@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/data/sqlite/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,EACJ,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,+BAA+B,EAAE,MAAM,wCAAwC,CAAC;AACzF,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,qBAAqB,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,mBAAmB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EACL,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAC;AAE7E,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,EACnB,UAAU,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,CAAC;AAExE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAClC,WAAW,EACX;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACvE,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACtC,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC;IACxD,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC;IAC5C,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC3C,kBAAkB,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,KAAK,CAAC,4BAA4B,CAAC;SAChC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC;SACnC,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,UAAU,cAAc,CAAC;CAC/C,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,yBAAyB,EAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC,OAAO,EAAE;IACzE,uBAAuB,EAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC,OAAO,EAAE;IACrE,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC;IAClD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACxD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnC,KAAK,CAAC,4CAA4C,CAAC,CAAC,EAAE,CACpD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,SAAS,CAChB;CACF,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAC7C,wBAAwB,EACxB;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;IACzB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;CAC5C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CACnD,8BAA8B,EAC9B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IACtD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,qEAAqE;IACrE,2BAA2B;IAC3B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnC,KAAK,CAAC,4CAA4C,CAAC,CAAC,EAAE,CACpD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,SAAS,CAChB;CACF,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAClD,6BAA6B,EAC7B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IACjC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC;KAClE,CAAC;CACH,CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CACjD,4BAA4B,EAC5B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE;IAC5C,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,oBAAoB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE;IAC9D,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IAClD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAChD,4BAA4B,EAC5B;IACE,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE;IAC5D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAClD,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,gBAAgB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;IACtD,qBAAqB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE;IAChE,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE;IACzD,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE;IAClE,2BAA2B,EAAE,IAAI,CAC/B,+BAA+B,CAChC,CAAC,OAAO,EAAE;IACX,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;CAC7C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC;QACT,OAAO,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC;KACnD,CAAC;IACF,WAAW,CAAC,2DAA2D,CAAC,CAAC,EAAE,CACzE,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,qBAAqB,CAC5B;CACF,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CACpD,+BAA+B,EAC/B;IACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAC5E,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAC3C,qBAAqB,EACrB;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7D,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IACvD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,KAAK,CAAC,mCAAmC,CAAC;SACvC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;SACrB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,WAAW,cAAc,CAAC;IAC/C,KAAK,CAAC,6CAA6C,CAAC;SACjD,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;SACxB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,WAAW,UAAU,CAAC;IAC3C,KAAK,CAAC,kCAAkC,CAAC;SACtC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;SACpB,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,UAAU,cAAc,CAAC;CAC/C,CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;CAC7B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACtD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAC/C,0BAA0B,EAC1B;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACpD,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE;IACxD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC;IAC9C,wBAAwB,EAAE,IAAI,CAAC,6BAA6B,CAAC;IAC7D,6BAA6B,EAAE,IAAI,CAAC,mCAAmC,CAAC;IACxE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnC,KAAK,CAAC,6CAA6C,CAAC,CAAC,EAAE,CACrD,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,SAAS,CAChB;CACF,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAC7C,wBAAwB,EACxB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;IACd,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACpD,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE;IACxD,yBAAyB,EAAE,IAAI,CAAC,8BAA8B,CAAC;IAC/D,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnC,KAAK,CAAC,2CAA2C,CAAC,CAAC,EAAE,CACnD,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,SAAS,CAChB;CACF,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAChD,2BAA2B,EAC3B;IACE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE;IAC1D,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAChD,4BAA4B,EAC5B;IACE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAkC;IAC3D;QACE,GAAG,oBAAoB,CAAC,SAAS,CAAC;QAClC,eAAe,EAAE;YACf,mBAAmB;YACnB,qBAAqB;YACrB,sBAAsB;SACvB;KACF;IACD,oBAAoB,CAAC,sBAAsB,CAAC;IAC5C,oBAAoB,CAAC,oBAAoB,CAAC;IAC1C,oBAAoB,CAAC,0BAA0B,CAAC;IAChD,oBAAoB,CAAC,sBAAsB,CAAC;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE;QACE,GAAG,oBAAoB,CAAC,iBAAiB,CAAC;QAC1C,eAAe,EAAE,CAAC,qBAAqB,CAAC;KACzC;IACD;QACE,GAAG,oBAAoB,CAAC,4BAA4B,CAAC;QACrD,eAAe,EAAE,CAAC,qBAAqB,CAAC;KACzC;IACD,oBAAoB,CAAC,+BAA+B,CAAC;IACrD,oBAAoB,CAAC,4BAA4B,CAAC;IAClD,GAAG,2BAA2B;IAC9B,GAAG,8BAA8B;CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAkC;IACnE,oBAAoB,CAAC,oBAAoB,CAAC;IAC1C,oBAAoB,CAAC,yBAAyB,CAAC;IAC/C,oBAAoB,CAAC,yBAAyB,CAAC;IAC/C,oBAAoB,CAAC,wBAAwB,CAAC;IAC9C,oBAAoB,CAAC,0BAA0B,CAAC;CACjD,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE,oBAAoB,CAAC,uBAAuB,CAAC;CAC9C,CAAC;AAEF,MAAM,sBAAsB,GAAkC;IAC5D,qBAAqB;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAErD,MAAM,CAAC,MAAM,iCAAiC,GAC5C;IACE,oBAAoB,CAAC,2BAA2B,CAAC;IACjD;QACE,GAAG,oBAAoB,CAAC,+BAA+B,CAAC;QACxD,eAAe,EAAE,CAAC,QAAQ,CAAC;KAC5B;IACD,oBAAoB,CAAC,0BAA0B,CAAC;IAChD;QACE,GAAG,oBAAoB,CAAC,sBAAsB,CAAC;QAC/C,eAAe,EAAE,CAAC,iBAAiB,CAAC;KACrC;IACD,oBAAoB,CAAC,yBAAyB,CAAC;CAChD,CAAC;AAEJ,MAAM,CAAC,MAAM,wBAAwB,GAAkC;IACrE,oBAAoB,CAAC,mBAAmB,CAAC;IACzC,oBAAoB,CAAC,yBAAyB,CAAC;CAChD,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAkC;IACrE,oBAAoB,CAAC,kBAAkB,CAAC;IACxC,oBAAoB,CAAC,sBAAsB,CAAC;IAC5C;QACE,GAAG,oBAAoB,CAAC,0BAA0B,CAAC;QACnD,eAAe,EAAE,CAAC,gBAAgB,CAAC;KACpC;IACD;QACE,GAAG,oBAAoB,CAAC,gCAAgC,CAAC;QACzD,eAAe,EAAE,CAAC,gBAAgB,CAAC;KACpC;IACD,8BAA8B;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAkC;IACxE,oBAAoB,CAAC,sBAAsB,CAAC;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAkC;IACtE,oBAAoB,CAAC,oBAAoB,CAAC;CAC3C,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAkC;IACzE,oBAAoB,CAAC,uBAAuB,CAAC;IAC7C,oBAAoB,CAAC,uBAAuB,CAAC;CAC9C,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAkC;IAC5D,GAAG,cAAc;IACjB,GAAG,qBAAqB;IACxB,GAAG,sBAAsB;IACzB,GAAG,4BAA4B;IAC/B,GAAG,sBAAsB;IACzB,GAAG,eAAe;IAClB,GAAG,iCAAiC;IACpC,GAAG,wBAAwB;IAC3B,GAAG,wBAAwB;IAC3B,GAAG,2BAA2B;IAC9B,GAAG,yBAAyB;IAC5B,GAAG,4BAA4B;IAC/B,GAAG,2BAA2B;IAC9B,GAAG,qBAAqB,CAAC,2BAA2B;IACpD,GAAG,mBAAmB,CAAC,qCAAqC;CAC7D,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,uBAAuB;IACvB,qBAAqB;IACrB,wBAAwB;IACxB,sBAAsB;IACtB,oBAAoB;IACpB,yBAAyB;IACzB,SAAS;IACT,sBAAsB;IACtB,oBAAoB;IACpB,iBAAiB;IACjB,4BAA4B;IAC5B,+BAA+B;IAC/B,4BAA4B;IAC5B,yBAAyB;IACzB,wBAAwB;IACxB,0BAA0B;IAC1B,uBAAuB;IACvB,iBAAiB;IACjB,GAAG,qBAAqB;IACxB,2BAA2B;IAC3B,mBAAmB;IACnB,yBAAyB;IACzB,kBAAkB;IAClB,0BAA0B;IAC1B,gCAAgC;IAChC,0BAA0B,EAAE,0BAA0B;IACtD,sBAAsB;IACtB,oBAAoB;IACpB,uBAAuB;IACvB,uBAAuB;IACvB,GAAG,iCAAiC;IACpC,GAAG,qBAAqB,CAAC,iCAAiC;IAC1D,GAAG,mBAAmB,CAAC,2CAA2C;CACnE,CAAC","sourcesContent":["import { sql } from \"drizzle-orm\";\nimport {\n  index,\n  integer,\n  primaryKey,\n  sqliteTable,\n  text,\n  uniqueIndex,\n} from \"drizzle-orm/sqlite-core\";\nimport { containerDocumentTombstoneHolds } from \"./containerDocumentTombstoneHoldSchema\";\nimport {\n  containerSQLiteSchema,\n  containerTableSchemas,\n} from \"./containerSchema\";\nimport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n} from \"./documentAttachmentSchema\";\nimport {\n  documentDiscoveryHeads,\n  documentDiscoverySequence,\n  pendingDocumentDiscoveries,\n} from \"./documentDiscoveryEvidenceSchema\";\nimport {\n  documentOrphanBlobReclaims,\n  documentOrphanBlobReclaimTable,\n} from \"./documentOrphanBlobReclaims\";\nimport {\n  documentIntentLinkTargets,\n  documentMoveIntents,\n} from \"./documentPlacementIntentSchema\";\nimport * as organizationDataUsage from \"./organizationDataUsageSchema\";\nimport { organizationFounders } from \"./organizationFounderSchema\";\nimport * as provisioningAttempt from \"./organizationProvisioningAttemptSchema\";\nimport {\n  organizationReadModelSQLiteSchema,\n  organizationReadModelTables,\n} from \"./organizationReadModelTableRegistry\";\nimport { principalGrantRetirements } from \"./principalGrantRetirementSchema\";\nimport {\n  principalHistoryEntries,\n  principalHistoryEvidenceTables,\n  principalHistoryNodes,\n  principalHistoryPrefixes,\n} from \"./principalHistoryEvidenceSchema\";\nimport {\n  principalHistoryStages,\n  principalHistoryStageTables,\n} from \"./principalHistoryStageSchema\";\nimport {\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyCheckpoints,\n  principalPolicyOrganizations,\n} from \"./principalPolicySchema\";\nimport {\n  securityIncidents,\n  securityIncidentTable,\n} from \"./securityIncidentSchema\";\nimport { defineSqlTableSchema, type SqlTableSchema } from \"./sqlTableSchema\";\n\nexport {\n  containerHydrationTombstones,\n  containerProjection,\n  containers,\n  dormantContainerMetadata,\n  dormantMetadataSweepRequests,\n  supersededContainerBindings,\n} from \"./containerSchema\";\nexport {\n  documentAttachmentBlobProjection,\n  documentPendingAttachments,\n} from \"./documentAttachmentSchema\";\nexport { documentMoveIntents } from \"./documentPlacementIntentSchema\";\nexport {\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyCheckpoints,\n  principalPolicyOrganizations,\n} from \"./principalPolicySchema\";\nexport { securityIncidents } from \"./securityIncidentSchema\";\nexport { containerDocumentTombstoneHolds, organizationReadModelTables };\n\nconst accessLevelColumn = \"effective_access_level\";\n\n/**\n * Durable Loro-backed document records shared by app features.\n *\n * This table stores encrypted document runtime state for multiple app domains.\n * `appKind` namespaces records for documents and container metadata. User-facing\n * list data is projected into feature-specific read models.\n *\n * Columns:\n * - `appKind`: Local domain namespace for the row, such as `documents` or\n *   `container-metadata`.\n * - `localId`: Stable local id inside `appKind`. It may be created before a\n *   server `documentId` exists.\n * - `documentId`: Server document id once the record is known remotely, or\n *   `null` while the document is local-only.\n * - `accessEpoch`: Latest access epoch persisted for the document. Defaults to\n *   the initial epoch.\n * - `accessStateHash`: Current document access/manifest state hash returned by\n *   sync, when known.\n * - `lastCommitLsn`: Last remote commit cursor applied to this local document.\n * - `documentManifestBundle`: Serialized document manifest bundle used for\n *   encrypted document sync.\n * - `contentKeyBundle`: Serialized content-key material needed to open the\n *   local document.\n * - `documentKekTargets`: Serialized KEK target state for document key wraps.\n * - `pendingBaseVersion`: Encoded oplog version through which every persisted\n *   op is already enqueued or synced. Persisted so a restart restores the\n *   outgoing-delta marker instead of re-seeding it past a device-first\n *   `deferRemoteSync` write's un-advanced op. `null` when unset.\n * - `snapshotEndVersion`: Encoded end version vector of the persisted content\n *   (which lives in the durable-history tables, never on this row), written on\n *   every content persist. Lets the pending-write queue's deferred-tail scan\n *   compare version coverage without loading content. Empty string when the\n *   document has never hydrated content, which readers treat as \"no deferred\n *   tail claimable\".\n * - `recoveryGeneration`: Atomic raw-history recovery writer fence.\n * - `recoveryDocumentId`: Former server id for cross-client post-purge recreation.\n * - `pullContinuation`: Durable progress for the next bounded remote pull.\n * - `updatedAt`: Local timestamp for the last persisted runtime-state update.\n *\n * Indexes:\n * - `(appKind, localId)` is the primary key and scopes local document lookups.\n * - `(appKind, documentId) where documentId is not null` supports resolving a\n *   server document id back to the local row during discovery and relinking.\n */\nexport const documents = sqliteTable(\n  \"documents\",\n  {\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    documentId: text(\"document_id\"),\n    accessEpoch: integer(\"access_epoch\").notNull().default(1),\n    accessStateHash: text(\"access_state_hash\"),\n    effectiveAccessLevel: text(accessLevelColumn).notNull().default(\"read\"),\n    lastCommitLsn: text(\"last_commit_lsn\"),\n    documentManifestBundle: text(\"document_manifest_bundle\"),\n    contentKeyBundle: text(\"content_key_bundle\"),\n    documentKekTargets: text(\"document_kek_targets\"),\n    pendingBaseVersion: text(\"pending_base_version\"),\n    pullContinuation: text(\"pull_continuation\"),\n    recoveryGeneration: integer(\"recovery_generation\").notNull().default(0),\n    recoveryDocumentId: text(\"recovery_document_id\"),\n    snapshotEndVersion: text(\"snapshot_end_version\").notNull().default(\"\"),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.appKind, table.localId] }),\n    index(\"documents_app_document_idx\")\n      .on(table.appKind, table.documentId)\n      .where(sql`${table.documentId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Outbound Loro updates waiting to be accepted by sync.\n *\n * Each row stores one locally produced update for a document scope. The queue is\n * replayed in creation order and acknowledged rows are deleted after sync\n * writes the corresponding server commit or persisted document state.\n *\n * Columns:\n * - `id`: Client-generated queue id used for acknowledgement deletes.\n * - `appKind`: Local document namespace matching `documents.appKind`.\n * - `localId`: Local document id matching `documents.localId`.\n * - `updateData`: Serialized Loro update payload.\n * - `partialStartVersionVector`: Version vector before this partial update.\n * - `partialEndVersionVector`: Version vector after this partial update.\n * - `sourceVersionVector`: Optional source vector used to avoid re-enqueuing\n *   updates that came from sync.\n * - `createdAt`: Queue insertion timestamp used for deterministic replay.\n *\n * Indexes:\n * - `id` is the primary key for targeted deletes.\n * - `(appKind, localId, createdAt)` supports ordered pending-update scans for a\n *   document scope.\n */\nexport const documentPendingUpdates = sqliteTable(\n  \"document_pending_updates\",\n  {\n    id: text(\"id\"),\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    updateData: text(\"update_data\").notNull(),\n    partialStartVersionVector: text(\"partial_start_version_vector\").notNull(),\n    partialEndVersionVector: text(\"partial_end_version_vector\").notNull(),\n    sourceVersionVector: text(\"source_version_vector\"),\n    createdAt: text(\"created_at\").notNull(),\n    rekeyCount: integer(\"rekey_count\").notNull().default(0),\n  },\n  (table) => [\n    primaryKey({ columns: [table.id] }),\n    index(\"document_pending_updates_scope_created_idx\").on(\n      table.appKind,\n      table.localId,\n      table.createdAt,\n    ),\n  ],\n);\n\n/**\n * Last terminal sync failure or quarantined incoming update per document scope.\n *\n * The durable write queue (`documentPendingUpdates`) has no status columns — a\n * row is either pending or settled-and-deleted. Terminal submissions and\n * incoming updates that cannot be decrypted or imported are recorded here so\n * the write-queue view and footer can surface why the document is blocked.\n * Rows are upserted per scope and deleted only after a later fully validated\n * sync pass succeeds or the scope's local state is torn down.\n *\n * Columns:\n * - `appKind`: Local document namespace matching `documents.appKind`.\n * - `localId`: Local document id matching `documents.localId`.\n * - `status`: HTTP status of the failed submission when known.\n * - `message`: Human-readable failure description for queue display.\n * - `attemptedAt`: Timestamp of the failed attempt.\n *\n * Indexes:\n * - `(appKind, localId)` is the primary key and keeps one failure per scope.\n */\nexport const documentSyncFailures = sqliteTable(\n  \"document_sync_failures\",\n  {\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    status: integer(\"status\"),\n    message: text(\"message\").notNull(),\n    attemptedAt: text(\"attempted_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.appKind, table.localId] })],\n);\n\n/**\n * Full-history persistence for local documents (checkpoint + tail) — the ONLY\n * durable content source. Record rows in `documents` carry runtime metadata\n * and the content frontier (`snapshotEndVersion`), never content. The\n * checkpoint holds a full-history snapshot refreshed only at compaction, and\n * the tail appends every update (local deltas and decrypted remote updates)\n * written since. Restore = import checkpoint + replay tail; compaction =\n * export full history from the live doc, replace the checkpoint, clear the\n * tail — all bounded and amortized. Container metadata stores its content (an\n * exported-updates blob) as its checkpoint row, with no tail.\n */\nexport const documentHistoryCheckpoints = sqliteTable(\n  \"document_history_checkpoints\",\n  {\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    snapshot: text(\"snapshot\").notNull(),\n    endVersionVector: text(\"end_version_vector\").notNull(),\n    revision: text(\"revision\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.appKind, table.localId] })],\n);\n\nexport const documentHistoryUpdates = sqliteTable(\n  \"document_history_updates\",\n  {\n    id: text(\"id\"),\n    appKind: text(\"app_kind\").notNull(),\n    localId: text(\"local_id\").notNull(),\n    updateData: text(\"update_data\").notNull(),\n    // Provenance: \"local\" (authored on this device) or \"remote\" (decrypted\n    // pulled update). Restores use it to advance the outgoing-delta marker\n    // across remote rows — their ops are already server-side — while a local\n    // row left behind by a crash stays below the marker so the next edit\n    // re-derives and sends it.\n    origin: text(\"origin\").notNull(),\n    createdAt: text(\"created_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.id] }),\n    index(\"document_history_updates_scope_created_idx\").on(\n      table.appKind,\n      table.localId,\n      table.createdAt,\n    ),\n  ],\n);\n\n/**\n * Anti-rollback pin for verified access manifests.\n *\n * Records the highest access-manifest epoch this client has verified for each\n * object, so a later projection that serves an older epoch (rollback) or a\n * conflicting manifest at the same epoch (equivocation) is detected before any\n * key is unwrapped. Updated monotonically after a projection verifies cleanly.\n *\n * Columns:\n * - `objectKind`: Access object kind (`container`, `document`, ...).\n * - `organizationId`: Organization boundary that owns the object.\n * - `objectId`: Stable object id.\n * - `epoch`: Highest verified manifest epoch.\n * - `manifestHash`: Manifest hash pinned at that epoch.\n * - `updatedAt`: Local timestamp for the pin.\n *\n * Indexes:\n * - `(objectKind, organizationId, objectId)` is the primary key and gives one\n *   pin per object.\n */\nexport const accessManifestCheckpoints = sqliteTable(\n  \"access_manifest_checkpoints\",\n  {\n    objectKind: text(\"object_kind\").notNull(),\n    organizationId: text(\"organization_id\").notNull(),\n    objectId: text(\"object_id\").notNull(),\n    epoch: integer(\"epoch\").notNull(),\n    manifestHash: text(\"manifest_hash\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [table.objectKind, table.organizationId, table.objectId],\n    }),\n  ],\n);\n\n/**\n * Durable terminal pins for documents whose signed purge proof was verified.\n * These survive remote-state resets so a dishonest API cannot later replay the\n * pre-purge writer projection and resurrect locally deleted content.\n */\nexport const documentPurgeCheckpoints = sqliteTable(\n  \"document_purge_checkpoints\",\n  {\n    documentId: text(\"document_id\").primaryKey(),\n    organizationId: text(\"organization_id\").notNull(),\n    documentManifestHash: text(\"document_manifest_hash\").notNull(),\n    purgeEventHash: text(\"purge_event_hash\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n);\n\n/**\n * Durable trust-on-first-use pins for remote user identity bundles.\n *\n * The first validated identity observed for a user in a configured API trust\n * domain is inserted once. Later observations must match every suite, public\n * key, and fingerprint exactly; the persistence adapter never updates these\n * rows. `firstSeenAt` records when the local trust decision was made and is\n * likewise immutable.\n *\n * Indexes:\n * - `(identityTrustDomain, userId)` is the primary key and scopes a user pin to\n *   the host-configured API authority that supplied it.\n * - `(identityTrustDomain, signingKeyFingerprint)` binds the reverse identity\n *   mapping durably, including across session recreation. There is no\n *   migration for a table that already violates it. Earlier builds pinned a\n *   registration's user id before the server confirmed it, so a device that\n *   ran one may hold two users on one key; deployments are greenfield, and\n *   such a device clears its local data, which recreates this table empty. A\n *   device that used an environment before a reset does the same (see\n *   docs/developer/greenfield-reset.md).\n */\nexport const trustedUserIdentityPins = sqliteTable(\n  \"trusted_user_identity_pins\",\n  {\n    identityTrustDomain: text(\"identity_trust_domain\").notNull(),\n    userId: text(\"user_id\").notNull(),\n    formatVersion: integer(\"format_version\").notNull(),\n    signingSuite: text(\"signing_suite\").notNull(),\n    signingPublicKey: text(\"signing_public_key\").notNull(),\n    signingKeyFingerprint: text(\"signing_key_fingerprint\").notNull(),\n    encapsulationSuite: text(\"encapsulation_suite\").notNull(),\n    encapsulationPublicKey: text(\"encapsulation_public_key\").notNull(),\n    encapsulationKeyFingerprint: text(\n      \"encapsulation_key_fingerprint\",\n    ).notNull(),\n    firstSeenAt: text(\"first_seen_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({\n      columns: [table.identityTrustDomain, table.userId],\n    }),\n    uniqueIndex(\"trusted_user_identity_pins_domain_signing_fingerprint_idx\").on(\n      table.identityTrustDomain,\n      table.signingKeyFingerprint,\n    ),\n  ],\n);\n\n/**\n * Local many-to-many projection between documents and containers.\n *\n * The document summary row stores one selected `containerId` for primary list\n * placement, while this table keeps the full set of linked containers returned\n * by container/document sync. Removing a container deletes its links and may\n * repair affected document summary rows to point at another remaining link.\n *\n * Columns:\n * - `documentId`: Server document id whose container links are projected.\n * - `containerId`: Linked container id.\n * - `updatedAt`: Local timestamp for the last replacement of the link set.\n *\n * Indexes:\n * - `(documentId, containerId)` is the primary key and prevents duplicate\n *   links for the same document/container pair.\n */\nexport const documentContainerProjection = sqliteTable(\n  \"document_container_projection\",\n  {\n    documentId: text(\"document_id\").notNull(),\n    containerId: text(\"container_id\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.documentId, table.containerId] })],\n);\n\n/**\n * Queryable document summary and detail projection.\n *\n * The durable Loro state lives in `documents`. This table stores the fields the\n * app needs for document lists, summaries, and fast detail hydration without\n * opening the full Loro snapshot on every read.\n *\n * Columns:\n * - `localId`: Stable local document id. This joins to `documents.localId` for\n *   rows where `documents.appKind = documents`.\n * - `documentId`: Server document id when known.\n * - `containerId`: Selected container for primary document placement, or\n *   `null` if the document is not currently linked to a visible container.\n * - `organizationId`: Last-known owning organization. Stamped from the\n *   container row when the document is detached because its container was\n *   removed locally (e.g. access to a shared org was revoked and the container\n *   tombstoned), so pending writes keep their org attribution after the\n *   `containers` join source disappears. Read as a fallback only — a live\n *   container join always wins.\n * - `documentKind`: Stored document kind. Defaults to `note`.\n * - `title`: Plain projected title. Defaults to the note fallback title.\n * - `updatedAt`: Timestamp used for document list ordering.\n *\n * The projected full text lives in `documentProjectionText`, keyed by the same\n * `localId`. Keeping it out of this row keeps list/window scans narrow: the\n * sidebar and summary queries read titles and placement from rows whose size\n * does not grow with document content.\n *\n * Indexes:\n * - `localId` is the primary key for document projection lookups.\n * - `(containerId) where containerId is not null` serves container-scoped\n *   window/count scans without walking the whole table.\n * - `(organizationId) where containerId is null` serves the orphan-recovery\n *   existence and window scans.\n * - `(documentId) where documentId is not null` serves the linked-placement\n *   join from `documentContainerProjection` and server-id lookups.\n */\nexport const documentProjection = sqliteTable(\n  \"document_projection\",\n  {\n    localId: text(\"local_id\"),\n    documentId: text(\"document_id\"),\n    containerId: text(\"container_id\"),\n    organizationId: text(\"organization_id\"),\n    documentKind: text(\"document_kind\").notNull().default(\"note\"),\n    title: text(\"title\").notNull().default(\"Untitled note\"),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.localId] }),\n    index(\"document_projection_container_idx\")\n      .on(table.containerId)\n      .where(sql`${table.containerId} IS NOT NULL`),\n    index(\"document_projection_orphan_organization_idx\")\n      .on(table.organizationId)\n      .where(sql`${table.containerId} IS NULL`),\n    index(\"document_projection_document_idx\")\n      .on(table.documentId)\n      .where(sql`${table.documentId} IS NOT NULL`),\n  ],\n);\n\n/**\n * Projected document text, split from `documentProjection` so content size\n * never bloats the rows that list/window queries scan. Loaded only by detail\n * reads (`loadDocument`) and the save-timestamp change check.\n *\n * Columns:\n * - `localId`: Stable local document id, matching `documentProjection.localId`.\n * - `text`: Plain projected text used to rebuild summaries/details.\n */\nexport const documentProjectionText = sqliteTable(\n  \"document_projection_text\",\n  {\n    localId: text(\"local_id\"),\n    text: text(\"text\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.localId] })],\n);\n\n/**\n * Offline create queue for containers.\n *\n * A user can create a local container before the API has assigned all remote\n * state for the container and its metadata document. This table keeps the sync\n * intent until container-create sync either records the remote ids or stores an\n * error for retry.\n *\n * Columns:\n * - `id`: Client-generated intent id.\n * - `containerId`: Local container id created optimistically.\n * - `parentContainerId`: Parent container id used when the intent is sent.\n * - `intentType`: Intent discriminator, currently `container.create`.\n * - `syncStatus`: Current sync state, currently `pending` or `synced`.\n * - `remoteContainerId`: Remote container id recorded after successful sync.\n * - `remoteMetadataDocumentId`: Remote metadata document id recorded after\n *   successful sync.\n * - `remoteMetadataAccessStateHash`: Access state hash for the synced metadata\n *   document.\n * - `lastError`: Last sync error message for retry/debug display.\n * - `createdAt`: Intent creation timestamp used for FIFO sync.\n * - `updatedAt`: Local timestamp for the latest status/error change.\n *\n * Indexes:\n * - `id` is the primary key.\n * - `containerId` is unique so each local container has one create intent.\n * - `(syncStatus, createdAt)` supports listing pending intents in creation\n *   order.\n */\nexport const containerCreateIntents = sqliteTable(\n  \"container_create_intents\",\n  {\n    id: text(\"id\"),\n    containerId: text(\"container_id\").notNull().unique(),\n    parentContainerId: text(\"parent_container_id\").notNull(),\n    intentType: text(\"intent_type\").notNull(),\n    syncStatus: text(\"sync_status\").notNull(),\n    remoteContainerId: text(\"remote_container_id\"),\n    remoteMetadataDocumentId: text(\"remote_metadata_document_id\"),\n    remoteMetadataAccessStateHash: text(\"remote_metadata_access_state_hash\"),\n    lastError: text(\"last_error\"),\n    lastAttemptedAt: text(\"last_attempted_at\"),\n    createdAt: text(\"created_at\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.id] }),\n    index(\"container_create_intents_status_created_idx\").on(\n      table.syncStatus,\n      table.createdAt,\n    ),\n  ],\n);\n\n/**\n * Offline move queue for synced containers.\n *\n * A user can move a container whose server identity is already known while the\n * API or writer context is unavailable. This table stores only the desired\n * final parent and replay diagnostics; the signed move request is rebuilt from\n * current writer projections when sync resumes.\n *\n * Columns:\n * - `id`: Client-generated intent id.\n * - `containerId`: Synced container moved optimistically in the local tree.\n * - `parentContainerId`: Desired final parent container id.\n * - `previousParentContainerId`: Parent observed when the move was queued.\n * - `intentType`: Intent discriminator, currently `container.move`.\n * - `syncStatus`: Current sync state, currently `pending` or `blocked`.\n * - `lastError`: Last sync error message for retry/debug display.\n * - `lastAttemptedAt`: Timestamp of the last replay attempt.\n * - `createdAt`: Intent creation timestamp used for FIFO sync.\n * - `updatedAt`: Local timestamp for the latest target/status/error change.\n *\n * Indexes:\n * - `id` is the primary key.\n * - `containerId` is unique so same-container moves coalesce to one intent.\n * - `(syncStatus, createdAt)` supports listing pending intents in queue order.\n */\nexport const containerMoveIntents = sqliteTable(\n  \"container_move_intents\",\n  {\n    id: text(\"id\"),\n    containerId: text(\"container_id\").notNull().unique(),\n    parentContainerId: text(\"parent_container_id\").notNull(),\n    previousParentContainerId: text(\"previous_parent_container_id\"),\n    intentType: text(\"intent_type\").notNull(),\n    syncStatus: text(\"sync_status\").notNull(),\n    lastError: text(\"last_error\"),\n    lastAttemptedAt: text(\"last_attempted_at\"),\n    createdAt: text(\"created_at\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [\n    primaryKey({ columns: [table.id] }),\n    index(\"container_move_intents_status_created_idx\").on(\n      table.syncStatus,\n      table.createdAt,\n    ),\n  ],\n);\n\n/**\n * Per-lane sync cursors for container data.\n *\n * Container sync is split into lanes, such as a parent-container child lane or\n * a container-document membership lane. This table stores the last accepted\n * server watermark for each lane so the next sync request can resume without\n * replaying the entire tree.\n *\n * Columns:\n * - `laneKind`: Sync lane category, such as `container_parent` or\n *   `container_documents`.\n * - `laneId`: Lane identity. Root parent sync uses `root`, child sync uses a\n *   parent-prefixed container id, and document lanes use the container id.\n * - `watermarkUpdatedAt`: Server `updatedAt` value for the stored watermark.\n * - `watermarkId`: Server id tie-breaker for the stored watermark.\n * - `updatedAt`: Local timestamp for when the cursor was saved.\n *\n * Indexes:\n * - `(laneKind, laneId)` is the primary key and stores one cursor per lane.\n */\nexport const containerSyncWatermarks = sqliteTable(\n  \"container_sync_watermarks\",\n  {\n    laneKind: text(\"lane_kind\").notNull(),\n    laneId: text(\"lane_id\").notNull(),\n    watermarkUpdatedAt: text(\"watermark_updated_at\").notNull(),\n    watermarkId: text(\"watermark_id\").notNull(),\n    updatedAt: text(\"updated_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.laneKind, table.laneId] })],\n);\n\n/**\n * Local freshness markers for container sync lanes.\n *\n * These rows track the last successful API check for a lane independently from\n * server watermarks. Empty server responses do not always include a new\n * watermark, but the client still needs to remember that it recently checked\n * the lane so startup can use cached container state without polling every\n * time a container tree opens.\n *\n * Columns:\n * - `laneKind`: Sync lane category matching `containerSyncWatermarks`.\n * - `laneId`: Lane identity matching `containerSyncWatermarks`.\n * - `checkedAt`: Local timestamp for the most recent successful lane check.\n *\n * Indexes:\n * - `(laneKind, laneId)` is the primary key and stores one marker per lane.\n */\nexport const containerSyncLaneChecks = sqliteTable(\n  \"container_sync_lane_checks\",\n  {\n    laneKind: text(\"lane_kind\").notNull(),\n    laneId: text(\"lane_id\").notNull(),\n    checkedAt: text(\"checked_at\").notNull(),\n  },\n  (table) => [primaryKey({ columns: [table.laneKind, table.laneId] })],\n);\n\nexport const documentTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(documents),\n    requiredColumns: [\n      \"pull_continuation\",\n      \"recovery_generation\",\n      \"recovery_document_id\",\n    ],\n  },\n  defineSqlTableSchema(documentPendingUpdates),\n  defineSqlTableSchema(documentSyncFailures),\n  defineSqlTableSchema(documentHistoryCheckpoints),\n  defineSqlTableSchema(documentHistoryUpdates),\n];\n\nexport const principalPolicyTables: ReadonlyArray<SqlTableSchema> = [\n  {\n    ...defineSqlTableSchema(principalPolicies),\n    requiredColumns: [\"current_grants_json\"],\n  },\n  {\n    ...defineSqlTableSchema(principalPolicyBundleHistory),\n    requiredColumns: [\"current_grants_json\"],\n  },\n  defineSqlTableSchema(principalPolicyBundleReferences),\n  defineSqlTableSchema(principalPolicyOrganizations),\n  ...principalHistoryStageTables,\n  ...principalHistoryEvidenceTables,\n];\n\nexport const keyingCheckpointTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(organizationFounders),\n  defineSqlTableSchema(accessManifestCheckpoints),\n  defineSqlTableSchema(principalGrantRetirements),\n  defineSqlTableSchema(documentPurgeCheckpoints),\n  defineSqlTableSchema(principalPolicyCheckpoints),\n];\n\nexport const trustedUserIdentityPinTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(trustedUserIdentityPins),\n];\n\nconst securityIncidentTables: ReadonlyArray<SqlTableSchema> = [\n  securityIncidentTable,\n];\n\nexport const containerTables = containerTableSchemas;\n\nexport const documentContainerProjectionTables: ReadonlyArray<SqlTableSchema> =\n  [\n    defineSqlTableSchema(documentContainerProjection),\n    {\n      ...defineSqlTableSchema(containerDocumentTombstoneHolds),\n      requiredColumns: [\"hidden\"],\n    },\n    defineSqlTableSchema(pendingDocumentDiscoveries),\n    {\n      ...defineSqlTableSchema(documentDiscoveryHeads),\n      requiredColumns: [\"organization_id\"],\n    },\n    defineSqlTableSchema(documentDiscoverySequence),\n  ];\n\nexport const documentMoveIntentTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(documentMoveIntents),\n  defineSqlTableSchema(documentIntentLinkTargets),\n];\n\nexport const documentProjectionTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(documentProjection),\n  defineSqlTableSchema(documentProjectionText),\n  {\n    ...defineSqlTableSchema(documentPendingAttachments),\n    requiredColumns: [\"content_sha256\"],\n  },\n  {\n    ...defineSqlTableSchema(documentAttachmentBlobProjection),\n    requiredColumns: [\"content_sha256\"],\n  },\n  documentOrphanBlobReclaimTable,\n];\n\nexport const containerCreateIntentTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(containerCreateIntents),\n];\n\nexport const containerMoveIntentTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(containerMoveIntents),\n];\n\nexport const containerSyncWatermarkTables: ReadonlyArray<SqlTableSchema> = [\n  defineSqlTableSchema(containerSyncWatermarks),\n  defineSqlTableSchema(containerSyncLaneChecks),\n];\n\nexport const clientSqlTables: ReadonlyArray<SqlTableSchema> = [\n  ...documentTables,\n  ...principalPolicyTables,\n  ...keyingCheckpointTables,\n  ...trustedUserIdentityPinTables,\n  ...securityIncidentTables,\n  ...containerTables,\n  ...documentContainerProjectionTables,\n  ...documentMoveIntentTables,\n  ...documentProjectionTables,\n  ...containerCreateIntentTables,\n  ...containerMoveIntentTables,\n  ...containerSyncWatermarkTables,\n  ...organizationReadModelTables,\n  ...organizationDataUsage.organizationDataUsageTables,\n  ...provisioningAttempt.organizationProvisioningAttemptTables,\n];\n\nexport const clientSQLiteSchema = {\n  principalHistoryEntries,\n  principalHistoryNodes,\n  principalHistoryPrefixes,\n  principalHistoryStages,\n  organizationFounders,\n  principalGrantRetirements,\n  documents,\n  documentPendingUpdates,\n  documentSyncFailures,\n  principalPolicies,\n  principalPolicyBundleHistory,\n  principalPolicyBundleReferences,\n  principalPolicyOrganizations,\n  accessManifestCheckpoints,\n  documentPurgeCheckpoints,\n  principalPolicyCheckpoints,\n  trustedUserIdentityPins,\n  securityIncidents,\n  ...containerSQLiteSchema,\n  documentContainerProjection,\n  documentMoveIntents,\n  documentIntentLinkTargets,\n  documentProjection,\n  documentPendingAttachments,\n  documentAttachmentBlobProjection,\n  documentOrphanBlobReclaims: documentOrphanBlobReclaims,\n  containerCreateIntents,\n  containerMoveIntents,\n  containerSyncLaneChecks,\n  containerSyncWatermarks,\n  ...organizationReadModelSQLiteSchema,\n  ...organizationDataUsage.organizationDataUsageSQLiteSchema,\n  ...provisioningAttempt.organizationProvisioningAttemptSQLiteSchema,\n};\n"]}

package/data/sqlite/securityIncidentSchema.d.ts

@@ -0,0 +1,224 @@
+/**
+ * Durable local evidence that an SDK trust-boundary verification failed.
+ *
+ * Error messages and decrypted values are deliberately excluded. Callers may
+ * attach only hashes that were already part of the verified protocol object.
+ * Repeated detections of the same evidence update only the occurrence count
+ * and last-detected timestamp. Remote-state resets do not include this table,
+ * so an API rollback cannot erase the client's record of having detected it.
+ */
+export declare const securityIncidents: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "security_incidents";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "id";
+            tableName: "security_incidents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        trustDomain: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "trust_domain";
+            tableName: "security_incidents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        code: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "code";
+            tableName: "security_incidents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        operation: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "operation";
+            tableName: "security_incidents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        objectKind: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "object_kind";
+            tableName: "security_incidents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        objectId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "object_id";
+            tableName: "security_incidents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        organizationId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "organization_id";
+            tableName: "security_incidents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        evidenceHashes: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "evidence_hashes";
+            tableName: "security_incidents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        detectedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "detected_at";
+            tableName: "security_incidents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        lastDetectedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "last_detected_at";
+            tableName: "security_incidents";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        occurrenceCount: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "occurrence_count";
+            tableName: "security_incidents";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "sqlite";
+}>;
+export declare const securityIncidentTable: import("./sqlTableSchema.js").SqlTableSchema;

package/data/sqlite/securityIncidentSchema.js

@@ -0,0 +1,28 @@
+import { index, integer, sqliteTable, text } from "drizzle-orm/sqlite-core";
+import { defineSqlTableSchema } from "./sqlTableSchema.js";
+/**
+ * Durable local evidence that an SDK trust-boundary verification failed.
+ *
+ * Error messages and decrypted values are deliberately excluded. Callers may
+ * attach only hashes that were already part of the verified protocol object.
+ * Repeated detections of the same evidence update only the occurrence count
+ * and last-detected timestamp. Remote-state resets do not include this table,
+ * so an API rollback cannot erase the client's record of having detected it.
+ */
+export const securityIncidents = sqliteTable("security_incidents", {
+    id: text("id").primaryKey(),
+    trustDomain: text("trust_domain"),
+    code: text("code").notNull(),
+    operation: text("operation").notNull(),
+    objectKind: text("object_kind").notNull(),
+    objectId: text("object_id"),
+    organizationId: text("organization_id"),
+    evidenceHashes: text("evidence_hashes").notNull(),
+    detectedAt: text("detected_at").notNull(),
+    lastDetectedAt: text("last_detected_at").notNull(),
+    occurrenceCount: integer("occurrence_count").notNull().default(1),
+}, (table) => [
+    index("security_incidents_trust_last_detected_idx").on(table.trustDomain, table.lastDetectedAt),
+]);
+export const securityIncidentTable = defineSqlTableSchema(securityIncidents);
+//# sourceMappingURL=securityIncidentSchema.js.map

package/data/sqlite/securityIncidentSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityIncidentSchema.js","sourceRoot":"","sources":["securityIncidentSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAC1C,oBAAoB,EACpB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACtC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IAClD,eAAe,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,4CAA4C,CAAC,CAAC,EAAE,CACpD,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,cAAc,CACrB;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,iBAAiB,CAAC,CAAC","sourcesContent":["import { index, integer, sqliteTable, text } from \"drizzle-orm/sqlite-core\";\nimport { defineSqlTableSchema } from \"./sqlTableSchema\";\n\n/**\n * Durable local evidence that an SDK trust-boundary verification failed.\n *\n * Error messages and decrypted values are deliberately excluded. Callers may\n * attach only hashes that were already part of the verified protocol object.\n * Repeated detections of the same evidence update only the occurrence count\n * and last-detected timestamp. Remote-state resets do not include this table,\n * so an API rollback cannot erase the client's record of having detected it.\n */\nexport const securityIncidents = sqliteTable(\n  \"security_incidents\",\n  {\n    id: text(\"id\").primaryKey(),\n    trustDomain: text(\"trust_domain\"),\n    code: text(\"code\").notNull(),\n    operation: text(\"operation\").notNull(),\n    objectKind: text(\"object_kind\").notNull(),\n    objectId: text(\"object_id\"),\n    organizationId: text(\"organization_id\"),\n    evidenceHashes: text(\"evidence_hashes\").notNull(),\n    detectedAt: text(\"detected_at\").notNull(),\n    lastDetectedAt: text(\"last_detected_at\").notNull(),\n    occurrenceCount: integer(\"occurrence_count\").notNull().default(1),\n  },\n  (table) => [\n    index(\"security_incidents_trust_last_detected_idx\").on(\n      table.trustDomain,\n      table.lastDetectedAt,\n    ),\n  ],\n);\n\nexport const securityIncidentTable = defineSqlTableSchema(securityIncidents);\n"]}

package/data/sqlite/sqlExec.d.ts

@@ -0,0 +1,39 @@
+export type SqlRowValue = string | number | null;
+export type SqlRow = Record<string, SqlRowValue>;
+export type SqlArrayRow = SqlRowValue[];
+export type SqlBind = Record<string, SqlRowValue> | ReadonlyArray<SqlRowValue>;
+export type SqlRowMode = "object" | "array";
+export interface ExecSql {
+    (sql: string, bind?: SqlBind, options?: {
+        rowMode?: "object";
+    }): Promise<SqlRow[]>;
+    (sql: string, bind: SqlBind | undefined, options: {
+        rowMode: "array";
+    }): Promise<SqlArrayRow[]>;
+    (sql: string, bind?: SqlBind, options?: {
+        rowMode?: SqlRowMode;
+    }): Promise<Array<SqlRow | SqlArrayRow>>;
+}
+export interface ExecSqlClientLike {
+    exec(options: {
+        sql: string;
+        bind?: SqlBind;
+        rowMode?: SqlRowMode;
+    }): Promise<{
+        rows: Array<SqlRow | SqlArrayRow>;
+    }>;
+}
+export declare const unavailableExecSql: ExecSql;
+export declare function resolveCanonicalExecSql(execSql: ExecSql): ExecSql;
+export declare function hasCompletedConnectionOnce(execSql: ExecSql, key: string): boolean;
+export declare function markCompletedConnectionOnce(execSql: ExecSql, key: string): void;
+export declare function runOncePerConnection(execSql: ExecSql, key: string, run: () => Promise<void>): Promise<void>;
+/**
+ * Forget every completed once-per-connection key for this connection. Required
+ * after an operation that rebuilds the schema out from under the runtime (the
+ * local backup restore drops and recreates all user tables) so the next query
+ * re-runs its schema ensures.
+ */
+export declare function resetConnectionSchemaMemo(execSql: ExecSql): void;
+export declare function createExecSql(client: ExecSqlClientLike): ExecSql;
+export declare function runSerializedSqlMutation<T>(execSql: ExecSql, operation: (execSql: ExecSql) => Promise<T> | T): Promise<T>;

package/data/sqlite/sqlExec.js

@@ -0,0 +1,118 @@
+export const unavailableExecSql = async () => {
+    throw new Error("Database client is unavailable.");
+};
+// Tracks the active serialized mutation chain for each canonical SQL executor
+// so callers sharing one connection cannot interleave transactional statements.
+const sqlMutationQueue = new WeakMap();
+// Marks executors that already run inside the shared mutation lock so nested
+// callers can reuse the current lock instead of queueing a second time.
+const serializedSqlExecs = new WeakSet();
+// Reuses one ExecSql adapter per client so all wrappers around the same
+// connection share the same serialized mutation queue.
+const clientExecSqls = new WeakMap();
+// Maps each locked executor back to the canonical executor whose lock it runs
+// under, so per-connection caches key on one stable identity no matter which
+// wrapper a caller holds.
+const serializedSqlExecCanonicals = new WeakMap();
+export function resolveCanonicalExecSql(execSql) {
+    return serializedSqlExecCanonicals.get(execSql) ?? execSql;
+}
+// Completed once-per-connection keys (schema ensures).
+// Only COMPLETED runs are recorded — never in-flight promises — so two lock
+// contexts racing the same key both run the (idempotent) work instead of one
+// awaiting a promise that can only settle after the lock the other context is
+// already holding.
+const completedConnectionOnceKeys = new WeakMap();
+export function hasCompletedConnectionOnce(execSql, key) {
+    return (completedConnectionOnceKeys
+        .get(resolveCanonicalExecSql(execSql))
+        ?.has(key) ?? false);
+}
+export function markCompletedConnectionOnce(execSql, key) {
+    const canonical = resolveCanonicalExecSql(execSql);
+    const keys = completedConnectionOnceKeys.get(canonical) ?? new Set();
+    keys.add(key);
+    completedConnectionOnceKeys.set(canonical, keys);
+}
+// Callers must not invoke this inside an explicit SQL transaction that can
+// roll back: completion is recorded as soon as `run` resolves, so a later
+// ROLLBACK would leave the memo asserting schema that no longer exists.
+export async function runOncePerConnection(execSql, key, run) {
+    if (hasCompletedConnectionOnce(execSql, key)) {
+        return;
+    }
+    await run();
+    markCompletedConnectionOnce(execSql, key);
+}
+/**
+ * Forget every completed once-per-connection key for this connection. Required
+ * after an operation that rebuilds the schema out from under the runtime (the
+ * local backup restore drops and recreates all user tables) so the next query
+ * re-runs its schema ensures.
+ */
+export function resetConnectionSchemaMemo(execSql) {
+    completedConnectionOnceKeys.delete(resolveCanonicalExecSql(execSql));
+}
+function defineExecSql(run) {
+    async function execSql(sql, bind, options) {
+        return run(sql, bind, options);
+    }
+    return execSql;
+}
+export function createExecSql(client) {
+    const existingExecSql = clientExecSqls.get(client);
+    if (existingExecSql) {
+        return existingExecSql;
+    }
+    const execSql = defineExecSql(async (sql, bind, options) => {
+        const result = await client.exec({
+            sql,
+            ...(bind !== undefined ? { bind } : {}),
+            ...(options?.rowMode ? { rowMode: options.rowMode } : {}),
+        });
+        return result.rows;
+    });
+    clientExecSqls.set(client, execSql);
+    return execSql;
+}
+function isSerializedSqlExec(execSql) {
+    return serializedSqlExecs.has(execSql);
+}
+function createSerializedSqlExec(execSql) {
+    if (isSerializedSqlExec(execSql)) {
+        return execSql;
+    }
+    const serializedExecSql = defineExecSql(execSql);
+    serializedSqlExecs.add(serializedExecSql);
+    serializedSqlExecCanonicals.set(serializedExecSql, resolveCanonicalExecSql(execSql));
+    return serializedExecSql;
+}
+// SQLite transactions are scoped to the shared connection, so we must hold a
+// connection-level lock across multi-statement mutations to prevent interleaving.
+// Nested callers must keep passing the provided locked executor. Re-entering
+// with the original canonical executor will wait on the current mutation and
+// deadlock.
+export async function runSerializedSqlMutation(execSql, operation) {
+    if (isSerializedSqlExec(execSql)) {
+        return operation(execSql);
+    }
+    const previous = sqlMutationQueue.get(execSql) ?? Promise.resolve();
+    let releaseCurrent = () => { };
+    const current = new Promise((resolve) => {
+        releaseCurrent = resolve;
+    });
+    const waitForPrevious = previous.catch(() => undefined);
+    const queuedCurrent = waitForPrevious.then(() => current);
+    sqlMutationQueue.set(execSql, queuedCurrent);
+    await waitForPrevious;
+    try {
+        return await operation(createSerializedSqlExec(execSql));
+    }
+    finally {
+        releaseCurrent();
+        if (sqlMutationQueue.get(execSql) === queuedCurrent) {
+            sqlMutationQueue.delete(execSql);
+        }
+    }
+}
+//# sourceMappingURL=sqlExec.js.map

package/data/sqlite/sqlExec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlExec.js","sourceRoot":"","sources":["sqlExec.ts"],"names":[],"mappings":"AAgCA,MAAM,CAAC,MAAM,kBAAkB,GAAY,KAAK,IAAI,EAAE;IACpD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACrD,CAAC,CAAC;AAEF,8EAA8E;AAC9E,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAA0B,CAAC;AAE/D,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAAW,CAAC;AAElD,wEAAwE;AACxE,uDAAuD;AACvD,MAAM,cAAc,GAAG,IAAI,OAAO,EAA8B,CAAC;AAEjE,8EAA8E;AAC9E,6EAA6E;AAC7E,0BAA0B;AAC1B,MAAM,2BAA2B,GAAG,IAAI,OAAO,EAAoB,CAAC;AAEpE,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,OAAO,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;AAC7D,CAAC;AAED,uDAAuD;AACvD,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,mBAAmB;AACnB,MAAM,2BAA2B,GAAG,IAAI,OAAO,EAAwB,CAAC;AAExE,MAAM,UAAU,0BAA0B,CACxC,OAAgB,EAChB,GAAW;IAEX,OAAO,CACL,2BAA2B;SACxB,GAAG,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACtC,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAAgB,EAChB,GAAW;IAEX,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,2BAA2B,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;IAC7E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,2BAA2B,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,2EAA2E;AAC3E,0EAA0E;AAC1E,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,GAAW,EACX,GAAwB;IAExB,IAAI,0BAA0B,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,MAAM,GAAG,EAAE,CAAC;IACZ,2BAA2B,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,2BAA2B,CAAC,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,aAAa,CACpB,GAIyC;IAiBzC,KAAK,UAAU,OAAO,CACpB,GAAW,EACX,IAAc,EACd,OAAkC;QAElC,OAAO,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAyB;IACrD,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;YAC/B,GAAG;YACH,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,OAAO,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB;IAC/C,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjD,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC1C,2BAA2B,CAAC,GAAG,CAC7B,iBAAiB,EACjB,uBAAuB,CAAC,OAAO,CAAC,CACjC,CAAC;IACF,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,kFAAkF;AAClF,6EAA6E;AAC7E,6EAA6E;AAC7E,YAAY;AACZ,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgB,EAChB,SAA+C;IAE/C,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACpE,IAAI,cAAc,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,cAAc,GAAG,OAAO,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAE1D,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC7C,MAAM,eAAe,CAAC;IAEtB,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;YAAS,CAAC;QACT,cAAc,EAAE,CAAC;QACjB,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,aAAa,EAAE,CAAC;YACpD,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["export type SqlRowValue = string | number | null;\nexport type SqlRow = Record<string, SqlRowValue>;\nexport type SqlArrayRow = SqlRowValue[];\nexport type SqlBind = Record<string, SqlRowValue> | ReadonlyArray<SqlRowValue>;\nexport type SqlRowMode = \"object\" | \"array\";\n\nexport interface ExecSql {\n  (\n    sql: string,\n    bind?: SqlBind,\n    options?: { rowMode?: \"object\" },\n  ): Promise<SqlRow[]>;\n  (\n    sql: string,\n    bind: SqlBind | undefined,\n    options: { rowMode: \"array\" },\n  ): Promise<SqlArrayRow[]>;\n  (\n    sql: string,\n    bind?: SqlBind,\n    options?: { rowMode?: SqlRowMode },\n  ): Promise<Array<SqlRow | SqlArrayRow>>;\n}\n\nexport interface ExecSqlClientLike {\n  exec(options: {\n    sql: string;\n    bind?: SqlBind;\n    rowMode?: SqlRowMode;\n  }): Promise<{ rows: Array<SqlRow | SqlArrayRow> }>;\n}\n\nexport const unavailableExecSql: ExecSql = async () => {\n  throw new Error(\"Database client is unavailable.\");\n};\n\n// Tracks the active serialized mutation chain for each canonical SQL executor\n// so callers sharing one connection cannot interleave transactional statements.\nconst sqlMutationQueue = new WeakMap<ExecSql, Promise<void>>();\n\n// Marks executors that already run inside the shared mutation lock so nested\n// callers can reuse the current lock instead of queueing a second time.\nconst serializedSqlExecs = new WeakSet<ExecSql>();\n\n// Reuses one ExecSql adapter per client so all wrappers around the same\n// connection share the same serialized mutation queue.\nconst clientExecSqls = new WeakMap<ExecSqlClientLike, ExecSql>();\n\n// Maps each locked executor back to the canonical executor whose lock it runs\n// under, so per-connection caches key on one stable identity no matter which\n// wrapper a caller holds.\nconst serializedSqlExecCanonicals = new WeakMap<ExecSql, ExecSql>();\n\nexport function resolveCanonicalExecSql(execSql: ExecSql): ExecSql {\n  return serializedSqlExecCanonicals.get(execSql) ?? execSql;\n}\n\n// Completed once-per-connection keys (schema ensures).\n// Only COMPLETED runs are recorded — never in-flight promises — so two lock\n// contexts racing the same key both run the (idempotent) work instead of one\n// awaiting a promise that can only settle after the lock the other context is\n// already holding.\nconst completedConnectionOnceKeys = new WeakMap<ExecSql, Set<string>>();\n\nexport function hasCompletedConnectionOnce(\n  execSql: ExecSql,\n  key: string,\n): boolean {\n  return (\n    completedConnectionOnceKeys\n      .get(resolveCanonicalExecSql(execSql))\n      ?.has(key) ?? false\n  );\n}\n\nexport function markCompletedConnectionOnce(\n  execSql: ExecSql,\n  key: string,\n): void {\n  const canonical = resolveCanonicalExecSql(execSql);\n  const keys = completedConnectionOnceKeys.get(canonical) ?? new Set<string>();\n  keys.add(key);\n  completedConnectionOnceKeys.set(canonical, keys);\n}\n\n// Callers must not invoke this inside an explicit SQL transaction that can\n// roll back: completion is recorded as soon as `run` resolves, so a later\n// ROLLBACK would leave the memo asserting schema that no longer exists.\nexport async function runOncePerConnection(\n  execSql: ExecSql,\n  key: string,\n  run: () => Promise<void>,\n): Promise<void> {\n  if (hasCompletedConnectionOnce(execSql, key)) {\n    return;\n  }\n  await run();\n  markCompletedConnectionOnce(execSql, key);\n}\n\n/**\n * Forget every completed once-per-connection key for this connection. Required\n * after an operation that rebuilds the schema out from under the runtime (the\n * local backup restore drops and recreates all user tables) so the next query\n * re-runs its schema ensures.\n */\nexport function resetConnectionSchemaMemo(execSql: ExecSql): void {\n  completedConnectionOnceKeys.delete(resolveCanonicalExecSql(execSql));\n}\n\nfunction defineExecSql(\n  run: (\n    sql: string,\n    bind?: SqlBind,\n    options?: { rowMode?: SqlRowMode },\n  ) => Promise<Array<SqlRow | SqlArrayRow>>,\n): ExecSql {\n  function execSql(\n    sql: string,\n    bind?: SqlBind,\n    options?: { rowMode?: \"object\" },\n  ): Promise<SqlRow[]>;\n  function execSql(\n    sql: string,\n    bind: SqlBind | undefined,\n    options: { rowMode: \"array\" },\n  ): Promise<SqlArrayRow[]>;\n  function execSql(\n    sql: string,\n    bind?: SqlBind,\n    options?: { rowMode?: SqlRowMode },\n  ): Promise<Array<SqlRow | SqlArrayRow>>;\n  async function execSql(\n    sql: string,\n    bind?: SqlBind,\n    options?: { rowMode?: SqlRowMode },\n  ): Promise<Array<SqlRow | SqlArrayRow>> {\n    return run(sql, bind, options);\n  }\n\n  return execSql;\n}\n\nexport function createExecSql(client: ExecSqlClientLike): ExecSql {\n  const existingExecSql = clientExecSqls.get(client);\n  if (existingExecSql) {\n    return existingExecSql;\n  }\n\n  const execSql = defineExecSql(async (sql, bind, options) => {\n    const result = await client.exec({\n      sql,\n      ...(bind !== undefined ? { bind } : {}),\n      ...(options?.rowMode ? { rowMode: options.rowMode } : {}),\n    });\n    return result.rows;\n  });\n\n  clientExecSqls.set(client, execSql);\n  return execSql;\n}\n\nfunction isSerializedSqlExec(execSql: ExecSql): boolean {\n  return serializedSqlExecs.has(execSql);\n}\n\nfunction createSerializedSqlExec(execSql: ExecSql): ExecSql {\n  if (isSerializedSqlExec(execSql)) {\n    return execSql;\n  }\n\n  const serializedExecSql = defineExecSql(execSql);\n  serializedSqlExecs.add(serializedExecSql);\n  serializedSqlExecCanonicals.set(\n    serializedExecSql,\n    resolveCanonicalExecSql(execSql),\n  );\n  return serializedExecSql;\n}\n\n// SQLite transactions are scoped to the shared connection, so we must hold a\n// connection-level lock across multi-statement mutations to prevent interleaving.\n// Nested callers must keep passing the provided locked executor. Re-entering\n// with the original canonical executor will wait on the current mutation and\n// deadlock.\nexport async function runSerializedSqlMutation<T>(\n  execSql: ExecSql,\n  operation: (execSql: ExecSql) => Promise<T> | T,\n): Promise<T> {\n  if (isSerializedSqlExec(execSql)) {\n    return operation(execSql);\n  }\n\n  const previous = sqlMutationQueue.get(execSql) ?? Promise.resolve();\n  let releaseCurrent = () => {};\n  const current = new Promise<void>((resolve) => {\n    releaseCurrent = resolve;\n  });\n  const waitForPrevious = previous.catch(() => undefined);\n  const queuedCurrent = waitForPrevious.then(() => current);\n\n  sqlMutationQueue.set(execSql, queuedCurrent);\n  await waitForPrevious;\n\n  try {\n    return await operation(createSerializedSqlExec(execSql));\n  } finally {\n    releaseCurrent();\n    if (sqlMutationQueue.get(execSql) === queuedCurrent) {\n      sqlMutationQueue.delete(execSql);\n    }\n  }\n}\n"]}

package/data/sqlite/sqlSchema.d.ts

@@ -0,0 +1,4 @@
+export type { ExecSql, ExecSqlClientLike, SqlArrayRow, SqlBind, SqlRow, SqlRowMode, SqlRowValue, } from "./sqlExec.js";
+export { createExecSql, resetConnectionSchemaMemo, resolveCanonicalExecSql, runOncePerConnection, runSerializedSqlMutation, unavailableExecSql, } from "./sqlExec.js";
+export type { SqlTableSchema } from "./sqlTableSchema.js";
+export { defineSqlTableSchema, ensureSqlTables } from "./sqlTableSchema.js";

package/data/sqlite/sqlSchema.js

@@ -0,0 +1,3 @@
+export { createExecSql, resetConnectionSchemaMemo, resolveCanonicalExecSql, runOncePerConnection, runSerializedSqlMutation, unavailableExecSql, } from "./sqlExec.js";
+export { defineSqlTableSchema, ensureSqlTables } from "./sqlTableSchema.js";
+//# sourceMappingURL=sqlSchema.js.map

package/data/sqlite/sqlSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlSchema.js","sourceRoot":"","sources":["sqlSchema.ts"],"names":[],"mappings":"AASA,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC","sourcesContent":["export type {\n  ExecSql,\n  ExecSqlClientLike,\n  SqlArrayRow,\n  SqlBind,\n  SqlRow,\n  SqlRowMode,\n  SqlRowValue,\n} from \"./sqlExec\";\nexport {\n  createExecSql,\n  resetConnectionSchemaMemo,\n  resolveCanonicalExecSql,\n  runOncePerConnection,\n  runSerializedSqlMutation,\n  unavailableExecSql,\n} from \"./sqlExec\";\nexport type { SqlTableSchema } from \"./sqlTableSchema\";\nexport { defineSqlTableSchema, ensureSqlTables } from \"./sqlTableSchema\";\n"]}

package/data/sqlite/sqlTableSchema.d.ts

@@ -0,0 +1,19 @@
+import { type SQLiteTable } from "drizzle-orm/sqlite-core";
+import type { ExecSql } from "./sqlExec.js";
+export interface SqlTableSchema {
+    name: string;
+    createSql: string;
+    indexes?: ReadonlyArray<string>;
+    requiredColumns?: ReadonlyArray<string>;
+}
+/**
+ * Render a Drizzle SQLite table definition into executable schema SQL.
+ *
+ * The client runtime creates local tables through `ensureSqlTables`, which works
+ * with raw SQL strings rather than Drizzle migrations. This helper keeps the
+ * Drizzle table definitions as the source of truth while preserving primary
+ * keys, table-level unique constraints, partial indexes, default values, and
+ * identifier quoting.
+ */
+export declare function defineSqlTableSchema(table: SQLiteTable): SqlTableSchema;
+export declare function ensureSqlTables(execSql: ExecSql, tables: ReadonlyArray<SqlTableSchema>): Promise<void>;