@stigmer/server 3.25.0 → 3.27.0

package/dist/store/sqlite/migrations.d.ts

@@ -1,8 +1,9 @@
 /**
  * Versioned schema migrations — ports the inline chain in
  * backend/libs/go/store/sqlite/store.go (v1–v6, DDL character-faithful),
- * adds v7, the OD-3 consolidation (D2 §3), and v8, the by-resource
- * oauth_grant index (the channel teardown's query pattern, C3 Stage 6).
+ * adds v7, the OD-3 consolidation (D2 §3), v8, the by-resource
+ * oauth_grant index (the channel teardown's query pattern, C3 Stage 6),
+ * and the later steps each named at its constant below.
  *
  * Schema continuity across cutover is the design point: a database the Go
  * server created at any version migrates forward through the SAME steps Go
@@ -45,10 +46,15 @@ export declare const SCHEMA_VERSION_8 = 8;
 export declare const SCHEMA_VERSION_9 = 9;
 /** v10: every row holding the retired public visibility level moved to org. */
 export declare const SCHEMA_VERSION_10 = 10;
+/** v11: the list index's columns, key table and indexes (DDL only). */
+export declare const SCHEMA_VERSION_11 = 11;
 /** Target version for new databases. */
-export declare const CURRENT_SCHEMA_VERSION = 10;
-/** Applies all pending migrations in order. */
-export declare function runMigrations(db: DatabaseSync): void;
+export declare const CURRENT_SCHEMA_VERSION = 11;
+/**
+ * Applies every pending migration up to `targetVersion` in order — all of
+ * them unless a test builds the database a given step starts from.
+ */
+export declare function runMigrations(db: DatabaseSync, targetVersion?: number): void;
 /** Current schema version; 0 when none has been recorded yet. */
 export declare function getSchemaVersion(db: DatabaseSync): number;
 //# sourceMappingURL=migrations.d.ts.map

package/dist/store/sqlite/migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../src/store/sqlite/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAOhD,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,gFAAgF;AAChF,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,+EAA+E;AAC/E,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,wCAAwC;AACxC,eAAO,MAAM,sBAAsB,KAAoB,CAAC;AAExD,+CAA+C;AAC/C,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CA4BpD;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,YAAY,GAAG,MAAM,CAKzD"}
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../src/store/sqlite/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAOhD,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,gFAAgF;AAChF,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,+EAA+E;AAC/E,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,wCAAwC;AACxC,eAAO,MAAM,sBAAsB,KAAoB,CAAC;AAExD;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,YAAY,EAChB,aAAa,GAAE,MAA+B,GAC7C,IAAI,CA6BN;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,YAAY,GAAG,MAAM,CAKzD"}

package/dist/store/sqlite/migrations.js

@@ -13,10 +13,15 @@ export const SCHEMA_VERSION_8 = 8;
 export const SCHEMA_VERSION_9 = 9;
 /** v10: every row holding the retired public visibility level moved to org. */
 export const SCHEMA_VERSION_10 = 10;
+/** v11: the list index's columns, key table and indexes (DDL only). */
+export const SCHEMA_VERSION_11 = 11;
 /** Target version for new databases. */
-export const CURRENT_SCHEMA_VERSION = SCHEMA_VERSION_10;
-/** Applies all pending migrations in order. */
-export function runMigrations(db) {
+export const CURRENT_SCHEMA_VERSION = SCHEMA_VERSION_11;
+/**
+ * Applies every pending migration up to `targetVersion` in order — all of
+ * them unless a test builds the database a given step starts from.
+ */
+export function runMigrations(db, targetVersion = CURRENT_SCHEMA_VERSION) {
     db.exec(`
     CREATE TABLE IF NOT EXISTS schema_version (
       version INTEGER PRIMARY KEY,
@@ -35,9 +40,10 @@ export function runMigrations(db) {
         [SCHEMA_VERSION_8, migrateToV8],
         [SCHEMA_VERSION_9, migrateToV9],
         [SCHEMA_VERSION_10, migrateToV10],
+        [SCHEMA_VERSION_11, migrateToV11],
     ];
     for (const [version, migrate] of chain) {
-        if (currentVersion < version) {
+        if (currentVersion < version && version <= targetVersion) {
             applyInTransaction(db, version, migrate);
         }
     }
@@ -344,4 +350,44 @@ function migrateToV10(db) {
         }
     }
 }
+/**
+ * v11: the list index (../list-index.ts) — schema only, the Postgres
+ * driver's v6 in this engine's terms (postgres/migrations.ts gives the
+ * reasons for every column and index). Existing rows, a Go-era database's
+ * included, arrive unproven and are derived by the store's reconciliation
+ * at open. sqlite compares text as bytes (BINARY) by default, the order
+ * list-index.ts merges in, so no collation is spelled here. The store now
+ * writes `updated_at` to the millisecond and the stamp from the same
+ * expression in the same statement; a writer that does not know the index
+ * writes `datetime('now')`, whole seconds, which can never equal a stamp.
+ */
+function migrateToV11(db) {
+    db.exec(`
+    ALTER TABLE resources ADD COLUMN list_org TEXT;
+    ALTER TABLE resources ADD COLUMN list_created_at TEXT;
+    ALTER TABLE resources ADD COLUMN list_index_revision INTEGER;
+    ALTER TABLE resources ADD COLUMN list_indexed_at TEXT;
+
+    CREATE INDEX idx_resources_list_org
+      ON resources (kind, list_org, list_created_at, id);
+    CREATE INDEX idx_resources_list_created
+      ON resources (kind, list_created_at, id);
+    CREATE INDEX idx_resources_list_revision
+      ON resources (kind, list_index_revision);
+    CREATE INDEX idx_resources_list_unproven
+      ON resources (kind, id) WHERE list_indexed_at IS NOT updated_at;
+
+    CREATE TABLE resource_list_keys (
+      kind TEXT NOT NULL,
+      id TEXT NOT NULL,
+      key TEXT NOT NULL,
+      value TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      PRIMARY KEY (kind, id, key)
+    ) WITHOUT ROWID;
+
+    CREATE INDEX idx_resource_list_keys_lookup
+      ON resource_list_keys (kind, key, value, created_at, id);
+  `);
+}
 //# sourceMappingURL=migrations.js.map

package/dist/store/sqlite/migrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../../src/store/sqlite/migrations.ts"],"names":[],"mappings":"AAkCA,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,wDAAwD;AACxD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,wCAAwC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AAExD,+CAA+C;AAC/C,MAAM,UAAU,aAAa,CAAC,EAAgB;IAC5C,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAiE;QAC1E,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,iBAAiB,EAAE,YAAY,CAAC;KAClC,CAAC;IAEF,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACvC,IAAI,cAAc,GAAG,OAAO,EAAE,CAAC;YAC7B,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAAC,EAAgB;IAC/C,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,iEAAiE,CAAC;SAC1E,GAAG,EAAqC,CAAC;IAC5C,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,kBAAkB,CACzB,EAAgB,EAChB,OAAe,EACf,OAAmC;IAEnC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,CAAC;QACZ,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3E,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;YAC1D,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,SAAS,WAAW,CAAC,EAAgB;IACnC,6EAA6E;IAC7E,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;GAUP,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;GAgBP,CAAC,CAAC;IAEH,yBAAyB,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAAC,EAAgB;IACjD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,4EAA4E,CAC7E;SACA,GAAG,EAKJ,CAAC;IAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB;+BAC2B,CAC5B,CAAC;IACF,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,8DAA8D;QAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAClE,SAAS,CAAC,qCAAqC;QACjD,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,EAAE,CAAC,OAAO,CAAC,sCAAsC,YAAY,GAAG,CAAC,CAAC,GAAG,CACnE,GAAG,WAAW,CACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;GAYP,CAAC,CAAC;AACL,CAAC;AAED,4DAA4D;AAC5D,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;GAMP,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;GAgBP,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;GAgBP,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDP,CAAC,CAAC;IAEH,sEAAsE;IACtE,qEAAqE;IACrE,sEAAsE;IACtE,kEAAkE;IAClE,KAAK,MAAM,KAAK,IAAI;QAClB,yEAAyE;QACzE,uFAAuF;KACxF,EAAE,CAAC;QACF,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;GAEP,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;GAGP,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,EAAgB;IACpC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB,uFAAuF,CACxF,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,8BAA8B,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CAAC,+CAA+C,CAAC;aACxD,GAAG,CAAC,KAAK,CAAC,IAAI,CAA4C,CAAC;QAC9D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,KAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,mDAAmD,MAAM,CAAC,KAAK,CAAC,EAAE,EAC1F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../../src/store/sqlite/migrations.ts"],"names":[],"mappings":"AAmCA,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,wDAAwD;AACxD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,uEAAuE;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,wCAAwC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AAExD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAgB,EAChB,gBAAwB,sBAAsB;IAE9C,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAiE;QAC1E,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,iBAAiB,EAAE,YAAY,CAAC;QACjC,CAAC,iBAAiB,EAAE,YAAY,CAAC;KAClC,CAAC;IAEF,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACvC,IAAI,cAAc,GAAG,OAAO,IAAI,OAAO,IAAI,aAAa,EAAE,CAAC;YACzD,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAAC,EAAgB;IAC/C,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,iEAAiE,CAAC;SAC1E,GAAG,EAAqC,CAAC;IAC5C,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,kBAAkB,CACzB,EAAgB,EAChB,OAAe,EACf,OAAmC;IAEnC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,CAAC;QACZ,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3E,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;YAC1D,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,SAAS,WAAW,CAAC,EAAgB;IACnC,6EAA6E;IAC7E,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;GAUP,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;GAgBP,CAAC,CAAC;IAEH,yBAAyB,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAAC,EAAgB;IACjD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,4EAA4E,CAC7E;SACA,GAAG,EAKJ,CAAC;IAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB;+BAC2B,CAC5B,CAAC;IACF,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,8DAA8D;QAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAClE,SAAS,CAAC,qCAAqC;QACjD,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,EAAE,CAAC,OAAO,CAAC,sCAAsC,YAAY,GAAG,CAAC,CAAC,GAAG,CACnE,GAAG,WAAW,CACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;GAYP,CAAC,CAAC;AACL,CAAC;AAED,4DAA4D;AAC5D,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;GAMP,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;GAgBP,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;GAgBP,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDP,CAAC,CAAC;IAEH,sEAAsE;IACtE,qEAAqE;IACrE,sEAAsE;IACtE,kEAAkE;IAClE,KAAK,MAAM,KAAK,IAAI;QAClB,yEAAyE;QACzE,uFAAuF;KACxF,EAAE,CAAC;QACF,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;GAEP,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,WAAW,CAAC,EAAgB;IACnC,EAAE,CAAC,IAAI,CAAC;;;GAGP,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,EAAgB;IACpC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB,uFAAuF,CACxF,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,8BAA8B,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CAAC,+CAA+C,CAAC;aACxD,GAAG,CAAC,KAAK,CAAC,IAAI,CAA4C,CAAC;QAC9D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,KAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,mDAAmD,MAAM,CAAC,KAAK,CAAC,EAAE,EAC1F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,EAAgB;IACpC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BP,CAAC,CAAC;AACL,CAAC"}

package/dist/store/sqlite/store.d.ts

@@ -1,6 +1,7 @@
 import type { DescMessage, MessageShape } from "@bufbuild/protobuf";
 import type { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-import type { AuditRecord, BootstrapStateStore, OAuthGrantStore, PendingOAuthStateStore, RawResourceDocument, ScheduleRunRecord, SearchIndexEntry, SearchIndexQuery, SearchIndexQueryResult, SignalDedupeStore, Store, WorkflowExecutionEventRecord } from "../interface.js";
+import type { AuditRecord, BootstrapStateStore, OAuthGrantStore, PendingOAuthStateStore, RawResourceDocument, ScheduleRunRecord, SearchIndexEntry, SearchIndexQuery, SearchIndexQueryResult, SignalDedupeStore, Store, StoreOpenOptions, WorkflowExecutionEventRecord } from "../interface.js";
+import type { ListIndexDeclaration, ListIndexQuery, ListIndexRow } from "../list-index.js";
 import type { StoreLogger } from "../logger.js";
 export type { StoreLogger } from "../logger.js";
 export declare class SqliteStore implements Store {
@@ -11,18 +12,21 @@ export declare class SqliteStore implements Store {
     private db;
     private readonly dbPath;
     private readonly logger;
+    private readonly listIndexes;
     private constructor();
     /**
      * Opens (or creates) the database at dbPath, applies the pragmas in Go's
-     * order, and runs migrations — Go NewStore.
+     * order, runs migrations — Go NewStore — and reconciles the list index
+     * (derives the facts of every unproven row of a declared kind).
      */
-    static open(dbPath: string, logger?: StoreLogger): SqliteStore;
+    static open(dbPath: string, logger?: StoreLogger, options?: StoreOpenOptions): SqliteStore;
     /** Filesystem path of the database file (Go Store.Path()). */
     path(): string;
     saveResource<Desc extends DescMessage>(kind: ApiResourceKind, id: string, schema: Desc, msg: MessageShape<Desc>): Promise<void>;
     getResource<Desc extends DescMessage>(kind: ApiResourceKind, id: string, schema: Desc): Promise<MessageShape<Desc>>;
     updateResource<Desc extends DescMessage>(kind: ApiResourceKind, id: string, schema: Desc, modify: (msg: MessageShape<Desc>) => void): Promise<MessageShape<Desc>>;
     listResources(kind: ApiResourceKind): Promise<Uint8Array[]>;
+    queryResources<K extends string>(declaration: ListIndexDeclaration<K>, query: ListIndexQuery<K>): Promise<ListIndexRow[]>;
     deleteResource(kind: ApiResourceKind, id: string): Promise<void>;
     findByField<Desc extends DescMessage>(kind: ApiResourceKind, fieldPath: string, value: string, schema: Desc): Promise<MessageShape<Desc>>;
     findAllByField(kind: ApiResourceKind, fieldPath: string, value: string): Promise<Uint8Array[]>;
@@ -31,6 +35,17 @@ export declare class SqliteStore implements Store {
     replaceResourceDataIfUnchanged(kind: ApiResourceKind, id: string, expectedData: Uint8Array, newData: Uint8Array): Promise<boolean>;
     deleteResourcesByKind(kind: ApiResourceKind): Promise<number>;
     deleteResourcesByIdPrefix(kind: ApiResourceKind, idPrefix: string): Promise<number>;
+    /**
+     * An unproven row's facts, derived from its bytes, and the row repaired
+     * when those bytes are still the stored ones. Undefined when the bytes
+     * do not decode; the row stays unproven and is skipped.
+     */
+    private deriveAndRepair;
+    /**
+     * Derives every unproven row of each declared kind and stamps every other
+     * kind's unstamped rows, so the unproven set is empty once open returns.
+     */
+    private reconcileListIndexes;
     saveAudit<Desc extends DescMessage>(kind: ApiResourceKind, resourceId: string, schema: Desc, msg: MessageShape<Desc>, versionHash: string, tag: string): Promise<void>;
     getAuditByHash<Desc extends DescMessage>(kind: ApiResourceKind, resourceId: string, versionHash: string, schema: Desc): Promise<MessageShape<Desc>>;
     getAuditByTag<Desc extends DescMessage>(kind: ApiResourceKind, resourceId: string, tag: string, schema: Desc): Promise<MessageShape<Desc>>;

package/dist/store/sqlite/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/store/sqlite/store.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAQ3H,OAAO,KAAK,EACV,WAAW,EACX,mBAAmB,EAGnB,eAAe,EAEf,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAEhB,gBAAgB,EAChB,sBAAsB,EAGtB,iBAAiB,EACjB,KAAK,EACL,4BAA4B,EAC7B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAahD,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,qBAAa,WAAY,YAAW,KAAK;IACvC,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;IAEpD,OAAO,CAAC,EAAE,CAA2B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IAErC,OAAO;IAYP;;;OAGG;IACH,MAAM,CAAC,IAAI,CACT,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,WAA+B,GACtC,WAAW;IA0Bd,8DAA8D;IAC9D,IAAI,IAAI,MAAM;IAQR,YAAY,CAAC,IAAI,SAAS,WAAW,EACzC,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,EACZ,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,GACtB,OAAO,CAAC,IAAI,CAAC;IAQV,WAAW,CAAC,IAAI,SAAS,WAAW,EACxC,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAYxB,cAAc,CAAC,IAAI,SAAS,WAAW,EAC3C,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,EACZ,MAAM,EAAE,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,GACxC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAkCxB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAU3D,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQhE,WAAW,CAAC,IAAI,SAAS,WAAW,EACxC,IAAI,EAAE,eAAe,EACrB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAqBxB,cAAc,CAClB,IAAI,EAAE,eAAe,EACrB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,EAAE,CAAC;IASlB,cAAc,CAAC,IAAI,SAAS,WAAW,EAC3C,IAAI,EAAE,eAAe,EACrB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,UAAU,EAAE,CAAC;IAclB,4BAA4B,CAChC,IAAI,EAAE,eAAe,EACrB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAiB3B,8BAA8B,CAClC,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,UAAU,EACxB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,OAAO,CAAC;IAab,qBAAqB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ7D,yBAAyB,CAC7B,IAAI,EAAE,eAAe,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC;IAaZ,SAAS,CAAC,IAAI,SAAS,WAAW,EACtC,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,IAAI,EACZ,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,EACvB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,IAAI,CAAC;IASV,cAAc,CAAC,IAAI,SAAS,WAAW,EAC3C,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IASxB,aAAa,CAAC,IAAI,SAAS,WAAW,EAC1C,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAKxB,gBAAgB,CACpB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,UAAU,EAAE,CAAC;IAKlB,uBAAuB,CAC3B,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC;IAQZ,iBAAiB,CACrB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC;IAUZ,kBAAkB,CACtB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC;IAkBZ,WAAW,CACf,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,IAAI,CAAC;IAkCV,gBAAgB,CACpB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,WAAW,EAAE,CAAC;IAoBnB,oBAAoB,CACxB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,CAAC;IAsBjB,mBAAmB,CACvB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IAuBjB,6BAA6B,CACjC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,SAAS,4BAA4B,EAAE,GAC9C,OAAO,CAAC,MAAM,CAAC;IA+BZ,0BAA0B,CAC9B,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,4BAA4B,EAAE,CAAC;IAqCpC,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAczD,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgC3D,6BAA6B,CACjC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAYV,gBAAgB,CACpB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA+ClD,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQjE,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAY1D,iBAAiB,CACrB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC;IA8BV,iBAAiB,CACrB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC;IAOV,gBAAgB,CACpB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,sBAAsB,CAAC;IAmH5B,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IASjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B,gEAAgE;IAChE,OAAO,CAAC,IAAI;CAMb"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/store/sqlite/store.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAQ3H,OAAO,KAAK,EACV,WAAW,EACX,mBAAmB,EAGnB,eAAe,EAEf,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAEhB,gBAAgB,EAChB,sBAAsB,EAGtB,iBAAiB,EACjB,KAAK,EACL,gBAAgB,EAChB,4BAA4B,EAC7B,MAAM,iBAAiB,CAAC;AASzB,OAAO,KAAK,EACV,oBAAoB,EAEpB,cAAc,EACd,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAahD,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AA+DhD,qBAAa,WAAY,YAAW,KAAK;IACvC,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;IAEpD,OAAO,CAAC,EAAE,CAA2B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAEhD,OAAO;IAkBP;;;;OAIG;IACH,MAAM,CAAC,IAAI,CACT,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,WAA+B,EACvC,OAAO,GAAE,gBAAqB,GAC7B,WAAW;IAkCd,8DAA8D;IAC9D,IAAI,IAAI,MAAM;IAQR,YAAY,CAAC,IAAI,SAAS,WAAW,EACzC,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,EACZ,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,GACtB,OAAO,CAAC,IAAI,CAAC;IA2BV,WAAW,CAAC,IAAI,SAAS,WAAW,EACxC,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAYxB,cAAc,CAAC,IAAI,SAAS,WAAW,EAC3C,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,EACZ,MAAM,EAAE,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,GACxC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IA2DxB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAU3D,cAAc,CAAC,CAAC,SAAS,MAAM,EACnC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC,EACpC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,YAAY,EAAE,CAAC;IAwDpB,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAahE,WAAW,CAAC,IAAI,SAAS,WAAW,EACxC,IAAI,EAAE,eAAe,EACrB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAqBxB,cAAc,CAClB,IAAI,EAAE,eAAe,EACrB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,EAAE,CAAC;IASlB,cAAc,CAAC,IAAI,SAAS,WAAW,EAC3C,IAAI,EAAE,eAAe,EACrB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,UAAU,EAAE,CAAC;IAclB,4BAA4B,CAChC,IAAI,EAAE,eAAe,EACrB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAiB3B,8BAA8B,CAClC,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,UAAU,EACxB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,OAAO,CAAC;IAkDb,qBAAqB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAU7D,yBAAyB,CAC7B,IAAI,EAAE,eAAe,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC;IAiBlB;;;;OAIG;IACH,OAAO,CAAC,eAAe;IA0CvB;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAuDtB,SAAS,CAAC,IAAI,SAAS,WAAW,EACtC,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,IAAI,EACZ,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,EACvB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,IAAI,CAAC;IASV,cAAc,CAAC,IAAI,SAAS,WAAW,EAC3C,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IASxB,aAAa,CAAC,IAAI,SAAS,WAAW,EAC1C,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,IAAI,GACX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAKxB,gBAAgB,CACpB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,UAAU,EAAE,CAAC;IAKlB,uBAAuB,CAC3B,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC;IAQZ,iBAAiB,CACrB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC;IAUZ,kBAAkB,CACtB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC;IAkBZ,WAAW,CACf,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,IAAI,CAAC;IAkCV,gBAAgB,CACpB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,WAAW,EAAE,CAAC;IAoBnB,oBAAoB,CACxB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,CAAC;IAsBjB,mBAAmB,CACvB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,CAAC;IAuBjB,6BAA6B,CACjC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,SAAS,4BAA4B,EAAE,GAC9C,OAAO,CAAC,MAAM,CAAC;IA+BZ,0BAA0B,CAC9B,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,4BAA4B,EAAE,CAAC;IAqCpC,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAczD,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgC3D,6BAA6B,CACjC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAYV,gBAAgB,CACpB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA+ClD,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQjE,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAY1D,iBAAiB,CACrB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC;IA8BV,iBAAiB,CACrB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC;IAOV,gBAAgB,CACpB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,sBAAsB,CAAC;IAmH5B,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IASjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B,gEAAgE;IAChE,OAAO,CAAC,IAAI;CAMb"}

package/dist/store/sqlite/store.js

@@ -31,11 +31,60 @@ import path from "node:path";
 import { DatabaseSync } from "node:sqlite";
 import { fromBinary, toBinary } from "@bufbuild/protobuf";
 import { AuditNotFoundError, DELIVERED_SIGNAL_DEDUPE_TTL_MS, PENDING_OAUTH_STATE_TTL_MS, ResourceNotFoundError, } from "../interface.js";
+import { ListIndexRegistry, assertListIndexLimit, listIndexFactsOf, matchesListIndexQuery, mergeListIndexRows, sameListKeyRows, } from "../list-index.js";
 import { NOOP_STORE_LOGGER } from "../logger.js";
 import { apiResourceKindName, filterRowsByLabel, scanForFieldMatch, } from "../proto-fields.js";
 import { rfc3339Seconds } from "../rfc3339.js";
 import { normalizeBm25Score, renderFts5MatchExpression } from "./fts5.js";
 import { runMigrations } from "./migrations.js";
+/**
+ * `updated_at` and the list index's stamp, to the millisecond. Evaluated
+ * twice in one statement it yields one value (sqlite fixes 'now' per
+ * statement step), so a row this driver writes is stamped with exactly its
+ * `updated_at`; a writer that does not know the index writes
+ * `datetime('now')`, whole seconds, which never equals a stamp.
+ */
+const NOW = `strftime('%Y-%m-%d %H:%M:%f', 'now')`;
+/** The one upsert every resource write goes through (postgres/store.ts's twin). */
+const UPSERT_RESOURCE_SQL = `INSERT OR REPLACE INTO resources
+  (kind, id, data, updated_at, list_org, list_created_at, list_index_revision, list_indexed_at)
+  VALUES (?, ?, ?, ${NOW}, ?, ?, ?, ${NOW})`;
+/**
+ * The rows of a kind whose facts are not proven current under a revision
+ * (list-index.ts; postgres/store.ts's twin). A row's list columns sit
+ * after its blob in the record and sqlite reaches them only by walking the
+ * blob's overflow pages, so any predicate checked per row of the kind
+ * costs a read of every blob (measured: 11 ms, and 72 ms for an OR over
+ * the revision, across 1,279 rows of 37 KB). Every arm is therefore one
+ * index range that fetches a row only when it matches, and names its
+ * index: without statistics the planner prefers the primary key for
+ * `kind = ?`, and `INDEXED BY` fails the statement rather than fall back
+ * to a scan. The arms overlap (an unstamped row has no revision either),
+ * so the caller keeps one row per id. Parameters: kind, kind, kind,
+ * revision, kind, revision.
+ */
+const UNPROVEN_ROWS_SQL = `
+  SELECT id, data FROM resources INDEXED BY idx_resources_list_unproven
+  WHERE kind = ? AND list_indexed_at IS NOT updated_at
+  UNION ALL
+  SELECT id, data FROM resources INDEXED BY idx_resources_list_revision
+  WHERE kind = ? AND list_index_revision IS NULL
+  UNION ALL
+  SELECT id, data FROM resources INDEXED BY idx_resources_list_revision
+  WHERE kind = ? AND list_index_revision < ?
+  UNION ALL
+  SELECT id, data FROM resources INDEXED BY idx_resources_list_revision
+  WHERE kind = ? AND list_index_revision > ?`;
+function unprovenRowsParams(kindName, revision) {
+    return [kindName, kindName, kindName, revision, kindName, revision];
+}
+/** Keeps the first row per id; the unproven arms overlap. */
+function oneRowPerId(rows) {
+    const seen = new Set();
+    return rows.filter((row) => seen.has(row.id) ? false : (seen.add(row.id), true));
+}
+/** How many unproven rows the reconciliation at open decodes per statement. */
+const RECONCILE_BATCH = 500;
 export class SqliteStore {
     bootstrapState;
     signalDedupe;
@@ -44,10 +93,12 @@ export class SqliteStore {
     db;
     dbPath;
     logger;
-    constructor(db, dbPath, logger) {
+    listIndexes;
+    constructor(db, dbPath, logger, listIndexes) {
         this.db = db;
         this.dbPath = dbPath;
         this.logger = logger;
+        this.listIndexes = listIndexes;
         this.bootstrapState = new SqliteBootstrapStateStore(() => this.open());
         this.signalDedupe = new SqliteSignalDedupeStore(() => this.open(), logger);
         this.oauthGrants = new SqliteOAuthGrantStore(() => this.open());
@@ -55,9 +106,11 @@ export class SqliteStore {
     }
     /**
      * Opens (or creates) the database at dbPath, applies the pragmas in Go's
-     * order, and runs migrations — Go NewStore.
+     * order, runs migrations — Go NewStore — and reconciles the list index
+     * (derives the facts of every unproven row of a declared kind).
      */
-    static open(dbPath, logger = NOOP_STORE_LOGGER) {
+    static open(dbPath, logger = NOOP_STORE_LOGGER, options = {}) {
+        const listIndexes = new ListIndexRegistry(options.listIndexes ?? []);
         const dir = path.dirname(dbPath);
         if (dir !== "" && dir !== ".") {
             mkdirSync(dir, { recursive: true });
@@ -77,7 +130,15 @@ export class SqliteStore {
             db.close();
             throw error;
         }
-        return new SqliteStore(db, dbPath, logger);
+        const store = new SqliteStore(db, dbPath, logger, listIndexes);
+        try {
+            store.reconcileListIndexes();
+        }
+        catch (error) {
+            db.close();
+            throw error;
+        }
+        return store;
     }
     /** Filesystem path of the database file (Go Store.Path()). */
     path() {
@@ -89,7 +150,22 @@ export class SqliteStore {
     async saveResource(kind, id, schema, msg) {
         const db = this.open();
         const data = toBinary(schema, msg);
-        db.prepare(`INSERT OR REPLACE INTO resources (kind, id, data, updated_at) VALUES (?, ?, ?, datetime('now'))`).run(apiResourceKindName(kind), id, data);
+        const kindName = apiResourceKindName(kind);
+        const facts = this.listIndexes.factsOf(kind, msg);
+        if (facts === undefined) {
+            db.prepare(UPSERT_RESOURCE_SQL).run(kindName, id, data, null, null, null);
+            return;
+        }
+        db.exec("BEGIN");
+        try {
+            db.prepare(UPSERT_RESOURCE_SQL).run(kindName, id, data, facts.org, facts.createdAt, facts.revision);
+            replaceListKeys(db, kindName, id, facts);
+            db.exec("COMMIT");
+        }
+        catch (error) {
+            db.exec("ROLLBACK");
+            throw error;
+        }
     }
     async getResource(kind, id, schema) {
         const db = this.open();
@@ -113,15 +189,25 @@ export class SqliteStore {
         db.exec("BEGIN IMMEDIATE");
         try {
             const row = db
-                .prepare(`SELECT data FROM resources WHERE kind = ? AND id = ?`)
+                .prepare(`SELECT data, list_indexed_at IS updated_at AS stamped, list_index_revision
+           FROM resources WHERE kind = ? AND id = ?`)
                 .get(kindName, id);
             if (row === undefined) {
                 throw new ResourceNotFoundError(`${kindName}/${id}`);
             }
             const msg = fromBinary(schema, row.data);
+            const before = this.listIndexes.factsOf(kind, msg);
             modify(msg);
+            const after = this.listIndexes.factsOf(kind, msg);
             const data = toBinary(schema, msg);
-            db.prepare(`INSERT OR REPLACE INTO resources (kind, id, data, updated_at) VALUES (?, ?, ?, datetime('now'))`).run(kindName, id, data);
+            db.prepare(UPSERT_RESOURCE_SQL).run(kindName, id, data, after?.org ?? null, after?.createdAt ?? null, after?.revision ?? null);
+            if (after !== undefined &&
+                (row.stamped !== 1 ||
+                    row.list_index_revision !== after.revision ||
+                    before === undefined ||
+                    !sameListKeyRows(before, after))) {
+                replaceListKeys(db, kindName, id, after);
+            }
             db.exec("COMMIT");
             return msg;
         }
@@ -139,9 +225,52 @@ export class SqliteStore {
         // copy is needed (Go copied because database/sql may reuse buffers).
         return rows.map((row) => row.data);
     }
+    async queryResources(declaration, query) {
+        this.listIndexes.require(declaration);
+        assertListIndexLimit(query.limit);
+        if (query.anyKey !== undefined && query.anyKey.length === 0) {
+            return [];
+        }
+        const db = this.open();
+        const kindName = apiResourceKindName(declaration.kind);
+        // A key read is driven from the key table (CROSS JOIN fixes sqlite's
+        // join order), so only the rows the key names are ever read; several
+        // keys are one such read each, merged below (postgres/store.ts's twin).
+        const reads = query.anyKey === undefined
+            ? [provenReadSql(kindName, declaration.revision, query, undefined)]
+            : query.anyKey.map((key) => provenReadSql(kindName, declaration.revision, query, key));
+        const proven = [];
+        for (const read of reads) {
+            const rows = db.prepare(read.sql).all(...read.params);
+            for (const row of rows) {
+                proven.push({
+                    id: row.id,
+                    data: row.data,
+                    cursor: { createdAt: row.created_at, id: row.id },
+                });
+            }
+        }
+        const unproven = oneRowPerId(db
+            .prepare(UNPROVEN_ROWS_SQL)
+            .all(...unprovenRowsParams(kindName, declaration.revision)));
+        const unprovenRows = [];
+        for (const row of unproven) {
+            const facts = this.deriveAndRepair(declaration, row.id, row.data);
+            if (facts !== undefined && matchesListIndexQuery(row.id, facts, query)) {
+                unprovenRows.push({
+                    id: row.id,
+                    data: row.data,
+                    cursor: { createdAt: facts.createdAt, id: row.id },
+                });
+            }
+        }
+        return mergeListIndexRows(proven, unprovenRows, query.limit);
+    }
     async deleteResource(kind, id) {
         const db = this.open();
-        db.prepare(`DELETE FROM resources WHERE kind = ? AND id = ?`).run(apiResourceKindName(kind), id);
+        const kindName = apiResourceKindName(kind);
+        db.prepare(`DELETE FROM resources WHERE kind = ? AND id = ?`).run(kindName, id);
+        db.prepare(`DELETE FROM resource_list_keys WHERE kind = ? AND id = ?`).run(kindName, id);
     }
     async findByField(kind, fieldPath, value, schema) {
         const db = this.open();
@@ -185,28 +314,139 @@ export class SqliteStore {
         const db = this.open();
         // BLOB equality in the WHERE clause makes the compare-and-swap one
         // atomic statement: zero rows changed means the row moved on (or was
-        // deleted) since the read — a lost swap, never an upsert.
-        const result = db
-            .prepare(`UPDATE resources SET data = ?, updated_at = datetime('now') WHERE kind = ? AND id = ? AND data = ?`)
-            .run(newData, apiResourceKindName(kind), id, expectedData);
-        return Number(result.changes) === 1;
+        // deleted) since the read — a lost swap, never an upsert. The new bytes'
+        // list facts ride the same statement; bytes a declared kind's schema
+        // cannot decode leave the row unproven (stamp NULL), for a read to skip.
+        const kindName = apiResourceKindName(kind);
+        const declaration = this.listIndexes.declarationOf(kind);
+        const facts = declaration === undefined
+            ? undefined
+            : factsOfBytes(declaration, newData);
+        const swap = () => Number(db
+            .prepare(`UPDATE resources SET data = ?, updated_at = ${NOW},
+               list_org = ?, list_created_at = ?, list_index_revision = ?,
+               list_indexed_at = CASE WHEN ? THEN ${NOW} ELSE NULL END
+             WHERE kind = ? AND id = ? AND data = ?`)
+            .run(newData, facts?.org ?? null, facts?.createdAt ?? null, facts?.revision ?? null, declaration === undefined || facts !== undefined ? 1 : 0, kindName, id, expectedData).changes) === 1;
+        if (facts === undefined) {
+            return swap();
+        }
+        db.exec("BEGIN");
+        try {
+            const swapped = swap();
+            if (swapped) {
+                replaceListKeys(db, kindName, id, facts);
+            }
+            db.exec("COMMIT");
+            return swapped;
+        }
+        catch (error) {
+            db.exec("ROLLBACK");
+            throw error;
+        }
     }
     async deleteResourcesByKind(kind) {
         const db = this.open();
+        const kindName = apiResourceKindName(kind);
         const result = db
             .prepare(`DELETE FROM resources WHERE kind = ?`)
-            .run(apiResourceKindName(kind));
+            .run(kindName);
+        db.prepare(`DELETE FROM resource_list_keys WHERE kind = ?`).run(kindName);
         return Number(result.changes);
     }
     async deleteResourcesByIdPrefix(kind, idPrefix) {
         const db = this.open();
+        const kindName = apiResourceKindName(kind);
         // GLOB 'prefix*' uses the (kind, id) index where LIKE would not (Go).
         const result = db
             .prepare(`DELETE FROM resources WHERE kind = ? AND id GLOB ?`)
-            .run(apiResourceKindName(kind), `${idPrefix}*`);
+            .run(kindName, `${idPrefix}*`);
+        db.prepare(`DELETE FROM resource_list_keys WHERE kind = ? AND id GLOB ?`).run(kindName, `${idPrefix}*`);
         return Number(result.changes);
     }
     // ---------------------------------------------------------------------------
+    // The list index's repair (list-index.ts; postgres/store.ts's twin)
+    // ---------------------------------------------------------------------------
+    /**
+     * An unproven row's facts, derived from its bytes, and the row repaired
+     * when those bytes are still the stored ones. Undefined when the bytes
+     * do not decode; the row stays unproven and is skipped.
+     */
+    deriveAndRepair(declaration, id, data) {
+        const kindName = apiResourceKindName(declaration.kind);
+        const facts = factsOfBytes(declaration, data);
+        if (facts === undefined) {
+            this.logger.warn("list index: an unproven row does not decode, skipping", {
+                kind: kindName,
+                id,
+            });
+            return undefined;
+        }
+        const db = this.open();
+        db.exec("BEGIN");
+        try {
+            const repaired = db
+                .prepare(`UPDATE resources SET list_org = ?, list_created_at = ?,
+             list_index_revision = ?, list_indexed_at = updated_at
+           WHERE kind = ? AND id = ? AND data = ?`)
+                .run(facts.org, facts.createdAt, facts.revision, kindName, id, data);
+            if (Number(repaired.changes) === 1) {
+                replaceListKeys(db, kindName, id, facts);
+            }
+            db.exec("COMMIT");
+        }
+        catch (error) {
+            db.exec("ROLLBACK");
+            this.logger.warn("list index: repairing a row failed", {
+                kind: kindName,
+                id,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+        return facts;
+    }
+    /**
+     * Derives every unproven row of each declared kind and stamps every other
+     * kind's unstamped rows, so the unproven set is empty once open returns.
+     */
+    reconcileListIndexes() {
+        const db = this.open();
+        const declarations = this.listIndexes.declarations();
+        for (const declaration of declarations) {
+            const kindName = apiResourceKindName(declaration.kind);
+            let after = "";
+            let derived = 0;
+            for (;;) {
+                // Duplicates from overlapping arms sit side by side in id order and
+                // the next batch starts after the last id, so none is repaired twice
+                // across batches and the count still ends the loop.
+                const rows = db
+                    .prepare(`SELECT id, data FROM (${UNPROVEN_ROWS_SQL}) WHERE id > ?
+             ORDER BY id LIMIT ?`)
+                    .all(...unprovenRowsParams(kindName, declaration.revision), after, RECONCILE_BATCH);
+                for (const row of oneRowPerId(rows)) {
+                    if (this.deriveAndRepair(declaration, row.id, row.data) !== undefined) {
+                        derived += 1;
+                    }
+                    after = row.id;
+                }
+                if (rows.length < RECONCILE_BATCH) {
+                    break;
+                }
+            }
+            if (derived > 0) {
+                this.logger.info("list index reconciled", {
+                    kind: kindName,
+                    rows: derived,
+                });
+            }
+        }
+        const declared = declarations.map((d) => apiResourceKindName(d.kind));
+        db.prepare(`UPDATE resources SET list_indexed_at = updated_at
+       WHERE list_indexed_at IS NOT updated_at
+         AND kind NOT IN (${declared.map(() => "?").join(", ") || "''"})`).run(...declared);
+    }
+    // ---------------------------------------------------------------------------
     // Audit operations
     // ---------------------------------------------------------------------------
     async saveAudit(kind, resourceId, schema, msg, versionHash, tag) {
@@ -718,6 +958,72 @@ class SqliteSignalDedupeStore {
     }
 }
 /** Composite dedupe key: "{org}:{idempotency_key}" (Go buildDedupeKey). */
+/**
+ * A row's key rows made equal to its facts, on the caller's open
+ * transaction (postgres/store.ts's twin).
+ */
+function replaceListKeys(db, kindName, id, facts) {
+    db.prepare(`DELETE FROM resource_list_keys WHERE kind = ? AND id = ?`).run(kindName, id);
+    const insert = db.prepare(`INSERT INTO resource_list_keys (kind, id, key, value, created_at) VALUES (?, ?, ?, ?, ?)`);
+    for (const entry of facts.keys) {
+        insert.run(kindName, id, entry.key, entry.value, facts.createdAt);
+    }
+}
+/**
+ * One proven read of `queryResources` (postgres/store.ts's twin): through
+ * one key's index range when `key` is given, else through the organization
+ * index; only rows whose facts are proven current.
+ */
+function provenReadSql(kindName, revision, query, key) {
+    const params = [];
+    const created = key === undefined ? "r.list_created_at" : "k.created_at";
+    const id = key === undefined ? "r.id" : "k.id";
+    const where = [];
+    let from = `resources AS r`;
+    if (key === undefined) {
+        where.push(`r.kind = ?`);
+        params.push(kindName);
+    }
+    else {
+        from = `resource_list_keys AS k CROSS JOIN resources AS r`;
+        where.push(`k.kind = ?`, `k.key = ?`, `k.value = ?`, `r.kind = k.kind`, `r.id = k.id`);
+        params.push(kindName, key.name, key.value);
+    }
+    where.push(`r.list_indexed_at = r.updated_at`, `r.list_index_revision = ?`);
+    params.push(revision);
+    if (query.org !== undefined && query.org !== "") {
+        where.push(`r.list_org = ?`);
+        params.push(query.org);
+    }
+    if (query.createdAtOrAfter !== undefined) {
+        where.push(`(${created} >= ? OR ${created} = '')`);
+        params.push(query.createdAtOrAfter);
+    }
+    if (query.after !== undefined) {
+        where.push(`(${created} < ? OR (${created} = ? AND ${id} < ?))`);
+        params.push(query.after.createdAt, query.after.createdAt, query.after.id);
+    }
+    let limit = "";
+    if (query.limit !== undefined) {
+        limit = ` LIMIT ?`;
+        params.push(query.limit);
+    }
+    return {
+        sql: `SELECT r.id, r.data, ${created} AS created_at FROM ${from}
+          WHERE ${where.join(" AND ")}
+          ORDER BY ${created} DESC, ${id} DESC${limit}`,
+        params,
+    };
+}
+/** A declared kind's facts from stored bytes; undefined when they do not decode. */
+function factsOfBytes(declaration, data) {
+    try {
+        return listIndexFactsOf(declaration, fromBinary(declaration.schema, data));
+    }
+    catch {
+        return undefined;
+    }
+}
 function buildDedupeKey(org, idempotencyKey) {
     return `${org}:${idempotencyKey}`;
 }