@signetai/connector-codex 0.206.8 → 0.208.0

package/dist/index.js

@@ -7,7 +7,7 @@ import { basename as basename3, dirname as dirname6, join as join4 } from "node:
 
 // ../../../libs/connector-base/dist/index.js
 import { randomBytes } from "node:crypto";
-import { existsSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname as dirname2, isAbsolute, join as join3, relative, sep } from "node:path";
 import { createRequire } from "node:module";
 import { dirname, join } from "node:path";
@@ -15620,6 +15620,120 @@ function up132(db) {
 			ON epistemic_assertions(agent_id, subject_entity_id, status, asserted_at DESC, created_at DESC);
 	`);
 }
+function up133(db) {
+  db.exec(`
+		CREATE TABLE IF NOT EXISTS memory_head_revisions (
+			id TEXT PRIMARY KEY,
+			agent_id TEXT NOT NULL,
+			revision INTEGER NOT NULL,
+			content TEXT NOT NULL,
+			content_hash TEXT NOT NULL,
+			rendered_token_count INTEGER NOT NULL,
+			pass_id TEXT NOT NULL,
+			base_revision INTEGER NOT NULL,
+			base_hash TEXT NOT NULL,
+			created_at TEXT NOT NULL,
+			UNIQUE(agent_id, revision)
+		);
+		CREATE INDEX IF NOT EXISTS idx_memory_head_revisions_agent
+			ON memory_head_revisions(agent_id, revision DESC);
+		CREATE TABLE IF NOT EXISTS memory_head_entries (
+			entry_id TEXT PRIMARY KEY,
+			agent_id TEXT NOT NULL,
+			canonical_text TEXT NOT NULL,
+			entry_hash TEXT NOT NULL,
+			status TEXT NOT NULL CHECK(status IN ('active','removed','superseded')),
+			first_revision INTEGER NOT NULL,
+			last_revision INTEGER NOT NULL,
+			created_at TEXT NOT NULL,
+			updated_at TEXT NOT NULL
+		);
+		CREATE INDEX IF NOT EXISTS idx_memory_head_entries_agent
+			ON memory_head_entries(agent_id, entry_id, last_revision DESC);
+		CREATE TABLE IF NOT EXISTS memory_head_revision_entries (
+			agent_id TEXT NOT NULL,
+			revision INTEGER NOT NULL,
+			entry_id TEXT NOT NULL,
+			ordinal INTEGER NOT NULL,
+			operation TEXT NOT NULL CHECK(operation IN ('add','update','remove','retain')),
+			provenance_json TEXT NOT NULL,
+			PRIMARY KEY(agent_id, revision, entry_id),
+			UNIQUE(agent_id, revision, ordinal)
+		);
+		CREATE INDEX IF NOT EXISTS idx_memory_head_revision_entries_entry
+			ON memory_head_revision_entries(agent_id, entry_id, revision DESC);
+	`);
+  const columns = db.prepare("PRAGMA table_info(memory_md_heads)").all();
+  const names = new Set(columns.map((column) => String(column.name)));
+  if (!names.has("revision_id"))
+    db.exec("ALTER TABLE memory_md_heads ADD COLUMN revision_id TEXT");
+  if (!names.has("pass_id"))
+    db.exec("ALTER TABLE memory_md_heads ADD COLUMN pass_id TEXT");
+  if (!names.has("format_version"))
+    db.exec("ALTER TABLE memory_md_heads ADD COLUMN format_version INTEGER NOT NULL DEFAULT 1");
+}
+function up134(db) {
+  db.exec(`
+		CREATE TABLE memory_head_entries_v134 (
+			entry_id TEXT NOT NULL, agent_id TEXT NOT NULL, canonical_text TEXT NOT NULL,
+			entry_hash TEXT NOT NULL, status TEXT NOT NULL CHECK(status IN ('active','removed','superseded')),
+			first_revision INTEGER NOT NULL, last_revision INTEGER NOT NULL,
+			created_at TEXT NOT NULL, updated_at TEXT NOT NULL,
+			PRIMARY KEY(agent_id, entry_id)
+		);
+		INSERT INTO memory_head_entries_v134
+		 SELECT entry_id, agent_id, canonical_text, entry_hash, status, first_revision, last_revision, created_at, updated_at
+		 FROM memory_head_entries;
+		DROP TABLE memory_head_entries;
+		ALTER TABLE memory_head_entries_v134 RENAME TO memory_head_entries;
+		CREATE INDEX idx_memory_head_entries_agent
+		 ON memory_head_entries(agent_id, entry_id, last_revision DESC);
+	`);
+}
+function up135(db) {
+  db.exec(`
+		CREATE TABLE IF NOT EXISTS memory_head_publications (
+			agent_id TEXT NOT NULL,
+			revision INTEGER NOT NULL,
+			revision_id TEXT NOT NULL,
+			status TEXT NOT NULL CHECK(status IN ('pending', 'completed')),
+			created_at TEXT NOT NULL,
+			completed_at TEXT,
+			PRIMARY KEY(agent_id, revision),
+			UNIQUE(agent_id, revision_id)
+		);
+		CREATE INDEX IF NOT EXISTS idx_memory_head_publications_pending
+			ON memory_head_publications(agent_id, status, revision DESC);
+	`);
+}
+function up136(db) {
+  const cols = new Set(db.prepare("PRAGMA table_info(memory_head_revisions)").all().map((r2) => r2.name));
+  for (const [name, type] of [
+    ["entry_id", "TEXT"],
+    ["entry_text", "TEXT"],
+    ["operation", "TEXT"],
+    ["source_refs_json", "TEXT"],
+    ["supporting_quotes_json", "TEXT"]
+  ]) {
+    if (!cols.has(name))
+      db.exec(`ALTER TABLE memory_head_revisions ADD COLUMN ${name} ${type}`);
+  }
+  db.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_memory_head_revisions_entry ON memory_head_revisions(agent_id, revision, entry_id)");
+}
+function up137(db) {
+  const cols = new Set(db.prepare("PRAGMA table_info(dreaming_passes)").all().map((r2) => r2.name));
+  for (const [name, type] of [
+    ["head_revision", "INTEGER"],
+    ["head_hash", "TEXT"],
+    ["head_added", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_updated", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_removed", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_deferred", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_no_op", "INTEGER NOT NULL DEFAULT 0"]
+  ])
+    if (!cols.has(name))
+      db.exec(`ALTER TABLE dreaming_passes ADD COLUMN ${name} ${type}`);
+}
 var MIGRATIONS = [
   {
     version: 1,
@@ -16674,6 +16788,41 @@ var MIGRATIONS = [
     name: "observer-scoped-epistemic-assertions",
     up: up132,
     artifacts: { tables: ["epistemic_assertions"] }
+  },
+  {
+    version: 133,
+    name: "dreaming-memory-head",
+    up: up133,
+    artifacts: { tables: ["memory_head_revisions", "memory_head_entries", "memory_head_revision_entries"] }
+  },
+  {
+    version: 134,
+    name: "scope-memory-head-entries",
+    up: up134,
+    artifacts: { tables: ["memory_head_entries"] }
+  },
+  {
+    version: 135,
+    name: "memory-head-publication",
+    up: up135,
+    artifacts: { tables: ["memory_head_publications"] }
+  },
+  {
+    version: 136,
+    name: "memory-head-revisions",
+    up: up136,
+    artifacts: { tables: ["memory_head_revisions"] }
+  },
+  {
+    version: 137,
+    name: "dreaming-head-manifest",
+    up: up137,
+    artifacts: {
+      columns: [
+        { table: "dreaming_passes", column: "head_revision" },
+        { table: "dreaming_passes", column: "head_hash" }
+      ]
+    }
   }
 ];
 var LATEST_SCHEMA_VERSION = MIGRATIONS[MIGRATIONS.length - 1]?.version ?? 0;
@@ -16709,16 +16858,42 @@ function classifyError(error) {
   }
   return { state: "corrupt", message };
 }
+function tryRequireOverride() {
+  const override = process.env.SIGNET_KEYRING_NATIVE_MODULE_PATH?.trim();
+  if (!override)
+    return null;
+  const isAbsolute2 = override.startsWith("/") || /^\\\\[^\\]+\\[^\\]+/.test(override) || /^[A-Za-z]:[\\/]/.test(override);
+  if (!isAbsolute2)
+    return null;
+  try {
+    return require2(override);
+  } catch {
+    return null;
+  }
+}
 async function loadModule() {
-  modulePromise ??= Promise.resolve().then(() => __toESM2(require_keyring(), 1)).catch(() => null);
+  modulePromise ??= (async () => {
+    const override = process.env.SIGNET_KEYRING_NATIVE_MODULE_PATH?.trim();
+    if (override)
+      return tryRequireOverride();
+    return await Promise.resolve().then(() => __toESM2(require_keyring(), 1)).catch(() => null);
+  })();
   return modulePromise;
 }
 function loadModuleSync() {
   if (syncModule !== undefined)
     return syncModule;
+  if (process.env.SIGNET_KEYRING_NATIVE_MODULE_PATH?.trim()) {
+    syncModule = tryRequireOverride();
+    return syncModule;
+  }
+  const override = tryRequireOverride();
+  if (override) {
+    syncModule = override;
+    return syncModule;
+  }
   try {
-    const mod = require2("@napi-rs/keyring");
-    syncModule = mod;
+    syncModule = require2("@napi-rs/keyring");
   } catch {
     syncModule = null;
   }
@@ -17123,6 +17298,12 @@ class BaseConnector {
     const cleaned = stripSignetBlock(raw);
     if (cleaned === raw)
       return null;
+    const root = realpathSync(basePath);
+    const parent = realpathSync(dirname2(agentsPath));
+    const rel = relative(root, join3(parent, "AGENTS.md"));
+    if (rel.startsWith("..") || isAbsolute(rel)) {
+      throw new Error(`Target path escapes validated root: ${agentsPath}`);
+    }
     const tmp = join3(basePath, `.${randomBytes(6).toString("hex")}.tmp`);
     try {
       writeFileSync(tmp, cleaned, "utf-8");
@@ -28605,7 +28786,7 @@ function memoriesFtsNeedsTokenizerRepair2(sql) {
     return true;
   return !normalized.includes(`tokenize='${MEMORIES_FTS_TOKENIZER2}'`);
 }
-function up133(db) {
+function up138(db) {
   db.exec(`
 		CREATE TABLE IF NOT EXISTS schema_migrations (
 			version INTEGER PRIMARY KEY,
@@ -29089,7 +29270,7 @@ function addColumnIfMissing52(db, table, column, definition) {
     db.exec(`ALTER TABLE ${table} ADD COLUMN ${column} ${definition}`);
   }
 }
-function up134(db) {
+function up139(db) {
   db.exec(`
 		CREATE TABLE IF NOT EXISTS ingestion_jobs (
 			id TEXT PRIMARY KEY,
@@ -32844,11 +33025,125 @@ function up1322(db) {
 			ON epistemic_assertions(agent_id, subject_entity_id, status, asserted_at DESC, created_at DESC);
 	`);
 }
+function up1332(db) {
+  db.exec(`
+		CREATE TABLE IF NOT EXISTS memory_head_revisions (
+			id TEXT PRIMARY KEY,
+			agent_id TEXT NOT NULL,
+			revision INTEGER NOT NULL,
+			content TEXT NOT NULL,
+			content_hash TEXT NOT NULL,
+			rendered_token_count INTEGER NOT NULL,
+			pass_id TEXT NOT NULL,
+			base_revision INTEGER NOT NULL,
+			base_hash TEXT NOT NULL,
+			created_at TEXT NOT NULL,
+			UNIQUE(agent_id, revision)
+		);
+		CREATE INDEX IF NOT EXISTS idx_memory_head_revisions_agent
+			ON memory_head_revisions(agent_id, revision DESC);
+		CREATE TABLE IF NOT EXISTS memory_head_entries (
+			entry_id TEXT PRIMARY KEY,
+			agent_id TEXT NOT NULL,
+			canonical_text TEXT NOT NULL,
+			entry_hash TEXT NOT NULL,
+			status TEXT NOT NULL CHECK(status IN ('active','removed','superseded')),
+			first_revision INTEGER NOT NULL,
+			last_revision INTEGER NOT NULL,
+			created_at TEXT NOT NULL,
+			updated_at TEXT NOT NULL
+		);
+		CREATE INDEX IF NOT EXISTS idx_memory_head_entries_agent
+			ON memory_head_entries(agent_id, entry_id, last_revision DESC);
+		CREATE TABLE IF NOT EXISTS memory_head_revision_entries (
+			agent_id TEXT NOT NULL,
+			revision INTEGER NOT NULL,
+			entry_id TEXT NOT NULL,
+			ordinal INTEGER NOT NULL,
+			operation TEXT NOT NULL CHECK(operation IN ('add','update','remove','retain')),
+			provenance_json TEXT NOT NULL,
+			PRIMARY KEY(agent_id, revision, entry_id),
+			UNIQUE(agent_id, revision, ordinal)
+		);
+		CREATE INDEX IF NOT EXISTS idx_memory_head_revision_entries_entry
+			ON memory_head_revision_entries(agent_id, entry_id, revision DESC);
+	`);
+  const columns = db.prepare("PRAGMA table_info(memory_md_heads)").all();
+  const names = new Set(columns.map((column) => String(column.name)));
+  if (!names.has("revision_id"))
+    db.exec("ALTER TABLE memory_md_heads ADD COLUMN revision_id TEXT");
+  if (!names.has("pass_id"))
+    db.exec("ALTER TABLE memory_md_heads ADD COLUMN pass_id TEXT");
+  if (!names.has("format_version"))
+    db.exec("ALTER TABLE memory_md_heads ADD COLUMN format_version INTEGER NOT NULL DEFAULT 1");
+}
+function up1342(db) {
+  db.exec(`
+		CREATE TABLE memory_head_entries_v134 (
+			entry_id TEXT NOT NULL, agent_id TEXT NOT NULL, canonical_text TEXT NOT NULL,
+			entry_hash TEXT NOT NULL, status TEXT NOT NULL CHECK(status IN ('active','removed','superseded')),
+			first_revision INTEGER NOT NULL, last_revision INTEGER NOT NULL,
+			created_at TEXT NOT NULL, updated_at TEXT NOT NULL,
+			PRIMARY KEY(agent_id, entry_id)
+		);
+		INSERT INTO memory_head_entries_v134
+		 SELECT entry_id, agent_id, canonical_text, entry_hash, status, first_revision, last_revision, created_at, updated_at
+		 FROM memory_head_entries;
+		DROP TABLE memory_head_entries;
+		ALTER TABLE memory_head_entries_v134 RENAME TO memory_head_entries;
+		CREATE INDEX idx_memory_head_entries_agent
+		 ON memory_head_entries(agent_id, entry_id, last_revision DESC);
+	`);
+}
+function up1352(db) {
+  db.exec(`
+		CREATE TABLE IF NOT EXISTS memory_head_publications (
+			agent_id TEXT NOT NULL,
+			revision INTEGER NOT NULL,
+			revision_id TEXT NOT NULL,
+			status TEXT NOT NULL CHECK(status IN ('pending', 'completed')),
+			created_at TEXT NOT NULL,
+			completed_at TEXT,
+			PRIMARY KEY(agent_id, revision),
+			UNIQUE(agent_id, revision_id)
+		);
+		CREATE INDEX IF NOT EXISTS idx_memory_head_publications_pending
+			ON memory_head_publications(agent_id, status, revision DESC);
+	`);
+}
+function up1362(db) {
+  const cols = new Set(db.prepare("PRAGMA table_info(memory_head_revisions)").all().map((r3) => r3.name));
+  for (const [name, type] of [
+    ["entry_id", "TEXT"],
+    ["entry_text", "TEXT"],
+    ["operation", "TEXT"],
+    ["source_refs_json", "TEXT"],
+    ["supporting_quotes_json", "TEXT"]
+  ]) {
+    if (!cols.has(name))
+      db.exec(`ALTER TABLE memory_head_revisions ADD COLUMN ${name} ${type}`);
+  }
+  db.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_memory_head_revisions_entry ON memory_head_revisions(agent_id, revision, entry_id)");
+}
+function up1372(db) {
+  const cols = new Set(db.prepare("PRAGMA table_info(dreaming_passes)").all().map((r3) => r3.name));
+  for (const [name, type] of [
+    ["head_revision", "INTEGER"],
+    ["head_hash", "TEXT"],
+    ["head_added", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_updated", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_removed", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_deferred", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_no_op", "INTEGER NOT NULL DEFAULT 0"]
+  ])
+    if (!cols.has(name))
+      db.exec(`ALTER TABLE dreaming_passes ADD COLUMN ${name} ${type}`);
+}
 var MIGRATIONS2 = [
   {
     version: 1,
     name: "baseline",
-    up: up133,
+    up: up138,
     artifacts: { tables: ["memories", "conversations", "embeddings"] }
   },
   {
@@ -32926,7 +33221,7 @@ var MIGRATIONS2 = [
   {
     version: 13,
     name: "ingestion-tracking",
-    up: up134,
+    up: up139,
     artifacts: {
       columns: [
         { table: "memories", column: "source_path" },
@@ -33898,6 +34193,41 @@ var MIGRATIONS2 = [
     name: "observer-scoped-epistemic-assertions",
     up: up1322,
     artifacts: { tables: ["epistemic_assertions"] }
+  },
+  {
+    version: 133,
+    name: "dreaming-memory-head",
+    up: up1332,
+    artifacts: { tables: ["memory_head_revisions", "memory_head_entries", "memory_head_revision_entries"] }
+  },
+  {
+    version: 134,
+    name: "scope-memory-head-entries",
+    up: up1342,
+    artifacts: { tables: ["memory_head_entries"] }
+  },
+  {
+    version: 135,
+    name: "memory-head-publication",
+    up: up1352,
+    artifacts: { tables: ["memory_head_publications"] }
+  },
+  {
+    version: 136,
+    name: "memory-head-revisions",
+    up: up1362,
+    artifacts: { tables: ["memory_head_revisions"] }
+  },
+  {
+    version: 137,
+    name: "dreaming-head-manifest",
+    up: up1372,
+    artifacts: {
+      columns: [
+        { table: "dreaming_passes", column: "head_revision" },
+        { table: "dreaming_passes", column: "head_hash" }
+      ]
+    }
   }
 ];
 var LATEST_SCHEMA_VERSION2 = MIGRATIONS2[MIGRATIONS2.length - 1]?.version ?? 0;
@@ -33940,16 +34270,42 @@ function classifyError2(error) {
   }
   return { state: "corrupt", message };
 }
+function tryRequireOverride2() {
+  const override = process.env.SIGNET_KEYRING_NATIVE_MODULE_PATH?.trim();
+  if (!override)
+    return null;
+  const isAbsolute2 = override.startsWith("/") || /^\\\\[^\\]+\\[^\\]+/.test(override) || /^[A-Za-z]:[\\/]/.test(override);
+  if (!isAbsolute2)
+    return null;
+  try {
+    return require22(override);
+  } catch {
+    return null;
+  }
+}
 async function loadModule2() {
-  modulePromise2 ??= Promise.resolve().then(() => __toESM(require_keyring2(), 1)).catch(() => null);
+  modulePromise2 ??= (async () => {
+    const override = process.env.SIGNET_KEYRING_NATIVE_MODULE_PATH?.trim();
+    if (override)
+      return tryRequireOverride2();
+    return await Promise.resolve().then(() => __toESM(require_keyring2(), 1)).catch(() => null);
+  })();
   return modulePromise2;
 }
 function loadModuleSync2() {
   if (syncModule2 !== undefined)
     return syncModule2;
+  if (process.env.SIGNET_KEYRING_NATIVE_MODULE_PATH?.trim()) {
+    syncModule2 = tryRequireOverride2();
+    return syncModule2;
+  }
+  const override = tryRequireOverride2();
+  if (override) {
+    syncModule2 = override;
+    return syncModule2;
+  }
   try {
-    const mod = require22("@napi-rs/keyring");
-    syncModule2 = mod;
+    syncModule2 = require22("@napi-rs/keyring");
   } catch {
     syncModule2 = null;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@signetai/connector-codex",
-  "version": "0.206.8",
+  "version": "0.208.0",
   "description": "Signet connector for Codex CLI",
   "type": "module",
   "main": "./dist/index.js",
@@ -24,8 +24,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@signetai/connector-base": "0.206.8",
-    "@signetai/core": "0.206.8"
+    "@signetai/connector-base": "0.208.0",
+    "@signetai/core": "0.208.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",