@runweave/server-darwin-arm64 0.1.2 → 0.1.4

package/payload/backend/build-info.json

@@ -1,8 +1,8 @@
 {
   "version": "0.1.0",
-  "buildId": "20261101T021456470Z-f96ecff6",
-  "sourceRevision": "f96ecff6b81b7dfd1d421a0bc3dada24bf1d5fa1",
+  "buildId": "20261107T223311713Z-f6afc191",
+  "sourceRevision": "f6afc191b5f9be76aa35a6ee494a0d752c21af08",
   "sourceDirty": false,
-  "builtAt": "2026-11-01T02:14:56.470Z",
-  "contentSha256": "8453deaa90fe0f0959de9b6f226f0d52143873d0047555087bdc426ee66f6667"
+  "builtAt": "2026-11-07T22:33:11.713Z",
+  "contentSha256": "87b9fbd7d5481a672f647962e69a983022f0247ca266b3e376d83869824a342f"
 }

package/payload/backend/dev-resources/control.cjs

@@ -8393,6 +8393,7 @@ __export(src_exports, {
   APP_SERVER_CONFIGURATION_COMPATIBILITY: () => APP_SERVER_CONFIGURATION_COMPATIBILITY,
   BACKEND_CORE_CONFIGURATION_DOMAINS: () => BACKEND_CORE_CONFIGURATION_DOMAINS,
   CONFIGURATION_COMPATIBILITY: () => CONFIGURATION_COMPATIBILITY,
+  CONFIGURATION_VERSION_MIGRATIONS: () => CONFIGURATION_VERSION_MIGRATIONS,
   ConfigurationDomain: () => ConfigurationDomain,
   ConfigurationError: () => ConfigurationError,
   ConfigurationRuntime: () => ConfigurationRuntime,
@@ -8416,6 +8417,7 @@ __export(src_exports, {
   importEnvironment: () => importEnvironment,
   initializeConfiguration: () => initializeConfiguration,
   isConfigurationContainer: () => isConfigurationContainer,
+  migrateConfigurationDocument: () => migrateConfigurationDocument,
   migrationPreview: () => migrationPreview,
   parseConfigurationYaml: () => parseConfigurationYaml,
   parseEnvironmentFile: () => parseEnvironmentFile,
@@ -8443,6 +8445,7 @@ __export(src_exports, {
   validateEnvelope: () => validateEnvelope,
   validateLocalRuntimeStatusReport: () => validateLocalRuntimeStatusReport,
   withConfigurationArguments: () => withConfigurationArguments,
+  withConfigurationUpgradeOwnership: () => withConfigurationUpgradeOwnership,
   writeResearchMcpInstallation: () => writeResearchMcpInstallation
 });
 
@@ -8610,7 +8613,39 @@ function registerStableConfigurationRoot(context) {
     (0, import_node_fs5.closeSync)(registryFd);
   }
 }
+function withUpgradeGate(context, shared, run) {
+  const directory2 = ownerDirectory(context);
+  const fd = (0, import_node_fs5.openSync)(import_node_path7.default.join(directory2, "configuration-upgrade.lock"), import_node_fs5.constants.O_CREAT | import_node_fs5.constants.O_RDWR | import_node_fs5.constants.O_NOFOLLOW, 384);
+  try {
+    assertPrivateDescriptor(fd);
+    if (!(0, import_fs_native_extensions.tryLock)(fd, 0, 0, { shared })) throw new ConfigurationError("CONFIG_UPGRADE_BUSY");
+    return run();
+  } finally {
+    (0, import_node_fs5.closeSync)(fd);
+  }
+}
+function withConfigurationUpgradeOwnership(context, run, ignoredRoles = []) {
+  return withUpgradeGate(context, false, () => {
+    const directory2 = ownerDirectory(context);
+    const held = [];
+    try {
+      for (const file of (0, import_node_fs5.readdirSync)(directory2).filter((name) => name.endsWith(".owner.lock"))) {
+        if (ignoredRoles.includes(file.replace(/\.owner\.lock$/, ""))) continue;
+        const fd = (0, import_node_fs5.openSync)(import_node_path7.default.join(directory2, file), import_node_fs5.constants.O_RDWR | import_node_fs5.constants.O_NOFOLLOW);
+        held.push(fd);
+        assertPrivateDescriptor(fd);
+        if (!(0, import_fs_native_extensions.tryLock)(fd)) throw new ConfigurationError("CONFIG_UPGRADE_CONSUMER_RUNNING", [file.replace(/\.owner\.lock$/, "")]);
+      }
+      return run();
+    } finally {
+      for (const fd of held) (0, import_node_fs5.closeSync)(fd);
+    }
+  });
+}
 function acquireConfigurationOwner(context, role) {
+  return withUpgradeGate(context, true, () => acquireOwner(context, role));
+}
+function acquireOwner(context, role) {
   const directory2 = ownerDirectory(context);
   const fd = (0, import_node_fs5.openSync)(import_node_path7.default.join(directory2, `${role}.owner.lock`), import_node_fs5.constants.O_CREAT | import_node_fs5.constants.O_RDWR | import_node_fs5.constants.O_NOFOLLOW, 384);
   let closed = false;
@@ -8631,13 +8666,6 @@ function acquireConfigurationOwner(context, role) {
   }
 }
 
-// packages/config-node/src/store.ts
-var import_node_fs6 = require("node:fs");
-var import_node_path9 = __toESM(require("node:path"), 1);
-var import_node_crypto3 = require("node:crypto");
-var import_yaml = __toESM(require_dist(), 1);
-var import_fs_native_extensions2 = require("fs-native-extensions");
-
 // packages/shared/src/configuration/fields.ts
 var CONFIGURATION_FIELDS = [
   { "path": "screenRecording.analysis.enabled", "type": "boolean", "domain": "screenRecording.analysis", "sensitive": false, "remote": false, "apply": "reload", "description": "\u542F\u7528\u672C\u673A\u5C4F\u5E55\u4E8B\u9879\u5206\u6790\uFF0C\u9ED8\u8BA4\u5173\u95ED", "environmentKeys": [], "owner": "backend/screen-recording-analysis", "scope": "instance", "storage": "settings.yaml", "default": { "value": false }, "migrationSources": ["new-field:no-legacy-source"] },
@@ -8810,14 +8838,18 @@ var CONFIGURATION_FIELDS = [
 ];
 
 // packages/shared/src/configuration/compatibility.ts
+var CONFIGURATION_SCHEMA_VERSION = 1;
+var CONFIGURATION_DOMAIN_VERSIONS = Object.fromEntries(
+  [...new Set(CONFIGURATION_FIELDS.map((field) => field.domain))].map((domain) => [domain, 1])
+);
 var CONFIGURATION_COMPATIBILITY = {
   format: "runweave-yaml",
-  schemaVersions: [1],
-  domainVersions: Object.fromEntries([...new Set(CONFIGURATION_FIELDS.map((field) => field.domain))].map((domain) => [domain, [1]]))
+  schemaVersions: [CONFIGURATION_SCHEMA_VERSION],
+  domainVersions: Object.fromEntries(Object.entries(CONFIGURATION_DOMAIN_VERSIONS).map(([domain, version]) => [domain, [version]]))
 };
 var APP_SERVER_CONFIGURATION_COMPATIBILITY = {
   ...CONFIGURATION_COMPATIBILITY,
-  domainVersions: Object.fromEntries(["appServer", "agents.codex", "agents.traex"].map((domain) => [domain, [1]]))
+  domainVersions: Object.fromEntries(["appServer", "agents.codex", "agents.traex"].map((domain) => [domain, [CONFIGURATION_DOMAIN_VERSIONS[domain]]]))
 };
 function supportsConfiguration(target, value) {
   if (!target || typeof target !== "object") return false;
@@ -8893,6 +8925,66 @@ function configurationPathSegment(key) {
   return key.replace(/\\/g, "\\\\").replace(/\./g, "\\.");
 }
 
+// packages/config-node/src/version-migrations.ts
+var CONFIGURATION_VERSION_MIGRATIONS = [];
+function migrateConfigurationDocument(document) {
+  const steps = [];
+  const ids = /* @__PURE__ */ new Set();
+  const edges = /* @__PURE__ */ new Set();
+  for (const step of CONFIGURATION_VERSION_MIGRATIONS) {
+    const edge = `${step.domain ?? "$schema"}:${step.from}`;
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]+$/.test(step.id) || ids.has(step.id) || edges.has(edge) || !Number.isSafeInteger(step.from) || step.from < 1 || step.to !== step.from + 1 || step.domain !== void 0 && !Object.hasOwn(CONFIGURATION_DOMAIN_VERSIONS, step.domain) || step.to > (step.domain ? CONFIGURATION_DOMAIN_VERSIONS[step.domain] : CONFIGURATION_SCHEMA_VERSION)) {
+      throw new ConfigurationError("CONFIG_UPGRADE_REGISTRY_INVALID");
+    }
+    ids.add(step.id);
+    edges.add(edge);
+  }
+  const advance = (domain, target) => {
+    const versionPath = domain ? ["domainVersions", domain] : ["schemaVersion"];
+    let version = Number(document.getIn(versionPath) ?? 1);
+    if (version > target) throw new ConfigurationError("CONFIG_UPGRADE_FUTURE_VERSION", [domain ?? "schemaVersion"]);
+    while (version < target) {
+      const step = CONFIGURATION_VERSION_MIGRATIONS.find((item) => item.domain === domain && item.from === version);
+      if (!step) throw new ConfigurationError("CONFIG_UPGRADE_PATH_MISSING", [domain ?? "schemaVersion"]);
+      const before = document.toJS();
+      try {
+        step.migrate(document);
+      } catch {
+        throw new ConfigurationError("CONFIG_UPGRADE_STEP_FAILED", [step.id]);
+      }
+      const after = document.toJS();
+      for (const key of ["schemaVersion", "revision", "kind", "instanceId", "domainVersions", "migrations"]) {
+        if (JSON.stringify(before[key]) !== JSON.stringify(after[key])) throw new ConfigurationError("CONFIG_UPGRADE_METADATA_CHANGED", [step.id]);
+      }
+      if (domain) {
+        const strip = (value) => {
+          const copy = structuredClone(value);
+          const parts = domain.split(".");
+          let parent = copy;
+          for (const key of parts.slice(0, -1)) parent = parent[key] ?? {};
+          delete parent[parts.at(-1)];
+          return copy;
+        };
+        if (JSON.stringify(strip(before)) !== JSON.stringify(strip(after))) throw new ConfigurationError("CONFIG_UPGRADE_SCOPE_CHANGED", [step.id]);
+      }
+      document.setIn(versionPath, step.to);
+      document.setIn(["migrations", `version:${step.id}`], { from: step.from, to: step.to, domain: domain ?? "$schema" });
+      steps.push(step.id);
+      version = step.to;
+    }
+  };
+  advance(void 0, CONFIGURATION_SCHEMA_VERSION);
+  for (const [domain, target] of Object.entries(CONFIGURATION_DOMAIN_VERSIONS)) advance(domain, target);
+  return steps;
+}
+
+// packages/config-node/src/store.ts
+var import_node_fs6 = require("node:fs");
+var import_node_path9 = __toESM(require("node:path"), 1);
+var import_node_crypto3 = require("node:crypto");
+var import_yaml = __toESM(require_dist(), 1);
+var import_fs_native_extensions2 = require("fs-native-extensions");
+
 // packages/config-node/src/validation.ts
 var import_node_path8 = __toESM(require("node:path"), 1);
 var patterns = CONFIGURATION_FIELDS.map((field) => ({ field, segments: field.path.replace(/\[\]/g, ".#").split(".") }));
@@ -8912,12 +9004,14 @@ function isConfigurationContainer(key, array = false) {
   });
 }
 function domainForPath(key) {
+  const declared = Object.keys(CONFIGURATION_DOMAIN_VERSIONS).find((domain) => key === domain || key.startsWith(`${domain}.`));
+  if (declared) return declared;
   const parts = key.split(".");
   return ["backend", "services", "desktop", "agents"].includes(parts[0]) ? parts.slice(0, 2).join(".") : parts[0];
 }
 function validateEnvelope(value, context) {
   if (!isConfigurationObject(value)) throw new ConfigurationError("CONFIG_ROOT_INVALID");
-  if (value.schemaVersion !== 1) throw new ConfigurationError("CONFIG_SCHEMA_UNSUPPORTED");
+  if (value.schemaVersion !== CONFIGURATION_SCHEMA_VERSION) throw new ConfigurationError("CONFIG_SCHEMA_UNSUPPORTED");
   if (!Number.isSafeInteger(value.revision) || Number(value.revision) < 0) throw new ConfigurationError("CONFIG_REVISION_INVALID");
   if (value.kind !== context.kind || value.instanceId !== context.instanceId) throw new ConfigurationError("CONFIG_IDENTITY_MISMATCH");
   if (!isConfigurationObject(value.domainVersions) || !isConfigurationObject(value.migrations)) throw new ConfigurationError("CONFIG_METADATA_INVALID");
@@ -8939,7 +9033,7 @@ function validateDomains(value, context) {
     if (["schemaVersion", "revision", "kind", "instanceId", "domainVersions", "migrations"].includes(key.split(".")[0])) continue;
     const domain = domainForPath(key);
     if (domain === "agents.team") continue;
-    if (value.domainVersions[domain] !== void 0 && value.domainVersions[domain] !== 1) {
+    if (value.domainVersions[domain] !== void 0 && value.domainVersions[domain] !== CONFIGURATION_DOMAIN_VERSIONS[domain]) {
       issue(key, "CONFIG_DOMAIN_VERSION_UNSUPPORTED");
       continue;
     }
@@ -9014,7 +9108,7 @@ function validateDomains(value, context) {
   }
   for (const [domain, version] of Object.entries(value.domainVersions)) {
     if (domain === "agents.team") continue;
-    if (version !== 1 && !result[domain]) result[domain] = [{ path: domain, code: "CONFIG_DOMAIN_VERSION_UNSUPPORTED" }];
+    if (version !== CONFIGURATION_DOMAIN_VERSIONS[domain] && !result[domain]) result[domain] = [{ path: domain, code: "CONFIG_DOMAIN_VERSION_UNSUPPORTED" }];
   }
   return result;
 }
@@ -9119,7 +9213,7 @@ var ConfigurationStore = class {
       (0, import_node_fs6.closeSync)(fd);
     }
   }
-  publish(document, previous) {
+  publish(document, previous, backupId) {
     const source = document.toString({ lineWidth: 0 });
     const checked = parseConfigurationYaml(source, this.context);
     registerStableConfigurationRoot(this.context);
@@ -9129,7 +9223,7 @@ var ConfigurationStore = class {
       (0, import_node_fs6.mkdirSync)(backupRoot, { recursive: true, mode: 448 });
       const backupStat = (0, import_node_fs6.lstatSync)(backupRoot);
       if (!backupStat.isDirectory() || backupStat.isSymbolicLink() || backupStat.mode & 63 || typeof process.getuid === "function" && backupStat.uid !== process.getuid()) throw new ConfigurationError("CONFIG_BACKUP_ROOT_INVALID");
-      const backup = import_node_path9.default.join(backupRoot, `${Date.now()}-${(0, import_node_crypto3.randomUUID)()}.yaml`);
+      const backup = import_node_path9.default.join(backupRoot, backupId ?? `${Date.now()}-${(0, import_node_crypto3.randomUUID)()}.yaml`);
       const fd2 = (0, import_node_fs6.openSync)(backup, "wx", 384);
       try {
         (0, import_node_fs6.writeFileSync)(fd2, previous);
@@ -9176,7 +9270,7 @@ var ConfigurationStore = class {
         const segments = configurationPathSegments(key);
         if (!segments.length || segments.some((part) => !part || unsafeKeys.has(part))) throw new ConfigurationError("CONFIG_FIELD_INVALID");
         const domain = domainForPath(key);
-        if (current.value.domainVersions[domain] !== void 0 && current.value.domainVersions[domain] !== 1) throw new ConfigurationError("CONFIG_DOMAIN_VERSION_UNSUPPORTED", [domain]);
+        if (current.value.domainVersions[domain] !== void 0 && current.value.domainVersions[domain] !== CONFIGURATION_DOMAIN_VERSIONS[domain]) throw new ConfigurationError("CONFIG_DOMAIN_VERSION_UNSUPPORTED", [domain]);
         const field = fieldForPath(key);
         if (!field && !(isConfigurationObject(value) && isConfigurationContainer(key)) && !(Array.isArray(value) && isConfigurationContainer(key, true)) && !(value === null && (isConfigurationContainer(key) || isConfigurationContainer(key, true)))) throw new ConfigurationError("CONFIG_FIELD_UNKNOWN", [key]);
         if (options.remote && (!field || !field.remote)) throw new ConfigurationError("CONFIG_FIELD_FORBIDDEN", [key]);
@@ -9186,7 +9280,7 @@ var ConfigurationStore = class {
         for (const segment of segments) target.push((0, import_yaml.isSeq)(current.document.getIn(target, true)) && /^\d+$/.test(segment) ? Number(segment) : segment);
         if (!field && value === null) current.document.deleteIn(target);
         else current.document.setIn(target, value);
-        current.document.setIn(["domainVersions", domain], 1);
+        current.document.setIn(["domainVersions", domain], CONFIGURATION_DOMAIN_VERSIONS[domain]);
         domains.add(domain);
       }
       const revision = Math.max(current.value.revision, options.minimumRevision ?? 0) + 1;
@@ -9224,7 +9318,7 @@ var ConfigurationStore = class {
     const source = readPrivateFile(this.file);
     const { value } = parseYamlDocument(source);
     if (!isConfigurationObject(value) || !Number.isSafeInteger(value.schemaVersion) || Number(value.schemaVersion) < 1) throw new ConfigurationError("CONFIG_SCHEMA_INVALID");
-    validateEnvelope({ ...value, schemaVersion: 1 }, this.context);
+    validateEnvelope({ ...value, schemaVersion: CONFIGURATION_SCHEMA_VERSION }, this.context);
     const backup = this.readBackup(id);
     const before = new Map(flattenConfiguration(value));
     const after = new Map(flattenConfiguration(backup.value));
@@ -9243,6 +9337,89 @@ var ConfigurationStore = class {
   previewRestore(id) {
     return this.prepareRestore(id).preview;
   }
+  /** Upgrade control plane only; business readers must use read(). */
+  readUpgradeSource() {
+    assertPrivateDirectory(this.context.configRoot);
+    const source = readPrivateFile(this.file);
+    const { document, value } = parseYamlDocument(source);
+    if (!isConfigurationObject(value) || !Number.isSafeInteger(value.schemaVersion) || Number(value.schemaVersion) < 1) throw new ConfigurationError("CONFIG_SCHEMA_INVALID");
+    validateEnvelope({ ...value, schemaVersion: CONFIGURATION_SCHEMA_VERSION }, this.context);
+    return { source, document, value, digest: (0, import_node_crypto3.createHash)("sha256").update(source).digest("hex") };
+  }
+  prepareUpgrade() {
+    const { source, document, value, digest } = this.readUpgradeSource();
+    const original = value;
+    const expectedDigest = digest;
+    const steps = migrateConfigurationDocument(document);
+    const next = parseConfigurationYaml(document.toString({ lineWidth: 0 }), this.context);
+    const failures = Object.values(next.issues).flat();
+    if (failures.length) throw new ConfigurationError("CONFIG_VALIDATION_FAILED", failures.map((issue) => issue.path));
+    const before = new Map(flattenConfiguration(original));
+    const after = new Map(flattenConfiguration(next.value));
+    const changedFields = [.../* @__PURE__ */ new Set([...before.keys(), ...after.keys()])].filter((key) => JSON.stringify(before.get(key)) !== JSON.stringify(after.get(key))).sort();
+    const preview = {
+      expectedRevision: original.revision,
+      expectedDigest,
+      source: { schemaVersion: original.schemaVersion, domainVersions: original.domainVersions },
+      target: { schemaVersion: next.value.schemaVersion, domainVersions: { ...CONFIGURATION_DOMAIN_VERSIONS, ...next.value.domainVersions } },
+      steps,
+      changedFields,
+      changed: changedFields.length > 0
+    };
+    return { source, document, preview };
+  }
+  previewUpgrade() {
+    return this.prepareUpgrade().preview;
+  }
+  recordUpgrade(value) {
+    const file = import_node_path9.default.join(this.context.configRoot, "config-upgrade.json");
+    const temporary = `${file}.${(0, import_node_crypto3.randomUUID)()}.tmp`;
+    const fd = (0, import_node_fs6.openSync)(temporary, "wx", 384);
+    try {
+      (0, import_node_fs6.writeFileSync)(fd, JSON.stringify(value, null, 2) + "\n");
+      (0, import_node_fs6.fsyncSync)(fd);
+    } finally {
+      (0, import_node_fs6.closeSync)(fd);
+    }
+    try {
+      (0, import_node_fs6.renameSync)(temporary, file);
+      const parent = (0, import_node_fs6.openSync)(this.context.configRoot, "r");
+      try {
+        (0, import_node_fs6.fsyncSync)(parent);
+      } finally {
+        (0, import_node_fs6.closeSync)(parent);
+      }
+    } finally {
+      if ((0, import_node_fs6.existsSync)(temporary)) (0, import_node_fs6.unlinkSync)(temporary);
+    }
+  }
+  upgrade(expected) {
+    return this.locked(() => {
+      const { source, document, preview } = this.prepareUpgrade();
+      if (preview.expectedRevision !== expected.revision || preview.expectedDigest !== expected.digest) throw new ConfigurationError("CONFIG_REVISION_CONFLICT");
+      if (!preview.changed) {
+        const receiptFile = import_node_path9.default.join(this.context.configRoot, "config-upgrade.json");
+        if ((0, import_node_fs6.existsSync)(receiptFile)) {
+          const receipt = JSON.parse(readPrivateFile(receiptFile));
+          if (isConfigurationObject(receipt) && receipt.phase === "prepared" && receipt.plannedDigest === expected.digest)
+            this.recordUpgrade({ ...receipt, phase: "committed", savedRevision: expected.revision, digest: expected.digest });
+        }
+        return { ...preview, savedRevision: expected.revision, digest: expected.digest };
+      }
+      return withConfigurationUpgradeOwnership(this.context, () => {
+        const revision = expected.revision + 1;
+        if (!Number.isSafeInteger(revision)) throw new ConfigurationError("CONFIG_REVISION_INVALID");
+        document.set("revision", revision);
+        const backupId = `${Date.now()}-${(0, import_node_crypto3.randomUUID)()}.yaml`;
+        const plannedDigest = (0, import_node_crypto3.createHash)("sha256").update(document.toString({ lineWidth: 0 })).digest("hex");
+        this.recordUpgrade({ ...preview, backupId, plannedDigest, phase: "prepared" });
+        const next = this.publish(document, source, backupId);
+        const result = { ...preview, savedRevision: next.value.revision, digest: next.digest, backupId };
+        this.recordUpgrade({ ...result, phase: "committed" });
+        return result;
+      });
+    });
+  }
   restoreBackup(id, expected) {
     return this.locked(() => {
       const { source, backup, preview } = this.prepareRestore(id);
@@ -9287,7 +9464,7 @@ var ConfigurationStore = class {
   }
 };
 function emptyConfiguration(context) {
-  return { schemaVersion: 1, revision: 0, kind: context.kind, instanceId: context.instanceId, domainVersions: {}, migrations: {} };
+  return { schemaVersion: CONFIGURATION_SCHEMA_VERSION, revision: 0, kind: context.kind, instanceId: context.instanceId, domainVersions: {}, migrations: {} };
 }
 function setConfigurationValue(target, key, value) {
   const parts = configurationPathSegments(key);
@@ -9301,7 +9478,7 @@ function setConfigurationValue(target, key, value) {
   const last = parts.at(-1);
   if (unsafeKeys.has(last)) throw new ConfigurationError("CONFIG_FIELD_INVALID");
   current[last] = value;
-  target.domainVersions[domainForPath(key)] = 1;
+  target.domainVersions[domainForPath(key)] = CONFIGURATION_DOMAIN_VERSIONS[domainForPath(key)] ?? 1;
 }
 
 // packages/config-node/src/runtime.ts

package/payload/backend/evolution-sqlite-worker.cjs

@@ -179,10 +179,34 @@ function decodeCursor(value, runId, collection) {
   throw new Error("evolution_artifact_query_invalid");
 }
 
+// backend/src/evolution/repository-store.ts
+var import_node_crypto = require("node:crypto");
+function repositoryRegistrationVersion(repository) {
+  return (0, import_node_crypto.createHash)("sha256").update(JSON.stringify(repository)).digest("hex");
+}
+function repositoryRegistrationRemoved(repository) {
+  return repository.registrationHistory?.at(-1)?.action === "removed";
+}
+
 // backend/src/evolution/storage/repository-database.ts
 function initializeEvolutionRepositories(database2) {
   database2.exec(`
     CREATE TABLE IF NOT EXISTS evolution_repositories(repository_id TEXT PRIMARY KEY, payload_json TEXT NOT NULL);
+    CREATE TABLE IF NOT EXISTS evolution_repository_removals(repository_id TEXT PRIMARY KEY, payload_json TEXT NOT NULL);
+    CREATE TRIGGER IF NOT EXISTS evolution_repository_removed_insert
+      BEFORE INSERT ON evolution_repositories
+      WHEN EXISTS(SELECT 1 FROM evolution_repository_removals WHERE repository_id=NEW.repository_id)
+      BEGIN SELECT RAISE(ABORT, 'evolution_repository_removed'); END;
+    CREATE TRIGGER IF NOT EXISTS evolution_repository_removed_update
+      BEFORE UPDATE ON evolution_repositories
+      WHEN EXISTS(SELECT 1 FROM evolution_repository_removals WHERE repository_id=NEW.repository_id)
+      BEGIN SELECT RAISE(ABORT, 'evolution_repository_removed'); END;
+    CREATE TRIGGER IF NOT EXISTS evolution_repository_removal_immutable_update
+      BEFORE UPDATE ON evolution_repository_removals
+      BEGIN SELECT RAISE(ABORT, 'evolution_repository_removal_immutable'); END;
+    CREATE TRIGGER IF NOT EXISTS evolution_repository_removal_immutable_delete
+      BEFORE DELETE ON evolution_repository_removals
+      BEGIN SELECT RAISE(ABORT, 'evolution_repository_removal_immutable'); END;
     CREATE TABLE IF NOT EXISTS evolution_repository_bindings(
       kind TEXT NOT NULL, id TEXT NOT NULL, payload_json TEXT NOT NULL, PRIMARY KEY(kind,id));
     CREATE TABLE IF NOT EXISTS evolution_topic_lineage(
@@ -206,7 +230,7 @@ function executeRepositoryCommand(database2, foundation, command) {
   switch (command.op) {
     case "list":
       return database2.prepare(
-        "SELECT payload_json FROM evolution_repositories ORDER BY repository_id"
+        "SELECT repository_id, payload_json FROM evolution_repositories UNION ALL SELECT repository_id, payload_json FROM evolution_repository_removals ORDER BY repository_id"
       ).all().map((row) => JSON.parse(row.payload_json));
     case "put": {
       return database2.transaction(() => {
@@ -216,6 +240,10 @@ function executeRepositoryCommand(database2, foundation, command) {
         const previous = row ? JSON.parse(row.payload_json) : null;
         if (previous && previous.commonDirectory !== command.repository.commonDirectory)
           throw new Error("evolution_repository_identity_conflict");
+        if (database2.prepare(
+          "SELECT 1 FROM evolution_repository_removals WHERE repository_id = ?"
+        ).get(command.repository.repositoryId))
+          throw new Error("evolution_repository_removed");
         const repository = {
           ...command.repository,
           paths: [
@@ -237,6 +265,35 @@ function executeRepositoryCommand(database2, foundation, command) {
         return true;
       }).immediate();
     }
+    case "remove":
+      return database2.transaction(() => {
+        const row = database2.prepare(
+          "SELECT payload_json FROM evolution_repositories WHERE repository_id = ? UNION ALL SELECT payload_json FROM evolution_repository_removals WHERE repository_id = ?"
+        ).get(command.repositoryId, command.repositoryId);
+        if (!row) throw new Error("evolution_repository_not_found");
+        const previous = JSON.parse(row.payload_json);
+        if (repositoryRegistrationVersion(previous) !== command.expectedRegistrationVersion)
+          throw new Error("evolution_repository_registration_conflict");
+        if (repositoryRegistrationRemoved(previous)) return previous;
+        const repository = {
+          ...previous,
+          registrationHistory: [
+            ...previous.registrationHistory ?? [],
+            {
+              action: "removed",
+              at: (/* @__PURE__ */ new Date()).toISOString(),
+              reason: command.reason
+            }
+          ]
+        };
+        database2.prepare(
+          "INSERT INTO evolution_repository_removals(repository_id, payload_json) VALUES (?, ?)"
+        ).run(command.repositoryId, JSON.stringify(repository));
+        database2.prepare(
+          "DELETE FROM evolution_repositories WHERE repository_id = ?"
+        ).run(command.repositoryId);
+        return repository;
+      }).immediate();
     case "attribution":
       return readRepositoryAttribution(database2, command.kind, command.id) ?? null;
     case "batch-get": {