@threadbase-sh/streamer 1.62.0 → 1.64.0

package/dist/db/repositories/devices.repository.d.ts

@@ -0,0 +1,137 @@
+import type Database from "better-sqlite3";
+import { type Capability, type CapabilityPreset } from "../../services/security/capabilities";
+/**
+ * Paired-device registry (C5).
+ * See docs/architecture/2026-07-24-device-identity-and-capabilities.md.
+ *
+ * Stores identity and authority for each paired device. Never stores a usable
+ * credential: only the SHA-256 of a device token, so reading this table cannot
+ * impersonate a device.
+ */
+export interface DeviceRow {
+    device_id: string;
+    public_key: string;
+    token_hash: string;
+    name: string | null;
+    capabilities: string;
+    created_at: number;
+    last_seen_at: number | null;
+    revoked_at: number | null;
+    /** Noise static public key, base64. Null on every row that predates E2EE. */
+    e2ee_static_pub: string | null;
+    /** The downgrade lock. 1 once this device has completed a handshake. */
+    e2ee_required: number;
+    e2ee_version: number | null;
+}
+/** A device as reported over the API. Deliberately carries no credential. */
+export interface DeviceView {
+    deviceId: string;
+    name: string | null;
+    capabilities: Capability[];
+    createdAt: number;
+    lastSeenAt: number | null;
+    revokedAt: number | null;
+    /**
+     * Whether this device is pinned to encryption.
+     *
+     * A boolean, never the key and never a hash of it: `GET /api/devices` exists
+     * so a user can spot a device they did not pair, and answering "is this one
+     * encrypted" needs no key material to do it. Publishing the static key would
+     * hand an attacker who reached this endpoint the value that identifies a
+     * device.
+     */
+    e2ee: boolean;
+}
+export interface RegisteredDevice {
+    deviceId: string;
+    /** Returned to the client exactly once, at pairing. Never persisted raw. */
+    deviceToken: string;
+    capabilities: Capability[];
+}
+/** Device tokens are opaque high-entropy strings; 32 bytes matches the API key. */
+export declare function generateDeviceToken(): string;
+export declare function hashDeviceToken(token: string): string;
+/**
+ * Constant-time comparison of two token hashes, matching `validateApiKey`'s
+ * discipline. Both inputs are fixed-length hex digests, so a length mismatch
+ * means a malformed value rather than a secret-dependent branch.
+ */
+export declare function safeHashEquals(a: string, b: string): boolean;
+/**
+ * Parse the stored capability JSON, dropping anything this build does not
+ * recognize. A downgrade must never silently grant a capability it cannot
+ * enforce — unknown entries are discarded rather than trusted.
+ */
+export declare function parseCapabilities(raw: string): Capability[];
+export declare function toDeviceView(row: DeviceRow): DeviceView;
+export declare class DevicesRepository {
+    private insertStmt;
+    private byTokenHashStmt;
+    private byIdStmt;
+    private listStmt;
+    private revokeStmt;
+    private touchStmt;
+    private deleteStmt;
+    private deleteRevokedStmt;
+    private byE2eeStaticPubStmt;
+    private repairStmt;
+    constructor(db: Database.Database);
+    /**
+     * Record a newly paired device and mint its token.
+     *
+     * The raw token is returned to the caller and never stored — this is the only
+     * moment it exists outside the client.
+     */
+    register(args: {
+        publicKey: string;
+        name?: string | null;
+        preset?: CapabilityPreset;
+        now?: number;
+        /**
+         * The device's Noise static public key, base64, when pairing completed a
+         * handshake. Absent on a plaintext pairing, which stays exactly as it is
+         * today: no key, no pin, no behaviour change.
+         */
+        e2eeStaticPub?: string;
+        e2eeVersion?: number;
+    }): RegisteredDevice;
+    /** The device that owns a Noise static key, or null. */
+    getByE2eeStaticPub(staticPub: string): DeviceRow | null;
+    /**
+     * Resolve a presented token to a device, or null.
+     *
+     * Returns null for a revoked device, so revocation takes effect on the very
+     * next request with no cache to go stale.
+     */
+    authenticate(token: string): DeviceRow | null;
+    get(deviceId: string): DeviceRow | null;
+    /** All devices, including revoked ones — an audit surface needs the history. */
+    list(): DeviceView[];
+    /** Revoke one device. Others are untouched — no key rotation, no collateral. */
+    revoke(deviceId: string, now?: number): boolean;
+    /**
+     * Erase one device's record outright.
+     *
+     * Deliberately separate from `revoke`, which is a soft delete that keeps the
+     * row so `list()` can show what happened. That audit trail is the right
+     * default — but it meant a `devices` row, including the user-supplied `name`
+     * ("Ronen's iPhone"), had no removal path at all once the registry moved to
+     * runtime.db, which no command deletes. This is that path.
+     *
+     * Erasure is NOT revocation: deleting a row frees its `token_hash`, so a
+     * device whose token is still on a phone somewhere stops being *known* rather
+     * than being *refused*. Revoke first, delete second, is the safe order, and
+     * `deleteRevoked()` exists so that is the easy thing to do.
+     */
+    delete(deviceId: string): boolean;
+    /**
+     * Erase every already-revoked device. The bulk companion to `delete`, and the
+     * one that is safe by construction: a revoked device is already refused, so
+     * removing its row cannot restore access to anything.
+     *
+     * Returns the number of rows removed.
+     */
+    deleteRevoked(): number;
+    touch(deviceId: string, now?: number): void;
+}
+//# sourceMappingURL=devices.repository.d.ts.map

package/dist/db/repositories/devices.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devices.repository.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/devices.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EACL,KAAK,UAAU,EACf,KAAK,gBAAgB,EAGtB,MAAM,sCAAsC,CAAC;AAE9C;;;;;;;GAOG;AAEH,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,6EAA6E;IAC7E,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,wEAAwE;IACxE,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,6EAA6E;AAC7E,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;;OAQG;IACH,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,UAAU,EAAE,CAAC;CAC5B;AAED,mFAAmF;AACnF,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAG5D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,EAAE,CAQ3D;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,SAAS,GAAG,UAAU,CAcvD;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,eAAe,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,iBAAiB,CAAqB;IAC9C,OAAO,CAAC,mBAAmB,CAAqB;IAChD,OAAO,CAAC,UAAU,CAAqB;IAEvC,YAAY,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAyChC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,CAAC,EAAE,gBAAgB,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb;;;;WAIG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,gBAAgB,CA6CnB;IAED,wDAAwD;IACxD,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEtD;IAED;;;;;OAKG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAS5C;IAED,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEtC;IAED,gFAAgF;IAChF,IAAI,IAAI,UAAU,EAAE,CAEnB;IAED,gFAAgF;IAChF,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAE1D;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEhC;IAED;;;;;;OAMG;IACH,aAAa,IAAI,MAAM,CAEtB;IAED,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAEtD;CACF"}

package/dist/db/repositories/managed-sessions.repository.d.ts

@@ -0,0 +1,127 @@
+import type Database from "better-sqlite3";
+import type { ManagedSession, SessionStatus } from "../../types";
+/**
+ * Durable registry of managed sessions (C1 Phase 2).
+ * See docs/architecture/2026-07-24-durable-session-runtime.md.
+ *
+ * Distinct from SessionsRepository, which wraps the in-memory SessionStore for
+ * the live request path. This one exists so session identity and provenance
+ * outlive the streamer process: without it, a restart loses startedAt,
+ * promptCount, sessionName, the Codex rollout binding, and failureReason, and
+ * the boot reconciler has nothing to reconcile against.
+ *
+ * Deliberately not stored here: the PTY output ring buffer and xterm screen.
+ * Their authoritative copy is the provider's JSONL, and writing 64KiB of ANSI
+ * on every chunk to duplicate it would be a write storm for no gain.
+ */
+/** How a persisted status was obtained — never inferred, always recorded. */
+export type StatusSource = "spawn" | "transition" | "exit" | "shutdown" | "probe" | "reconcile";
+export type { SessionLifecycle } from "../../types";
+export interface ManagedSessionRow {
+    session_id: string;
+    provider: string;
+    pid: number | null;
+    cmdline: string | null;
+    project_path: string;
+    project_name: string;
+    branch: string;
+    status: string;
+    status_source: string;
+    status_updated_at: number;
+    started_at: number;
+    completed_at: number | null;
+    last_activity_at: number | null;
+    prompt_count: number;
+    session_name: string | null;
+    project_id: string | null;
+    bound_conversation_id: string | null;
+    resumed_from_conversation_id: string | null;
+    failure_reason: string | null;
+    streamer_instance_id: string;
+    /**
+     * Which machine boot `pid` was recorded during (migration 002). Optional
+     * because rows written before it exists read back as null/absent, which the
+     * reconciler treats exactly like a mismatch — never like a match.
+     */
+    boot_token?: string | null;
+}
+/** Most rows the boot reconciler will probe in one pass. */
+export declare const PROBE_SET_MAX = 200;
+/** Most rows one diagnostics report will carry. */
+export declare const DIAGNOSTICS_MAX = 200;
+/** How long a finished session stays in the registry as history. */
+export declare const TERMINAL_RETENTION_MS: number;
+export interface RecordSpawnInput {
+    session: ManagedSession;
+    pid: number | null;
+    cmdline: string | null;
+    streamerInstanceId: string;
+}
+export declare class ManagedSessionsRepository {
+    private upsertStmt;
+    private updateStatusStmt;
+    private bindStmt;
+    private getStmt;
+    private listNonTerminalStmt;
+    private listAllStmt;
+    private pruneTerminalStmt;
+    private listRecoverableStmt;
+    private deleteStmt;
+    constructor(db: Database.Database);
+    /** Record a session at spawn, or refresh every field of an existing row. */
+    recordSpawn({ session, pid, cmdline, streamerInstanceId }: RecordSpawnInput): void;
+    /**
+     * Persist a status transition. `source` is required rather than defaulted:
+     * a status whose provenance is unknown is the thing this table exists to
+     * prevent, and the reconciler reads it to decide how much to trust the value.
+     */
+    recordStatus(sessionId: string, status: SessionStatus, source: StatusSource, fields?: {
+        completedAt?: Date | null;
+        lastActivityAt?: Date | null;
+        promptCount?: number;
+        failureReason?: string | null;
+        /** Null/omitted keeps whatever is stored — it never clears a known name. */
+        sessionName?: string | null;
+    }): void;
+    /**
+     * Persist the Codex rollout id discovered after spawn.
+     *
+     * Its own statement rather than a `recordSpawn` re-run: the binding arrives
+     * while the session is live, and re-upserting would also rewrite `cmdline`
+     * with an id that is *not* in a fresh Codex process's argv, turning the
+     * reconciler's identity check into a false `orphaned`. Without this write the
+     * binding lives only in memory and dies with the streamer — which is the
+     * whole reason a restarted Codex session could not be resumed (G6).
+     */
+    recordBinding(sessionId: string, boundConversationId: string): void;
+    get(sessionId: string): ManagedSessionRow | null;
+    /**
+     * Rows with no recorded completion — the reconciler's probe set.
+     *
+     * Capped. Callers must compare the result length against the limit and say so
+     * when it clips: a silently truncated probe set reads as "we checked
+     * everything" when it did not.
+     */
+    listNonTerminal(limit?: number): ManagedSessionRow[];
+    /** Every row, most recently touched first, for the diagnostics surface. */
+    listAll(limit?: number): ManagedSessionRow[];
+    /**
+     * Delete terminal rows older than `olderThanMs`, returning how many went.
+     *
+     * Only rows carrying a `completed_at` are eligible, so nothing the reconciler
+     * or rehydrator might still want is reachable from here — a row without one
+     * is by definition unfinished business, however old it looks.
+     */
+    pruneTerminal(olderThanMs?: number): number;
+    /**
+     * Rows a restart could bring back: still open, or closed by our own shutdown,
+     * and touched no longer ago than `sinceMs`. Newest first, capped — the caller
+     * decides which of these actually deserve rehydrating (`shouldRehydrate`).
+     */
+    listRecoverable({ sinceMs, limit }: {
+        sinceMs: number;
+        limit: number;
+    }): ManagedSessionRow[];
+    delete(sessionId: string): void;
+}
+//# sourceMappingURL=managed-sessions.repository.d.ts.map

package/dist/db/repositories/managed-sessions.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-sessions.repository.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/managed-sessions.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjE;;;;;;;;;;;;;GAaG;AAEH,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,YAAY,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,WAAW,CAAC;AAKhG,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,4BAA4B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,4DAA4D;AAC5D,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC,mDAAmD;AACnD,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,QAA2B,CAAC;AAE9D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,cAAc,CAAC;IACxB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,yBAAyB;IACpC,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,mBAAmB,CAAqB;IAChD,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,iBAAiB,CAAqB;IAC9C,OAAO,CAAC,mBAAmB,CAAqB;IAChD,OAAO,CAAC,UAAU,CAAqB;IAEvC,YAAY,EAAE,EAAE,QAAQ,CAAC,QAAQ,EA6GhC;IAED,4EAA4E;IAC5E,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,gBAAgB,GAAG,IAAI,CA0BjF;IAED;;;;OAIG;IACH,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,YAAY,EACpB,MAAM,GAAE;QACN,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;QAC1B,cAAc,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;QAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,4EAA4E;QAC5E,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,GACL,IAAI,CAYN;IAED;;;;;;;;;OASG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAKlE;IAED,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAE/C;IAED;;;;;;OAMG;IACH,eAAe,CAAC,KAAK,GAAE,MAAsB,GAAG,iBAAiB,EAAE,CAElE;IAED,2EAA2E;IAC3E,OAAO,CAAC,KAAK,GAAE,MAAwB,GAAG,iBAAiB,EAAE,CAE5D;IAED;;;;;;OAMG;IACH,aAAa,CAAC,WAAW,GAAE,MAA8B,GAAG,MAAM,CAEjE;IAED;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,iBAAiB,EAAE,CAE3F;IAED,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE9B;CACF"}

package/dist/db/repositories/projects.repository.d.ts

@@ -0,0 +1,28 @@
+import type Database from "better-sqlite3";
+import type { Project } from "../../schemas/project.schema";
+export interface UpsertProjectInput {
+    lastConversationId?: string | null;
+    lastConversationCreatedAt?: string | null;
+    latestMessageAt?: string | null;
+    latestMessageId?: string | null;
+    name?: string | null;
+}
+export declare class ProjectsRepository {
+    private getByPath;
+    private getById;
+    private listAll;
+    private insert;
+    private update;
+    constructor(db: Database.Database);
+    getProjectByPath(rawPath: string): Project | null;
+    getProjectById(id: string): Project | null;
+    listProjects(): Project[];
+    /**
+     * Insert a project at the given canonical path, or update its metadata
+     * if one already exists. Returns the persisted Project row.
+     *
+     * Idempotent: passing the same path twice returns the same project id.
+     */
+    upsertProjectByPath(rawPath: string, input?: UpsertProjectInput): Project;
+}
+//# sourceMappingURL=projects.repository.d.ts.map

package/dist/db/repositories/projects.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.repository.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/projects.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AA+B5D,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,MAAM,CAAqB;IAEnC,YAAY,EAAE,EAAE,QAAQ,CAAC,QAAQ,EA4BhC;IAED,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAIhD;IAED,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAGzC;IAED,YAAY,IAAI,OAAO,EAAE,CAExB;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,kBAAuB,GAAG,OAAO,CAiC5E;CACF"}

package/dist/db/repositories/push.repository.d.ts

@@ -0,0 +1,186 @@
+import type Database from "better-sqlite3";
+/**
+ * Push registration and delivery state (C7).
+ *
+ * `POST /api/push/register` was a no-op returning `{ ok: true }`. Mobile
+ * registered, received success, and nothing was stored — so no notification
+ * could ever be delivered, no failure could be observed, and the client had no
+ * way to discover that its successful registration meant nothing.
+ *
+ * This records tokens and what happened to them, which is the prerequisite for
+ * every other C7 requirement: token health, last success/failure, retries,
+ * revocation confirmation, and a test-notification endpoint all need somewhere
+ * to read state from.
+ */
+/**
+ * Consecutive failures after which a token is treated as dead.
+ *
+ * A provider rejecting a token repeatedly means the app was uninstalled or the
+ * token rotated. Retrying forever wastes work and, worse, makes the health
+ * report read "failing" indefinitely instead of "this device is gone".
+ */
+export declare const FAILURE_STREAK_LIMIT = 5;
+/**
+ * Token kinds. A device supplies three non-interchangeable types, and
+ * conflating them fails only at send time with no signal at registration:
+ *
+ * - `expo` — Expo relay token, for ordinary push notifications.
+ * - `liveactivity_start` — ActivityKit push-to-start token. App-wide, one per
+ *   device, long-lived. Starts an activity when none exists.
+ * - `liveactivity_update` — ActivityKit per-activity update token, issued by
+ *   iOS after an activity starts, scoped to that one activity, short-lived.
+ */
+export declare const PUSH_TOKEN_KINDS: readonly ["expo", "liveactivity_start", "liveactivity_update"];
+export type PushTokenKind = (typeof PUSH_TOKEN_KINDS)[number];
+/**
+ * The kind assumed when a client does not send one.
+ *
+ * tb-mobile is released and cannot be force-updated, so an older client posting
+ * `{ token, platform }` must keep working. Every such client is registering an
+ * Expo relay token, because that is the only kind that existed then.
+ */
+export declare const DEFAULT_PUSH_TOKEN_KIND: PushTokenKind;
+export declare function isPushTokenKind(value: unknown): value is PushTokenKind;
+export interface PushTokenRow {
+    token: string;
+    platform: string;
+    device_id: string | null;
+    registered_at: number;
+    last_success_at: number | null;
+    last_failure_at: number | null;
+    last_failure_code: string | null;
+    failure_streak: number;
+    revoked_at: number | null;
+    kind: PushTokenKind;
+    activity_id: string | null;
+    session_id: string | null;
+    expires_at: number | null;
+    stale_date: number | null;
+    started_at: number | null;
+    renewed_at: number | null;
+}
+/**
+ * Health as reported to a client. Deliberately omits the token itself — a push
+ * token is a delivery credential, and a health endpoint has no reason to echo
+ * one back.
+ */
+export interface PushTokenHealth {
+    platform: string;
+    deviceId: string | null;
+    registeredAt: number;
+    lastSuccessAt: number | null;
+    lastFailureAt: number | null;
+    lastFailureCode: string | null;
+    failureStreak: number;
+    revokedAt: number | null;
+    /**
+     * Never delivered vs delivering vs failing vs revoked vs expired. The
+     * distinction the user actually needs: "not yet" and "broken" look identical
+     * without it.
+     */
+    state: "never-delivered" | "healthy" | "failing" | "dead" | "revoked" | "expired";
+    kind: PushTokenKind;
+    /** Present only for per-activity Live Activity tokens. */
+    activityId: string | null;
+    sessionId: string | null;
+    expiresAt: number | null;
+}
+export declare function tokenState(row: PushTokenRow, now?: number): PushTokenHealth["state"];
+export declare function toHealth(row: PushTokenRow, now?: number): PushTokenHealth;
+export declare class PushRepository {
+    private upsertStmt;
+    private getStmt;
+    private listActiveStmt;
+    private listAllStmt;
+    private successStmt;
+    private failureStmt;
+    private revokeStmt;
+    private claimEventStmt;
+    private markDeliveredStmt;
+    private listByKindSessionStmt;
+    private listByKindStmt;
+    private listRenewableStmt;
+    private claimRenewalStmt;
+    private expireStmt;
+    private expireSessionActivitiesStmt;
+    constructor(db: Database.Database);
+    /**
+     * Register or refresh a token.
+     *
+     * `kind` defaults to Expo so a released client posting `{ token, platform }`
+     * keeps working — tb-mobile cannot be force-updated, and every client
+     * predating Live Activities is registering an Expo relay token.
+     *
+     * Several rows per device is normal and intended: a device runs one activity
+     * per live session, each with its own update token. The token itself is the
+     * primary key, so distinct activities never collide.
+     */
+    register(args: {
+        token: string;
+        platform: string;
+        deviceId?: string | null;
+        kind?: PushTokenKind;
+        activityId?: string | null;
+        sessionId?: string | null;
+        expiresAt?: number | null;
+        staleDate?: number | null;
+        startedAt?: number | null;
+        now?: number;
+    }): void;
+    get(token: string): PushTokenRow | null;
+    /**
+     * Expo tokens eligible for delivery — not revoked, not past the failure limit.
+     *
+     * Deliberately Expo-only. ActivityKit tokens go over direct APNs with a
+     * different topic and are rejected by Expo's relay, so the ordinary
+     * notification fan-out must not see them.
+     */
+    listDeliverable(): PushTokenRow[];
+    /** Live-activity tokens for one session, eligible for delivery. */
+    listForSession(kind: PushTokenKind, sessionId: string, now?: number): PushTokenRow[];
+    /**
+     * Every deliverable token of one kind.
+     *
+     * Used for push-to-start, which is app-wide rather than session-scoped: the
+     * activity does not exist yet, so there is no per-activity token to look up.
+     */
+    listByKind(kind: PushTokenKind, now?: number): PushTokenRow[];
+    /** Unrenewed activities with a renewal deadline, soonest first. */
+    listRenewable(): PushTokenRow[];
+    /**
+     * Claim a row for renewal.
+     *
+     * Returns true exactly once per row. A restart re-arms timers from the
+     * persisted deadline, so the same renewal can be attempted twice; the loser
+     * gets false and must not send. Doing this as a conditional UPDATE rather
+     * than read-then-write avoids the race where both attempts observe
+     * "not yet renewed".
+     */
+    claimRenewal(token: string, now?: number): boolean;
+    /** Mark one token expired, so it stops being a delivery target. */
+    expire(token: string, now?: number): void;
+    /**
+     * Expire every live activity for a session.
+     *
+     * Called when the session ends. Without this, a per-activity token outlives
+     * its session and a later renewal sweep would resurrect an activity for a
+     * session that is already gone.
+     */
+    expireSessionActivities(sessionId: string, now?: number): void;
+    /** Every token, including dead and revoked ones, for the health report. */
+    listHealth(now?: number): PushTokenHealth[];
+    recordSuccess(token: string, now?: number): void;
+    recordFailure(token: string, code: string, now?: number): void;
+    revoke(token: string, now?: number): boolean;
+    /**
+     * Claim an event id for delivery.
+     *
+     * Returns true exactly once per event id. A retry, a reconnect
+     * reconciliation, or two triggers firing for the same underlying event all
+     * get false and must not notify — the user should never be told twice about
+     * one thing.
+     */
+    claimEvent(eventId: string, sessionId: string | null, now?: number): boolean;
+    markDelivered(eventId: string, now?: number): void;
+}
+//# sourceMappingURL=push.repository.d.ts.map

package/dist/db/repositories/push.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.repository.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/push.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C;;;;;;;;;;;;GAYG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,YAAI,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,CAAU,CAAC;AAE/F,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAAE,aAAsB,CAAC;AAE7D,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAEtE;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;OAIG;IACH,KAAK,EAAE,iBAAiB,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IAClF,IAAI,EAAE,aAAa,CAAC;IACpB,0DAA0D;IAC1D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,GAAE,MAAmB,GAAG,eAAe,CAAC,OAAO,CAAC,CAUhG;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,GAAE,MAAmB,GAAG,eAAe,CAgBrF;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,iBAAiB,CAAqB;IAC9C,OAAO,CAAC,qBAAqB,CAAqB;IAClD,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,iBAAiB,CAAqB;IAC9C,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,2BAA2B,CAAqB;IAExD,YAAY,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAkHhC;IAED;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,IAAI,EAAE;QACb,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,EAAE,aAAa,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,GAAG,IAAI,CAaP;IAED,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAEtC;IAED;;;;;;OAMG;IACH,eAAe,IAAI,YAAY,EAAE,CAEhC;IAED,mEAAmE;IACnE,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,YAAY,EAAE,CAM/F;IAED;;;;;OAKG;IACH,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,GAAE,MAAmB,GAAG,YAAY,EAAE,CAExE;IAED,mEAAmE;IACnE,aAAa,IAAI,YAAY,EAAE,CAE9B;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAE7D;IAED,mEAAmE;IACnE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAEpD;IAED;;;;;;OAMG;IACH,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAEzE;IAED,2EAA2E;IAC3E,UAAU,CAAC,GAAG,GAAE,MAAmB,GAAG,eAAe,EAAE,CAEtD;IAED,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAE3D;IAED,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAEzE;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAEvD;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAKvF;IAED,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAE7D;CACF"}

package/dist/db/repositories/sessions.repository.d.ts

@@ -0,0 +1,16 @@
+import type { SessionStore } from "../../session-store";
+/**
+ * Sessions live in-memory in SessionStore (Postgres-backed persistence
+ * was dropped per the SQLite-only direction). This repository wraps the
+ * store with a stable, project-id-aware API for the new services.
+ */
+export declare class SessionsRepository {
+    private store;
+    constructor(store: SessionStore);
+    updateSessionProjectId(args: {
+        sessionId: string;
+        projectId: string;
+    }): void;
+    listManagedSessions(): import("../..").ManagedSession[];
+}
+//# sourceMappingURL=sessions.repository.d.ts.map

package/dist/db/repositories/sessions.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.repository.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/sessions.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD;;;;GAIG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,KAAK;IAAzB,YAAoB,KAAK,EAAE,YAAY,EAAI;IAE3C,sBAAsB,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAE3E;IAED,mBAAmB,qCAElB;CACF"}

package/dist/db/runtime-store.d.ts

@@ -0,0 +1,80 @@
+import Database from "better-sqlite3";
+/**
+ * Where runtime.db lives: explicit override, then the test hook, then a sibling
+ * of server.yaml — deliberately NOT under cache/, for the reasons below.
+ *
+ * Exported because both StreamerServer and the CLI's `devices` command need to
+ * agree on it, and a second hand-written copy of this precedence chain would
+ * drift the moment one of the three sources changed.
+ */
+export declare function resolveRuntimeDbPath(override?: string): string;
+/**
+ * `~/.threadbase/runtime.db` — the authoritative, non-derived half of the
+ * streamer's SQLite state.
+ *
+ * Deliberately a separate file from `cache/cache.db`, and deliberately not
+ * under `cache/`. The conversation cache is rebuildable from the provider
+ * JSONLs at any time, which is why "delete the cache and restart" is reasonable
+ * support advice and why the integrity monitor offers a reset-and-rescan
+ * action. The managed-session registry is not rebuildable from anything on
+ * disk, so it must not sit one plausible instruction away from deletion — nor
+ * share a handle whose failure (a better-sqlite3 ABI mismatch, most commonly)
+ * would silently disable session persistence along with the cache.
+ *
+ * Runs its own migrations from `src/db/runtime-migrations/`, tracked in this
+ * file's own `schema_migrations` table.
+ */
+export declare class RuntimeStore {
+    private readonly db;
+    private constructor();
+    static open(dbPath: string, migrationsDir?: string): RuntimeStore;
+    getDatabase(): Database.Database;
+    /**
+     * One-time move of `managed_sessions` rows out of a pre-split `cache.db`.
+     *
+     * Returns the number of rows copied.
+     */
+    importLegacyManagedSessions(source: Database.Database): number;
+    /**
+     * One-time move of `devices` rows out of `cache.db`, where the registry used
+     * to live (migration `011_create_devices.sql`).
+     *
+     * Losing this table invalidates every device token ever issued, and cache.db
+     * is the file `tb-streamer cache clear` deletes and the integrity monitor
+     * rebuilds — see `runtime-migrations/003_create_devices.sql`.
+     *
+     * Unlike `managed_sessions`, this one MOVES rather than copies: the source
+     * rows are deleted once the copy is verified. A `devices` row carries a
+     * user-supplied label ("Ronen's iPhone"), and leaving a second copy of that
+     * on disk indefinitely — in the one file the user is told to delete when
+     * something goes wrong — is more retained personal data than the rollback
+     * path is worth. Recovering from a rollback is re-scanning a pairing QR.
+     *
+     * The delete is conditional on the copy being complete: `INSERT OR IGNORE`
+     * can silently skip a row, so the destination count must match what was read
+     * before anything is removed. A mismatch keeps the source and reports
+     * `purged: false` rather than throwing — the import itself still succeeded,
+     * and keeping data is the safe direction to fail in.
+     */
+    importLegacyDevices(source: Database.Database): {
+        copied: number;
+        purged: boolean;
+    };
+    /**
+     * Copy a whole table out of a pre-split `cache.db` into this file.
+     *
+     * The copy itself is non-destructive — the source is left in place, so an
+     * older streamer rolled back onto the same machine still finds its data.
+     * `importLegacyDevices` deletes the source afterwards for its own reasons;
+     * `managed_sessions` does not. Runs only when this file's table is empty, so
+     * a second boot is a no-op rather than a re-copy that would resurrect rows
+     * deleted since.
+     *
+     * The table name is interpolated into SQL, so it is typed as a closed union
+     * rather than `string` — the set of tables that can ever be lifted is known
+     * at compile time, and that is what keeps a caller from making this a hole.
+     */
+    private importLegacyTable;
+    close(): void;
+}
+//# sourceMappingURL=runtime-store.d.ts.map

package/dist/db/runtime-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-store.d.ts","sourceRoot":"","sources":["../../src/db/runtime-store.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAMtC;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAM9D;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,YAAY;IACH,OAAO,CAAC,QAAQ,CAAC,EAAE;IAAvC,OAAO,eAAuD;IAE9D,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,YAAY,CAKhE;IAED,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAE/B;IAED;;;;OAIG;IACH,2BAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAE7D;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAalF;IAED;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,iBAAiB;IA8BzB,KAAK,IAAI,IAAI,CAEZ;CACF"}

package/dist/db/sqlite-migrate.d.ts

@@ -0,0 +1,13 @@
+import type Database from "better-sqlite3";
+/**
+ * Resolve a migrations directory that sits next to this module in both the
+ * source tree (`src/db/<name>`) and the bundle (`dist/<name>`, populated by the
+ * build's copy step).
+ */
+export declare function resolveMigrationsDir(name?: string): string;
+export interface SqliteMigrationRunResult {
+    applied: string[];
+    skipped: string[];
+}
+export declare function runSqliteMigrations(db: Database.Database, migrationsDir?: string): SqliteMigrationRunResult;
+//# sourceMappingURL=sqlite-migrate.d.ts.map

package/dist/db/sqlite-migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-migrate.d.ts","sourceRoot":"","sources":["../../src/db/sqlite-migrate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAY3C;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,SAAe,GAAG,MAAM,CAEhE;AASD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,aAAa,CAAC,EAAE,MAAM,GACrB,wBAAwB,CA+B1B"}

package/dist/db/upload-records.d.ts

@@ -0,0 +1,11 @@
+import type pg from "pg";
+export interface UploadRecord {
+    id: string;
+    sessionId: string;
+    filePath: string;
+    originalName: string;
+    mimeType: string;
+    sizeBytes: number;
+}
+export declare function recordUpload(pool: pg.Pool | null, instanceId: string | null, row: UploadRecord): Promise<void>;
+//# sourceMappingURL=upload-records.d.ts.map

package/dist/db/upload-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-records.d.ts","sourceRoot":"","sources":["../../src/db/upload-records.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,IAAI,EACpB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,GAAG,EAAE,YAAY,GAChB,OAAO,CAAC,IAAI,CAAC,CAgBf"}