@sema-agent/server 1.185.0

package/dist/plugins/pg-image-index.js

@@ -0,0 +1,252 @@
+import { createHash } from "node:crypto";
+import {} from "./tidb-image-index.js";
+export const PG_IMAGE_INDEX_SCHEMA = [
+    `CREATE TABLE IF NOT EXISTS sandbox_image_index (
+     id                 VARCHAR(64)  NOT NULL,
+     profile            VARCHAR(64)  NOT NULL,
+     bands              JSONB,
+     repo               VARCHAR(255) NOT NULL,
+     tag                VARCHAR(128) NOT NULL,
+     digest             VARCHAR(80)  NOT NULL,
+     toolchain_versions JSONB,
+     capabilities       JSONB,
+     pod_contract       JSONB,
+     size_bytes         BIGINT,
+     status             VARCHAR(16)  NOT NULL DEFAULT 'building',
+     visibility         VARCHAR(16)  NOT NULL DEFAULT 'public',
+     tenant_id          VARCHAR(64),
+     manifest_sha       VARCHAR(64),
+     recipe_git_sha     VARCHAR(64),
+     generator_version  VARCHAR(32),
+     build_date         TIMESTAMPTZ(3),
+     supersedes         VARCHAR(64),
+     signed             BOOLEAN      NOT NULL DEFAULT FALSE,
+     created_at         TIMESTAMPTZ(3) NOT NULL,
+     updated_at         TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (id)
+   )`,
+    `CREATE UNIQUE INDEX IF NOT EXISTS uq_repo_digest ON sandbox_image_index (repo, digest)`,
+    `CREATE INDEX IF NOT EXISTS idx_profile_status ON sandbox_image_index (profile, status, visibility)`,
+    `CREATE INDEX IF NOT EXISTS idx_digest ON sandbox_image_index (digest)`,
+    `CREATE INDEX IF NOT EXISTS idx_tenant ON sandbox_image_index (tenant_id, status)`,
+];
+export async function ensureSchema(pool) {
+    for (const stmt of PG_IMAGE_INDEX_SCHEMA)
+        await pool.query(stmt);
+}
+const MAX_LIMIT = 200;
+const DEFAULT_LIMIT = 50;
+function asJson(v, fallback) {
+    if (v === null || v === undefined)
+        return fallback;
+    if (typeof v === "string") {
+        try {
+            return JSON.parse(v);
+        }
+        catch {
+            return fallback;
+        }
+    }
+    return v;
+}
+function iso(v) {
+    if (v === null || v === undefined)
+        return null;
+    return v instanceof Date ? v.toISOString() : new Date(v).toISOString();
+}
+function mapRow(r) {
+    return {
+        id: r.id,
+        profile: r.profile,
+        bands: asJson(r.bands, []),
+        repo: r.repo,
+        tag: r.tag,
+        digest: r.digest,
+        toolchainVersions: asJson(r.toolchain_versions, {}),
+        capabilities: asJson(r.capabilities, {}),
+        podContract: asJson(r.pod_contract, {}),
+        sizeBytes: r.size_bytes === null ? null : Number(r.size_bytes),
+        status: r.status,
+        visibility: r.visibility,
+        tenantId: r.tenant_id,
+        manifestSha: r.manifest_sha,
+        recipeGitSha: r.recipe_git_sha,
+        generatorVersion: r.generator_version,
+        buildDate: iso(r.build_date),
+        supersedes: r.supersedes,
+        signed: !!r.signed,
+        createdAt: iso(r.created_at) ?? new Date(0).toISOString(),
+        updatedAt: iso(r.updated_at) ?? new Date(0).toISOString(),
+    };
+}
+function visibilityClause(viewer, startIdx) {
+    if (viewer.operator)
+        return { sql: "1=1", params: [], nextIdx: startIdx };
+    if (viewer.tenantId)
+        return {
+            sql: `(visibility = 'public' OR tenant_id = $${startIdx})`,
+            params: [viewer.tenantId],
+            nextIdx: startIdx + 1,
+        };
+    return { sql: "visibility = 'public'", params: [], nextIdx: startIdx };
+}
+function encodeCursor(e) {
+    return Buffer.from(`${e.createdAt}|${e.id}`, "utf8").toString("base64url");
+}
+function decodeCursor(c) {
+    try {
+        const [createdAt, id] = Buffer.from(c, "base64url").toString("utf8").split("|");
+        if (!createdAt || !id)
+            return null;
+        return { createdAt, id };
+    }
+    catch {
+        return null;
+    }
+}
+const UPSERT_COLS = "(id, profile, bands, repo, tag, digest, toolchain_versions, capabilities, pod_contract, size_bytes, " +
+    "status, visibility, tenant_id, manifest_sha, recipe_git_sha, generator_version, build_date, supersedes, " +
+    "signed, created_at, updated_at)";
+const UPSERT_VALUES = "($1,$2,$3::jsonb,$4,$5,$6,$7::jsonb,$8::jsonb,$9::jsonb,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21)";
+function upsertParams(e, id, now) {
+    return [
+        id,
+        e.profile,
+        JSON.stringify(e.bands ?? []),
+        e.repo,
+        e.tag,
+        e.digest,
+        JSON.stringify(e.toolchainVersions ?? {}),
+        JSON.stringify(e.capabilities ?? {}),
+        JSON.stringify(e.podContract ?? {}),
+        e.sizeBytes,
+        e.status,
+        e.visibility,
+        e.tenantId ?? null,
+        e.manifestSha ?? null,
+        e.recipeGitSha ?? null,
+        e.generatorVersion ?? null,
+        e.buildDate ? new Date(e.buildDate) : null,
+        e.supersedes ?? null,
+        e.signed ? true : false,
+        now,
+        now,
+    ];
+}
+export class PgImageIndex {
+    pool;
+    constructor(pool) {
+        this.pool = pool;
+    }
+    static idFor(repo, digest) {
+        return createHash("sha256").update(`${repo}@${digest}`).digest("hex").slice(0, 64);
+    }
+    async upsert(e) {
+        const id = PgImageIndex.idFor(e.repo, e.digest);
+        const now = new Date();
+        await this.pool.query(`INSERT INTO sandbox_image_index ${UPSERT_COLS}
+       VALUES ${UPSERT_VALUES}
+       ON CONFLICT (id) DO UPDATE SET
+         profile = EXCLUDED.profile, bands = EXCLUDED.bands, tag = EXCLUDED.tag,
+         toolchain_versions = EXCLUDED.toolchain_versions, capabilities = EXCLUDED.capabilities,
+         pod_contract = EXCLUDED.pod_contract, size_bytes = EXCLUDED.size_bytes,
+         status = EXCLUDED.status, visibility = EXCLUDED.visibility, tenant_id = EXCLUDED.tenant_id,
+         manifest_sha = EXCLUDED.manifest_sha, recipe_git_sha = EXCLUDED.recipe_git_sha,
+         generator_version = EXCLUDED.generator_version, build_date = EXCLUDED.build_date,
+         supersedes = EXCLUDED.supersedes, signed = EXCLUDED.signed, updated_at = EXCLUDED.updated_at`, upsertParams(e, id, now));
+        return id;
+    }
+    async registerBuilding(e) {
+        const id = PgImageIndex.idFor(e.repo, e.digest);
+        const now = new Date();
+        await this.pool.query(`INSERT INTO sandbox_image_index ${UPSERT_COLS}
+       VALUES ${UPSERT_VALUES}
+       ON CONFLICT (id) DO UPDATE SET
+         profile = EXCLUDED.profile, bands = EXCLUDED.bands, tag = EXCLUDED.tag,
+         toolchain_versions = EXCLUDED.toolchain_versions, capabilities = EXCLUDED.capabilities,
+         pod_contract = EXCLUDED.pod_contract, size_bytes = EXCLUDED.size_bytes,
+         status = CASE WHEN sandbox_image_index.status = 'published'
+                       THEN sandbox_image_index.status ELSE EXCLUDED.status END,
+         visibility = CASE WHEN sandbox_image_index.status = 'published'
+                           THEN sandbox_image_index.visibility ELSE EXCLUDED.visibility END,
+         tenant_id = CASE WHEN sandbox_image_index.status = 'published'
+                          THEN sandbox_image_index.tenant_id ELSE EXCLUDED.tenant_id END,
+         manifest_sha = EXCLUDED.manifest_sha, recipe_git_sha = EXCLUDED.recipe_git_sha,
+         generator_version = EXCLUDED.generator_version, build_date = EXCLUDED.build_date,
+         supersedes = EXCLUDED.supersedes,
+         signed = CASE WHEN sandbox_image_index.status = 'published'
+                       THEN sandbox_image_index.signed ELSE EXCLUDED.signed END,
+         updated_at = EXCLUDED.updated_at`, upsertParams(e, id, now));
+        return id;
+    }
+    async getById(id) {
+        const res = await this.pool.query("SELECT * FROM sandbox_image_index WHERE id = $1 LIMIT 1", [id]);
+        return res.rows[0] ? mapRow(res.rows[0]) : null;
+    }
+    async getByDigest(digest) {
+        const res = await this.pool.query("SELECT * FROM sandbox_image_index WHERE digest = $1 ORDER BY updated_at DESC LIMIT 1", [digest]);
+        return res.rows[0] ? mapRow(res.rows[0]) : null;
+    }
+    async latestPublished(profile, viewer) {
+        const vis = visibilityClause(viewer, 2);
+        const res = await this.pool.query(`SELECT * FROM sandbox_image_index
+        WHERE profile = $1 AND status = 'published' AND ${vis.sql}
+        ORDER BY build_date DESC NULLS LAST, created_at DESC LIMIT 1`, [profile, ...vis.params]);
+        return res.rows[0] ? mapRow(res.rows[0]) : null;
+    }
+    async list(filter) {
+        const limit = Math.min(Math.max(1, filter.limit ?? DEFAULT_LIMIT), MAX_LIMIT);
+        const vis = visibilityClause(filter, 1);
+        const where = [vis.sql];
+        const params = [...vis.params];
+        let idx = vis.nextIdx;
+        if (filter.profile) {
+            where.push(`profile = $${idx++}`);
+            params.push(filter.profile);
+        }
+        if (filter.status) {
+            where.push(`status = $${idx++}`);
+            params.push(filter.status);
+        }
+        if (filter.capability) {
+            where.push(`capabilities -> $${idx++} = 'true'::jsonb`);
+            params.push(filter.capability);
+        }
+        if (filter.cursor) {
+            const c = decodeCursor(filter.cursor);
+            if (c) {
+                where.push(`(created_at < $${idx} OR (created_at = $${idx + 1} AND id < $${idx + 2}))`);
+                params.push(new Date(c.createdAt), new Date(c.createdAt), c.id);
+                idx += 3;
+            }
+        }
+        const sql = `SELECT * FROM sandbox_image_index WHERE ${where.join(" AND ")} ` +
+            `ORDER BY created_at DESC, id DESC LIMIT $${idx}`;
+        params.push(limit + 1);
+        const res = await this.pool.query(sql, params);
+        let entries = res.rows.map(mapRow);
+        let nextCursor = null;
+        if (entries.length > limit) {
+            entries = entries.slice(0, limit);
+            const last = entries[entries.length - 1];
+            nextCursor = encodeCursor({ createdAt: last.createdAt, id: last.id });
+        }
+        if (filter.latestOnly) {
+            const seen = new Set();
+            entries = entries.filter((e) => (seen.has(e.profile) ? false : (seen.add(e.profile), true)));
+        }
+        return { entries, nextCursor };
+    }
+    async setStatus(id, status, opts) {
+        const sets = ["status = $1", "updated_at = $2"];
+        const params = [status, new Date()];
+        let idx = 3;
+        if (opts && "supersedes" in opts) {
+            sets.push(`supersedes = $${idx++}`);
+            params.push(opts.supersedes ?? null);
+        }
+        params.push(id);
+        await this.pool.query(`UPDATE sandbox_image_index SET ${sets.join(", ")} WHERE id = $${idx}`, params);
+    }
+}
+//# sourceMappingURL=pg-image-index.js.map

package/dist/plugins/pg-image-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-image-index.js","sourceRoot":"","sources":["../../src/plugins/pg-image-index.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EASN,MAAM,uBAAuB,CAAC;AAgB/B,MAAM,CAAC,MAAM,qBAAqB,GAAa;IAC7C;;;;;;;;;;;;;;;;;;;;;;;KAuBG;IACH,wFAAwF;IACxF,oGAAoG;IACpG,uEAAuE;IACvE,kFAAkF;CACnF,CAAC;AAGF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAuB;IACxD,KAAK,MAAM,IAAI,IAAI,qBAAqB;QAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,aAAa,GAAG,EAAE,CAAC;AA0BzB,SAAS,MAAM,CAAI,CAAU,EAAE,QAAW;IACxC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACnD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAM,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,CAAM,CAAC;AAChB,CAAC;AACD,SAAS,GAAG,CAAC,CAAuB;IAClC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,MAAM,CAAC,CAAW;IACzB,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE,MAAM,CAAW,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,iBAAiB,EAAE,MAAM,CAAyB,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC3E,YAAY,EAAE,MAAM,CAAoB,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC;QAC3D,WAAW,EAAE,MAAM,CAAmB,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC;QACzD,SAAS,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9D,MAAM,EAAE,CAAC,CAAC,MAAqB;QAC/B,UAAU,EAAE,CAAC,CAAC,UAA6B;QAC3C,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,WAAW,EAAE,CAAC,CAAC,YAAY;QAC3B,YAAY,EAAE,CAAC,CAAC,cAAc;QAC9B,gBAAgB,EAAE,CAAC,CAAC,iBAAiB;QACrC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;QAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACzD,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;KAC1D,CAAC;AACJ,CAAC;AAID,SAAS,gBAAgB,CAAC,MAAmB,EAAE,QAAgB;IAC7D,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC1E,IAAI,MAAM,CAAC,QAAQ;QACjB,OAAO;YACL,GAAG,EAAE,0CAA0C,QAAQ,GAAG;YAC1D,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzB,OAAO,EAAE,QAAQ,GAAG,CAAC;SACtB,CAAC;IACJ,OAAO,EAAE,GAAG,EAAE,uBAAuB,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,YAAY,CAAC,CAAoC;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC7E,CAAC;AACD,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GACf,sGAAsG;IACtG,0GAA0G;IAC1G,iCAAiC,CAAC;AAEpC,MAAM,aAAa,GACjB,0GAA0G,CAAC;AAE7G,SAAS,YAAY,CAAC,CAAmB,EAAE,EAAU,EAAE,GAAS;IAC9D,OAAO;QACL,EAAE;QACF,CAAC,CAAC,OAAO;QACT,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,MAAM;QACR,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QACnC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,QAAQ,IAAI,IAAI;QAClB,CAAC,CAAC,WAAW,IAAI,IAAI;QACrB,CAAC,CAAC,YAAY,IAAI,IAAI;QACtB,CAAC,CAAC,gBAAgB,IAAI,IAAI;QAC1B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;QAC1C,CAAC,CAAC,UAAU,IAAI,IAAI;QACpB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;QACvB,GAAG;QACH,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAG3C,MAAM,CAAC,KAAK,CAAC,IAAY,EAAE,MAAc;QACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAGD,KAAK,CAAC,MAAM,CAAC,CAAmB;QAC9B,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,mCAAmC,WAAW;gBACpC,aAAa;;;;;;;;sGAQyE,EAChG,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CACzB,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAaD,KAAK,CAAC,gBAAgB,CAAC,CAAmB;QACxC,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,mCAAmC,WAAW;gBACpC,aAAa;;;;;;;;;;;;;;;;0CAgBa,EACpC,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CACzB,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAW,yDAAyD,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7G,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/B,sFAAsF,EACtF,CAAC,MAAM,CAAC,CACT,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAGD,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,MAAmB;QACxD,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/B;0DACoD,GAAG,CAAC,GAAG;qEACI,EAC/D,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CACzB,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAGD,KAAK,CAAC,IAAI,CAAC,MAAuB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,KAAK,GAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,MAAM,GAAc,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC;QACtB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,EAAE,EAAE,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAKtB,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,CAAC,EAAE,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,sBAAsB,GAAG,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxF,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChE,GAAG,IAAI,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GACP,2CAA2C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;YACjE,4CAA4C,GAAG,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAW,GAAG,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YAC3B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;YAC1C,UAAU,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACjC,CAAC;IAGD,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,MAAmB,EAAE,IAAqC;QACpF,MAAM,IAAI,GAAG,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;QAChD,MAAM,MAAM,GAAc,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,IAAI,IAAI,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,iBAAiB,GAAG,EAAE,EAAE,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,kCAAkC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IACxG,CAAC;CACF"}

package/dist/plugins/pg-outcome-ledger.d.ts

@@ -0,0 +1,23 @@
+import type { Pool, PoolClient } from "pg";
+import { type TaskOutcome, type RunStatus } from "./tidb-outcome-ledger.js";
+import type { TaskOutcome as CoreTaskOutcome } from "@sema-agent/core";
+export declare const PG_OUTCOME_LEDGER_SCHEMA: string[];
+export declare function ensureSchema(pool: Pool | PoolClient): Promise<void>;
+export declare class PgOutcomeLedger {
+    private readonly pool;
+    constructor(pool: Pool);
+    record(o: TaskOutcome): Promise<string>;
+    recordCore(o: CoreTaskOutcome): Promise<void>;
+    summary(opts?: {
+        taskSignature?: string;
+        includeAborted?: boolean;
+    }): Promise<Array<{
+        taskSignature: string;
+        model: string;
+        n: number;
+        passRate: number;
+        meanCostMicroUsd: number;
+    }>>;
+}
+export type { TaskOutcome, RunStatus };
+//# sourceMappingURL=pg-outcome-ledger.d.ts.map

package/dist/plugins/pg-outcome-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-outcome-ledger.d.ts","sourceRoot":"","sources":["../../src/plugins/pg-outcome-ledger.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,SAAS,EACf,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAOvE,eAAO,MAAM,wBAAwB,EAAE,MAAM,EA+B5C,CAAC;AAGF,wBAAsB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzE;AAED,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,IAAI;IAGjC,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAsCvC,UAAU,CAAC,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,OAAO,CAAC,IAAI,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5F,aAAa,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;KAC7F,CAAC,CAAC;CAyBJ;AAGD,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC"}

package/dist/plugins/pg-outcome-ledger.js

@@ -0,0 +1,102 @@
+import { randomUUID } from "node:crypto";
+import { taskSignature, deriveOutcome, } from "./tidb-outcome-ledger.js";
+import { coreOutcomeToLedgerRow } from "./tidb-outcome-ledger.js";
+export const PG_OUTCOME_LEDGER_SCHEMA = [
+    `CREATE TABLE IF NOT EXISTS outcome_ledger (
+     id             VARCHAR(64)  NOT NULL,
+     task_signature VARCHAR(190) NOT NULL,
+     model          VARCHAR(190) NOT NULL,
+     task_id        VARCHAR(64),
+     run_status     VARCHAR(20)  NOT NULL DEFAULT 'completed-graded',
+     route          VARCHAR(16),
+     worker_count   INTEGER,
+     oracle_passed  INTEGER,
+     oracle_total   INTEGER,
+     assemble_exit  INTEGER,
+     lint_exit      INTEGER,
+     merge_ok       SMALLINT,
+     replan_triggers JSONB,
+     cost_micro_usd BIGINT,
+     turns          INTEGER,
+     outcome        VARCHAR(8),
+     llm_assisted   JSONB,
+     signature_inputs JSONB,
+     core_outcome   JSONB,
+     created_at     TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (id)
+   )`,
+    `ALTER TABLE outcome_ledger ADD COLUMN IF NOT EXISTS core_outcome JSONB`,
+    `CREATE INDEX IF NOT EXISTS idx_outcome_ledger_sig_model ON outcome_ledger (task_signature, model, run_status)`,
+    `CREATE INDEX IF NOT EXISTS idx_outcome_ledger_outcome ON outcome_ledger (outcome)`,
+    `CREATE INDEX IF NOT EXISTS idx_outcome_ledger_created ON outcome_ledger (created_at)`,
+];
+export async function ensureSchema(pool) {
+    for (const stmt of PG_OUTCOME_LEDGER_SCHEMA)
+        await pool.query(stmt);
+}
+export class PgOutcomeLedger {
+    pool;
+    constructor(pool) {
+        this.pool = pool;
+    }
+    async record(o) {
+        const id = randomUUID().replace(/-/g, "").slice(0, 32);
+        const sig = taskSignature(o.signatureInputs);
+        const m = o.mechanical;
+        const runStatus = o.runStatus ?? "completed-graded";
+        await this.pool.query(`INSERT INTO outcome_ledger
+        (id, task_signature, model, task_id, run_status, route, worker_count, oracle_passed, oracle_total,
+         assemble_exit, lint_exit, merge_ok, replan_triggers, cost_micro_usd, turns, outcome,
+         llm_assisted, signature_inputs, core_outcome, created_at)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13::jsonb,$14,$15,$16,$17::jsonb,$18::jsonb,$19::jsonb,$20)`, [
+            id,
+            sig,
+            o.model,
+            o.taskId ?? null,
+            runStatus,
+            m.route ?? null,
+            m.workerCount ?? null,
+            m.oraclePassed ?? null,
+            m.oracleTotal ?? null,
+            m.assembleExit ?? null,
+            m.lintExit ?? null,
+            m.mergeOk == null ? null : m.mergeOk ? 1 : 0,
+            m.replanTriggers ? JSON.stringify(m.replanTriggers) : null,
+            m.costMicroUsd ?? null,
+            m.turns ?? null,
+            deriveOutcome(m, runStatus),
+            o.llmAssisted ? JSON.stringify(o.llmAssisted) : null,
+            JSON.stringify(o.signatureInputs),
+            o.core != null ? JSON.stringify(o.core) : null,
+            new Date(),
+        ]);
+        return id;
+    }
+    async recordCore(o) {
+        await this.record(coreOutcomeToLedgerRow(o));
+    }
+    async summary(opts = {}) {
+        const clauses = [];
+        const params = [];
+        if (!opts.includeAborted)
+            clauses.push("run_status = 'completed-graded'");
+        if (opts.taskSignature) {
+            params.push(opts.taskSignature);
+            clauses.push(`task_signature = $${params.length}`);
+        }
+        const where = clauses.length ? `WHERE ${clauses.join(" AND ")}` : "";
+        const res = await this.pool.query(`SELECT task_signature, model, COUNT(*) n,
+              AVG((outcome = 'pass')::int) pass_rate, AVG(cost_micro_usd) mean_cost
+         FROM outcome_ledger ${where}
+        GROUP BY task_signature, model
+        ORDER BY task_signature, model`, params);
+        return res.rows.map((r) => ({
+            taskSignature: String(r.task_signature),
+            model: String(r.model),
+            n: Number(r.n),
+            passRate: Number(r.pass_rate),
+            meanCostMicroUsd: Number(r.mean_cost ?? 0),
+        }));
+    }
+}
+//# sourceMappingURL=pg-outcome-ledger.js.map

package/dist/plugins/pg-outcome-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-outcome-ledger.js","sourceRoot":"","sources":["../../src/plugins/pg-outcome-ledger.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,aAAa,EACb,aAAa,GAGd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAQlE,MAAM,CAAC,MAAM,wBAAwB,GAAa;IAChD;;;;;;;;;;;;;;;;;;;;;;KAsBG;IAIH,wEAAwE;IACxE,+GAA+G;IAC/G,mFAAmF;IACnF,sFAAsF;CACvF,CAAC;AAGF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAuB;IACxD,KAAK,MAAM,IAAI,IAAI,wBAAwB;QAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAG3C,KAAK,CAAC,MAAM,CAAC,CAAc;QACzB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QACvB,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACpD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB;;;;mHAI6G,EAC7G;YACE,EAAE;YACF,GAAG;YACH,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,MAAM,IAAI,IAAI;YAChB,SAAS;YACT,CAAC,CAAC,KAAK,IAAI,IAAI;YACf,CAAC,CAAC,WAAW,IAAI,IAAI;YACrB,CAAC,CAAC,YAAY,IAAI,IAAI;YACtB,CAAC,CAAC,WAAW,IAAI,IAAI;YACrB,CAAC,CAAC,YAAY,IAAI,IAAI;YACtB,CAAC,CAAC,QAAQ,IAAI,IAAI;YAClB,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;YAC1D,CAAC,CAAC,YAAY,IAAI,IAAI;YACtB,CAAC,CAAC,KAAK,IAAI,IAAI;YACf,aAAa,CAAC,CAAC,EAAE,SAAS,CAAC;YAC3B,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;YACpD,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;YACjC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9C,IAAI,IAAI,EAAE;SACX,CACF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAGD,KAAK,CAAC,UAAU,CAAC,CAAkB;QACjC,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAMD,KAAK,CAAC,OAAO,CAAC,OAA6D,EAAE;QAG3E,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/B;;+BAEyB,KAAK;;uCAEG,EACjC,MAAM,CACP,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;YACvC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACtB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACd,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7B,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;SAC3C,CAAC,CAAC,CAAC;IACN,CAAC;CACF"}

package/dist/plugins/pg-pool.d.ts

@@ -0,0 +1,7 @@
+import pg from "pg";
+import type { ServiceConfig } from "../config.js";
+export declare const PG_SCHEMA_STATEMENTS: readonly string[];
+export declare function pgPoolOptions(pgCfg: NonNullable<ServiceConfig["pg"]>, dbQueryTimeoutMs?: number): pg.PoolConfig;
+export declare function createPgPool(opts: string | pg.PoolConfig): pg.Pool;
+export declare function ensurePgSchema(pool: pg.Pool): Promise<void>;
+//# sourceMappingURL=pg-pool.d.ts.map

package/dist/plugins/pg-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-pool.d.ts","sourceRoot":"","sources":["../../src/plugins/pg-pool.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAalD,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAwMjD,CAAC;AAaF,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,UAAU,CAU/G;AAID,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,IAAI,CAElE;AAiBD,wBAAsB,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAiCjE"}

package/dist/plugins/pg-pool.js

@@ -0,0 +1,233 @@
+import pg from "pg";
+import { ensureSchema as ensureSessionSchema } from "./pg-session-storage.js";
+import { ensureSchema as ensureToolResultSchema } from "./pg-tool-result-store.js";
+import { ensureSchema as ensureCostQuotaSchema } from "./pg-cost-quota.js";
+import { ensureSchema as ensureRateLimitSchema } from "./pg-rate-limiter.js";
+import { ensureSchema as ensureBreakerStateSchema } from "./pg-breaker-state.js";
+import { ensureSchema as ensureApprovalSchema } from "./pg-approval-store.js";
+import { ensureSchema as ensureOutcomeLedgerSchema } from "./pg-outcome-ledger.js";
+import { ensureSchema as ensureImageIndexSchema } from "./pg-image-index.js";
+import { ensureSchema as ensureImageBakeSchema } from "./pg-image-bake.js";
+export const PG_SCHEMA_STATEMENTS = [
+    `CREATE TABLE IF NOT EXISTS task_run (
+     task_id     VARCHAR(64)  NOT NULL,
+     session_id  VARCHAR(64)  NOT NULL,
+     owner       VARCHAR(190),
+     status      VARCHAR(16)  NOT NULL,
+     result      JSONB,
+     error       TEXT,
+     error_code  VARCHAR(64),
+     instance_id VARCHAR(64),
+     job_id      VARCHAR(64),
+     source      VARCHAR(64),
+     objective_preview VARCHAR(160),
+     cancel_requested  SMALLINT NOT NULL DEFAULT 0,
+     preempt_requested SMALLINT NOT NULL DEFAULT 0,
+     created_at  TIMESTAMPTZ(3) NOT NULL,
+     updated_at  TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (task_id)
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_task_run_session_status ON task_run (session_id, status)`,
+    `CREATE INDEX IF NOT EXISTS idx_task_run_owner ON task_run (owner)`,
+    `CREATE INDEX IF NOT EXISTS idx_task_run_created ON task_run (created_at)`,
+    `CREATE INDEX IF NOT EXISTS idx_task_run_job ON task_run (job_id)`,
+    `CREATE TABLE IF NOT EXISTS task_event (
+     task_id VARCHAR(64) NOT NULL,
+     seq     BIGINT      NOT NULL,
+     type    VARCHAR(24) NOT NULL,
+     data    JSONB,
+     ts      TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (task_id, seq)
+   )`,
+    `CREATE TABLE IF NOT EXISTS task_active (
+     session_id VARCHAR(64) NOT NULL,
+     task_id    VARCHAR(64) NOT NULL,
+     since      TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (session_id)
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_task_active_task ON task_active (task_id)`,
+    `CREATE TABLE IF NOT EXISTS checkpoint (
+     token        VARCHAR(120) NOT NULL,
+     scope        VARCHAR(190) NOT NULL,
+     session_id   VARCHAR(190) NOT NULL,
+     version      INT          NOT NULL DEFAULT 1,
+     status       VARCHAR(16)  NOT NULL DEFAULT 'pending',
+     tool_name    VARCHAR(190),
+     tool_call_id VARCHAR(190),
+     tool_input   JSONB,
+     checkpoint   JSONB        NOT NULL,
+     outcome      JSONB,
+     deadline     BIGINT,
+     created_at   BIGINT       NOT NULL,
+     decided_at   BIGINT,
+     rev          BIGINT       NOT NULL DEFAULT 0,
+     reopen_reason VARCHAR(32),
+     terminal_at  BIGINT,
+     gate_kind    VARCHAR(32),
+     bound_input_hash VARCHAR(190),
+     pending_steer TEXT,
+     risk_descriptor TEXT,
+     PRIMARY KEY (token)
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_checkpoint_status_deadline ON checkpoint (status, deadline)`,
+    `CREATE INDEX IF NOT EXISTS idx_checkpoint_session_status ON checkpoint (session_id, status)`,
+    `CREATE TABLE IF NOT EXISTS checkpoint_ctx (
+     session_id VARCHAR(190) NOT NULL,
+     ctx        JSONB        NOT NULL,
+     updated_at BIGINT       NOT NULL,
+     PRIMARY KEY (session_id)
+   )`,
+    `CREATE TABLE IF NOT EXISTS resume_anchor (
+     session_id VARCHAR(64)    NOT NULL,
+     event_id   VARCHAR(64)    NOT NULL,
+     entry_id   VARCHAR(64)    NOT NULL,
+     owner      VARCHAR(190),
+     created_at TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (session_id, event_id)
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_resume_anchor_session ON resume_anchor (session_id)`,
+    `CREATE TABLE IF NOT EXISTS approval_exemption (
+     session_id VARCHAR(64)    NOT NULL,
+     tool_name  VARCHAR(190)   NOT NULL,
+     granted_by VARCHAR(190),
+     created_at TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (session_id, tool_name)
+   )`,
+    `CREATE TABLE IF NOT EXISTS session_policy (
+     policy_key CHAR(64)       NOT NULL,
+     session_id VARCHAR(64)    NOT NULL,
+     principal  VARCHAR(190),
+     rules      JSONB          NOT NULL,
+     rev        BIGINT         NOT NULL,
+     created_at TIMESTAMPTZ(3) NOT NULL,
+     updated_at TIMESTAMPTZ(3) NOT NULL,
+     PRIMARY KEY (policy_key)
+   )`,
+    `ALTER TABLE session_policy ADD COLUMN IF NOT EXISTS principal VARCHAR(190)`,
+    `CREATE INDEX IF NOT EXISTS idx_session_policy_session ON session_policy (session_id)`,
+    `CREATE TABLE IF NOT EXISTS snapshot_manifest (
+     scope     VARCHAR(64)   NOT NULL,
+     snap_key  VARCHAR(64)   NOT NULL,
+     rel_path  VARCHAR(1024) NOT NULL,
+     blob_hash CHAR(64)      NOT NULL
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_snapshot_manifest_sk ON snapshot_manifest (scope, snap_key)`,
+    `CREATE INDEX IF NOT EXISTS idx_snapshot_manifest_blob ON snapshot_manifest (blob_hash)`,
+    `CREATE TABLE IF NOT EXISTS snapshot_blob (
+     blob_hash  CHAR(64)       PRIMARY KEY,
+     byte_len   BIGINT         NOT NULL,
+     bytes      BYTEA          NULL,
+     created_at TIMESTAMPTZ(3) NOT NULL
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_snapshot_blob_created ON snapshot_blob (created_at)`,
+    `ALTER TABLE snapshot_blob ALTER COLUMN bytes DROP NOT NULL`,
+    `CREATE TABLE IF NOT EXISTS workflow_journal (
+     run_id     VARCHAR(191) NOT NULL,
+     ordinal    INT          NOT NULL,
+     scope      VARCHAR(190) NOT NULL DEFAULT '',
+     call_key   VARCHAR(255) NOT NULL,
+     result     TEXT         NOT NULL,
+     created_at BIGINT       NOT NULL,
+     PRIMARY KEY (run_id, ordinal)
+   )`,
+    `ALTER TABLE workflow_journal ADD COLUMN IF NOT EXISTS scope VARCHAR(190) NOT NULL DEFAULT ''`,
+    `CREATE TABLE IF NOT EXISTS workflow_run (
+     id         VARCHAR(191) NOT NULL,
+     scope      VARCHAR(190) NOT NULL,
+     status     VARCHAR(16)  NOT NULL,
+     run        TEXT         NOT NULL,
+     rev        INTEGER      NOT NULL DEFAULT 0,
+     created_at BIGINT       NOT NULL,
+     ended_at   BIGINT,
+     PRIMARY KEY (id)
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_wfrun_scope_created ON workflow_run (scope, created_at)`,
+    `CREATE INDEX IF NOT EXISTS idx_wfrun_scope_status ON workflow_run (scope, status)`,
+    `CREATE TABLE IF NOT EXISTS workflow_completion_inbox (
+     seq         BIGSERIAL,
+     session_id  VARCHAR(190) NOT NULL,
+     run_id      VARCHAR(191) NOT NULL,
+     owner       VARCHAR(190),
+     status      VARCHAR(16)  NOT NULL,
+     summary     TEXT         NOT NULL,
+     enqueued_at BIGINT       NOT NULL,
+     kind        VARCHAR(24),
+     payload     TEXT,
+     PRIMARY KEY (session_id, run_id)
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_wfinbox_session_seq ON workflow_completion_inbox (session_id, seq)`,
+    `ALTER TABLE workflow_completion_inbox ADD COLUMN IF NOT EXISTS kind VARCHAR(24)`,
+    `ALTER TABLE workflow_completion_inbox ADD COLUMN IF NOT EXISTS payload TEXT`,
+    `CREATE TABLE IF NOT EXISTS workflow_inbox_fence (
+     session_id  VARCHAR(190) NOT NULL,
+     kind        VARCHAR(8)   NOT NULL,
+     run_id      VARCHAR(191) NOT NULL DEFAULT '',
+     owner       VARCHAR(190),
+     owner_known SMALLINT     NOT NULL DEFAULT 0,
+     until_ms    BIGINT       NOT NULL,
+     PRIMARY KEY (session_id, kind, run_id)
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_wffence_until ON workflow_inbox_fence (until_ms)`,
+    `CREATE TABLE IF NOT EXISTS workflow_notify_journal (
+     run_id         VARCHAR(191) NOT NULL,
+     scope          VARCHAR(190) NOT NULL,
+     acked          SMALLINT     NOT NULL DEFAULT 0,
+     source_task_id VARCHAR(191),
+     principal      VARCHAR(190),
+     created_at     BIGINT       NOT NULL,
+     acked_at       BIGINT,
+     PRIMARY KEY (run_id)
+   )`,
+    `CREATE INDEX IF NOT EXISTS idx_wfnotify_acked ON workflow_notify_journal (acked)`,
+];
+export function pgPoolOptions(pgCfg, dbQueryTimeoutMs) {
+    return {
+        host: pgCfg.host,
+        port: pgCfg.port,
+        user: pgCfg.user,
+        password: pgCfg.password,
+        database: pgCfg.database,
+        ...(pgCfg.connectionLimit ? { max: pgCfg.connectionLimit } : {}),
+        ...(dbQueryTimeoutMs ? { statement_timeout: dbQueryTimeoutMs, query_timeout: dbQueryTimeoutMs + 5_000 } : {}),
+    };
+}
+export function createPgPool(opts) {
+    return typeof opts === "string" ? new pg.Pool({ connectionString: opts }) : new pg.Pool(opts);
+}
+const ENSURE_SCHEMA_LOCK_KEY = 4906;
+export async function ensurePgSchema(pool) {
+    const client = await pool.connect();
+    let locked = false;
+    try {
+        try {
+            await client.query("SELECT pg_advisory_lock($1)", [ENSURE_SCHEMA_LOCK_KEY]);
+            locked = true;
+        }
+        catch (err) {
+            console.warn(`[ensurePgSchema] pg_advisory_lock(${ENSURE_SCHEMA_LOCK_KEY}) failed; running DDL unserialized:`, err);
+        }
+        for (const stmt of PG_SCHEMA_STATEMENTS)
+            await client.query(stmt);
+        await ensureSessionSchema(client);
+        await ensureToolResultSchema(client);
+        await ensureCostQuotaSchema(client);
+        await ensureRateLimitSchema(client);
+        await ensureBreakerStateSchema(client);
+        await ensureApprovalSchema(client);
+        await ensureOutcomeLedgerSchema(client);
+        await ensureImageIndexSchema(client);
+        await ensureImageBakeSchema(client);
+    }
+    finally {
+        if (locked) {
+            try {
+                await client.query("SELECT pg_advisory_unlock($1)", [ENSURE_SCHEMA_LOCK_KEY]);
+            }
+            catch (err) {
+                console.warn(`[ensurePgSchema] pg_advisory_unlock(${ENSURE_SCHEMA_LOCK_KEY}) failed (lock auto-frees on connection close):`, err);
+            }
+        }
+        client.release();
+    }
+}
+//# sourceMappingURL=pg-pool.js.map

package/dist/plugins/pg-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-pool.js","sourceRoot":"","sources":["../../src/plugins/pg-pool.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,MAAM,IAAI,CAAC;AAIpB,OAAO,EAAE,YAAY,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,YAAY,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,YAAY,IAAI,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,YAAY,IAAI,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,YAAY,IAAI,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,YAAY,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,YAAY,IAAI,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,YAAY,IAAI,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,YAAY,IAAI,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3E,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD;;;;;;;;;;;;;;;;;KAiBG;IACH,yFAAyF;IACzF,mEAAmE;IACnE,0EAA0E;IAC1E,kEAAkE;IAClE;;;;;;;KAOG;IACH;;;;;KAKG;IACH,0EAA0E;IAE1E;;;;;;;;;;;;;;;;;;;;;;KAsBG;IACH,4FAA4F;IAC5F,6FAA6F;IAC7F;;;;;KAKG;IAEH;;;;;;;KAOG;IACH,oFAAoF;IAGpF;;;;;;KAMG;IAIH;;;;;;;;;KASG;IAIH,4EAA4E;IAC5E,sFAAsF;IAGtF;;;;;KAKG;IACH,4FAA4F;IAC5F,wFAAwF;IAKxF;;;;;KAKG;IACH,oFAAoF;IAGpF,4DAA4D;IAK5D;;;;;;;;KAQG;IAIH,8FAA8F;IAG9F;;;;;;;;;KASG;IACH,wFAAwF;IACxF,mFAAmF;IACnF;;;;;;;;;;;KAWG;IACH,mGAAmG;IAEnG,iFAAiF;IACjF,6EAA6E;IAC7E;;;;;;;;KAQG;IACH,iFAAiF;IAEjF;;;;;;;;;KASG;IACH,kFAAkF;CACnF,CAAC;AAaF,MAAM,UAAU,aAAa,CAAC,KAAuC,EAAE,gBAAyB;IAC9F,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9G,CAAC;AACJ,CAAC;AAID,MAAM,UAAU,YAAY,CAAC,IAA4B;IACvD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChG,CAAC;AAID,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAapC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAa;IAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QAIH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC5E,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,qCAAqC,sBAAsB,qCAAqC,EAAE,GAAG,CAAC,CAAC;QACtH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,oBAAoB;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,sBAAsB,iDAAiD,EAAE,GAAG,CAAC,CAAC;YACpI,CAAC;QACH,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}