@psiclawops/hypermem 0.5.0 → 0.5.2

package/dist/fact-store.js

@@ -0,0 +1,236 @@
+/**
+ * hypermem Fact Store
+ *
+ * CRUD operations for facts (extracted knowledge that spans sessions).
+ * Facts live in the central library DB, tagged by agent_id.
+ * Facts have scope (agent/session/user), confidence, and decay.
+ */
+import { isSafeForSharedVisibility, requiresScan } from './secret-scanner.js';
+function nowIso() {
+    return new Date().toISOString();
+}
+function parseFactRow(row) {
+    return {
+        id: row.id,
+        agentId: row.agent_id,
+        scope: row.scope,
+        domain: row.domain || null,
+        content: row.content,
+        confidence: row.confidence,
+        visibility: row.visibility || 'private',
+        sourceType: row.source_type || 'conversation',
+        sourceSessionKey: row.source_session_key || null,
+        sourceRef: row.source_ref || null,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        expiresAt: row.expires_at || null,
+        supersededBy: row.superseded_by || null,
+        decayScore: row.decay_score,
+    };
+}
+export class FactStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Add a new fact. Checks for duplicates by content.
+     */
+    addFact(agentId, content, opts) {
+        const now = nowIso();
+        const scope = opts?.scope || 'agent';
+        // KL-01: global scope is not yet supported — write gate is deferred to 1.0.
+        // Log a warning if a caller somehow passes scope='global' (e.g. direct DB
+        // access bypassing TypeScript types or a future FactScope addition).
+        if (scope === 'global') {
+            console.warn(`[hypermem] WARNING: agent '${agentId}' attempted to write a fact with scope='global'. ` +
+                `Global-scope facts are not yet gated — this write will succeed but may propagate ` +
+                `to all agents sharing library.db. See KL-01 in KNOWN_LIMITATIONS.md.`);
+        }
+        // Secret gate: if requested visibility is shared, verify content is clean.
+        // Downgrade to 'private' rather than reject — matches episode-store pattern.
+        let resolvedVisibility = opts?.visibility || 'private';
+        if (requiresScan(resolvedVisibility) && !isSafeForSharedVisibility(content)) {
+            resolvedVisibility = 'private';
+        }
+        // Check for exact duplicate
+        const existing = this.db.prepare(`
+      SELECT * FROM facts WHERE agent_id = ? AND content = ? AND scope = ?
+    `).get(agentId, content, scope);
+        if (existing) {
+            this.db.prepare(`
+        UPDATE facts SET confidence = MAX(confidence, ?), updated_at = ? WHERE id = ?
+      `).run(opts?.confidence || 1.0, now, existing.id);
+            return parseFactRow({ ...existing, updated_at: now });
+        }
+        const result = this.db.prepare(`
+      INSERT INTO facts (agent_id, scope, domain, content, confidence,
+        visibility, source_type, source_session_key, source_ref,
+        created_at, updated_at, expires_at, decay_score)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0.0)
+    `).run(agentId, scope, opts?.domain || null, content, opts?.confidence || 1.0, resolvedVisibility, opts?.sourceType || 'conversation', opts?.sourceSessionKey || null, opts?.sourceRef || null, now, now, opts?.expiresAt || null);
+        const id = Number(result.lastInsertRowid);
+        return {
+            id,
+            agentId,
+            scope,
+            domain: opts?.domain || null,
+            content,
+            confidence: opts?.confidence || 1.0,
+            visibility: resolvedVisibility,
+            sourceType: opts?.sourceType || 'conversation',
+            sourceSessionKey: opts?.sourceSessionKey || null,
+            sourceRef: opts?.sourceRef || null,
+            createdAt: now,
+            updatedAt: now,
+            expiresAt: opts?.expiresAt || null,
+            supersededBy: null,
+            decayScore: 0,
+        };
+    }
+    /**
+     * Get active facts for an agent.
+     */
+    getActiveFacts(agentId, opts) {
+        let sql = `
+      SELECT * FROM facts
+      WHERE agent_id = ?
+      AND superseded_by IS NULL
+      AND (expires_at IS NULL OR expires_at > datetime('now'))
+      AND decay_score < 0.8
+    `;
+        const params = [agentId];
+        if (opts?.scope) {
+            sql += ' AND scope = ?';
+            params.push(opts.scope);
+        }
+        if (opts?.domain) {
+            sql += ' AND domain = ?';
+            params.push(opts.domain);
+        }
+        if (opts?.minConfidence) {
+            sql += ' AND confidence >= ?';
+            params.push(opts.minConfidence);
+        }
+        sql += ' ORDER BY confidence DESC, decay_score ASC';
+        if (opts?.limit) {
+            sql += ' LIMIT ?';
+            params.push(opts.limit);
+        }
+        const rows = this.db.prepare(sql).all(...params);
+        return rows.map(parseFactRow);
+    }
+    /**
+     * Full-text search facts.
+     */
+    searchFacts(query, opts) {
+        const limit = opts?.limit || 20;
+        const hasFilters = !!(opts?.agentId || opts?.domain || opts?.visibility);
+        const innerLimit = hasFilters ? limit * 4 : limit;
+        // Two-phase: FTS in subquery, then filter on small set.  See hybrid-retrieval.ts.
+        let sql = `
+      SELECT f.* FROM (
+        SELECT rowid, rank FROM facts_fts WHERE facts_fts MATCH ? ORDER BY rank LIMIT ?
+      ) sub
+      JOIN facts f ON f.id = sub.rowid
+      WHERE f.superseded_by IS NULL
+      AND f.decay_score < 0.8
+    `;
+        const params = [query, innerLimit];
+        if (opts?.agentId) {
+            sql += ' AND f.agent_id = ?';
+            params.push(opts.agentId);
+        }
+        if (opts?.domain) {
+            sql += ' AND f.domain = ?';
+            params.push(opts.domain);
+        }
+        if (opts?.visibility) {
+            sql += ' AND f.visibility = ?';
+            params.push(opts.visibility);
+        }
+        sql += ' ORDER BY sub.rank LIMIT ?';
+        params.push(limit);
+        const rows = this.db.prepare(sql).all(...params);
+        return rows.map(parseFactRow);
+    }
+    /**
+     * Mark an old fact as superseded by a new one.
+     *
+     * Sets `superseded_by` on the old fact row so it is excluded from active
+     * retrieval queries (both FTS and KNN paths check `superseded_by IS NULL`).
+     * Returns false if the fact is already superseded or does not exist.
+     */
+    markSuperseded(oldFactId, newFactId) {
+        const now = new Date().toISOString();
+        const result = this.db
+            .prepare(`
+        UPDATE facts
+        SET superseded_by = ?, updated_at = ?
+        WHERE id = ? AND superseded_by IS NULL
+      `)
+            .run(newFactId, now, oldFactId);
+        return result.changes > 0;
+    }
+    /**
+     * Find the most recent active fact for an agent whose content is a near-duplicate
+     * of the given content (same first 100 chars, different suffix, or same domain+topic).
+     * Used by the background indexer to detect supersedes relationships.
+     *
+     * Returns the existing fact id if a candidate is found, otherwise null.
+     */
+    findSupersedableByContent(agentId, content, opts) {
+        // Look for active facts from the same agent whose content starts with the
+        // same 60-character prefix (covers rephrased facts about the same topic).
+        const prefix = content.slice(0, 60);
+        const params = [agentId, `${prefix}%`];
+        let sql = `
+      SELECT id FROM facts
+      WHERE agent_id = ?
+        AND content LIKE ?
+        AND content != ?
+        AND superseded_by IS NULL
+    `;
+        params.push(content);
+        if (opts?.domain) {
+            sql += ' AND domain = ?';
+            params.push(opts.domain);
+        }
+        sql += ' ORDER BY created_at DESC LIMIT 1';
+        const row = this.db.prepare(sql).get(...params);
+        return row?.id ?? null;
+    }
+    /**
+     * Decay all facts by a fixed rate.
+     */
+    decayFacts(agentId, decayRate = 0.01) {
+        const result = this.db.prepare(`
+      UPDATE facts
+      SET decay_score = MIN(decay_score + ?, 1.0), updated_at = ?
+      WHERE agent_id = ? AND decay_score < 1.0
+    `).run(decayRate, nowIso(), agentId);
+        return result.changes;
+    }
+    /**
+     * Remove expired and fully decayed facts.
+     */
+    pruneFacts(agentId) {
+        const result = this.db.prepare(`
+      DELETE FROM facts
+      WHERE agent_id = ?
+      AND (
+        (expires_at IS NOT NULL AND expires_at < datetime('now'))
+        OR decay_score >= 1.0
+      )
+    `).run(agentId);
+        return result.changes;
+    }
+    /**
+     * Get fact count for an agent.
+     */
+    getFactCount(agentId) {
+        const row = this.db.prepare('SELECT COUNT(*) AS count FROM facts WHERE agent_id = ?').get(agentId);
+        return row.count;
+    }
+}
+//# sourceMappingURL=fact-store.js.map

package/dist/fleet-store.d.ts

@@ -0,0 +1,144 @@
+/**
+ * hypermem Fleet Registry Store
+ *
+ * Agent roster, org structure, roles, capabilities.
+ * Lives in the central library DB.
+ * The operational map of the fleet.
+ */
+import type { DatabaseSync } from 'node:sqlite';
+export interface AgentCapability {
+    capType: 'skill' | 'tool' | 'mcp_server';
+    name: string;
+    version?: string;
+    source?: string;
+    config?: Record<string, unknown>;
+    status: string;
+    lastVerified?: string;
+}
+export interface FleetAgent {
+    id: string;
+    displayName: string;
+    tier: string;
+    orgId: string | null;
+    reportsTo: string | null;
+    domains: string[];
+    sessionKeys: string[];
+    status: string;
+    lastSeen: string | null;
+    createdAt: string;
+    updatedAt: string;
+    metadata: Record<string, unknown> | null;
+    capabilities: AgentCapability[] | null;
+}
+export interface FleetOrg {
+    id: string;
+    name: string;
+    leadAgentId: string | null;
+    mission: string | null;
+    createdAt: string;
+}
+export declare class FleetStore {
+    private readonly db;
+    constructor(db: DatabaseSync);
+    /**
+     * Register or update an agent.
+     */
+    upsertAgent(id: string, data: {
+        displayName?: string;
+        tier?: string;
+        orgId?: string;
+        reportsTo?: string;
+        domains?: string[];
+        sessionKeys?: string[];
+        status?: string;
+        metadata?: Record<string, unknown>;
+    }): FleetAgent;
+    /**
+     * Get an agent by ID.
+     */
+    getAgent(id: string): FleetAgent | null;
+    /**
+     * List all agents, optionally filtered.
+     */
+    listAgents(opts?: {
+        tier?: string;
+        orgId?: string;
+        status?: string;
+    }): FleetAgent[];
+    /**
+     * Update agent status and last_seen.
+     */
+    heartbeat(agentId: string, status?: string): void;
+    /**
+     * Find agents by domain.
+     */
+    findByDomain(domain: string): FleetAgent[];
+    /**
+     * Register or update an org.
+     */
+    upsertOrg(id: string, data: {
+        name: string;
+        leadAgentId?: string;
+        mission?: string;
+    }): FleetOrg;
+    /**
+     * Get an org by ID.
+     */
+    getOrg(id: string): FleetOrg | null;
+    /**
+     * List all orgs.
+     */
+    listOrgs(): FleetOrg[];
+    /**
+     * Get all agents in an org.
+     */
+    getOrgMembers(orgId: string): FleetAgent[];
+    /**
+     * Register or update a capability for an agent.
+     */
+    upsertCapability(agentId: string, cap: {
+        capType: AgentCapability['capType'];
+        name: string;
+        version?: string;
+        source?: string;
+        config?: Record<string, unknown>;
+        status?: string;
+    }): AgentCapability;
+    /**
+     * Bulk-sync capabilities for an agent (replace all of a given type).
+     */
+    syncCapabilities(agentId: string, capType: AgentCapability['capType'], caps: Array<{
+        name: string;
+        version?: string;
+        source?: string;
+        config?: Record<string, unknown>;
+    }>): void;
+    /**
+     * Get a specific capability.
+     */
+    getCapability(agentId: string, capType: string, name: string): AgentCapability | null;
+    /**
+     * List capabilities for an agent, optionally filtered by type.
+     */
+    getAgentCapabilities(agentId: string, capType?: string): AgentCapability[];
+    /**
+     * Find agents that have a specific capability.
+     */
+    findByCapability(capType: string, name: string): FleetAgent[];
+    /**
+     * Find agents that have ANY of the given capabilities.
+     */
+    findByAnyCapability(caps: Array<{
+        capType: string;
+        name: string;
+    }>): FleetAgent[];
+    /**
+     * Remove a capability from an agent.
+     */
+    removeCapability(agentId: string, capType: string, name: string): void;
+    /**
+     * Sync the denormalized capabilities JSON on fleet_agents.
+     */
+    private _syncCapabilitiesJson;
+}
+//# sourceMappingURL=fleet-store.d.ts.map

package/dist/fleet-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-store.d.ts","sourceRoot":"","sources":["../src/fleet-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMhD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,YAAY,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,YAAY,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AA0CD,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,YAAY;IAI7C;;OAEG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,UAAU;IAyDd;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAOvC;;OAEG;IACH,UAAU,CAAC,IAAI,CAAC,EAAE;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,UAAU,EAAE;IAuBhB;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAiB,GAAG,IAAI;IAO3D;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE;IAU1C;;OAEG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,QAAQ;IAeZ;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAOnC;;OAEG;IACH,QAAQ,IAAI,QAAQ,EAAE;IAOtB;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE;IAU1C;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE;QACrC,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,eAAe;IAgCnB;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC;QACjF,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC,GAAG,IAAI;IAyBT;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAQrF;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE;IAe1E;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE;IAW7D;;OAEG;IACH,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,UAAU,EAAE;IAgBjF;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAWtE;;OAEG;IACH,OAAO,CAAC,qBAAqB;CAQ9B"}

package/dist/fleet-store.js

@@ -0,0 +1,276 @@
+/**
+ * hypermem Fleet Registry Store
+ *
+ * Agent roster, org structure, roles, capabilities.
+ * Lives in the central library DB.
+ * The operational map of the fleet.
+ */
+function nowIso() {
+    return new Date().toISOString();
+}
+function parseAgentRow(row) {
+    return {
+        id: row.id,
+        displayName: row.display_name,
+        tier: row.tier,
+        orgId: row.org_id || null,
+        reportsTo: row.reports_to || null,
+        domains: row.domains ? JSON.parse(row.domains) : [],
+        sessionKeys: row.session_keys ? JSON.parse(row.session_keys) : [],
+        status: row.status,
+        lastSeen: row.last_seen || null,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        metadata: row.metadata ? JSON.parse(row.metadata) : null,
+        capabilities: row.capabilities ? JSON.parse(row.capabilities) : null,
+    };
+}
+function parseCapabilityRow(row) {
+    return {
+        capType: row.cap_type,
+        name: row.name,
+        version: row.version || undefined,
+        source: row.source || undefined,
+        config: row.config ? JSON.parse(row.config) : undefined,
+        status: row.status,
+        lastVerified: row.last_verified || undefined,
+    };
+}
+function parseOrgRow(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        leadAgentId: row.lead_agent_id || null,
+        mission: row.mission || null,
+        createdAt: row.created_at,
+    };
+}
+export class FleetStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    // ── Agents ──────────────────────────────────────────────────
+    /**
+     * Register or update an agent.
+     */
+    upsertAgent(id, data) {
+        const now = nowIso();
+        const existing = this.db.prepare('SELECT * FROM fleet_agents WHERE id = ?')
+            .get(id);
+        if (existing) {
+            this.db.prepare(`
+        UPDATE fleet_agents SET
+          display_name = COALESCE(?, display_name),
+          tier = COALESCE(?, tier),
+          org_id = COALESCE(?, org_id),
+          reports_to = COALESCE(?, reports_to),
+          domains = COALESCE(?, domains),
+          session_keys = COALESCE(?, session_keys),
+          status = COALESCE(?, status),
+          metadata = COALESCE(?, metadata),
+          last_seen = ?,
+          updated_at = ?
+        WHERE id = ?
+      `).run(data.displayName || null, data.tier || null, data.orgId || null, data.reportsTo || null, data.domains ? JSON.stringify(data.domains) : null, data.sessionKeys ? JSON.stringify(data.sessionKeys) : null, data.status || null, data.metadata ? JSON.stringify(data.metadata) : null, now, now, id);
+        }
+        else {
+            this.db.prepare(`
+        INSERT INTO fleet_agents (id, display_name, tier, org_id, reports_to,
+          domains, session_keys, status, last_seen, created_at, updated_at, metadata)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `).run(id, data.displayName || id, data.tier || 'unknown', data.orgId || null, data.reportsTo || null, data.domains ? JSON.stringify(data.domains) : '[]', data.sessionKeys ? JSON.stringify(data.sessionKeys) : '[]', data.status || 'active', now, now, now, data.metadata ? JSON.stringify(data.metadata) : null);
+        }
+        return this.getAgent(id);
+    }
+    /**
+     * Get an agent by ID.
+     */
+    getAgent(id) {
+        const row = this.db.prepare('SELECT * FROM fleet_agents WHERE id = ?')
+            .get(id);
+        return row ? parseAgentRow(row) : null;
+    }
+    /**
+     * List all agents, optionally filtered.
+     */
+    listAgents(opts) {
+        let sql = 'SELECT * FROM fleet_agents WHERE 1=1';
+        const params = [];
+        if (opts?.tier) {
+            sql += ' AND tier = ?';
+            params.push(opts.tier);
+        }
+        if (opts?.orgId) {
+            sql += ' AND org_id = ?';
+            params.push(opts.orgId);
+        }
+        if (opts?.status) {
+            sql += ' AND status = ?';
+            params.push(opts.status);
+        }
+        sql += ' ORDER BY tier, id';
+        const rows = this.db.prepare(sql).all(...params);
+        return rows.map(parseAgentRow);
+    }
+    /**
+     * Update agent status and last_seen.
+     */
+    heartbeat(agentId, status = 'active') {
+        const now = nowIso();
+        this.db.prepare('UPDATE fleet_agents SET status = ?, last_seen = ?, updated_at = ? WHERE id = ?').run(status, now, now, agentId);
+    }
+    /**
+     * Find agents by domain.
+     */
+    findByDomain(domain) {
+        const rows = this.db.prepare("SELECT * FROM fleet_agents WHERE domains LIKE ? AND status = 'active'").all(`%"${domain}"%`);
+        return rows.map(parseAgentRow);
+    }
+    // ── Orgs ────────────────────────────────────────────────────
+    /**
+     * Register or update an org.
+     */
+    upsertOrg(id, data) {
+        const now = nowIso();
+        this.db.prepare(`
+      INSERT INTO fleet_orgs (id, name, lead_agent_id, mission, created_at)
+      VALUES (?, ?, ?, ?, ?)
+      ON CONFLICT(id) DO UPDATE SET
+        name = excluded.name,
+        lead_agent_id = COALESCE(excluded.lead_agent_id, lead_agent_id),
+        mission = COALESCE(excluded.mission, mission)
+    `).run(id, data.name, data.leadAgentId || null, data.mission || null, now);
+        return this.getOrg(id);
+    }
+    /**
+     * Get an org by ID.
+     */
+    getOrg(id) {
+        const row = this.db.prepare('SELECT * FROM fleet_orgs WHERE id = ?')
+            .get(id);
+        return row ? parseOrgRow(row) : null;
+    }
+    /**
+     * List all orgs.
+     */
+    listOrgs() {
+        const rows = this.db.prepare('SELECT * FROM fleet_orgs ORDER BY name')
+            .all();
+        return rows.map(parseOrgRow);
+    }
+    /**
+     * Get all agents in an org.
+     */
+    getOrgMembers(orgId) {
+        const rows = this.db.prepare("SELECT * FROM fleet_agents WHERE org_id = ? ORDER BY tier, id").all(orgId);
+        return rows.map(parseAgentRow);
+    }
+    // ── Capabilities ────────────────────────────────────────────
+    /**
+     * Register or update a capability for an agent.
+     */
+    upsertCapability(agentId, cap) {
+        const now = nowIso();
+        this.db.prepare(`
+      INSERT INTO agent_capabilities (agent_id, cap_type, name, version, source, config, status, last_verified, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      ON CONFLICT(agent_id, cap_type, name) DO UPDATE SET
+        version = COALESCE(excluded.version, version),
+        source = COALESCE(excluded.source, source),
+        config = COALESCE(excluded.config, config),
+        status = excluded.status,
+        last_verified = excluded.last_verified,
+        updated_at = excluded.updated_at
+    `).run(agentId, cap.capType, cap.name, cap.version || null, cap.source || null, cap.config ? JSON.stringify(cap.config) : null, cap.status || 'active', now, now, now);
+        // Also update the denormalized JSON on fleet_agents
+        this._syncCapabilitiesJson(agentId);
+        return this.getCapability(agentId, cap.capType, cap.name);
+    }
+    /**
+     * Bulk-sync capabilities for an agent (replace all of a given type).
+     */
+    syncCapabilities(agentId, capType, caps) {
+        const now = nowIso();
+        const capNames = caps.map(c => c.name);
+        // Mark missing ones as removed
+        const existing = this.db.prepare('SELECT name FROM agent_capabilities WHERE agent_id = ? AND cap_type = ? AND status = ?').all(agentId, capType, 'active');
+        for (const row of existing) {
+            if (!capNames.includes(row.name)) {
+                this.db.prepare('UPDATE agent_capabilities SET status = ?, updated_at = ? WHERE agent_id = ? AND cap_type = ? AND name = ?').run('removed', now, agentId, capType, row.name);
+            }
+        }
+        // Upsert current ones
+        for (const cap of caps) {
+            this.upsertCapability(agentId, { capType, ...cap });
+        }
+        this._syncCapabilitiesJson(agentId);
+    }
+    /**
+     * Get a specific capability.
+     */
+    getCapability(agentId, capType, name) {
+        const row = this.db.prepare('SELECT * FROM agent_capabilities WHERE agent_id = ? AND cap_type = ? AND name = ?').get(agentId, capType, name);
+        return row ? parseCapabilityRow(row) : null;
+    }
+    /**
+     * List capabilities for an agent, optionally filtered by type.
+     */
+    getAgentCapabilities(agentId, capType) {
+        let sql = 'SELECT * FROM agent_capabilities WHERE agent_id = ? AND status = ?';
+        const params = [agentId, 'active'];
+        if (capType) {
+            sql += ' AND cap_type = ?';
+            params.push(capType);
+        }
+        sql += ' ORDER BY cap_type, name';
+        const rows = this.db.prepare(sql).all(...params);
+        return rows.map(parseCapabilityRow);
+    }
+    /**
+     * Find agents that have a specific capability.
+     */
+    findByCapability(capType, name) {
+        const rows = this.db.prepare(`
+      SELECT fa.* FROM fleet_agents fa
+      INNER JOIN agent_capabilities ac ON ac.agent_id = fa.id
+      WHERE ac.cap_type = ? AND ac.name = ? AND ac.status = 'active' AND fa.status = 'active'
+      ORDER BY fa.tier, fa.id
+    `).all(capType, name);
+        return rows.map(parseAgentRow);
+    }
+    /**
+     * Find agents that have ANY of the given capabilities.
+     */
+    findByAnyCapability(caps) {
+        if (caps.length === 0)
+            return [];
+        const conditions = caps.map(() => '(ac.cap_type = ? AND ac.name = ?)').join(' OR ');
+        const params = caps.flatMap(c => [c.capType, c.name]);
+        const rows = this.db.prepare(`
+      SELECT DISTINCT fa.* FROM fleet_agents fa
+      INNER JOIN agent_capabilities ac ON ac.agent_id = fa.id
+      WHERE (${conditions}) AND ac.status = 'active' AND fa.status = 'active'
+      ORDER BY fa.tier, fa.id
+    `).all(...params);
+        return rows.map(parseAgentRow);
+    }
+    /**
+     * Remove a capability from an agent.
+     */
+    removeCapability(agentId, capType, name) {
+        const now = nowIso();
+        this.db.prepare('UPDATE agent_capabilities SET status = ?, updated_at = ? WHERE agent_id = ? AND cap_type = ? AND name = ?').run('removed', now, agentId, capType, name);
+        this._syncCapabilitiesJson(agentId);
+    }
+    // ── Internal ────────────────────────────────────────────────
+    /**
+     * Sync the denormalized capabilities JSON on fleet_agents.
+     */
+    _syncCapabilitiesJson(agentId) {
+        const caps = this.getAgentCapabilities(agentId);
+        const now = nowIso();
+        this.db.prepare('UPDATE fleet_agents SET capabilities = ?, updated_at = ? WHERE id = ?').run(JSON.stringify(caps), now, agentId);
+    }
+}
+//# sourceMappingURL=fleet-store.js.map