@vendoai/store 0.1.0 → 0.4.1

package/dist/helpers/approvals.js

@@ -0,0 +1,37 @@
+import { dbFor } from "../store.js";
+import { approvalFromRow, putApprovalRow } from "./rows.js";
+import { text } from "./utils.js";
+import { parseApprovalRequest } from "../validate.js";
+/** 02-store §3 */
+export function approvalStore(store) {
+    const db = dbFor(store);
+    return {
+        async create(request) {
+            const parsedRequest = parseApprovalRequest(request);
+            await putApprovalRow(db, {
+                id: parsedRequest.id,
+                subject: parsedRequest.ctx.principal.subject,
+                request: parsedRequest,
+                status: "pending",
+                createdAt: parsedRequest.createdAt,
+            }, false);
+        },
+        async get(id) {
+            const result = await db.query("SELECT * FROM vendo_approvals WHERE id = $1", [id]);
+            return result.rows[0] ? approvalFromRow(result.rows[0]) : null;
+        },
+        async pending(principal) {
+            const result = await db.query(`SELECT request FROM vendo_approvals WHERE subject = $1 AND status = 'pending'
+         ORDER BY created_at ASC, id ASC`, [principal.subject]);
+            return result.rows.map((row) => row["request"]);
+        },
+        async decide(ids, status, decidedAt) {
+            const requested = [...new Set(Array.isArray(ids) ? ids : [ids])];
+            const result = await db.query(`UPDATE vendo_approvals SET status = $2, decided_at = $3
+         WHERE id = ANY($1::text[]) AND status = 'pending' RETURNING id`, [requested, status, decidedAt]);
+            const decided = new Set(result.rows.map((row) => text(row["id"])));
+            return requested.filter((id) => decided.has(id));
+        },
+    };
+}
+//# sourceMappingURL=approvals.js.map

package/dist/helpers/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../../src/helpers/approvals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAmB,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,kBAAkB;AAClB,MAAM,UAAU,aAAa,CAAC,KAAiB;IAM7C,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,cAAc,CAAC,EAAE,EAAE;gBACvB,EAAE,EAAE,aAAa,CAAC,EAAE;gBACpB,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO;gBAC5C,OAAO,EAAE,aAAa;gBACtB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,aAAa,CAAC,SAAS;aACnC,EAAE,KAAK,CAAC,CAAC;QACZ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,6CAA6C,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACnF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAAS;YACrB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B;yCACiC,EACjC,CAAC,SAAS,CAAC,OAAO,CAAC,CACpB,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAoB,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS;YACjC,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B;wEACgE,EAChE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAC/B,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACnE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/helpers/apps.d.ts

@@ -0,0 +1,15 @@
+import type { AppDocument, AppId, Principal } from "@vendoai/core";
+import { type VendoStore } from "../store.js";
+import type { AppRow } from "./types.js";
+/** 02-store §3 */
+export declare function appStore(store: VendoStore): {
+    put(principal: Principal, doc: AppDocument, opts?: {
+        enabled?: boolean;
+    }): Promise<AppRow>;
+    get(id: AppId): Promise<AppRow | null>;
+    list(principal: Principal): Promise<AppRow[]>;
+    setEnabled(id: AppId, enabled: boolean): Promise<void>;
+    delete(id: AppId): Promise<void>;
+};
+export type { AppRow } from "./types.js";
+//# sourceMappingURL=apps.d.ts.map

package/dist/helpers/apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.d.ts","sourceRoot":"","sources":["../../src/helpers/apps.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAKzC,kBAAkB;AAClB,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG;IAC3C,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3F,GAAG,CAAC,EAAE,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC,CA2CA;AAED,YAAY,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC"}

package/dist/helpers/apps.js

@@ -0,0 +1,42 @@
+import { dbFor } from "../store.js";
+import { VendoError } from "@vendoai/core";
+import { appFromRow, putAppRow } from "./rows.js";
+import { parseAppDocument } from "../validate.js";
+/** 02-store §3 */
+export function appStore(store) {
+    const db = dbFor(store);
+    return {
+        async put(principal, doc, opts = {}) {
+            const parsedDoc = parseAppDocument(doc);
+            // Apps never cross subjects (02 §2): the guarded upsert refuses a
+            // foreign-owned id atomically.
+            return putAppRow(db, {
+                id: parsedDoc.id,
+                subject: principal.subject,
+                enabled: opts.enabled ?? true,
+                doc: parsedDoc,
+            });
+        },
+        async get(id) {
+            const result = await db.query("SELECT id, subject, enabled, doc, created_at, updated_at, revision FROM vendo_apps WHERE id = $1", [id]);
+            return result.rows[0] ? appFromRow(result.rows[0]) : null;
+        },
+        async list(principal) {
+            const result = await db.query(`SELECT id, subject, enabled, doc, created_at, updated_at, revision FROM vendo_apps
+         WHERE subject = $1 ORDER BY created_at ASC, id ASC`, [principal.subject]);
+            return result.rows.map(appFromRow);
+        },
+        async setEnabled(id, enabled) {
+            // Wave 7 — every vendo_apps write door bumps the token: a CAS armed with
+            // a pre-flip revision must lose, or it would silently revert this flip.
+            const result = await db.query("UPDATE vendo_apps SET enabled = $2, updated_at = $3, revision = revision + 1 WHERE id = $1 RETURNING id", [id, enabled, new Date().toISOString()]);
+            if (result.rows.length === 0)
+                throw new VendoError("not-found", `App ${id} was not found`);
+        },
+        async delete(id) {
+            await db.query("DELETE FROM vendo_state WHERE app_id = $1", [id]);
+            await db.query("DELETE FROM vendo_apps WHERE id = $1", [id]);
+        },
+    };
+}
+//# sourceMappingURL=apps.js.map

package/dist/helpers/apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.js","sourceRoot":"","sources":["../../src/helpers/apps.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAmB,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,kBAAkB;AAClB,MAAM,UAAU,QAAQ,CAAC,KAAiB;IAOxC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE;YACjC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACxC,kEAAkE;YAClE,+BAA+B;YAC/B,OAAO,SAAS,CAAC,EAAE,EAAE;gBACnB,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;gBAC7B,GAAG,EAAE,SAAS;aACf,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,kGAAkG,EAClG,CAAC,EAAE,CAAC,CACL,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS;YAClB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B;4DACoD,EACpD,CAAC,SAAS,CAAC,OAAO,CAAC,CACpB,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO;YAC1B,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,yGAAyG,EACzG,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CACxC,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC7F,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,CAAC,KAAK,CAAC,2CAA2C,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,MAAM,EAAE,CAAC,KAAK,CAAC,sCAAsC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/helpers/audit.d.ts

@@ -0,0 +1,24 @@
+import type { AppId, AuditEvent, IsoDateTime, Principal } from "@vendoai/core";
+import { type VendoStore } from "../store.js";
+export interface AuditQuery {
+    principal?: Principal;
+    appId?: AppId;
+    kind?: AuditEvent["kind"];
+    from?: IsoDateTime;
+    to?: IsoDateTime;
+    cursor?: string;
+    limit?: number;
+}
+/** 02-store §3 */
+export declare function auditStore(store: VendoStore): {
+    append(event: AuditEvent): Promise<void>;
+    query(filter: AuditQuery): Promise<{
+        events: AuditEvent[];
+        cursor?: string;
+    }>;
+    export(filter?: {
+        from?: IsoDateTime;
+        to?: IsoDateTime;
+    }): AsyncIterable<string>;
+};
+//# sourceMappingURL=audit.d.ts.map

package/dist/helpers/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/helpers/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAKrD,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,IAAI,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,EAAE,CAAC,EAAE,WAAW,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,kBAAkB;AAClB,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG;IAC7C,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,WAAW,CAAC;QAAC,EAAE,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;CAClF,CAuEA"}

package/dist/helpers/audit.js

@@ -0,0 +1,79 @@
+import { dbFor } from "../store.js";
+import { putAuditRow } from "./rows.js";
+import { cursorMs, decodeCursor, encodeCursor, iso, pageLimit, text } from "./utils.js";
+import { parseAuditEvent } from "../validate.js";
+/** 02-store §3 */
+export function auditStore(store) {
+    const db = dbFor(store);
+    return {
+        async append(event) {
+            // putAuditRow refuses to replace an existing row (append-only, 02 §2).
+            await putAuditRow(db, parseAuditEvent(event));
+        },
+        async query(filter) {
+            const limit = pageLimit(filter.limit);
+            const params = [];
+            const clauses = [];
+            const add = (sql, value) => {
+                params.push(value);
+                clauses.push(sql.replace("?", `$${params.length}`));
+            };
+            if (filter.principal)
+                add("subject = ?", filter.principal.subject);
+            if (filter.appId !== undefined)
+                add("app_id = ?", filter.appId);
+            if (filter.kind !== undefined)
+                add("kind = ?", filter.kind);
+            if (filter.from !== undefined)
+                add("at >= ?", filter.from);
+            if (filter.to !== undefined)
+                add("at <= ?", filter.to);
+            if (filter.cursor !== undefined) {
+                const cursor = decodeCursor(filter.cursor);
+                params.push(cursor.c, cursor.i);
+                clauses.push(`(${cursorMs("at")}, id) < (${cursorMs(`$${params.length - 1}::timestamptz`)}, $${params.length})`);
+            }
+            params.push(limit + 1);
+            const result = await db.query(`SELECT id, at, event FROM vendo_audit${clauses.length ? ` WHERE ${clauses.join(" AND ")}` : ""}
+         ORDER BY ${cursorMs("at")} DESC, id DESC LIMIT $${params.length}`, params);
+            const page = result.rows.slice(0, limit);
+            const events = page.map((row) => row["event"]);
+            const last = page.at(-1);
+            return {
+                events,
+                ...(result.rows.length > limit && last
+                    ? { cursor: encodeCursor(iso(last["at"]), text(last["id"])) }
+                    : {}),
+            };
+        },
+        async *export(filter = {}) {
+            let cursor;
+            while (true) {
+                const params = [];
+                const clauses = [];
+                if (filter.from !== undefined) {
+                    params.push(filter.from);
+                    clauses.push(`at >= $${params.length}`);
+                }
+                if (filter.to !== undefined) {
+                    params.push(filter.to);
+                    clauses.push(`at <= $${params.length}`);
+                }
+                if (cursor) {
+                    params.push(cursor.c, cursor.i);
+                    clauses.push(`(${cursorMs("at")}, id) > (${cursorMs(`$${params.length - 1}::timestamptz`)}, $${params.length})`);
+                }
+                params.push(500);
+                const result = await db.query(`SELECT id, at, event FROM vendo_audit${clauses.length ? ` WHERE ${clauses.join(" AND ")}` : ""}
+           ORDER BY ${cursorMs("at")} ASC, id ASC LIMIT $${params.length}`, params);
+                for (const row of result.rows)
+                    yield `${JSON.stringify(row["event"])}\n`;
+                const last = result.rows.at(-1);
+                if (!last || result.rows.length < 500)
+                    return;
+                cursor = { c: iso(last["at"]), i: text(last["id"]) };
+            }
+        },
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/helpers/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/helpers/audit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAmB,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAYjD,kBAAkB;AAClB,MAAM,UAAU,UAAU,CAAC,KAAiB;IAK1C,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,uEAAuE;YACvE,MAAM,WAAW,CAAC,EAAE,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,MAAM;YAChB,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,MAAM,GAAc,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,KAAc,EAAQ,EAAE;gBAChD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC,CAAC;YACF,IAAI,MAAM,CAAC,SAAS;gBAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACnE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS;gBAAE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,eAAe,CAAC,MAAM,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YACnH,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,wCAAwC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;oBACnF,QAAQ,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,MAAM,EAAE,EAClE,MAAM,CACP,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAe,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,OAAO;gBACL,MAAM;gBACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,IAAI;oBACpC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;oBAC7D,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE;YACvB,IAAI,MAA4C,CAAC;YACjD,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAc,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBACzB,OAAO,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;oBAChC,OAAO,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,eAAe,CAAC,MAAM,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;gBACnH,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,wCAAwC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;sBACnF,QAAQ,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,MAAM,EAAE,EAChE,MAAM,CACP,CAAC;gBACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI;oBAAE,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;gBACzE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;oBAAE,OAAO;gBAC9C,MAAM,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACvD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/helpers/grants.d.ts

@@ -0,0 +1,14 @@
+import { type AppId, type GrantId, type IsoDateTime, type PermissionGrant, type Principal } from "@vendoai/core";
+import { type VendoStore } from "../store.js";
+/** 02-store §3 */
+export declare function grantStore(store: VendoStore): {
+    create(principal: Principal, grant: PermissionGrant): Promise<void>;
+    get(id: GrantId): Promise<PermissionGrant | null>;
+    list(principal: Principal, filter?: {
+        tool?: string;
+        appId?: AppId;
+        includeInactive?: boolean;
+    }): Promise<PermissionGrant[]>;
+    revoke(id: GrantId, revokedAt: IsoDateTime): Promise<void>;
+};
+//# sourceMappingURL=grants.d.ts.map

package/dist/helpers/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/helpers/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,KAAK,EACV,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,SAAS,EACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAIrD,kBAAkB;AAClB,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG;IAC7C,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,GAAG,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC7H,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D,CA4CA"}

package/dist/helpers/grants.js

@@ -0,0 +1,46 @@
+import { VendoError, } from "@vendoai/core";
+import { dbFor } from "../store.js";
+import { grantFromRow, putGrantRow } from "./rows.js";
+import { parsePermissionGrant } from "../validate.js";
+/** 02-store §3 */
+export function grantStore(store) {
+    const db = dbFor(store);
+    return {
+        async create(principal, grant) {
+            const parsedGrant = parsePermissionGrant(grant);
+            if (parsedGrant.subject !== principal.subject) {
+                throw new VendoError("validation", "Grant subject must match principal subject");
+            }
+            // Guarded upsert (02 §2): a same-subject re-create updates in place; an
+            // id owned by another subject is refused as a conflict.
+            await putGrantRow(db, parsedGrant);
+        },
+        async get(id) {
+            const result = await db.query("SELECT * FROM vendo_grants WHERE id = $1", [id]);
+            return result.rows[0] ? grantFromRow(result.rows[0]) : null;
+        },
+        async list(principal, filter = {}) {
+            const params = [principal.subject];
+            const clauses = ["subject = $1"];
+            if (filter.tool !== undefined) {
+                params.push(filter.tool);
+                clauses.push(`tool = $${params.length}`);
+            }
+            if (filter.appId !== undefined) {
+                params.push(filter.appId);
+                clauses.push(`app_id = $${params.length}`);
+            }
+            if (filter.includeInactive !== true) {
+                clauses.push("revoked_at IS NULL AND (expires_at IS NULL OR expires_at > now())");
+            }
+            const result = await db.query(`SELECT * FROM vendo_grants WHERE ${clauses.join(" AND ")} ORDER BY granted_at ASC, id ASC`, params);
+            return result.rows.map(grantFromRow);
+        },
+        async revoke(id, revokedAt) {
+            const result = await db.query("UPDATE vendo_grants SET revoked_at = $2 WHERE id = $1 RETURNING id", [id, revokedAt]);
+            if (result.rows.length === 0)
+                throw new VendoError("not-found", `Grant ${id} was not found`);
+        },
+    };
+}
+//# sourceMappingURL=grants.js.map

package/dist/helpers/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/helpers/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,GAMX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,EAAmB,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,kBAAkB;AAClB,MAAM,UAAU,UAAU,CAAC,KAAiB;IAM1C,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK;YAC3B,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,WAAW,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC9C,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,4CAA4C,CAAC,CAAC;YACnF,CAAC;YACD,wEAAwE;YACxE,wDAAwD;YACxD,MAAM,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,0CAA0C,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,EAAE;YAC/B,MAAM,MAAM,GAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,CAAC,cAAc,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,oCAAoC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,kCAAkC,EAC3F,MAAM,CACP,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS;YACxB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,oEAAoE,EACpE,CAAC,EAAE,EAAE,SAAS,CAAC,CAChB,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC/F,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/helpers/rows.d.ts

@@ -0,0 +1,30 @@
+import { type AuditEvent, type Json, type PermissionGrant } from "@vendoai/core";
+import type { Db } from "../db.js";
+import type { AppRow, ApprovalRow, RunRow, StateRow, ThreadRow } from "./types.js";
+export declare function appFromRow(row: Record<string, unknown>): AppRow;
+export declare function putAppRow(db: Db, input: Pick<AppRow, "id" | "subject" | "enabled" | "doc">, now?: string): Promise<AppRow>;
+export declare function threadFromRow(row: Record<string, unknown>): ThreadRow;
+export declare function putThreadRow(db: Db, input: Pick<ThreadRow, "id" | "subject" | "messages" | "title">, now?: string): Promise<ThreadRow>;
+export declare function stateRowFromRow(row: Record<string, unknown>): StateRow;
+/** The single persistent write path for vendo_state, shared by stateStore.put and
+ *  the routed records("vendo_state").put so the two doors never drift. Writes
+ *  created_at once on insert and PRESERVES it on conflict (only data + updated_at
+ *  change), so the seam's createdAt is stable across puts. Never writes the
+ *  generated `id` column. */
+export declare function putStateRow(db: Db, input: {
+    appId: string;
+    subject: string;
+    data: Json;
+}, now?: string): Promise<StateRow>;
+export declare function grantFromRow(row: Record<string, unknown>): PermissionGrant;
+export declare function putGrantRow(db: Db, grant: PermissionGrant): Promise<void>;
+export declare function approvalFromRow(row: Record<string, unknown>): ApprovalRow;
+export declare function putApprovalRow(db: Db, row: ApprovalRow, upsert?: boolean): Promise<void>;
+/** 02-store §2: vendo_audit is append-only. The insert refuses to touch an
+ *  existing row ATOMICALLY — ON CONFLICT DO NOTHING plus an empty RETURNING
+ *  means the id already exists, and the write is rejected instead of replacing
+ *  history. Deletion happens only through the store erase API (02 §5). */
+export declare function putAuditRow(db: Db, event: AuditEvent): Promise<void>;
+export declare function runFromRow(row: Record<string, unknown>): RunRow;
+export declare function putRunRow(db: Db, run: RunRow): Promise<void>;
+//# sourceMappingURL=rows.d.ts.map

package/dist/helpers/rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.d.ts","sourceRoot":"","sources":["../../src/helpers/rows.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,IAAI,EACT,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGnF,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAa/D;AAED,wBAAsB,SAAS,CAC7B,EAAE,EAAE,EAAE,EACN,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC,EACzD,GAAG,SAA2B,GAC7B,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAcrE;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,EAAE,EACN,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC,EAC/D,GAAG,SAA2B,GAC7B,OAAO,CAAC,SAAS,CAAC,CAsBpB;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,QAAQ,CAQtE;AAED;;;;6BAI6B;AAC7B,wBAAsB,WAAW,CAC/B,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,EACrD,GAAG,SAA2B,GAC7B,OAAO,CAAC,QAAQ,CAAC,CASnB;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,CAiB1E;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB/E;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CAazE;AAED,wBAAsB,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3F;AAED;;;0EAG0E;AAC1E,wBAAsB,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAY1E;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAW/D;AAED,wBAAsB,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUlE"}

package/dist/helpers/rows.js

@@ -0,0 +1,191 @@
+import { VendoError, } from "@vendoai/core";
+import { iso, optionalIso, text } from "./utils.js";
+export function appFromRow(row) {
+    const revision = row["revision"];
+    return {
+        id: text(row["id"]),
+        subject: text(row["subject"]),
+        enabled: row["enabled"] === true,
+        doc: row["doc"],
+        createdAt: iso(row["created_at"]),
+        updatedAt: iso(row["updated_at"]),
+        ...(typeof revision === "string" || typeof revision === "number" || typeof revision === "bigint"
+            ? { revision: String(revision) }
+            : {}),
+    };
+}
+export async function putAppRow(db, input, now = new Date().toISOString()) {
+    // Apps never cross subjects (02 §2: the app row IS the user's copy). Same
+    // atomic guard as putThreadRow: on conflict the update applies ONLY when the
+    // existing row already belongs to EXCLUDED.subject — otherwise the WHERE
+    // fails, RETURNING is empty, and the cross-subject flip is refused without a
+    // TOCTOU window.
+    // Every write bumps the revision counter (Wave 7), so a token read before a
+    // plain put can no longer compareAndSwap — same discipline as putThreadRow.
+    const result = await db.query(`INSERT INTO vendo_apps (id, subject, enabled, doc, created_at, updated_at, revision)
+     VALUES ($1, $2, $3, $4::jsonb, $5, $5, 1)
+     ON CONFLICT (id) DO UPDATE SET enabled = EXCLUDED.enabled,
+       doc = EXCLUDED.doc, updated_at = EXCLUDED.updated_at,
+       revision = vendo_apps.revision + 1
+       WHERE vendo_apps.subject = EXCLUDED.subject
+     RETURNING id, subject, enabled, doc, created_at, updated_at, revision`, [input.id, input.subject, input.enabled, JSON.stringify(input.doc), now]);
+    const row = result.rows[0];
+    if (row === undefined) {
+        throw new VendoError("conflict", `app ${input.id} belongs to another subject`);
+    }
+    return appFromRow(row);
+}
+export function threadFromRow(row) {
+    const title = row["title"];
+    const revision = row["revision"];
+    return {
+        id: text(row["id"]),
+        subject: text(row["subject"]),
+        messages: row["messages"],
+        ...(typeof title === "string" ? { title } : {}),
+        createdAt: iso(row["created_at"]),
+        updatedAt: iso(row["updated_at"]),
+        ...(typeof revision === "string" || typeof revision === "number" || typeof revision === "bigint"
+            ? { revision: String(revision) }
+            : {}),
+    };
+}
+export async function putThreadRow(db, input, now = new Date().toISOString()) {
+    // Threads never cross subjects (03 §5). vendo_threads is keyed by the bare id,
+    // so the upsert is guarded ATOMICALLY: on conflict it updates ONLY when the
+    // existing row already belongs to EXCLUDED.subject — otherwise the WHERE fails,
+    // no row is written, RETURNING is empty, and we refuse the cross-subject flip.
+    // This closes the TOCTOU window that a resolve()-time pre-check alone cannot
+    // (a foreign row can appear during a long streaming turn, before persist runs).
+    const result = await db.query(`INSERT INTO vendo_threads (id, subject, messages, title, created_at, updated_at, revision)
+     VALUES ($1, $2, $3::jsonb, $4, $5, $5, 1)
+     ON CONFLICT (id) DO UPDATE
+       SET messages = EXCLUDED.messages, title = EXCLUDED.title, updated_at = EXCLUDED.updated_at,
+           revision = vendo_threads.revision + 1
+       WHERE vendo_threads.subject = EXCLUDED.subject
+     RETURNING id, subject, messages, title, created_at, updated_at, revision`, [input.id, input.subject, JSON.stringify(input.messages), input.title ?? null, now]);
+    const row = result.rows[0];
+    if (row === undefined) {
+        throw new VendoError("conflict", `thread ${input.id} belongs to another subject`);
+    }
+    return threadFromRow(row);
+}
+export function stateRowFromRow(row) {
+    return {
+        appId: text(row["app_id"]),
+        subject: text(row["subject"]),
+        data: row["data"],
+        createdAt: iso(row["created_at"]),
+        updatedAt: iso(row["updated_at"]),
+    };
+}
+/** The single persistent write path for vendo_state, shared by stateStore.put and
+ *  the routed records("vendo_state").put so the two doors never drift. Writes
+ *  created_at once on insert and PRESERVES it on conflict (only data + updated_at
+ *  change), so the seam's createdAt is stable across puts. Never writes the
+ *  generated `id` column. */
+export async function putStateRow(db, input, now = new Date().toISOString()) {
+    const result = await db.query(`INSERT INTO vendo_state (app_id, subject, data, updated_at, created_at)
+     VALUES ($1, $2, $3::jsonb, $4, $4)
+     ON CONFLICT (app_id, subject) DO UPDATE SET data = EXCLUDED.data, updated_at = EXCLUDED.updated_at
+     RETURNING app_id, subject, data, created_at, updated_at`, [input.appId, input.subject, JSON.stringify(input.data), now]);
+    return stateRowFromRow(result.rows[0]);
+}
+export function grantFromRow(row) {
+    const expiresAt = optionalIso(row["expires_at"]);
+    const revokedAt = optionalIso(row["revoked_at"]);
+    return {
+        id: text(row["id"]),
+        subject: text(row["subject"]),
+        tool: text(row["tool"]),
+        descriptorHash: text(row["descriptor_hash"]),
+        scope: row["scope"],
+        duration: text(row["duration"]),
+        ...(row["context_key"] == null ? {} : { contextKey: text(row["context_key"]) }),
+        ...(row["app_id"] == null ? {} : { appId: text(row["app_id"]) }),
+        source: text(row["source"]),
+        grantedAt: iso(row["granted_at"]),
+        ...(expiresAt === undefined ? {} : { expiresAt }),
+        ...(revokedAt === undefined ? {} : { revokedAt }),
+    };
+}
+export async function putGrantRow(db, grant) {
+    // Grants never cross subjects either (02 §2). The upsert carries the same
+    // atomic guard as putThreadRow/putAppRow: on conflict it updates ONLY when
+    // the existing row already belongs to EXCLUDED.subject; an empty RETURNING
+    // means a foreign row holds the id — refuse the flip.
+    const result = await db.query(`INSERT INTO vendo_grants
+     (id, subject, tool, descriptor_hash, scope, duration, context_key, app_id, source, granted_at, expires_at, revoked_at)
+     VALUES ($1, $2, $3, $4, $5::jsonb, $6, $7, $8, $9, $10, $11, $12)
+     ON CONFLICT (id) DO UPDATE SET tool = EXCLUDED.tool,
+       descriptor_hash = EXCLUDED.descriptor_hash, scope = EXCLUDED.scope,
+       duration = EXCLUDED.duration, context_key = EXCLUDED.context_key,
+       app_id = EXCLUDED.app_id, source = EXCLUDED.source, granted_at = EXCLUDED.granted_at,
+       expires_at = EXCLUDED.expires_at, revoked_at = EXCLUDED.revoked_at
+       WHERE vendo_grants.subject = EXCLUDED.subject
+     RETURNING id`, [grant.id, grant.subject, grant.tool, grant.descriptorHash, JSON.stringify(grant.scope), grant.duration,
+        grant.contextKey ?? null, grant.appId ?? null, grant.source, grant.grantedAt,
+        grant.expiresAt ?? null, grant.revokedAt ?? null]);
+    if (result.rows[0] === undefined) {
+        throw new VendoError("conflict", `grant ${grant.id} belongs to another subject`);
+    }
+}
+export function approvalFromRow(row) {
+    const decidedAt = optionalIso(row["decided_at"]);
+    const consumedAt = optionalIso(row["consumed_at"]);
+    return {
+        id: text(row["id"]),
+        subject: text(row["subject"]),
+        request: row["request"],
+        status: text(row["status"]),
+        ...(decidedAt === undefined ? {} : { decidedAt }),
+        ...(row["session_id"] == null ? {} : { sessionId: text(row["session_id"]) }),
+        ...(consumedAt === undefined ? {} : { consumedAt }),
+        createdAt: iso(row["created_at"]),
+    };
+}
+export async function putApprovalRow(db, row, upsert = true) {
+    await db.query(`INSERT INTO vendo_approvals
+     (id, subject, request, status, decided_at, session_id, consumed_at, created_at)
+     VALUES ($1, $2, $3::jsonb, $4, $5, $6, $7, $8)
+     ${upsert ? `ON CONFLICT (id) DO UPDATE SET subject = EXCLUDED.subject, request = EXCLUDED.request,
+       status = EXCLUDED.status, decided_at = EXCLUDED.decided_at,
+       session_id = EXCLUDED.session_id, consumed_at = EXCLUDED.consumed_at,
+       created_at = EXCLUDED.created_at` : ""}`, [row.id, row.subject, JSON.stringify(row.request), row.status, row.decidedAt ?? null,
+        row.sessionId ?? null, row.consumedAt ?? null, row.createdAt]);
+}
+/** 02-store §2: vendo_audit is append-only. The insert refuses to touch an
+ *  existing row ATOMICALLY — ON CONFLICT DO NOTHING plus an empty RETURNING
+ *  means the id already exists, and the write is rejected instead of replacing
+ *  history. Deletion happens only through the store erase API (02 §5). */
+export async function putAuditRow(db, event) {
+    const result = await db.query(`INSERT INTO vendo_audit (id, at, kind, subject, venue, presence, app_id, tool, event)
+     VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9::jsonb)
+     ON CONFLICT (id) DO NOTHING
+     RETURNING id`, [event.id, event.at, event.kind, event.principal.subject, event.venue, event.presence,
+        event.appId ?? null, event.tool ?? null, JSON.stringify(event)]);
+    if (result.rows[0] === undefined) {
+        throw new VendoError("conflict", `audit event ${event.id} already exists (vendo_audit is append-only)`);
+    }
+}
+export function runFromRow(row) {
+    const finishedAt = optionalIso(row["finished_at"]);
+    return {
+        id: text(row["id"]),
+        appId: text(row["app_id"]),
+        trigger: row["trigger"],
+        status: text(row["status"]),
+        record: row["record"],
+        startedAt: iso(row["started_at"]),
+        ...(finishedAt === undefined ? {} : { finishedAt }),
+    };
+}
+export async function putRunRow(db, run) {
+    await db.query(`INSERT INTO vendo_runs (id, app_id, trigger, status, record, started_at, finished_at)
+     VALUES ($1, $2, $3::jsonb, $4, $5::jsonb, $6, $7)
+     ON CONFLICT (id) DO UPDATE SET app_id = EXCLUDED.app_id, trigger = EXCLUDED.trigger,
+       status = EXCLUDED.status, record = EXCLUDED.record, started_at = EXCLUDED.started_at,
+       finished_at = EXCLUDED.finished_at`, [run.id, run.appId, JSON.stringify(run.trigger), run.status, JSON.stringify(run.record),
+        run.startedAt, run.finishedAt ?? null]);
+}
+//# sourceMappingURL=rows.js.map

package/dist/helpers/rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.js","sourceRoot":"","sources":["../../src/helpers/rows.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,GAKX,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,UAAU,UAAU,CAAC,GAA4B;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI;QAChC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAgB;QAC9B,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjC,GAAG,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAC9F,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;YAChC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAM,EACN,KAAyD,EACzD,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAE9B,0EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,iBAAiB;IACjB,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B;;;;;;2EAMuE,EACvE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CACzE,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,OAAO,KAAK,CAAC,EAAE,6BAA6B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,UAAU,CAAC,GAA8B,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAA4B;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,QAAQ,EAAE,GAAG,CAAC,UAAU,CAA0B;QAClD,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjC,GAAG,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAC9F,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;YAChC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAM,EACN,KAA+D,EAC/D,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAE9B,+EAA+E;IAC/E,4EAA4E;IAC5E,gFAAgF;IAChF,+EAA+E;IAC/E,6EAA6E;IAC7E,gFAAgF;IAChF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B;;;;;;8EAM0E,EAC1E,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,GAAG,CAAC,CACpF,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,UAAU,KAAK,CAAC,EAAE,6BAA6B,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,aAAa,CAAC,GAA8B,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAA4B;IAC1D,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC,MAAM,CAAS;QACzB,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;;;6BAI6B;AAC7B,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAM,EACN,KAAqD,EACrD,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAE9B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B;;;6DAGyD,EACzD,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAC9D,CAAC;IACF,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAA4B;IACvD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACjD,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC5C,KAAK,EAAE,GAAG,CAAC,OAAO,CAA6B;QAC/C,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAgC;QAC9D,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAA8B;QACxD,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAM,EAAE,KAAsB;IAC9D,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,sDAAsD;IACtD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B;;;;;;;;;kBASc,EACd,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,QAAQ;QACrG,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS;QAC5E,KAAK,CAAC,SAAS,IAAI,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,CACpD,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,SAAS,KAAK,CAAC,EAAE,6BAA6B,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAA4B;IAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACnD,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,EAAE,GAAG,CAAC,SAAS,CAA2B;QACjD,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAA0B;QACpD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAM,EAAE,GAAgB,EAAE,MAAM,GAAG,IAAI;IAC1E,MAAM,EAAE,CAAC,KAAK,CACZ;;;OAGG,MAAM,CAAC,CAAC,CAAC;;;wCAGwB,CAAC,CAAC,CAAC,EAAE,EAAE,EAC3C,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;QAClF,GAAG,CAAC,SAAS,IAAI,IAAI,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAChE,CAAC;AACJ,CAAC;AAED;;;0EAG0E;AAC1E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAM,EAAE,KAAiB;IACzD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B;;;kBAGc,EACd,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ;QACnF,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAClE,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,eAAe,KAAK,CAAC,EAAE,8CAA8C,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAA4B;IACrD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACnD,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,EAAE,GAAG,CAAC,SAAS,CAAsB;QAC5C,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAqB;QAC/C,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;QACrB,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,EAAM,EAAE,GAAW;IACjD,MAAM,EAAE,CAAC,KAAK,CACZ;;;;0CAIsC,EACtC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QACrF,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CACzC,CAAC;AACJ,CAAC"}

package/dist/helpers/runs.d.ts

@@ -0,0 +1,19 @@
+import type { AppId, RunId } from "@vendoai/core";
+import { type VendoStore } from "../store.js";
+import type { RunRow } from "./types.js";
+/** 02-store §3 */
+export declare function runStore(store: VendoStore): {
+    put(run: RunRow): Promise<void>;
+    get(id: RunId): Promise<RunRow | null>;
+    list(filter: {
+        appId?: AppId;
+        status?: RunRow["status"];
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        runs: RunRow[];
+        cursor?: string;
+    }>;
+};
+export type { RunRow } from "./types.js";
+//# sourceMappingURL=runs.d.ts.map

package/dist/helpers/runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs.d.ts","sourceRoot":"","sources":["../../src/helpers/runs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAKzC,kBAAkB;AAClB,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG;IAC3C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3I,CA2CA;AAED,YAAY,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC"}

package/dist/helpers/runs.js

@@ -0,0 +1,47 @@
+import { dbFor } from "../store.js";
+import { putRunRow, runFromRow } from "./rows.js";
+import { cursorMs, decodeCursor, encodeCursor, pageLimit } from "./utils.js";
+import { parseRunData } from "../validate.js";
+/** 02-store §3 */
+export function runStore(store) {
+    const db = dbFor(store);
+    return {
+        async put(run) {
+            await putRunRow(db, { id: run.id, ...parseRunData(run, run.id) });
+        },
+        async get(id) {
+            const result = await db.query("SELECT * FROM vendo_runs WHERE id = $1", [id]);
+            return result.rows[0] ? runFromRow(result.rows[0]) : null;
+        },
+        async list(filter) {
+            const limit = pageLimit(filter.limit);
+            const params = [];
+            const clauses = [];
+            if (filter.appId !== undefined) {
+                params.push(filter.appId);
+                clauses.push(`app_id = $${params.length}`);
+            }
+            if (filter.status !== undefined) {
+                params.push(filter.status);
+                clauses.push(`status = $${params.length}`);
+            }
+            if (filter.cursor !== undefined) {
+                const cursor = decodeCursor(filter.cursor);
+                params.push(cursor.c, cursor.i);
+                clauses.push(`(${cursorMs("started_at")}, id) < (${cursorMs(`$${params.length - 1}::timestamptz`)}, $${params.length})`);
+            }
+            params.push(limit + 1);
+            const result = await db.query(`SELECT * FROM vendo_runs${clauses.length ? ` WHERE ${clauses.join(" AND ")}` : ""}
+         ORDER BY ${cursorMs("started_at")} DESC, id DESC LIMIT $${params.length}`, params);
+            const runs = result.rows.slice(0, limit).map(runFromRow);
+            const last = runs.at(-1);
+            return {
+                runs,
+                ...(result.rows.length > limit && last
+                    ? { cursor: encodeCursor(last.startedAt, last.id) }
+                    : {}),
+            };
+        },
+    };
+}
+//# sourceMappingURL=runs.js.map

package/dist/helpers/runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs.js","sourceRoot":"","sources":["../../src/helpers/runs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAmB,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,kBAAkB;AAClB,MAAM,UAAU,QAAQ,CAAC,KAAiB;IAKxC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,MAAM,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,wCAAwC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9E,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,MAAM,GAAc,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,YAAY,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,eAAe,CAAC,MAAM,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3H,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,2BAA2B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;oBACtE,QAAQ,CAAC,YAAY,CAAC,yBAAyB,MAAM,CAAC,MAAM,EAAE,EAC1E,MAAM,CACP,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,OAAO;gBACL,IAAI;gBACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,IAAI;oBACpC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE;oBACnD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}