@sekiban/create-dcb 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,90 @@
+Elastic License 2.0
+
+Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject
+to the limitations and conditions below.
+
+Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set
+of the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key functionality
+in the software, and you may not remove or obscure any functionality in the
+software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other
+notices of the licensor. Any use of the licensor's trademarks is subject to
+applicable law.
+
+Patents
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license under any patent claims the
+licensor can license, or becomes able to license, to make, have made, use,
+sell, offer for sale, import and have imported the software. This license does
+not cover any patent claims that you cause to be infringed by modifications or
+additions to the software.
+
+If you or your company make any written claim that the software infringes or
+contributes to infringement of any patent, your patent license for the software
+granted under these terms ends immediately. If your company makes such a
+claim, your patent license ends immediately for work on behalf of your company.
+
+Notices
+
+You must ensure that anyone who gets a copy of any part of the software from
+you also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+this license.
+
+Termination
+
+If you use the software in violation of these terms, your license is not
+licensed, and your licenses will automatically terminate. If the licensor
+provides you with a notice of your violation, and you cease all violation of
+the license no later than 30 days after your receipt of the notice, your
+licenses will be reinstated retroactively. However, if you violate these terms
+after such reinstatement, any additional violation of these terms will cause
+your licenses to terminate automatically and permanently.
+
+No Liability
+
+As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable for any damages arising out of
+these terms or the use or nature of the software, under any kind of legal
+claim.
+
+Definitions
+
+The licensor is the entity offering these terms, including any portion of the
+software.
+
+you refers to the individual or entity agreeing to these terms.
+
+your company is any legal entity, sole proprietorship, or other entity that
+has control over, is under the control of, or is under common control with
+that organization.
+
+control means ownership of substantially all the assets of an entity, or the
+power to direct its management and policies by vote, contract, or otherwise.
+
+your licenses are all the licenses granted to you under these terms.
+
+use means anything requiring one of your licenses.
+
+trademark means trademarks, service marks, or trade names.

package/README.md

@@ -1,3 +1,19 @@
-# Temporary Holding Version
+# @sekiban/create-dcb
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Create a named Cloudflare starter with a visible booking demo:
+
+```sh
+npx @sekiban/create-dcb my-booking-app
+cd my-booking-app
+npm install
+```
+
+If `npm view @sekiban/create-dcb` reports E404, the package has not been published yet; use the repository-checkout alternative:
+
+```sh
+node packages/create-dcb/bin/create-dcb.mjs my-booking-app
+```
+
+The CLI slugifies the project name to lowercase hyphenated form, writes into
+`./<slug>`, and refuses an existing non-empty directory. It does not publish
+the package or create Cloudflare resources.

package/bin/create-dcb.mjs

@@ -0,0 +1,91 @@
+#!/usr/bin/env node
+/* global process */
+
+import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { dirname, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const bundledTemplate = resolve(packageRoot, "template");
+
+function fail(message) {
+  throw new Error(`create-dcb: ${message}`);
+}
+
+function slugify(value) {
+  const slug = value
+    .normalize("NFKD")
+    .replace(/[\u0300-\u036f]/g, "")
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-+|-+$/g, "");
+  if (slug.length === 0) fail("project name must contain at least one letter or number");
+  return slug.length <= 48 ? slug : slug.slice(0, 48).replace(/-+$/g, "");
+}
+
+function sourceTemplate() {
+  if (existsSync(join(bundledTemplate, "package.json"))) return bundledTemplate;
+  fail("starter template is missing from this installation");
+}
+
+function assertTargetIsWritable(target) {
+  if (!existsSync(target)) return;
+  const stats = statSync(target);
+  if (!stats.isDirectory()) fail(`target ${target} exists and is not a directory`);
+  if (readdirSync(target).length > 0) fail(`target ${target} exists and is not empty`);
+}
+
+function replacements(slug) {
+  return {
+    PROJECT_NAME: slug,
+    WORKER_NAME: `${slug}-worker`,
+    SERVICE_ID: slug,
+    PIPELINE_DB: `${slug}-pipeline`,
+    MV_DB: `${slug}-mv`,
+    QUEUE_NAME: `${slug}-outbox`,
+    DLQ_NAME: `${slug}-outbox-dlq`,
+  };
+}
+
+function substitute(text, values, file) {
+  return text.replace(/\{\{([A-Z_]+)\}\}/g, (whole, key) => {
+    const value = values[key];
+    if (value === undefined) fail(`unknown placeholder ${whole} in ${file}`);
+    return value;
+  });
+}
+
+function copyTree(source, target, values, root = source) {
+  const entries = readdirSync(source, { withFileTypes: true });
+  for (const entry of entries) {
+    const sourcePath = join(source, entry.name);
+    const targetPath = join(target, entry.name);
+    if (entry.isDirectory()) {
+      mkdirSync(targetPath, { recursive: true });
+      copyTree(sourcePath, targetPath, values, root);
+      continue;
+    }
+    if (!entry.isFile()) fail(`unsupported template entry ${relative(root, sourcePath)}`);
+    const relativePath = relative(root, sourcePath);
+    const text = readFileSync(sourcePath, "utf8");
+    writeFileSync(targetPath, substitute(text, values, relativePath));
+  }
+}
+
+function main(argv) {
+  if (argv.length !== 1) fail("usage: create-dcb <project-name>");
+  const slug = slugify(argv[0]);
+  const target = resolve(process.cwd(), slug);
+  assertTargetIsWritable(target);
+  mkdirSync(target, { recursive: true });
+  copyTree(sourceTemplate(), target, replacements(slug));
+  process.stdout.write(`Created ${target}\n`);
+  process.stdout.write("Next: create the two D1 databases, fill database_id values in wrangler.jsonc, then npm install.\n");
+}
+
+try {
+  main(process.argv.slice(2));
+} catch (error) {
+  process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+  process.exitCode = 1;
+}

package/package.json

@@ -1,6 +1,19 @@
 {
   "name": "@sekiban/create-dcb",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "private": false,
+  "description": "Create a named Sekiban Cloudflare starter project.",
+  "license": "Elastic-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/J-Tech-Japan/sekiban-dcb-ts.git",
+    "directory": "packages/create-dcb"
+  },
+  "homepage": "https://github.com/J-Tech-Japan/sekiban-dcb-ts/tree/main/packages/create-dcb#readme",
+  "type": "module",
+  "engines": { "node": ">=20" },
+  "bin": { "create-dcb": "bin/create-dcb.mjs" },
+  "files": ["bin", "template", "README.md", "LICENSE"],
+  "scripts": {},
+  "publishConfig": { "access": "public", "provenance": true }
+}

package/template/AGENTS.md

@@ -0,0 +1,23 @@
+# Cloudflare CLI guidance
+
+Use `npm run migrate` for D1 migrations and `npm run deploy` for the Worker.
+Wrangler remains this starter's build and deploy path.
+
+The deliberate `cloudflare.config.ts` guard refuses cf commands run from the
+project root when they load this project's config. It does not cover
+subdirectories, so never run cf from a subdirectory, especially `public/`, and
+never use `cf init <subdir>`.
+
+Do not use `cf deploy` in any form, including `cf deploy --prebuilt`, or use
+`cf build`, `cf dev`, `cf init`, or `cf migrate`. Create D1 databases with
+`npx wrangler d1 create ...`, or run cf resource commands from outside the
+project directory. If cf suggests upgrading Wrangler, that hint is safe to
+follow and does not change `npm run deploy`.
+
+`npm run migrate -- --cli cf` is an optional remote-D1 path. It needs real D1
+database IDs, and this repository has not run it against a real remote D1.
+The `cf migrate` conversion is intentionally deferred: a future conversion
+would require a reviewed `migrations_dir`, review of every Durable Object
+binding, and replacement of Durable Object migrations with an `exports`
+lifecycle. cf is beta; Wrangler remains supported for 18 months after the beta
+ends.

package/template/LICENSE

@@ -0,0 +1,90 @@
+Elastic License 2.0
+
+Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject
+to the limitations and conditions below.
+
+Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set
+of the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key functionality
+in the software, and you may not remove or obscure any functionality in the
+software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other
+notices of the licensor. Any use of the licensor's trademarks is subject to
+applicable law.
+
+Patents
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license under any patent claims the
+licensor can license, or becomes able to license, to make, have made, use,
+sell, offer for sale, import and have imported the software. This license does
+not cover any patent claims that you cause to be infringed by modifications or
+additions to the software.
+
+If you or your company make any written claim that the software infringes or
+contributes to infringement of any patent, your patent license for the software
+granted under these terms ends immediately. If your company makes such a
+claim, your patent license ends immediately for work on behalf of your company.
+
+Notices
+
+You must ensure that anyone who gets a copy of any part of the software from
+you also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+this license.
+
+Termination
+
+If you use the software in violation of these terms, your license is not
+licensed, and your licenses will automatically terminate. If the licensor
+provides you with a notice of your violation, and you cease all violation of
+the license no later than 30 days after your receipt of the notice, your
+licenses will be reinstated retroactively. However, if you violate these terms
+after such reinstatement, any additional violation of these terms will cause
+your licenses to terminate automatically and permanently.
+
+No Liability
+
+As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable for any damages arising out of
+these terms or the use or nature of the software, under any kind of legal
+claim.
+
+Definitions
+
+The licensor is the entity offering these terms, including any portion of the
+software.
+
+you refers to the individual or entity agreeing to these terms.
+
+your company is any legal entity, sole proprietorship, or other entity that
+has control over, is under the control of, or is under common control with
+that organization.
+
+control means ownership of substantially all the assets of an entity, or the
+power to direct its management and policies by vote, contract, or otherwise.
+
+your licenses are all the licenses granted to you under these terms.
+
+use means anything requiring one of your licenses.
+
+trademark means trademarks, service marks, or trade names.

package/template/README.md

@@ -0,0 +1,76 @@
+# {{PROJECT_NAME}}
+
+This project is a named Cloudflare Worker starter with a deliberately visible
+booking demo. It creates rooms, reserves them, cancels reservations, releases
+rooms, and exposes both tag-state and list/query reads. The demo is a teaching
+surface: see [REPLACE.md](./REPLACE.md) for the exact files to swap when the
+application gets its own domain.
+
+## Create and run locally
+
+After `@sekiban/create-dcb` is published:
+
+```sh
+npx @sekiban/create-dcb {{PROJECT_NAME}}
+cd {{PROJECT_NAME}}
+npm install
+```
+
+While developing this repository before publish, use:
+
+```sh
+node packages/create-dcb/bin/create-dcb.mjs {{PROJECT_NAME}}
+```
+
+## Cloudflare setup
+
+Create two D1 databases for this project, then replace the two
+`database_id` placeholders in `wrangler.jsonc` with the IDs Cloudflare gives
+you. The database names, queue name, and dead-letter queue name are already
+derived from this project name. No live resources are created by the starter
+or by its proof check.
+
+```sh
+npx wrangler d1 create {{PIPELINE_DB}}
+npx wrangler d1 create {{MV_DB}}
+```
+
+After filling in both IDs and authenticating Wrangler, the project-local SQL
+can be applied and the Worker deployed through the helper:
+
+```sh
+npm run migrate
+npm run deploy
+```
+
+The same commands are available as `scripts/migrate.sh` and
+`scripts/deploy.sh`. Both use only this project's `wrangler.jsonc`.
+
+The Worker needs a non-secret `SDT_SERVICE_ID` (already present in the
+generated config) and the normal Cloudflare Queue/D1/ Durable Object bindings.
+Set any operator-only secrets with Wrangler secrets rather than committing
+them to this file.
+
+## cf CLI (beta)
+
+Use `npm run migrate` for D1 migrations and `npm run deploy` for the Worker.
+Wrangler remains this starter's build and deploy path.
+
+The deliberate `cloudflare.config.ts` guard refuses cf commands run from the
+project root when they load this project's config. It does not cover
+subdirectories, so never run cf from a subdirectory, especially `public/`, and
+never use `cf init <subdir>`.
+
+Do not use `cf deploy` in any form, including `cf deploy --prebuilt`, or use
+`cf build`, `cf dev`, `cf init`, or `cf migrate`. Create D1 databases with
+`npx wrangler d1 create ...`, or run cf resource commands from outside the
+project directory. If cf suggests upgrading Wrangler, that hint is safe to
+follow and does not change `npm run deploy`.
+
+`npm run migrate -- --cli cf` is an optional remote-D1 path. It needs real D1
+database IDs, and this repository has not run it against a real remote D1.
+The `cf migrate` conversion is intentionally deferred: a future conversion
+would require a reviewed `migrations_dir`, review of every Durable Object
+binding, and replacement of Durable Object migrations with an `exports`
+lifecycle. cf is beta; Wrangler remains supported for 18 months after the beta
+ends.

package/template/REPLACE.md

@@ -0,0 +1,34 @@
+# Replace the booking demo
+
+The files below are the complete removable demo boundary. Delete or replace
+them together when introducing the application's domain; keep the Worker
+shell and infrastructure listed afterwards.
+
+## Delete or replace
+
+- `src/booking-domain.ts` — room/reservation commands, events, projectors, and queries.
+- `src/booking-transport.ts` — the command and query transport map.
+- `src/booking-mv.ts` — the two demo materializers and Queue delivery views.
+- `src/booking-routes.ts` — demo HTTP command/read routes.
+- `public/index.html` — demo form markup.
+- `public/app.js` — demo command/read client.
+- `public/styles.css` — demo presentation.
+
+If the replacement changes the public route shape, update only the application
+route calls in `src/worker.ts`; the runtime composition and infrastructure
+bindings do not need to change.
+
+## Keep
+
+- `src/worker.ts` — the Worker shell and Durable Object re-exports.
+- `wrangler.jsonc` — Worker, D1, Queue, dead-letter queue, and Durable Object configuration.
+- `migrations/d1/g32/` and `migrations/mv/` — the project-local migration SQL.
+- `scripts/migrate.sh` and `scripts/deploy.sh` — helper-backed lifecycle commands.
+- `package.json` — the published dependency versions and helper scripts.
+- `cloudflare.config.ts` — deliberate cf CLI guard; do not edit or complete it.
+- `public/.assetsignore` — keeps stray cf config files out of Worker assets.
+- `AGENTS.md` — operational guidance for this starter.
+
+The replacement domain must continue to provide the runtime domain/config
+values consumed by `src/worker.ts`, or the Worker shell can be adjusted at
+that single composition seam.

package/template/cloudflare.config.ts

@@ -0,0 +1,13 @@
+/*
+ * This is a deliberate cf CLI guard, not an unfinished cf migration.
+ * Do not edit, complete, or delete this guard. If cf migrate asks you to
+ * finish the existing migration, the answer here is to leave this guard in
+ * place and keep using the Wrangler path documented by the starter.
+ */
+if (process.env.SEKIBAN_DCB_CF_HELPER !== "d1-migrations") {
+  throw new Error(
+    "cf commands that load this project's config are refused in the project root. Use npm run migrate and npm run deploy. Create D1 databases with npx wrangler d1 create ... or run cf resource commands from outside the project directory.",
+  );
+}
+
+export default {};

package/template/migrations/d1/g32/0001_dcb_events.sql

@@ -0,0 +1,119 @@
+-- SDT-G32 new-database baseline. This directory is selected only by the
+-- wipe/cutover worker configuration; it deliberately does not migrate or read
+-- serialized_dcb_events from the pre-G32 service.
+
+CREATE TABLE dcb_events (
+  "ServiceId" TEXT NOT NULL,
+  "Id" TEXT NOT NULL,
+  "SortableUniqueId" TEXT NOT NULL COLLATE BINARY,
+  "EventType" TEXT NOT NULL,
+  "Payload" TEXT NOT NULL,
+  "Tags" TEXT NOT NULL,
+  "Timestamp" TEXT NOT NULL,
+  "CausationId" TEXT,
+  "CorrelationId" TEXT,
+  "ExecutedUser" TEXT,
+  CONSTRAINT "PK_dcb_events" PRIMARY KEY ("ServiceId", "Id")
+);
+CREATE INDEX "IX_Events_ServiceId" ON dcb_events ("ServiceId");
+CREATE INDEX "IX_Events_Service_SortableUniqueId" ON dcb_events ("ServiceId", "SortableUniqueId" COLLATE BINARY);
+CREATE INDEX "IX_dcb_events_EventType" ON dcb_events ("EventType");
+CREATE INDEX "IX_dcb_events_Timestamp" ON dcb_events ("Timestamp");
+
+-- Operational facts are intentionally outside the C# logical event record.
+CREATE TABLE dcb_event_ops (
+  "ServiceId" TEXT NOT NULL,
+  "Id" TEXT NOT NULL,
+  "AttemptId" TEXT,
+  "AllocatorLineageId" TEXT,
+  "FirstArrivedAt" INTEGER NOT NULL,
+  "LastArrivedAt" INTEGER NOT NULL,
+  "MaxDeliveryLagMs" INTEGER NOT NULL,
+  PRIMARY KEY ("ServiceId", "Id"),
+  FOREIGN KEY ("ServiceId", "Id") REFERENCES dcb_events ("ServiceId", "Id") ON DELETE CASCADE
+);
+
+CREATE TABLE serialized_dcb_allocator_bindings (
+  service_id TEXT PRIMARY KEY,
+  allocator_lineage_id TEXT NOT NULL,
+  bound_at INTEGER NOT NULL
+);
+
+CREATE TABLE serialized_dcb_event_arrivals (
+  service_id TEXT NOT NULL,
+  event_id TEXT NOT NULL,
+  tag TEXT NOT NULL COLLATE BINARY,
+  enqueued_at INTEGER NOT NULL,
+  arrived_at INTEGER NOT NULL,
+  lag_ms INTEGER NOT NULL,
+  PRIMARY KEY (service_id, event_id, tag),
+  FOREIGN KEY (service_id, event_id) REFERENCES dcb_events ("ServiceId", "Id") ON DELETE CASCADE
+);
+CREATE INDEX serialized_dcb_event_arrivals_service_idx ON serialized_dcb_event_arrivals (service_id, event_id, tag COLLATE BINARY);
+
+CREATE TABLE serialized_dcb_lag_estimates (
+  service_id TEXT PRIMARY KEY,
+  estimate_ms INTEGER NOT NULL,
+  observed_at INTEGER NOT NULL
+);
+
+CREATE TABLE serialized_dcb_pending_arrivals (
+  service_id TEXT NOT NULL,
+  event_id TEXT NOT NULL,
+  attempt_id TEXT NOT NULL,
+  suid TEXT NOT NULL COLLATE BINARY,
+  expected_paths TEXT NOT NULL,
+  observed_paths TEXT NOT NULL,
+  first_observed_at INTEGER NOT NULL,
+  lag_bound_ms INTEGER NOT NULL,
+  PRIMARY KEY (service_id, event_id)
+);
+CREATE INDEX serialized_dcb_pending_service_idx ON serialized_dcb_pending_arrivals (service_id, event_id COLLATE BINARY);
+
+CREATE TABLE serialized_dcb_inconsistency_findings (
+  sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+  service_id TEXT NOT NULL,
+  event_id TEXT NOT NULL,
+  path TEXT NOT NULL COLLATE BINARY,
+  classification TEXT NOT NULL,
+  first_observed_at INTEGER NOT NULL,
+  lag_bound_ms INTEGER NOT NULL,
+  observed_at INTEGER NOT NULL,
+  UNIQUE (service_id, event_id, path, classification)
+);
+
+CREATE TABLE serialized_dcb_delivery_incidents (
+  sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+  service_id TEXT NOT NULL,
+  identity_key TEXT NOT NULL COLLATE BINARY,
+  classification TEXT NOT NULL,
+  suid TEXT COLLATE BINARY,
+  existing_event_id TEXT,
+  incoming_event_id TEXT,
+  event_id TEXT,
+  bound_lineage_id TEXT,
+  incoming_lineage_id TEXT,
+  observed_at INTEGER NOT NULL,
+  UNIQUE (service_id, identity_key)
+);
+
+CREATE TABLE serialized_dcb_projection_checkpoints (
+  service_id TEXT NOT NULL,
+  projection_id TEXT NOT NULL COLLATE BINARY,
+  last_suid TEXT NOT NULL COLLATE BINARY,
+  state_json TEXT NOT NULL,
+  version INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY (service_id, projection_id)
+);
+
+CREATE TABLE serialized_dcb_wait_target_incidents (
+  service_id TEXT NOT NULL,
+  suid TEXT NOT NULL COLLATE BINARY,
+  classification TEXT NOT NULL,
+  event_id TEXT,
+  observed_at INTEGER NOT NULL,
+  PRIMARY KEY (service_id, suid, classification)
+);
+CREATE INDEX serialized_dcb_wait_target_incidents_lookup_idx
+  ON serialized_dcb_wait_target_incidents (service_id, suid COLLATE BINARY, classification);

package/template/migrations/d1/g32/0002_g44_global_completeness.sql

@@ -0,0 +1,88 @@
+-- SDT-G44 global-array completeness authority.
+--
+-- This is deliberately an ordinary in-place development migration.  The
+-- repository has no production data to preserve: incompatible test data is
+-- reset rather than bridged through a mixed-version protocol.
+
+ALTER TABLE dcb_events ADD COLUMN "EventDigest" TEXT;
+
+-- A source partition is a Tag Durable Object identity.  Its local
+-- obligation_sequence has no global meaning, so the scanner snapshots this
+-- set together with each partition's own high-water sequence.
+CREATE TABLE serialized_dcb_source_partitions (
+  service_id TEXT NOT NULL,
+  partition_tag TEXT NOT NULL COLLATE BINARY,
+  last_obligation_sequence INTEGER NOT NULL,
+  registered_at INTEGER NOT NULL,
+  PRIMARY KEY (service_id, partition_tag)
+);
+CREATE INDEX serialized_dcb_source_partitions_service_idx
+  ON serialized_dcb_source_partitions (service_id, partition_tag COLLATE BINARY);
+
+-- A tag-side committed membership is distinct from dcb_events.Tags, which is
+-- only the declared tag set.  It is written by the global array receiver in
+-- the same D1 batch as the event and receipt.
+CREATE TABLE serialized_dcb_global_memberships (
+  service_id TEXT NOT NULL,
+  event_id TEXT NOT NULL,
+  partition_tag TEXT NOT NULL COLLATE BINARY,
+  event_digest TEXT NOT NULL,
+  committed_at INTEGER NOT NULL,
+  PRIMARY KEY (service_id, event_id, partition_tag),
+  FOREIGN KEY (service_id, event_id) REFERENCES dcb_events ("ServiceId", "Id") ON DELETE RESTRICT
+);
+CREATE INDEX serialized_dcb_global_memberships_lookup_idx
+  ON serialized_dcb_global_memberships (service_id, partition_tag COLLATE BINARY, event_id);
+
+-- This receipt is the sink fact that a source obligation may read back.  It
+-- is intentionally not a Queue acknowledgement and is never inferred from a
+-- projection or delivery runner.  Its semantic identity is
+-- (service_id, event_id, event_digest, membership_tag); the separate unique
+-- source key maps that receipt back to the DO-local obligation sequence.
+CREATE TABLE serialized_dcb_global_receipts (
+  service_id TEXT NOT NULL,
+  partition_tag TEXT NOT NULL COLLATE BINARY,
+  obligation_sequence INTEGER NOT NULL,
+  event_id TEXT NOT NULL,
+  event_digest TEXT NOT NULL,
+  membership_tag TEXT NOT NULL COLLATE BINARY,
+  received_at INTEGER NOT NULL,
+  PRIMARY KEY (service_id, partition_tag, obligation_sequence),
+  UNIQUE (service_id, event_id, event_digest, membership_tag),
+  FOREIGN KEY (service_id, event_id, membership_tag)
+    REFERENCES serialized_dcb_global_memberships (service_id, event_id, partition_tag)
+    ON DELETE RESTRICT
+);
+CREATE INDEX serialized_dcb_global_receipts_event_idx
+  ON serialized_dcb_global_receipts (service_id, event_id, membership_tag COLLATE BINARY);
+
+-- Independent scanner progress is explicit.  Its only interim operational
+-- state is BLOCK/UNSETTLED; it deliberately has no owner/ack/closure fields.
+CREATE TABLE serialized_dcb_completeness_scanner_health (
+  service_id TEXT PRIMARY KEY,
+  scanner_version TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('HEALTHY', 'UNKNOWN', 'FAILED', 'STALE', 'BLOCK', 'UNSETTLED')),
+  cursor_json TEXT,
+  last_full_scan_at INTEGER,
+  last_error TEXT,
+  updated_at INTEGER NOT NULL
+);
+
+CREATE TABLE serialized_dcb_completeness_findings (
+  service_id TEXT NOT NULL,
+  incident_identity TEXT NOT NULL COLLATE BINARY,
+  incident_type TEXT NOT NULL,
+  -- Event fields are NULL only for a source-partition or scanner failure
+  -- discovered before a specific obligation can be read. The same findings
+  -- table remains the sole unresolved-state authority.
+  partition_tag TEXT COLLATE BINARY,
+  obligation_sequence INTEGER,
+  event_id TEXT,
+  event_digest TEXT,
+  state TEXT NOT NULL CHECK (state IN ('OPEN', 'UNRESOLVED')),
+  first_observed_at INTEGER NOT NULL,
+  last_observed_at INTEGER NOT NULL,
+  PRIMARY KEY (service_id, incident_identity)
+);
+CREATE INDEX serialized_dcb_completeness_findings_open_idx
+  ON serialized_dcb_completeness_findings (service_id, state, partition_tag COLLATE BINARY, obligation_sequence);