@rynx-ai/daemon 0.1.11-beta.3 → 0.1.11-beta.31

package/dist/daemon-server.js

@@ -17,9 +17,10 @@ import { REMOTE_RUNTIME_CORE_PROTOCOL } from "@rynx-ai/protocol/remote-runtime";
 import { RUNTIME_BROWSER_INSPECT_MAX_MESSAGE_BYTES, RUNTIME_BROWSER_INSPECT_SEMANTIC_CAPABILITY, } from "@rynx-ai/protocol/runtime-browser-inspect";
 import { RUNTIME_BROWSER_SURFACE_SEMANTIC_CAPABILITY } from "@rynx-ai/protocol/runtime-browser-surface";
 import { RUNTIME_EMULATOR_SURFACE_SEMANTIC_CAPABILITY } from "@rynx-ai/protocol/runtime-emulator-surface";
-import { createDaemonRuntimeHost, createDesktopFirstSessionBrowserHost, createRunnerSessionTerminalHost, createSessionRuntimeServices, DesktopBrowserHostAbsentError, DesktopBrowserHostRegistry, DirectRuntimeConnectionHub, DirectRuntimeBrowserInspectHostError, MachineSessionService, MachineSessionServiceFailure, listRuntimeModels, RemoteRuntimeDispatcher, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceCoordinator, SessionEmulatorService, startServer, startDirectRuntimeServer, } from "@rynx-ai/server";
+import { createDaemonRuntimeHost, createDesktopFirstSessionBrowserHost, createRunnerSessionTerminalHost, createSessionRuntimeServices, DesktopBrowserHostAbsentError, DesktopBrowserHostRegistry, DirectRuntimeConnectionHub, DirectRuntimeBrowserInspectHostError, MachineSessionService, MachineSessionServiceFailure, RemoteRuntimeDispatcher, SessionPendingInputIndex, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceCoordinator, SessionEmulatorService, startServer, startDirectRuntimeServer, } from "@rynx-ai/server";
+import { authorizeSessionPortalGrant, inspectSessionPortalGrant, onSessionPortalGrantRevoked, redeemSessionPortalTicket, revokeEmbeddedWritableSessionPortalGrants, } from "./session-portal-grant-store.js";
 import { APP_BROWSER_HOST_BOOTSTRAP_TYPE, AppBrowserHostSupervisor, parseAppBrowserHostLaunchConfig, } from "./app-browser-host-supervisor.js";
-import { buildControlDeps } from "./control-deps.js";
+import { buildControlDeps, listControlAgentModels } from "./control-deps.js";
 import { createBrowserArtifactManagementService } from "./browser-artifact-management.js";
 import { createDaemonBuildStatus } from "./daemon-build-status.js";
 import { MaintenanceLeaseStore } from "./maintenance-lease.js";
@@ -49,7 +50,7 @@ import { SqliteSessionResourceStore } from "./session-resource-store.js";
 import { createSessionFallbackWorkspace, discardSessionFallbackWorkspace, } from "./session-fallback-workspace.js";
 import { SessionBrowserCapabilityStore } from "./session-browser-capability-store.js";
 import { SqliteSessionEmulatorBindingStore } from "./session-emulator-binding-store.js";
-import { sessionRegistry } from "./session-meta-store.js";
+import { sessionBelongsToPlugin, sessionRegistry } from "./session-meta-store.js";
 import { sessionPendingMessageStore } from "./session-pending-message-store.js";
 import { RemoteRuntimeAccessStore } from "./remote-runtime-access-store.js";
 import { DaemonRemoteRuntimeAdmin } from "./remote-runtime-admin.js";
@@ -68,13 +69,7 @@ const require = createRequire(import.meta.url);
 const DAEMON_PACKAGE_VERSION = readDaemonPackageVersion();
 async function resolveSessionExecutionSnapshot(input) {
     return {
-        ...await resolveExecutionSnapshot({
-            ...input,
-            resolveDefaultModel: async (provider) => {
-                const models = await listRuntimeModels(input.config, provider);
-                return models?.data.find((candidate) => candidate.isDefault)?.model;
-            },
-        }),
+        ...await resolveExecutionSnapshot(input),
         pluginSkills: snapshotEnabledPluginSkillSources(),
     };
 }
@@ -280,7 +275,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
         const directConfig = directHostingSupported
             ? await loadDirectConfig()
             : undefined;
-        const control = buildControlDeps();
+        const control = buildControlDeps(appConfig);
         const installationIdentity = await loadOrCreateDaemonInstallationIdentity();
         const directEncryptionIdentity = directHostingSupported
             ? await loadOrCreateDaemonDirectRuntimeEncryptionIdentity()
@@ -304,16 +299,21 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                 "semantic.session.interrupt.v1",
                 "semantic.session.agent-options.v1",
                 "semantic.session.launch-options.v2",
+                "semantic.session.execution-settings.v1",
                 "semantic.session.create.v1",
                 "semantic.session.fork.v1",
                 "semantic.session.message.v1",
-                "semantic.session.resources.v1",
+                "semantic.session.resources.v2",
+                "semantic.session.files.v1",
+                "semantic.session.workspace-files.v1",
                 "semantic.session.message-queue.v1",
                 "semantic.session.delete.v1",
                 "semantic.session.interaction.v1",
                 "semantic.project.manage.v1",
                 "semantic.provider-cli.status.v1",
-                ...(runtimeBrowserSupported ? ["semantic.browser.v1"] : []),
+                ...(runtimeBrowserSupported
+                    ? ["semantic.browser.v1", "semantic.browser.request-headers.v1"]
+                    : []),
                 ...(runtimeBrowserSupported && directHostingSupported
                     ? [
                         RUNTIME_BROWSER_SURFACE_SEMANTIC_CAPABILITY,
@@ -389,6 +389,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
             };
         };
         let machineSessions;
+        let sessionBrowsers;
         const pluginRuntime = {
             bindHostServices: (services) => pluginSupervisor.bindHostServices({
                 ...services,
@@ -398,6 +399,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                     publicKey: installationIdentity.publicKey,
                     sign: installationIdentity.sign,
                 },
+                sessionBrowserRequestHeaders: sessionBrowsers,
                 sessionLaunch: {
                     resolve: async (selection) => {
                         const workspace = await resolveSessionWorkspace(runtimeProjects, selection.projectId, selection.managedCwd, selection.workspace);
@@ -410,7 +412,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                                 ...((selection.provider || (!selection.agent && !selection.config))
                                     ? { provider: selection.provider ?? appConfig.DEFAULT_RUNTIME }
                                     : {}),
-                                ...(selection.model ? { model: selection.model } : {}),
+                                ...(selection.model !== undefined ? { model: selection.model } : {}),
                                 ...(selection.reasoningEffort
                                     ? { reasoningEffort: selection.reasoningEffort }
                                     : {}),
@@ -419,6 +421,11 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                         };
                     },
                 },
+                sessionExecution: {
+                    update: async (input) => {
+                        await machineSessions.updateExecutionSettings(input);
+                    },
+                },
                 sessionFork: (input) => machineSessions.fork(input),
                 admissionOpen,
                 admissionReserve: reserveAdmission,
@@ -431,6 +438,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
         const directConnections = new DirectRuntimeConnectionHub();
         const sessionLog = new SqliteSessionLogStore();
         const sessionResources = new SqliteSessionResourceStore();
+        const sessionPendingInputs = new SessionPendingInputIndex();
         const sessionForks = new SqliteSessionForkStore();
         const runtimeProjects = new SqliteRuntimeProjectStore();
         const providerClis = new ProviderCliService();
@@ -443,15 +451,21 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
         const sessionRuntimeServices = createSessionRuntimeServices({
             config: appConfig,
             sessionLog,
+            pendingInputs: sessionPendingInputs,
+            onPendingInputPersisted: (input) => sessionResources.markMessageMirrored(input.sessionId, input.clientMessageId, {
+                responseId: input.responseId,
+                messageItemId: input.messageItemId,
+            }),
             sessionContextProvider: browserRunnerSessionContexts,
             admissionOpen,
             admissionReserve: reserveAdmission,
+            materializeGeneratedImage: (input) => sessionResources.materializeGeneratedImage(input),
             onMirrorError: (error, sessionId) => warn(`Session mirror failed for ${sessionId}: ${error instanceof Error ? error.message : String(error)}`),
         });
         const sessionBrowserHost = appBrowserHostSupervisor
             ? createSupervisedAppSessionBrowserHost(durableDesktopBrowserHost, appBrowserHostSupervisor)
             : createDesktopFirstSessionBrowserHost(durableDesktopBrowserHost, createHeadlessBrowserHost());
-        const sessionBrowsers = new SessionBrowserService({
+        sessionBrowsers = new SessionBrowserService({
             host: sessionBrowserHost,
             sessions: {
                 exists: async (sessionId) => Boolean(sessionRegistry.get(sessionId) ??
@@ -552,18 +566,21 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                 list: () => control.listAgents(),
             },
             pendingMessages: sessionPendingMessageStore,
+            pendingInputs: sessionPendingInputs,
             resources: sessionResources,
             forks: sessionForks,
             execution: {
                 runtime: sessionRuntimeServices.conversationRuntime,
-                resolve: ({ agent, provider, model, reasoningEffort, cwd }) => resolveSessionExecutionSnapshot({
+                resolve: ({ agent, provider, model, reasoningEffort, permissionPreset, cwd }) => resolveSessionExecutionSnapshot({
                     config: appConfig,
                     ...(agent ? { agentName: agent } : {}),
                     ...(provider ? { provider } : {}),
                     ...(model ? { model } : {}),
                     ...(reasoningEffort ? { reasoningEffort } : {}),
+                    ...(permissionPreset ? { permissionPreset } : {}),
                     cwd,
                 }),
+                listModels: (provider) => listControlAgentModels(appConfig, provider),
                 runner: sessionRuntimeServices.runnerManager,
             },
             workspace: {
@@ -763,6 +780,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                 status: async () => asDaemonChromeInspectionStatus(await initializedChromeInspectionManager.status()),
                 configure: async (input) => asDaemonChromeInspectionStatus(await initializedChromeInspectionManager.configure(input)),
             };
+            revokeEmbeddedWritableSessionPortalGrants();
             server = await startServer({
                 config: appConfig,
                 control,
@@ -794,6 +812,13 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                     registry: desktopBrowserHosts,
                     daemonInstanceId,
                 },
+                sessionPortalAuthorization: {
+                    redeem: (ticket, embedOrigin) => redeemSessionPortalTicket(ticket, new Date(), embedOrigin),
+                    authorize: authorizeSessionPortalGrant,
+                    inspect: inspectSessionPortalGrant,
+                    subscribeRevocations: onSessionPortalGrantRevoked,
+                    ownsSession: sessionBelongsToPlugin,
+                },
             });
             baseShutdown = server.shutdown.bind(server);
             if (directConfig && directEncryptionIdentity) {

package/dist/db.d.ts

@@ -1,5 +1,5 @@
-import Database from "better-sqlite3";
+import { DatabaseSync } from "node:sqlite";
 /** Absolute path to the SQLite file (override via `RYNX_DB`, else `~/.rynx/rynx.db`). */
 export declare function dbPath(): string;
 /** Open (or reuse) the database at the current path, migrating + importing on first open. */
-export declare function db(): Database.Database;
+export declare function db(): DatabaseSync;

package/dist/db.js

@@ -1,9 +1,11 @@
 /**
  * `~/.rynx/rynx.db` — the daemon's SQLite store. Concerns kept apart:
- *  - `plugin_installations` — source-qualified manifests, capabilities, and immutable packages.
+ *  - `plugin_installations` — source-qualified manifests and immutable packages.
  *  - `plugin_marketplaces` — catalog registrations; catalog data is never executable.
  *  - `plugin_session_launch_operations` — durable idempotency/tombstones.
  *  - `control_links` — generic, one-use links to the local session console.
+ *  - `session_portal_tickets` / `session_portal_grants` — hashed, scoped,
+ *    browser Session Portal authorization.
  *  - `runtime_pairing_claims` / `runtime_client_grants` — one-use enrollment
  *    claims and the durable client identities they issue for direct runtimes.
  *  - `runtime_targets` / `runtime_direct_routes` / `runtime_pending_enrollments`
@@ -16,8 +18,9 @@
  */
 import { chmodSync, mkdirSync } from "node:fs";
 import { dirname, isAbsolute, join, resolve } from "node:path";
+import { DatabaseSync } from "node:sqlite";
 import { rynxHome } from "@rynx-ai/core";
-import Database from "better-sqlite3";
+import { transaction } from "./sqlite.js";
 const connections = new Map();
 /** Absolute path to the SQLite file (override via `RYNX_DB`, else `~/.rynx/rynx.db`). */
 export function dbPath() {
@@ -34,9 +37,7 @@ export function db() {
     if (cached)
         return cached;
     mkdirSync(dirname(path), { recursive: true });
-    const conn = new Database(path);
-    conn.pragma("busy_timeout = 5000");
-    conn.pragma("foreign_keys = ON");
+    const conn = new DatabaseSync(path, { timeout: 5000, enableForeignKeyConstraints: true });
     migrate(conn);
     // Plugin state and daemon credentials are private.
     try {
@@ -86,7 +87,6 @@ function migrate(conn) {
       install_path   TEXT NOT NULL,
       manifest       TEXT NOT NULL,
       integrity      TEXT NOT NULL,
-      capabilities   TEXT NOT NULL,
       runtime_state  TEXT,
       runtime_error  TEXT,
       UNIQUE(marketplace_id, plugin_id)
@@ -109,8 +109,9 @@ function migrate(conn) {
       session_id       TEXT NOT NULL,
       client_upload_id TEXT NOT NULL,
       upload_id        TEXT NOT NULL UNIQUE,
+      kind             TEXT NOT NULL DEFAULT 'image' CHECK(kind IN ('image', 'file')),
       filename         TEXT NOT NULL,
-      media_type       TEXT NOT NULL CHECK(media_type IN ('image/png', 'image/jpeg', 'image/webp')),
+      media_type       TEXT NOT NULL,
       byte_length      INTEGER NOT NULL,
       uploaded_bytes   INTEGER NOT NULL DEFAULT 0,
       sha256           TEXT,
@@ -141,6 +142,9 @@ function migrate(conn) {
           'failed_not_started'
         )),
       error            TEXT,
+      response_id      TEXT,
+      message_item_id  TEXT,
+      execution_snapshot TEXT,
       created_at       INTEGER NOT NULL,
       updated_at       INTEGER NOT NULL,
       PRIMARY KEY(session_id, client_message_id)
@@ -245,6 +249,50 @@ function migrate(conn) {
     );
     CREATE INDEX IF NOT EXISTS idx_control_links_expires
       ON control_links(expires_at);
+    CREATE TABLE IF NOT EXISTS session_portal_tickets (
+      ticket_hash TEXT PRIMARY KEY,
+      plugin_id   TEXT NOT NULL,
+      scope       TEXT NOT NULL CHECK(scope IN ('plugin_sessions', 'single_session')),
+      access      TEXT NOT NULL CHECK(access IN ('read_only', 'read_write')),
+      session_id  TEXT,
+      created_at  TEXT NOT NULL,
+      expires_at  TEXT NOT NULL,
+      used_at     TEXT,
+      CHECK(
+        (scope = 'plugin_sessions' AND session_id IS NULL)
+        OR (scope = 'single_session' AND session_id IS NOT NULL)
+      )
+    );
+    CREATE INDEX IF NOT EXISTS idx_session_portal_tickets_expires
+      ON session_portal_tickets(expires_at);
+    CREATE TABLE IF NOT EXISTS session_portal_grants (
+      portal_id   TEXT PRIMARY KEY,
+      secret_hash TEXT NOT NULL,
+      plugin_id   TEXT NOT NULL,
+      scope       TEXT NOT NULL CHECK(scope IN ('plugin_sessions', 'single_session')),
+      access      TEXT NOT NULL CHECK(access IN ('read_only', 'read_write')),
+      session_id  TEXT,
+      created_at  TEXT NOT NULL,
+      expires_at  TEXT NOT NULL,
+      revoked_at  TEXT,
+      CHECK(
+        (scope = 'plugin_sessions' AND session_id IS NULL)
+        OR (scope = 'single_session' AND session_id IS NOT NULL)
+      )
+    );
+    CREATE INDEX IF NOT EXISTS idx_session_portal_grants_expires
+      ON session_portal_grants(expires_at);
+    CREATE TABLE IF NOT EXISTS session_timeline_projections (
+      plugin_id     TEXT NOT NULL,
+      session_id    TEXT NOT NULL,
+      projection_id TEXT NOT NULL,
+      request_hash  TEXT NOT NULL,
+      response_id   TEXT NOT NULL,
+      item_id       TEXT NOT NULL UNIQUE,
+      state         TEXT NOT NULL DEFAULT 'pending' CHECK(state IN ('pending', 'completed')),
+      created_at    TEXT NOT NULL,
+      PRIMARY KEY(plugin_id, session_id, projection_id)
+    );
     CREATE TABLE IF NOT EXISTS runtime_pairing_claims (
       claim_id                   TEXT PRIMARY KEY,
       secret_hash                TEXT NOT NULL,
@@ -308,7 +356,8 @@ function migrate(conn) {
     CREATE INDEX IF NOT EXISTS idx_runtime_pending_enrollments_expires
       ON runtime_pending_enrollments(expires_at);
   `);
-    migratePluginCapabilities(conn);
+    migrateSessionResourceFiles(conn);
+    migratePluginCapabilityDeclarations(conn);
     migrateSessionSnapshots(conn);
     // Breaking plugin-runtime cutover: remove obsolete core-owned state.
     conn.exec(`
@@ -318,6 +367,103 @@ function migrate(conn) {
     addColumnIfMissing(conn, "plugin_marketplaces", "built_in", "INTEGER NOT NULL DEFAULT 0");
     addColumnIfMissing(conn, "sessions", "forked_from_session_id", "TEXT");
     addColumnIfMissing(conn, "plugin_session_launch_operations", "raw_request_hash", "TEXT");
+    addColumnIfMissing(conn, "session_message_operations", "response_id", "TEXT");
+    addColumnIfMissing(conn, "session_message_operations", "message_item_id", "TEXT");
+    addColumnIfMissing(conn, "session_message_operations", "execution_snapshot", "TEXT");
+    addColumnIfMissing(conn, "session_portal_tickets", "grant_handle", "TEXT");
+    addColumnIfMissing(conn, "session_portal_tickets", "embed_origin", "TEXT");
+    addColumnIfMissing(conn, "session_portal_grants", "grant_handle", "TEXT");
+    addColumnIfMissing(conn, "session_portal_grants", "embed_origin", "TEXT");
+    addColumnIfMissing(conn, "session_timeline_projections", "state", "TEXT NOT NULL DEFAULT 'pending'");
+    conn.exec(`
+    CREATE INDEX IF NOT EXISTS idx_session_portal_tickets_grant_handle
+      ON session_portal_tickets(plugin_id, grant_handle);
+    CREATE INDEX IF NOT EXISTS idx_session_portal_grants_grant_handle
+      ON session_portal_grants(plugin_id, grant_handle);
+  `);
+}
+/** Rebuild the original image-only table without losing committed resources. */
+function migrateSessionResourceFiles(conn) {
+    const columns = conn
+        .prepare("PRAGMA table_info(session_resources)")
+        .all();
+    if (columns.some((column) => column.name === "kind"))
+        return;
+    conn.exec("PRAGMA foreign_keys = OFF");
+    try {
+        transaction(conn, () => {
+            conn.exec(`
+        ALTER TABLE session_message_operation_resources
+          RENAME TO session_message_operation_resources_image_v1;
+        ALTER TABLE session_resources RENAME TO session_resources_image_v1;
+
+        CREATE TABLE session_resources (
+          id               TEXT PRIMARY KEY,
+          session_id       TEXT NOT NULL,
+          client_upload_id TEXT NOT NULL,
+          upload_id        TEXT NOT NULL UNIQUE,
+          kind             TEXT NOT NULL DEFAULT 'image' CHECK(kind IN ('image', 'file')),
+          filename         TEXT NOT NULL,
+          media_type       TEXT NOT NULL,
+          byte_length      INTEGER NOT NULL,
+          uploaded_bytes   INTEGER NOT NULL DEFAULT 0,
+          sha256           TEXT,
+          width            INTEGER,
+          height           INTEGER,
+          state            TEXT NOT NULL DEFAULT 'uploading'
+            CHECK(state IN ('uploading', 'staged', 'committed')),
+          message_item_id  TEXT,
+          created_at       INTEGER NOT NULL,
+          committed_at     INTEGER,
+          UNIQUE(session_id, client_upload_id)
+        );
+        INSERT INTO session_resources (
+          id, session_id, client_upload_id, upload_id, kind, filename, media_type,
+          byte_length, uploaded_bytes, sha256, width, height, state,
+          message_item_id, created_at, committed_at
+        )
+        SELECT
+          id, session_id, client_upload_id, upload_id, 'image', filename, media_type,
+          byte_length, uploaded_bytes, sha256, width, height, state,
+          message_item_id, created_at, committed_at
+        FROM session_resources_image_v1;
+
+        CREATE TABLE session_message_operation_resources (
+          session_id        TEXT NOT NULL,
+          client_message_id TEXT NOT NULL,
+          resource_id       TEXT NOT NULL UNIQUE REFERENCES session_resources(id) ON DELETE CASCADE,
+          PRIMARY KEY(session_id, client_message_id, resource_id),
+          FOREIGN KEY(session_id, client_message_id)
+            REFERENCES session_message_operations(session_id, client_message_id)
+            ON DELETE CASCADE
+        );
+        INSERT INTO session_message_operation_resources
+        SELECT * FROM session_message_operation_resources_image_v1;
+
+        DROP TABLE session_message_operation_resources_image_v1;
+        DROP TABLE session_resources_image_v1;
+        CREATE INDEX idx_session_resources_session
+          ON session_resources(session_id, created_at);
+        CREATE INDEX idx_session_resources_message
+          ON session_resources(message_item_id);
+      `);
+        })();
+    }
+    finally {
+        conn.exec("PRAGMA foreign_keys = ON");
+    }
+}
+/** Remove the inert permission-declaration columns left by older installations. */
+function migratePluginCapabilityDeclarations(conn) {
+    const columns = conn
+        .prepare("PRAGMA table_info(plugin_installations)")
+        .all();
+    const names = new Set(columns.map((column) => column.name));
+    for (const legacyColumn of ["capabilities", "grants"]) {
+        if (names.has(legacyColumn)) {
+            conn.exec(`ALTER TABLE plugin_installations DROP COLUMN ${legacyColumn}`);
+        }
+    }
 }
 /**
  * Breaking Session cutover: the previous rows contain mutable Agent/Provider
@@ -330,7 +476,7 @@ function migrateSessionSnapshots(conn) {
     const names = new Set(columns.map((column) => column.name));
     if (names.has("workspace") && names.has("execution"))
         return;
-    conn.transaction(() => {
+    transaction(conn, () => {
         conn.exec(`
       INSERT OR IGNORE INTO session_snapshot_cleanup (session_id)
       SELECT id FROM sessions;
@@ -358,18 +504,6 @@ function migrateSessionSnapshots(conn) {
     `);
     }).immediate();
 }
-function migratePluginCapabilities(conn) {
-    const columns = conn
-        .prepare("PRAGMA table_info(plugin_installations)")
-        .all();
-    if (columns.some((column) => column.name === "capabilities"))
-        return;
-    if (columns.some((column) => column.name === "grants")) {
-        conn.exec("ALTER TABLE plugin_installations RENAME COLUMN grants TO capabilities");
-        return;
-    }
-    conn.exec("ALTER TABLE plugin_installations ADD COLUMN capabilities TEXT NOT NULL DEFAULT '[]'");
-}
 /** Idempotently add a column to an existing table (no-op if already present). */
 function addColumnIfMissing(conn, table, column, ddl) {
     const cols = conn.prepare(`PRAGMA table_info(${table})`).all();