@rynx-ai/daemon 0.1.11-beta.11 → 0.1.11-beta.12

package/bundled-plugins/plugins/lark/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rynx-ai/plugin-channel-lark",
-  "version": "0.1.11-beta.11",
+  "version": "0.1.11-beta.12",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/rynx-ai/rynx.git",

package/dist/chrome-for-testing-store.js

@@ -9,9 +9,10 @@ import { createHash } from "node:crypto";
 import { accessSync, chmodSync, closeSync, existsSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, writeFileSync, writeSync, } from "node:fs";
 import { constants as fsConstants } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { DatabaseSync } from "node:sqlite";
 import { rynxHome } from "@rynx-ai/core";
-import Database from "better-sqlite3";
 import extractZipArchive from "extract-zip";
+import { hasSqlitePrimaryCode, SQLITE_BUSY, SQLITE_LOCKED } from "./sqlite.js";
 const BUILD_OWNER_FILE = ".rynx-cft-owner.json";
 const STAGING_OWNER_FILE = ".rynx-cft-staging-owner.json";
 const ACTIVE_MANIFEST_FILE = "active.json";
@@ -360,7 +361,7 @@ function acquireStoreLock(rootDir) {
             throw new Error("Chrome for Testing store lock is not a direct regular file");
         }
     }
-    const connection = new Database(lockPath, { timeout: 0 });
+    const connection = new DatabaseSync(lockPath, { timeout: 0 });
     try {
         const stat = lstatSync(lockPath);
         if (!stat.isFile() ||
@@ -369,14 +370,13 @@ function acquireStoreLock(rootDir) {
             throw new Error("Chrome for Testing store lock escapes its owned root");
         }
         chmodSync(lockPath, 0o600);
-        connection.pragma("busy_timeout = 0");
         connection.exec("BEGIN EXCLUSIVE");
         connection.exec("CREATE TABLE IF NOT EXISTS cft_store_guard (id INTEGER PRIMARY KEY)");
         return connection;
     }
     catch (error) {
         connection.close();
-        if (hasErrorCode(error, "SQLITE_BUSY") || hasErrorCode(error, "SQLITE_LOCKED")) {
+        if (hasSqlitePrimaryCode(error, SQLITE_BUSY) || hasSqlitePrimaryCode(error, SQLITE_LOCKED)) {
             throw new Error("Chrome for Testing store is busy in another process", { cause: error });
         }
         throw error;

package/dist/control-link-store.js

@@ -1,5 +1,6 @@
 import { randomBytes } from "node:crypto";
 import { db } from "./db.js";
+import { transaction } from "./sqlite.js";
 const DEFAULT_TTL_MS = 5 * 60_000;
 const MAX_TTL_MS = 15 * 60_000;
 /** Create a short-lived, one-use link into the generic session console. */
@@ -23,7 +24,7 @@ export function consumeControlLink(tokenInput) {
     if (!token || token.length > 512)
         return null;
     const now = new Date().toISOString();
-    const consume = db().transaction(() => {
+    const consume = transaction(db(), () => {
         const row = db()
             .prepare(`SELECT session_id
          FROM control_links
@@ -39,9 +40,9 @@ export function consumeControlLink(tokenInput) {
     return consume.immediate();
 }
 export function pruneControlLinks(now = new Date().toISOString()) {
-    return db()
+    return Number(db()
         .prepare("DELETE FROM control_links WHERE expires_at <= ? OR used_at IS NOT NULL")
-        .run(now).changes;
+        .run(now).changes);
 }
 function required(value, label) {
     const normalized = value?.trim();

package/dist/daemon-owner.js

@@ -1,8 +1,9 @@
 import { randomUUID } from "node:crypto";
 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import path from "node:path";
+import { DatabaseSync } from "node:sqlite";
 import { rynxHome } from "@rynx-ai/core";
-import Database from "better-sqlite3";
+import { hasSqlitePrimaryCode, SQLITE_BUSY, SQLITE_LOCKED } from "./sqlite.js";
 const LOCK_FILE = "daemon-owner.sqlite";
 const OWNER_FILE = "daemon-owner.json";
 /**
@@ -18,16 +19,15 @@ export async function acquireDaemonOwner(env = process.env) {
     const lockPath = path.join(home, LOCK_FILE);
     const ownerFile = path.join(home, OWNER_FILE);
     await mkdir(home, { recursive: true, mode: 0o700 });
-    const connection = new Database(lockPath, { timeout: 0 });
+    const connection = new DatabaseSync(lockPath, { timeout: 0 });
     try {
-        connection.pragma("busy_timeout = 0");
         connection.exec("BEGIN EXCLUSIVE");
         // Force this transaction to hold a write lock even on a brand-new file.
         connection.exec("CREATE TABLE IF NOT EXISTS daemon_owner_guard (id INTEGER PRIMARY KEY)");
     }
     catch (error) {
         connection.close();
-        if (hasCode(error, "SQLITE_BUSY") || hasCode(error, "SQLITE_LOCKED")) {
+        if (hasSqlitePrimaryCode(error, SQLITE_BUSY) || hasSqlitePrimaryCode(error, SQLITE_LOCKED)) {
             throw await ownerConflictError(home, ownerFile);
         }
         throw error;
@@ -99,6 +99,3 @@ function rollbackAndClose(connection) {
         connection.close();
     }
 }
-function hasCode(error, code) {
-    return typeof error === "object" && error !== null && "code" in error && error.code === code;
-}

package/dist/db.d.ts

@@ -1,5 +1,5 @@
-import Database from "better-sqlite3";
+import { DatabaseSync } from "node:sqlite";
 /** Absolute path to the SQLite file (override via `RYNX_DB`, else `~/.rynx/rynx.db`). */
 export declare function dbPath(): string;
 /** Open (or reuse) the database at the current path, migrating + importing on first open. */
-export declare function db(): Database.Database;
+export declare function db(): DatabaseSync;

package/dist/db.js

@@ -18,8 +18,9 @@
  */
 import { chmodSync, mkdirSync } from "node:fs";
 import { dirname, isAbsolute, join, resolve } from "node:path";
+import { DatabaseSync } from "node:sqlite";
 import { rynxHome } from "@rynx-ai/core";
-import Database from "better-sqlite3";
+import { transaction } from "./sqlite.js";
 const connections = new Map();
 /** Absolute path to the SQLite file (override via `RYNX_DB`, else `~/.rynx/rynx.db`). */
 export function dbPath() {
@@ -36,9 +37,7 @@ export function db() {
     if (cached)
         return cached;
     mkdirSync(dirname(path), { recursive: true });
-    const conn = new Database(path);
-    conn.pragma("busy_timeout = 5000");
-    conn.pragma("foreign_keys = ON");
+    const conn = new DatabaseSync(path, { timeout: 5000, enableForeignKeyConstraints: true });
     migrate(conn);
     // Plugin state and daemon credentials are private.
     try {
@@ -376,7 +375,7 @@ function migrateSessionSnapshots(conn) {
     const names = new Set(columns.map((column) => column.name));
     if (names.has("workspace") && names.has("execution"))
         return;
-    conn.transaction(() => {
+    transaction(conn, () => {
         conn.exec(`
       INSERT OR IGNORE INTO session_snapshot_cleanup (session_id)
       SELECT id FROM sessions;

package/dist/migrations/cleanup-legacy-sessions.js

@@ -20,6 +20,7 @@ import { mkdirSync, readFileSync, renameSync, writeFileSync, } from "node:fs";
 import path from "node:path";
 import { rynxHome } from "@rynx-ai/core";
 import { db } from "../db.js";
+import { transaction } from "../sqlite.js";
 /** Mirrors the daemon runtime store's default resolution. */
 function defaultProxyDir() {
     return path.join(rynxHome(), ".codex-proxy");
@@ -46,9 +47,9 @@ export function cleanupLegacySessions(opts = {}) {
     let deletedLogRows = 0;
     let deletedSessions = 0;
     let prunedStoreEntries = 0;
-    conn.transaction(() => {
-        deletedLogRows = conn.prepare(`DELETE FROM session_items WHERE ${LEGACY_LOG}`).run().changes;
-        deletedSessions = conn.prepare(`DELETE FROM sessions WHERE ${LEGACY_META}`).run().changes;
+    transaction(conn, () => {
+        deletedLogRows = Number(conn.prepare(`DELETE FROM session_items WHERE ${LEGACY_LOG}`).run().changes);
+        deletedSessions = Number(conn.prepare(`DELETE FROM sessions WHERE ${LEGACY_META}`).run().changes);
     })();
     // The runtime store is daemon-owned. Plugin routing stores remain private to
     // their plugins and are never inspected by this migration.

package/dist/plugin-cli.js

@@ -3,6 +3,7 @@ import { mkdirSync, realpathSync, statSync } from "node:fs";
 import path from "node:path";
 import { createPluginCliInvocationLeaseId, removePluginRuntimeLease, writePluginRuntimeLease, } from "@rynx-ai/plugin-sdk";
 import { db } from "./db.js";
+import { transaction } from "./sqlite.js";
 import { pluginDataDir, pluginRuntimeCacheDir } from "./plugin-installer.js";
 import { validatePluginPackageSnapshot } from "./plugin-package.js";
 import { getPlugin } from "./plugin-store.js";
@@ -74,7 +75,7 @@ export async function runPluginCliCommand(pluginId, args, options = {}) {
             removePluginRuntimeLease(dataDir, leaseId);
     };
     try {
-        db().transaction(() => {
+        transaction(db(), () => {
             const record = getPlugin(pluginId);
             if (!record)
                 throw new Error(`plugin "${pluginId}" is not installed`);

package/dist/plugin-installer.js

@@ -4,6 +4,7 @@ import { join, resolve } from "node:path";
 import { MARKETPLACE_ID_PATTERN, pluginCliInvocationLeasePid, readPluginRuntimeLeases, removePluginRuntimeLease, } from "@rynx-ai/plugin-sdk";
 import { rynxHome } from "@rynx-ai/core";
 import { db } from "./db.js";
+import { transaction } from "./sqlite.js";
 import { isBuiltInPluginMarketplace } from "./plugin-marketplace.js";
 import { detectPluginSource, inspectPluginPackage, materializePluginPackage, } from "./plugin-package.js";
 import { canonicalPluginId, getPlugin, removePlugin, upsertPlugin, } from "./plugin-store.js";
@@ -117,7 +118,7 @@ export async function preparePluginInstallation(spec, onProgress = () => { }, op
                         promotedByThisTransaction = true;
                     }
                     promotedPath = realpathSync(target);
-                    db().transaction(() => {
+                    transaction(db(), () => {
                         const current = getPlugin(canonicalId);
                         if (!samePluginGeneration(existing, current)) {
                             throw new Error(`plugin "${canonicalId}" changed concurrently; retry`);
@@ -172,7 +173,7 @@ export async function preparePluginInstallation(spec, onProgress = () => { }, op
 }
 export async function uninstallPlugin(identity, onProgress = () => { }, options = {}) {
     let record;
-    const removed = db().transaction(() => {
+    const removed = transaction(db(), () => {
         record = getPlugin(identity);
         if (!record)
             return false;

package/dist/plugin-marketplace.js

@@ -3,6 +3,7 @@ import { isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { MARKETPLACE_ID_PATTERN, parsePluginMarketplace, } from "@rynx-ai/plugin-sdk";
 import { rynxHome } from "@rynx-ai/core";
 import { db } from "./db.js";
+import { transaction } from "./sqlite.js";
 import { detectPluginSource, materializePluginPackage, parsePluginSourceSpec, pluginSourceFingerprint, } from "./plugin-package.js";
 export function listPluginMarketplaces() {
     return db().prepare("SELECT * FROM plugin_marketplaces ORDER BY marketplace_id").all().map(toRecord);
@@ -27,7 +28,7 @@ export async function addPluginMarketplace(spec, options = {}) {
             throw new Error(`built-in marketplace "${marketplaceId}" is managed by Rynx`);
         }
         const now = new Date().toISOString();
-        db().transaction(() => {
+        transaction(db(), () => {
             const binding = db().prepare(`SELECT source_fingerprint AS sourceFingerprint
          FROM plugin_marketplace_bindings
          WHERE marketplace_id = ?`).get(marketplaceId);

package/dist/remote-runtime-access-store.d.ts

@@ -1,4 +1,4 @@
-import Database from "better-sqlite3";
+import { type DatabaseSync } from "node:sqlite";
 declare const DEFAULT_AUTHORITIES: readonly ["daemon.full"];
 export type RuntimeAuthority = (typeof DEFAULT_AUTHORITIES)[number];
 export type RemoteRuntimeAccessErrorCode = "invalid_claim" | "claim_expired" | "claim_used" | "grant_not_found" | "grant_revoked" | "grant_identity_mismatch" | "conflict" | "corrupt_state";
@@ -46,7 +46,7 @@ type Clock = () => Date;
 export declare class RemoteRuntimeAccessStore {
     private readonly connection;
     private readonly clock;
-    constructor(connection?: Database.Database, clock?: Clock);
+    constructor(connection?: DatabaseSync, clock?: Clock);
     createPairingClaim(input: CreatePairingClaimInput): RuntimePairingClaim;
     redeemPairingClaim(input: RedeemPairingClaimInput): RuntimeClientGrant;
     resolveActiveGrant(input: ResolveActiveGrantInput): RuntimeClientGrant;

package/dist/remote-runtime-access-store.js

@@ -1,5 +1,6 @@
 import { createHash, createPublicKey, randomBytes, timingSafeEqual, } from "node:crypto";
 import { db } from "./db.js";
+import { hasSqlitePrimaryCode, SQLITE_CONSTRAINT, transaction } from "./sqlite.js";
 const CLAIM_SECRET_HASH_DOMAIN = "rynx-runtime-pairing-claim-secret-v1\0";
 const DEFAULT_AUTHORITIES = Object.freeze(["daemon.full"]);
 const MIN_TTL_MS = 1_000;
@@ -35,7 +36,7 @@ export class RemoteRuntimeAccessStore {
         const created = this.now();
         const createdAt = created.toISOString();
         const expiresAt = new Date(created.getTime() + ttlMs).toISOString();
-        const create = this.connection.transaction(() => {
+        const create = transaction(this.connection, () => {
             this.deleteRetainedExpiredClaims(created);
             this.connection
                 .prepare(`INSERT INTO runtime_pairing_claims
@@ -60,7 +61,7 @@ export class RemoteRuntimeAccessStore {
         const clientId = validId(input.clientId, "clientId", "invalid_claim");
         const clientPublicKey = canonicalEd25519PublicKey(input.clientPublicKey, "invalid_claim");
         const requestedLabel = optionalLabel(input.label, "invalid_claim");
-        const redeem = this.connection.transaction(() => {
+        const redeem = transaction(this.connection, () => {
             const now = this.now().toISOString();
             const claim = this.connection
                 .prepare(`SELECT claim_id, secret_hash, authorities, client_label, created_at, expires_at,
@@ -124,7 +125,7 @@ export class RemoteRuntimeAccessStore {
         const grantId = validId(input.grantId, "grantId", "grant_not_found");
         const clientId = validId(input.clientId, "clientId", "grant_identity_mismatch");
         const clientPublicKey = canonicalEd25519PublicKey(input.clientPublicKey, "grant_identity_mismatch");
-        const resolve = this.connection.transaction(() => {
+        const resolve = transaction(this.connection, () => {
             const row = this.connection
                 .prepare(`SELECT grant_id, client_id, client_public_key, client_label, authorities,
                   created_at, revoked_at, last_used_at
@@ -180,7 +181,7 @@ export class RemoteRuntimeAccessStore {
     revokeClientGrant(grantIdInput) {
         const grantId = validId(grantIdInput, "grantId", "grant_not_found");
         const revokedAt = this.now().toISOString();
-        const revoke = this.connection.transaction(() => {
+        const revoke = transaction(this.connection, () => {
             const revoked = this.connection
                 .prepare(`UPDATE runtime_client_grants
            SET revoked_at = ?
@@ -382,11 +383,7 @@ function grantFromRow(row) {
     };
 }
 function isSqliteConstraint(error) {
-    return (typeof error === "object" &&
-        error !== null &&
-        "code" in error &&
-        typeof error.code === "string" &&
-        error.code.startsWith("SQLITE_CONSTRAINT"));
+    return hasSqlitePrimaryCode(error, SQLITE_CONSTRAINT);
 }
 function accessError(code, message, cause) {
     return new RemoteRuntimeAccessError(code, message, cause === undefined ? undefined : { cause });

package/dist/remote-runtime-target-store.d.ts

@@ -1,4 +1,4 @@
-import Database from "better-sqlite3";
+import { type DatabaseSync } from "node:sqlite";
 export interface RemoteRuntimeTarget {
     daemonId: string;
     displayName: string;
@@ -40,7 +40,7 @@ export interface CommitRemoteRuntimePendingEnrollmentOptions {
 export declare class RemoteRuntimeTargetStore {
     private readonly connection;
     private readonly clock;
-    constructor(connection?: Database.Database, clock?: () => Date);
+    constructor(connection?: DatabaseSync, clock?: () => Date);
     add(input: AddRemoteRuntimeTargetInput): RemoteRuntimeTarget;
     addPendingEnrollment(input: AddRemoteRuntimePendingEnrollmentInput): RemoteRuntimePendingEnrollment;
     getPendingEnrollment(claimIdInput: string): RemoteRuntimePendingEnrollment | undefined;

package/dist/remote-runtime-target-store.js

@@ -1,5 +1,6 @@
 import { createPublicKey } from "node:crypto";
 import { db } from "./db.js";
+import { hasSqlitePrimaryCode, SQLITE_CONSTRAINT, transaction } from "./sqlite.js";
 const OPAQUE_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._~-]{0,255}$/;
 const CREDENTIAL_REF_PATTERN = /^credential_[A-Za-z0-9_-]{24}$/;
 const MAX_DISPLAY_NAME_CHARS = 128;
@@ -13,7 +14,7 @@ export class RemoteRuntimeTargetStore {
     add(input) {
         const normalized = normalizeTargetInput(input);
         const now = validNow(this.clock()).toISOString();
-        const insert = this.connection.transaction(() => {
+        const insert = transaction(this.connection, () => {
             this.connection.prepare(`INSERT INTO runtime_targets
            (daemon_id, display_name, identity_public_key, credential_ref, created_at, updated_at)
          VALUES (?, ?, ?, ?, ?, ?)`).run(normalized.daemonId, normalized.displayName, normalized.identityPublicKey, normalized.credentialRef, now, now);
@@ -67,7 +68,7 @@ export class RemoteRuntimeTargetStore {
     }
     removePendingEnrollment(claimIdInput) {
         const claimId = validId(claimIdInput, "claimId");
-        const remove = this.connection.transaction(() => {
+        const remove = transaction(this.connection, () => {
             const pending = this.getPendingEnrollment(claimId);
             if (!pending)
                 return undefined;
@@ -82,7 +83,7 @@ export class RemoteRuntimeTargetStore {
         const claimId = validId(claimIdInput, "claimId");
         const normalized = normalizeTargetInput(input);
         const now = validNow(this.clock()).toISOString();
-        const commit = this.connection.transaction(() => {
+        const commit = transaction(this.connection, () => {
             const pending = this.getPendingEnrollment(claimId);
             if (!pending)
                 throw new Error("pending Runtime enrollment was not found");
@@ -134,7 +135,7 @@ export class RemoteRuntimeTargetStore {
     }
     remove(daemonIdInput) {
         const daemonId = validId(daemonIdInput, "daemonId");
-        const remove = this.connection.transaction(() => {
+        const remove = transaction(this.connection, () => {
             const target = this.get(daemonId);
             if (!target)
                 return undefined;
@@ -321,6 +322,5 @@ function validNow(value) {
     return value;
 }
 function isSqliteConstraint(error) {
-    return typeof error === "object" && error !== null && "code" in error &&
-        typeof error.code === "string" && error.code.startsWith("SQLITE_CONSTRAINT");
+    return hasSqlitePrimaryCode(error, SQLITE_CONSTRAINT);
 }

package/dist/session-emulator-binding-store.js

@@ -1,5 +1,6 @@
 import { SessionEmulatorBindingConflictError, } from "@rynx-ai/server";
 import { db } from "./db.js";
+import { hasSqlitePrimaryCode, SQLITE_CONSTRAINT, transaction } from "./sqlite.js";
 export class SqliteSessionEmulatorBindingStore {
     get(sessionId) {
         const row = db().prepare(`SELECT session_id, binding_id, backend, device_id, device_name, attached_at
@@ -13,7 +14,7 @@ export class SqliteSessionEmulatorBindingStore {
     }
     bind(record) {
         const connection = db();
-        const replace = connection.transaction(() => {
+        const replace = transaction(connection, () => {
             connection.prepare("DELETE FROM session_emulator_bindings WHERE session_id = ?")
                 .run(record.sessionId);
             connection.prepare(`INSERT INTO session_emulator_bindings
@@ -40,7 +41,7 @@ export class SqliteSessionEmulatorBindingStore {
         return db().prepare("DELETE FROM session_emulator_bindings WHERE session_id = ?").run(sessionId).changes > 0;
     }
     releaseDevice(backend, deviceId) {
-        return db().prepare("DELETE FROM session_emulator_bindings WHERE backend = ? AND device_id = ?").run(backend, deviceId).changes;
+        return Number(db().prepare("DELETE FROM session_emulator_bindings WHERE backend = ? AND device_id = ?").run(backend, deviceId).changes);
     }
 }
 function bindingRecord(row) {
@@ -54,8 +55,5 @@ function bindingRecord(row) {
     };
 }
 function isSqliteConstraint(error) {
-    if (!error || typeof error !== "object")
-        return false;
-    const code = error.code;
-    return typeof code === "string" && code.startsWith("SQLITE_CONSTRAINT");
+    return hasSqlitePrimaryCode(error, SQLITE_CONSTRAINT);
 }

package/dist/session-fork-store.js

@@ -4,6 +4,7 @@ import { join } from "node:path";
 import { newSessionId, newSessionItemId, normalizeSessionTitle, resolvedExecutionSnapshotSchema, rynxHome, sessionWorkspaceSnapshotSchema, } from "@rynx-ai/core";
 import { MachineSessionServiceFailure, } from "@rynx-ai/server";
 import { db } from "./db.js";
+import { scalar, transaction } from "./sqlite.js";
 const FORK_COLS = [
     "operation_id",
     "request_hash",
@@ -39,9 +40,8 @@ export class SqliteSessionForkStore {
         }
         const now = new Date().toISOString();
         let targetSessionId = newSessionId();
-        while (db().prepare("SELECT 1 FROM sessions WHERE id = ?").pluck().get(targetSessionId) ||
-            db().prepare("SELECT 1 FROM session_fork_operations WHERE target_session_id = ?")
-                .pluck().get(targetSessionId)) {
+        while (scalar(db().prepare("SELECT 1 FROM sessions WHERE id = ?")).get(targetSessionId) ||
+            scalar(db().prepare("SELECT 1 FROM session_fork_operations WHERE target_session_id = ?")).get(targetSessionId)) {
             targetSessionId = newSessionId();
         }
         try {
@@ -130,7 +130,7 @@ export class SqliteSessionForkStore {
             };
         });
         const conn = db();
-        conn.transaction(() => {
+        transaction(conn, () => {
             if (input.operationId) {
                 const current = this.read(input.operationId);
                 if (current?.state === "completed")
@@ -160,8 +160,24 @@ export class SqliteSessionForkStore {
            @byte_length, @uploaded_bytes, @sha256, @width, @height, 'committed',
            @message_item_id, @created_at, @committed_at
          )`);
-            for (const resource of resources)
-                insertResource.run(resource);
+            for (const resource of resources) {
+                insertResource.run({
+                    id: resource.id,
+                    session_id: resource.session_id,
+                    client_upload_id: resource.client_upload_id,
+                    upload_id: resource.upload_id,
+                    filename: resource.filename,
+                    media_type: resource.media_type,
+                    byte_length: resource.byte_length,
+                    uploaded_bytes: resource.uploaded_bytes,
+                    sha256: resource.sha256,
+                    width: resource.width,
+                    height: resource.height,
+                    message_item_id: resource.message_item_id,
+                    created_at: resource.created_at,
+                    committed_at: resource.committed_at,
+                });
+            }
             const insertItem = conn.prepare(`INSERT INTO session_items (
            id, session_id, position, response_id, type, status,
            data, created_by, created_at
@@ -203,9 +219,9 @@ export class SqliteSessionForkStore {
         ORDER BY created_at`).all().map(toOperation);
     }
     hasReservedSource(sessionId) {
-        return Boolean(db().prepare(`SELECT 1
+        return Boolean(scalar(db().prepare(`SELECT 1
          FROM session_fork_operations
-        WHERE source_session_id = ? AND state = 'reserved'`).pluck().get(sessionId));
+        WHERE source_session_id = ? AND state = 'reserved'`)).get(sessionId));
     }
     markTargetDeleted(sessionId) {
         const now = new Date().toISOString();

package/dist/session-launch-operations.js

@@ -1,5 +1,6 @@
 import { newSessionId } from "@rynx-ai/core";
 import { db } from "./db.js";
+import { scalar, transaction } from "./sqlite.js";
 import { createSessionMeta } from "./session-meta-store.js";
 const MAX_ID_LENGTH = 512;
 const SHA256_PATTERN = /^[a-fA-F0-9]{64}$/;
@@ -58,7 +59,7 @@ export function replayPluginSessionLaunch(input) {
         throw new SessionLaunchOperationTargetDeletedError(pluginId, scopeId, operationId, existing.session_id);
     }
     if (!sessionExists(existing.session_id)) {
-        db().transaction(() => {
+        transaction(db(), () => {
             tombstoneOperations(existing.session_id, new Date().toISOString());
         }).immediate();
         throw new SessionLaunchOperationTargetDeletedError(pluginId, scopeId, operationId, existing.session_id);
@@ -81,7 +82,7 @@ export function ensurePluginSessionLaunch(input) {
     const rawRequestHash = input.rawRequestHash
         ? requiredRequestHash(input.rawRequestHash)
         : requestHash;
-    const ensure = db().transaction(() => {
+    const ensure = transaction(db(), () => {
         const existing = readOperation(pluginId, scopeId, operationId);
         if (existing) {
             if (existing.request_hash !== requestHash &&
@@ -139,14 +140,14 @@ function readOperation(pluginId, scopeId, operationId) {
         .get(pluginId, scopeId, operationId);
 }
 function sessionExists(sessionId) {
-    return Boolean(db().prepare("SELECT 1 FROM sessions WHERE id = ?").pluck().get(sessionId));
+    return Boolean(scalar(db().prepare("SELECT 1 FROM sessions WHERE id = ?")).get(sessionId));
 }
 function tombstoneOperations(sessionId, now) {
-    return db()
+    return Number(db()
         .prepare(`UPDATE plugin_session_launch_operations
        SET state = 'deleted', updated_at = ?, deleted_at = ?
        WHERE session_id = ? AND state = 'active'`)
-        .run(now, now, sessionId).changes;
+        .run(now, now, sessionId).changes);
 }
 function requiredId(value, label) {
     const normalized = value?.trim();

package/dist/session-log-store.js

@@ -1,4 +1,5 @@
 import { db } from "./db.js";
+import { transaction } from "./sqlite.js";
 function toItem(row) {
     return {
         id: row.id,
@@ -21,7 +22,7 @@ export class SqliteSessionLogStore {
          (id, session_id, position, response_id, type, status, data, created_by, created_at)
        VALUES (@id, @session_id, @position, @response_id, @type, @status, @data, @created_by, @created_at)`);
         const maxStmt = conn.prepare("SELECT MAX(position) AS max FROM session_items WHERE session_id = ?");
-        const tx = conn.transaction((batch) => {
+        const tx = transaction(conn, (batch) => {
             const { max } = maxStmt.get(sessionId);
             let next = (max ?? -1) + 1;
             return batch.map((item) => {

package/dist/session-meta-store.js

@@ -13,6 +13,7 @@
  */
 import { normalizeSessionTitle, resolvedExecutionSnapshotSchema, sessionWorkspaceSnapshotSchema, } from "@rynx-ai/core";
 import { db } from "./db.js";
+import { transaction } from "./sqlite.js";
 const COLS = "id, workspace, execution, title, forked_from_session_id, source, created_at, updated_at";
 export function listSessionMetas() {
     return db()
@@ -46,7 +47,7 @@ export function createSessionMeta(meta) {
 export function setSessionTitle(id, title) {
     db()
         .prepare("UPDATE sessions SET title = ?, updated_at = ? WHERE id = ?")
-        .run(normalizeSessionTitle(title), new Date().toISOString(), id);
+        .run(normalizeSessionTitle(title) ?? null, new Date().toISOString(), id);
 }
 export function setSessionExecution(id, execution) {
     db()
@@ -54,7 +55,7 @@ export function setSessionExecution(id, execution) {
         .run(JSON.stringify(resolvedExecutionSnapshotSchema.parse(execution)), new Date().toISOString(), id);
 }
 export function removeSessionMeta(id) {
-    db().transaction(() => {
+    transaction(db(), () => {
         const now = new Date().toISOString();
         db()
             .prepare(`UPDATE plugin_session_launch_operations

package/dist/session-portal-grant-store.js

@@ -1,5 +1,6 @@
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { db } from "./db.js";
+import { transaction } from "./sqlite.js";
 const TICKET_TTL_MS = 5 * 60 * 1_000;
 const GRANT_TTL_MS = 30 * 60 * 1_000;
 /** Issue a browser handoff into the native Session workbench. The Host knows
@@ -24,7 +25,7 @@ export function issueSessionPortalTicket(input) {
 /** Atomically consume a one-use ticket and mint a fixed-lifetime browser grant. */
 export function redeemSessionPortalTicket(ticket, now = new Date()) {
     const connection = db();
-    return connection.transaction(() => {
+    return transaction(connection, () => {
         const ticketHash = hash(ticket);
         const row = connection.prepare(`SELECT plugin_id, scope, access, session_id, expires_at, used_at
          FROM session_portal_tickets

package/dist/session-resource-store.js

@@ -5,6 +5,7 @@ import { rynxHome, } from "@rynx-ai/core";
 import { defaultSessionResourcePolicy, SESSION_RESOURCE_MAX_IMAGE_PIXELS, SESSION_RESOURCE_MAX_IMAGE_SIDE, SESSION_RESOURCE_MAX_MESSAGE_BYTES, SESSION_RESOURCE_TRANSFER_CHUNK_BYTES, } from "@rynx-ai/protocol/remote-runtime-rpc";
 import { MachineSessionServiceFailure, } from "@rynx-ai/server";
 import { db } from "./db.js";
+import { transaction } from "./sqlite.js";
 const MAX_STAGED_RESOURCES_PER_SESSION = 16;
 const STAGED_TTL_MS = 24 * 60 * 60 * 1_000;
 export class SqliteSessionResourceStore {
@@ -244,7 +245,7 @@ export class SqliteSessionResourceStore {
             rmSync(this.partialPath(row), { force: true });
             rmSync(this.finalPath(row), { force: true });
         }
-        db().transaction(() => {
+        transaction(db(), () => {
             db().prepare("DELETE FROM session_message_operations WHERE session_id = ?").run(sessionId);
             db().prepare("DELETE FROM session_resources WHERE session_id = ?").run(sessionId);
         })();
@@ -252,7 +253,7 @@ export class SqliteSessionResourceStore {
     }
     prepareMessageOperation(sessionId, clientMessageId, requestHash, resourceIds) {
         const conn = db();
-        return conn.transaction(() => {
+        return transaction(conn, () => {
             const existing = conn.prepare(`SELECT request_hash, state
            FROM session_message_operations
           WHERE session_id = ? AND client_message_id = ?`).get(sessionId, clientMessageId);

package/dist/sqlite.d.ts

@@ -0,0 +1,22 @@
+import { type DatabaseSync, type StatementSync } from "node:sqlite";
+type SQLiteInput = null | number | bigint | string | NodeJS.ArrayBufferView;
+type SQLiteParameter = SQLiteInput | Record<string, SQLiteInput>;
+type SQLiteOutput = null | number | bigint | string | Uint8Array;
+export type SQLiteTransaction<Args extends unknown[], Result> = ((...args: Args) => Result) & {
+    deferred: (...args: Args) => Result;
+    immediate: (...args: Args) => Result;
+    exclusive: (...args: Args) => Result;
+};
+/** Wrap a synchronous operation in a SQLite transaction. Nested calls use savepoints. */
+export declare function transaction<Args extends unknown[], Result>(connection: DatabaseSync, operation: (...args: Args) => Result): SQLiteTransaction<Args, Result>;
+/** Return only the first column from a native statement, matching scalar-query intent. */
+export declare function scalar(statement: StatementSync): {
+    get(...parameters: SQLiteParameter[]): SQLiteOutput | undefined;
+    all(...parameters: SQLiteParameter[]): SQLiteOutput[];
+};
+/** Match a primary SQLite result code, including extended result codes. */
+export declare function hasSqlitePrimaryCode(error: unknown, primaryCode: number): boolean;
+export declare const SQLITE_BUSY = 5;
+export declare const SQLITE_LOCKED = 6;
+export declare const SQLITE_CONSTRAINT = 19;
+export {};

package/dist/sqlite.js

@@ -0,0 +1,57 @@
+let nextSavepointId = 0;
+/** Wrap a synchronous operation in a SQLite transaction. Nested calls use savepoints. */
+export function transaction(connection, operation) {
+    const run = (mode, args) => {
+        if (connection.isTransaction) {
+            const savepoint = `rynx_transaction_${++nextSavepointId}`;
+            connection.exec(`SAVEPOINT ${savepoint}`);
+            try {
+                const result = operation(...args);
+                connection.exec(`RELEASE SAVEPOINT ${savepoint}`);
+                return result;
+            }
+            catch (error) {
+                if (connection.isTransaction) {
+                    connection.exec(`ROLLBACK TO SAVEPOINT ${savepoint}`);
+                    connection.exec(`RELEASE SAVEPOINT ${savepoint}`);
+                }
+                throw error;
+            }
+        }
+        connection.exec(`BEGIN ${mode}`);
+        try {
+            const result = operation(...args);
+            connection.exec("COMMIT");
+            return result;
+        }
+        catch (error) {
+            if (connection.isTransaction)
+                connection.exec("ROLLBACK");
+            throw error;
+        }
+    };
+    const wrapped = ((...args) => run("DEFERRED", args));
+    wrapped.deferred = (...args) => run("DEFERRED", args);
+    wrapped.immediate = (...args) => run("IMMEDIATE", args);
+    wrapped.exclusive = (...args) => run("EXCLUSIVE", args);
+    return wrapped;
+}
+/** Return only the first column from a native statement, matching scalar-query intent. */
+export function scalar(statement) {
+    statement.setReturnArrays(true);
+    const arrayStatement = statement;
+    return {
+        get: (...parameters) => arrayStatement.get(...parameters)?.[0],
+        all: (...parameters) => arrayStatement.all(...parameters).map((row) => row[0]),
+    };
+}
+/** Match a primary SQLite result code, including extended result codes. */
+export function hasSqlitePrimaryCode(error, primaryCode) {
+    if (!error || typeof error !== "object" || !("errcode" in error))
+        return false;
+    const errcode = error.errcode;
+    return typeof errcode === "number" && (errcode & 0xff) === primaryCode;
+}
+export const SQLITE_BUSY = 5;
+export const SQLITE_LOCKED = 6;
+export const SQLITE_CONSTRAINT = 19;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rynx-ai/daemon",
-  "version": "0.1.11-beta.11",
+  "version": "0.1.11-beta.12",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/rynx-ai/rynx.git",
@@ -9,7 +9,7 @@
   "description": "Rynx resident control-plane service and standalone lifecycle implementation.",
   "type": "module",
   "engines": {
-    "node": ">=22"
+    "node": ">=22.16"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -42,22 +42,21 @@
     }
   },
   "dependencies": {
-    "better-sqlite3": "^12.11.1",
     "extract-zip": "2.0.1",
     "pm2": "^6.0.0",
     "tar": "^7.5.19",
     "ws": "^8.21.0",
-    "@rynx-ai/core": "0.1.11-beta.11",
-    "@rynx-ai/emulator": "0.1.11-beta.11",
-    "@rynx-ai/plugin-runner": "0.1.11-beta.11",
-    "@rynx-ai/plugin-sdk": "0.1.11-beta.11",
-    "@rynx-ai/protocol": "0.1.11-beta.11",
-    "@rynx-ai/remote-runtime-client": "0.1.11-beta.11",
-    "@rynx-ai/server": "0.1.11-beta.11"
+    "@rynx-ai/core": "0.1.11-beta.12",
+    "@rynx-ai/plugin-runner": "0.1.11-beta.12",
+    "@rynx-ai/plugin-sdk": "0.1.11-beta.12",
+    "@rynx-ai/protocol": "0.1.11-beta.12",
+    "@rynx-ai/remote-runtime-client": "0.1.11-beta.12",
+    "@rynx-ai/emulator": "0.1.11-beta.12",
+    "@rynx-ai/server": "0.1.11-beta.12"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1",
-    "@rynx-ai/plugin-channel-lark": "0.1.11-beta.11"
+    "@rynx-ai/plugin-channel-lark": "0.1.11-beta.12"
   },
   "scripts": {
     "build": "rm -rf dist bundled-plugins && tsc -p tsconfig.json && chmod +x dist/index-daemon.js && node ../../scripts/stage-bundled-plugins.mjs",