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;QAC3I,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ"}

package/dist/server/drain.sql

@@ -52,6 +52,15 @@ WHERE worker_id = $worker_id
 ORDER BY (status = 102) DESC, sequence ASC
 LIMIT 1;
 
+-- PREP: drain_abandoned_messages
+-- {§message-abandonment}: the messages other workers sent that this ended loop still holds without a completion.
+SELECT m.path
+FROM message_sources m
+WHERE m.loop_id = $loop_id
+  AND m.source LIKE 'worker://%'
+  AND NOT EXISTS (SELECT 1 FROM message_completions c WHERE c.message_id = m.id)
+ORDER BY m.ordinal ASC;
+
 -- PREP: drain_message_source
 SELECT l.worker_id, w.workspace_id, l.status
 FROM loops l JOIN workers w ON w.id = l.worker_id

package/docs/members.md

@@ -50,8 +50,8 @@ candidate: its `provenance.kind` is the verdict and its `summary` the reason.
 - **Untracked, scope `root` or `namespace`**: a definition makes it a member
   from the next turn.
 
-  ```members (add) <!-- include the generated reports -->
-  {"alias": "reports", "definition": {"glob": "build/*.json"}}
+  ```members (add) <!-- include the generated reports; each glob is one definition -->
+  {"files": ["build/*.json"]}
   ```
 
 - **Untracked, scope `none`** (an operator narrowed it): the refusal names the
@@ -95,10 +95,15 @@ cleanup conflicts; its receipt identifies that completed effect.
 
 ## Definitions belong to the workspace
 
-`list` shows every definition with its origin (`service` from the operator's
-environment, `workspace` from an `add`) and whether it is enabled. `enable` and
-`disable` flip one shared alias; `remove` forgets a workspace override and
-restores inheritance. Inherited definitions cannot be removed here. Changes
-apply to every worker.
-Each enabled definition is projected as
-`worker:///_plurnk/members/<alias>.md` showing what its glob resolved to.
+A definition is its glob: `list` shows every definition with its origin (`service` from the
+operator's environment, `workspace` from an `add`) and whether it is enabled. `enable` and
+`disable` flip one definition, and `remove` forgets a workspace definition and restores
+inheritance, each named by the glob as `list` shows it:
+
+```members (disable)
+{"file": "build/*.json"}
+```
+
+Inherited definitions cannot be removed here. Changes apply to every worker. Each enabled
+definition is projected as `worker:///_plurnk/members/<glob>.md`, the glob percent-encoded,
+showing what it resolved to.

package/migrations/026_message_obligations.sql

@@ -0,0 +1,32 @@
+-- MIGRATE: 26 message obligations
+-- Released in 3.3.0 and frozen ({§db-migrations}): a shape change is the next MIGRATE version, never an edit here.
+-- {§worker-obligations}: a message a worker sent to another worker holds the sender, beside its live children
+-- and open streams, until the recipient completes it ({§message-completion}) or the recipient's loop ends
+-- ({§message-abandonment}). The two liveness views are recreated with that third column; no row changes.
+DROP VIEW IF EXISTS loop_obligations;
+DROP VIEW IF EXISTS worker_obligations;
+
+CREATE VIEW worker_obligations AS
+SELECT w.id AS worker_id,
+       EXISTS (
+           SELECT 1 FROM subscriptions s
+           WHERE s.worker_id = w.id AND s.closed_at IS NULL AND s.detached = 0
+       ) AS streams,
+       EXISTS (
+           SELECT 1 FROM workers c JOIN loops l ON l.worker_id = c.id
+           WHERE c.parent_worker_id = w.id AND l.status IN (100, 102, 202)
+       ) AS workers,
+       EXISTS (
+           SELECT 1 FROM loop_messages m
+           JOIN loops l ON l.id = m.loop_id
+           JOIN workers r ON r.id = l.worker_id
+           WHERE r.workspace_id = w.workspace_id
+             AND m.source = 'worker://' || w.name
+             AND l.status IN (100, 102, 202)
+             AND NOT EXISTS (SELECT 1 FROM message_completions c WHERE c.message_id = m.id)
+       ) AS messages
+FROM workers w;
+
+CREATE VIEW loop_obligations AS
+SELECT l.id AS loop_id, held.streams, held.workers, held.messages
+FROM loops l JOIN worker_obligations held ON held.worker_id = l.worker_id;

package/migrations/027_members_identity.sql

@@ -0,0 +1,20 @@
+-- MIGRATE: 27 members identity
+-- Released in 3.3.0 and frozen ({§db-migrations}): a shape change is the next MIGRATE version, never an edit here.
+-- {§members-functionality} {§functionality-addressing}: a members definition is its glob. Workspace
+-- definitions are re-keyed by their glob. A service-origin row held only an enabledness override
+-- keyed by the operator's environment alias, which no longer names a definition, so it is dropped;
+-- a state left with no definition is removed, as the coordinator persists none.
+UPDATE workspace_module_state
+SET state = (
+    SELECT json_object(
+        'version', 1,
+        'definitions', COALESCE(json_group_object(json_extract(value, '$.definition.glob'), json(value)), json('{}'))
+    )
+    FROM json_each(workspace_module_state.state, '$.definitions')
+    WHERE json_extract(value, '$.origin') = 'workspace'
+)
+WHERE namespace_owner = '@plurnk/plurnk-core/members';
+
+DELETE FROM workspace_module_state
+WHERE namespace_owner = '@plurnk/plurnk-core/members'
+  AND (SELECT COUNT(*) FROM json_each(workspace_module_state.state, '$.definitions')) = 0;

package/migrations/028_mutation_patch.sql

@@ -0,0 +1,20 @@
+-- MIGRATE: 28 mutation patch
+-- Released in 3.3.0 and frozen ({§db-migrations}): a shape change is the next MIGRATE version, never an edit here.
+-- {§log-mutation-patch}: a settled file mutation's row keeps the unified diff of what it did, for the
+-- life of the row; it is served as the row's `patch` channel and never enters a receipt or a packet.
+-- Rows settled before this version, byte writes and operations that changed no text hold NULL.
+ALTER TABLE log_entries ADD COLUMN patch TEXT;
+
+DROP VIEW active_log_entries;
+CREATE VIEW active_log_entries AS
+SELECT le.id, le.version, le.worker_id, le.loop_id, le.turn_id, le.sequence,
+       le.at, le.origin, le.source, le.ambient_event_id, le.inherited_history,
+       le.deep_hash, le.model_call_id, le.subscription_publication_id,
+       le.op, le.signal, le.scheme, le.username, le.password,
+       le.hostname, le.port, le.pathname, le.query, le.fragment, le.lineMarker,
+       le.tx, le.mimetype_tx,
+       le.rx, le.mimetype_rx, le.status_rx, le.weight,
+       le.state, le.outcome, le.attrs, le.initial_folded, le.patch, projection.folded
+FROM log_entries le
+JOIN log_entry_projections projection ON projection.log_entry_id = le.id
+WHERE projection.active = 1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plurnk/plurnk-service",
-  "version": "3.2.0",
+  "version": "3.3.0",
   "description": "Plurnk agent runtime — the server / engine / core. Implements the @plurnk/plurnk-contracts contract.",
   "keywords": [
     "plurnk",
@@ -50,14 +50,13 @@
     "test:lint": "npm run types:sqlrite:check && tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
     "test:unit": "node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-timeout=30000 scripts/*.test.mjs src/**/*.test.ts",
     "test:intg": "export PLURNK_TEST_RUN=$(date -u +%Y%m%dT%H%M%SZ); PLURNK_SERVICE_FILES_ITEMS=0 node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-concurrency=8 --test-timeout=30000 test/intg/*.test.ts && node ../scripts/reclaim-green-run.mjs core",
-    "test:mcp:dogfood": "PLURNK_TEST_MCP_DOGFOOD=1 node --conditions=plurnk-dev --import=./test/setup.ts --env-file-if-exists=.env.defaults --test --test-concurrency=1 --test-timeout=120000 test/intg/mcp-agui-composition.test.ts",
-    "test:a2a:tck": "node scripts/a2a-tck.mjs",
     "test:live": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/live.mjs",
     "test:live:specimen": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/live.mjs --specimen",
     "test:live:zeropin": "PLURNK_ZERO_PIN=1 npm run test:live",
     "test:demo": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/demo.mjs",
     "test:demo:specimen": "bash ../scripts/operator-environment.sh node --conditions=plurnk-dev scripts/demo.mjs --specimen",
     "test:demo:zeropin": "PLURNK_ZERO_PIN=1 npm run test:demo",
+    "tier:history": "node --conditions=plurnk-dev scripts/tier-history.mjs",
     "test:benchlet": "bash ../scripts/operator-environment.sh node scripts/benchlet.mjs",
     "fixture:demo": "node --conditions=plurnk-dev test/demo/_fixture.ts",
     "test": "npm run test:lint && npm run test:unit && npm run test:intg",
@@ -90,17 +89,17 @@
     "@opentelemetry/sdk-metrics": "^2.12.0",
     "@opentelemetry/sdk-trace-base": "^2.12.0",
     "@plurnk/plurnk-a2a": "3.1.1",
-    "@plurnk/plurnk-agui": "3.0.0",
-    "@plurnk/plurnk-contracts": "3.2.0",
+    "@plurnk/plurnk-agui": "3.1.0",
+    "@plurnk/plurnk-contracts": "3.3.0",
     "@plurnk/plurnk-parser": "3.0.3",
-    "@plurnk/plurnk-schedule": "3.0.1",
+    "@plurnk/plurnk-schedule": "3.0.2",
     "@plurnk/plurnk-skills": "3.0.1",
-    "@plurnk/plurnk-execs": "3.1.1",
+    "@plurnk/plurnk-execs": "3.2.0",
     "@plurnk/plurnk-execs-common": "2.0.2",
     "@plurnk/plurnk-execs-jq": "2.0.2",
     "@plurnk/plurnk-execs-sqlite": "2.0.2",
     "@plurnk/plurnk-hooks": "2.0.1",
-    "@plurnk/plurnk-mcp": "3.0.1",
+    "@plurnk/plurnk-mcp": "3.1.0",
     "@plurnk/plurnk-meta": "2.1.1",
     "@plurnk/plurnk-agent-plugins": "2.0.0",
     "@plurnk/plurnk-agent-skills": "2.0.1",
@@ -146,9 +145,9 @@
     "@plurnk/plurnk-mimetypes-text-markdown": "2.0.1",
     "@plurnk/plurnk-mimetypes-text-plain": "2.0.1",
     "@plurnk/plurnk-models": "3.0.1",
-    "@plurnk/plurnk-modules": "3.1.0",
+    "@plurnk/plurnk-modules": "3.2.0",
     "@plurnk/plurnk-providers": "3.0.2",
-    "@plurnk/plurnk-schemes": "3.1.1",
+    "@plurnk/plurnk-schemes": "3.2.0",
     "@plurnk/plurnk-schemes-http": "2.0.1",
     "@possumtech/sqlrite": "^6.6.1",
     "diff": "^9.0.0",
@@ -172,5 +171,5 @@
     "url": "git+https://github.com/plurnk/plurnk-service.git",
     "directory": "plurnk-core"
   },
-  "gitHead": "f96502a26d62a6f87b22950a9e2006348ac8a6bc"
+  "gitHead": "1dcf640b6bad0f5972443dd59354a5fc094acf46"
 }