@vendoai/store 0.1.0 → 0.4.1

package/dist/store.d.ts

@@ -0,0 +1,24 @@
+import type { StoreAdapter } from "@vendoai/core";
+import { type Db, type StoreConfig } from "./db.js";
+/** 02-store §1 */
+export interface VendoStore extends StoreAdapter {
+    ensureSchema(): Promise<void>;
+    close(): Promise<void>;
+    raw(): unknown;
+}
+/** Per-handle internals kept OFF the public store object (02-store §4 keeps
+ *  the encryption key out of reach of anything holding the store). */
+interface StoreInternals {
+    db: Db;
+    encryptionKey: Buffer | undefined;
+    allowPlaintextSecrets: boolean;
+}
+export declare function dbFor(store: VendoStore): Db;
+/** Package-internal (secrets.ts): the secrets configuration bound to a store
+ *  handle. A closed (or unknown) handle reads as no key and no plaintext
+ *  allowance, so secret access fails closed. */
+export declare function secretsConfigFor(store: VendoStore): Pick<StoreInternals, "encryptionKey" | "allowPlaintextSecrets">;
+/** 02-store §1 */
+export declare function createStore(config?: StoreConfig): VendoStore;
+export {};
+//# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA0B,YAAY,EAAE,MAAM,eAAe,CAAC;AAG1E,OAAO,EAAY,KAAK,EAAE,EAAE,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAK9D,kBAAkB;AAClB,MAAM,WAAW,UAAW,SAAQ,YAAY;IAC9C,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,GAAG,IAAI,OAAO,CAAC;CAChB;AAED;sEACsE;AACtE,UAAU,cAAc;IACtB,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAID,wBAAgB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,EAAE,CAI3C;AAED;;gDAEgD;AAChD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,eAAe,GAAG,uBAAuB,CAAC,CAEnH;AAED,kBAAkB;AAClB,wBAAgB,WAAW,CAAC,MAAM,GAAE,WAAgB,GAAG,UAAU,CA2BhE"}

package/dist/store.js

@@ -0,0 +1,49 @@
+import { createBlobStore } from "./blobs.js";
+import { validateEncryptionKey } from "./crypto.js";
+import { createDb } from "./db.js";
+import { createRecordStore } from "./records.js";
+import { createReservedRecordStore } from "./routing.js";
+import { ensureSchema as migrateSchema } from "./schema.js";
+const internals = new WeakMap();
+export function dbFor(store) {
+    const found = internals.get(store);
+    if (!found)
+        throw new Error("Unknown VendoStore handle");
+    return found.db;
+}
+/** Package-internal (secrets.ts): the secrets configuration bound to a store
+ *  handle. A closed (or unknown) handle reads as no key and no plaintext
+ *  allowance, so secret access fails closed. */
+export function secretsConfigFor(store) {
+    return internals.get(store) ?? { encryptionKey: undefined, allowPlaintextSecrets: false };
+}
+/** 02-store §1 */
+export function createStore(config = {}) {
+    const encryptionKey = config.encryption ? validateEncryptionKey(config.encryption.key) : undefined;
+    const db = createDb(config);
+    const store = {
+        records(collection) {
+            return createReservedRecordStore(db, collection) ?? createRecordStore(db, collection);
+        },
+        blobs(namespace) {
+            return createBlobStore(db, namespace);
+        },
+        async ensureSchema() {
+            await migrateSchema(db);
+        },
+        async close() {
+            internals.delete(store);
+            await db.close();
+        },
+        raw() {
+            return db.raw();
+        },
+    };
+    internals.set(store, {
+        db,
+        encryptionKey,
+        allowPlaintextSecrets: encryptionKey === undefined && config.allowUnencryptedSecrets === true,
+    });
+    return store;
+}
+//# sourceMappingURL=store.js.map

package/dist/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,QAAQ,EAA6B,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AAiB5D,MAAM,SAAS,GAAG,IAAI,OAAO,EAA0B,CAAC;AAExD,MAAM,UAAU,KAAK,CAAC,KAAiB;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,EAAE,CAAC;AAClB,CAAC;AAED;;gDAEgD;AAChD,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;AAC5F,CAAC;AAED,kBAAkB;AAClB,MAAM,UAAU,WAAW,CAAC,SAAsB,EAAE;IAClD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAe;QACxB,OAAO,CAAC,UAAkB;YACxB,OAAO,yBAAyB,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,iBAAiB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACxF,CAAC;QACD,KAAK,CAAC,SAAiB;YACrB,OAAO,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,YAAY;YAChB,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,KAAK;YACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,GAAG;YACD,OAAO,EAAE,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;IACF,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;QACnB,EAAE;QACF,aAAa;QACb,qBAAqB,EAAE,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,uBAAuB,KAAK,IAAI;KAC9F,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/validate.d.ts

@@ -0,0 +1,25 @@
+import { type AppDocument, type ApprovalRequest, type AuditEvent, type Json, type PermissionGrant } from "@vendoai/core";
+import type { AppRow, ApprovalRow, RunRow, ThreadRow } from "./helpers/types.js";
+export interface ApprovalData {
+    request: ApprovalRequest;
+    status: ApprovalRow["status"];
+    decidedAt?: string;
+    sessionId?: string;
+    consumedAt?: string;
+}
+export type ThreadData = Pick<ThreadRow, "subject" | "messages" | "title">;
+export type RunData = Omit<RunRow, "id">;
+export type AppData = Pick<AppRow, "subject" | "enabled" | "doc">;
+export declare function invalid(message: string): never;
+export declare function requireJson(value: unknown, label: string): Json;
+export declare function requireRecordId(id: unknown): string;
+export declare function requireMatchingId(recordId: string, embeddedId: string, label: string): void;
+export declare function parsePermissionGrant(value: unknown): PermissionGrant;
+export declare function parseApprovalRequest(value: unknown): ApprovalRequest;
+export declare function parseAuditEvent(value: unknown): AuditEvent;
+export declare function parseAppDocument(value: unknown): AppDocument;
+export declare function parseApprovalData(value: unknown, id: string): ApprovalData;
+export declare function parseThreadData(value: unknown, id: string): ThreadData;
+export declare function parseRunData(value: unknown, id: string): RunData;
+export declare function parseAppData(value: unknown, id: string): AppData;
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAUL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,IAAI,EACT,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEjF,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC,CAAC;AAC3E,MAAM,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACzC,MAAM,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC,CAAC;AAElE,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAE9C;AAoDD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAG/D;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,CAGnD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAE3F;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAEpE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAEpE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAE1D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAE5D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CAkB1E;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU,CAStE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAoBhE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAOhE"}

package/dist/validate.js

@@ -0,0 +1,144 @@
+import { VendoError, appDocumentSchema, appIdSchema, approvalRequestSchema, auditEventSchema, isoDateTimeSchema, permissionGrantSchema, runIdSchema, threadIdSchema, } from "@vendoai/core";
+export function invalid(message) {
+    throw new VendoError("validation", message);
+}
+function object(value, label) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return invalid(`${label} must be an object`);
+    }
+    return value;
+}
+function parseSchema(schema, value, label) {
+    const result = schema.safeParse(value);
+    if (!result.success)
+        invalid(`${label}: ${result.error.issues[0]?.message ?? "invalid value"}`);
+    return result.data;
+}
+function optionalString(value, label) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string")
+        invalid(`${label} must be a string`);
+    return value;
+}
+function optionalDate(value, label) {
+    if (value === undefined)
+        return undefined;
+    return parseSchema(isoDateTimeSchema, value, label);
+}
+function isJson(value, seen = new Set()) {
+    if (value === null || typeof value === "string" || typeof value === "boolean")
+        return true;
+    if (typeof value === "number")
+        return Number.isFinite(value);
+    if (Array.isArray(value)) {
+        if (seen.has(value))
+            return false;
+        seen.add(value);
+        const valid = value.every((entry) => isJson(entry, seen));
+        seen.delete(value);
+        return valid;
+    }
+    if (typeof value === "object") {
+        if (seen.has(value))
+            return false;
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null)
+            return false;
+        seen.add(value);
+        const valid = Object.values(value).every((entry) => isJson(entry, seen));
+        seen.delete(value);
+        return valid;
+    }
+    return false;
+}
+export function requireJson(value, label) {
+    if (!isJson(value))
+        invalid(`${label} must be JSON-serializable`);
+    return value;
+}
+export function requireRecordId(id) {
+    if (typeof id !== "string")
+        invalid("record id must be a string");
+    return id;
+}
+export function requireMatchingId(recordId, embeddedId, label) {
+    if (embeddedId !== recordId)
+        invalid(`${label} must equal record id`);
+}
+export function parsePermissionGrant(value) {
+    return parseSchema(permissionGrantSchema, value, "permission grant");
+}
+export function parseApprovalRequest(value) {
+    return parseSchema(approvalRequestSchema, value, "approval request");
+}
+export function parseAuditEvent(value) {
+    return parseSchema(auditEventSchema, value, "audit event");
+}
+export function parseAppDocument(value) {
+    return parseSchema(appDocumentSchema, value, "app document");
+}
+export function parseApprovalData(value, id) {
+    const input = object(value, "approval data");
+    const request = parseApprovalRequest(input["request"]);
+    requireMatchingId(id, request.id, "approval request id");
+    const status = input["status"];
+    if (status !== "pending" && status !== "approved" && status !== "denied") {
+        invalid("approval status must be pending, approved, or denied");
+    }
+    const decidedAt = optionalDate(input["decidedAt"], "approval decidedAt");
+    const sessionId = optionalString(input["sessionId"], "approval sessionId");
+    const consumedAt = optionalDate(input["consumedAt"], "approval consumedAt");
+    return {
+        request,
+        status,
+        ...(decidedAt === undefined ? {} : { decidedAt }),
+        ...(sessionId === undefined ? {} : { sessionId }),
+        ...(consumedAt === undefined ? {} : { consumedAt }),
+    };
+}
+export function parseThreadData(value, id) {
+    parseSchema(threadIdSchema, id, "thread id");
+    const input = object(value, "thread data");
+    if (typeof input["subject"] !== "string")
+        invalid("thread subject must be a string");
+    if (!Array.isArray(input["messages"]))
+        invalid("thread messages must be an array");
+    const messages = input["messages"].map((message, index) => requireJson(message, `thread message ${index}`));
+    const title = input["title"];
+    if (title !== undefined && typeof title !== "string")
+        invalid("thread title must be a string");
+    return { subject: input["subject"], messages, ...(title === undefined ? {} : { title }) };
+}
+export function parseRunData(value, id) {
+    parseSchema(runIdSchema, id, "run id");
+    const input = object(value, "run data");
+    const appId = parseSchema(appIdSchema, input["appId"], "run appId");
+    const triggerInput = object(input["trigger"], "run trigger");
+    const kind = triggerInput["kind"];
+    if (kind !== "schedule" && kind !== "host-event" && kind !== "external") {
+        invalid("run trigger kind is invalid");
+    }
+    const event = optionalString(triggerInput["event"], "run trigger event");
+    const trigger = { kind, ...(event === undefined ? {} : { event }) };
+    const status = input["status"];
+    if (status !== "running" && status !== "ok" && status !== "error"
+        && status !== "stopped" && status !== "pending-approval") {
+        invalid("run status is invalid");
+    }
+    const record = requireJson(input["record"], "run record");
+    const startedAt = parseSchema(isoDateTimeSchema, input["startedAt"], "run startedAt");
+    const finishedAt = optionalDate(input["finishedAt"], "run finishedAt");
+    return { appId, trigger, status, record, startedAt, ...(finishedAt === undefined ? {} : { finishedAt }) };
+}
+export function parseAppData(value, id) {
+    const input = object(value, "app data");
+    if (typeof input["subject"] !== "string")
+        invalid("app subject must be a string");
+    if (typeof input["enabled"] !== "boolean")
+        invalid("app enabled must be a boolean");
+    const doc = parseAppDocument(input["doc"]);
+    requireMatchingId(id, doc.id, "app document id");
+    return { subject: input["subject"], enabled: input["enabled"], doc };
+}
+//# sourceMappingURL=validate.js.map

package/dist/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,cAAc,GAMf,MAAM,eAAe,CAAC;AAevB,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,OAAO,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAClB,MAAqI,EACrI,KAAc,EACd,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,WAAW,CAAC,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,OAAO,IAAI,GAAG,EAAU;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACvE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAW;IACzC,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAClE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,UAAkB,EAAE,KAAa;IACnF,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,WAAW,CAAC,qBAAqB,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,WAAW,CAAC,qBAAqB,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,WAAW,CAAC,gBAAgB,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,WAAW,CAAC,iBAAiB,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,EAAU;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACvD,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzE,OAAO,CAAC,sDAAsD,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC5E,OAAO;QACL,OAAO;QACP,MAAM;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,EAAU;IACxD,WAAW,CAAC,cAAc,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,CAAC,kCAAkC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,kBAAkB,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC/F,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,EAAU;IACrD,WAAW,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;IACpE,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxE,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACzE,MAAM,OAAO,GAAsB,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACvF,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,OAAO;WAC5D,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC3D,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,EAAU;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAClF,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACjD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;AACvE,CAAC"}

package/package.json

@@ -1,20 +1,20 @@
 {
   "name": "@vendoai/store",
-  "version": "0.1.0",
-  "description": "Durable persistence for Vendo: PGlite by default, Postgres in production.",
+  "version": "0.4.1",
+  "description": "Persistence under everything: core's StoreAdapter on Postgres — PGlite zero-config default, real Postgres in prod, one schema.",
   "keywords": [
     "ai",
     "agent",
     "persistence",
     "postgres",
     "pglite",
-    "drizzle"
+    "vendo"
   ],
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/runvendo/vendo.git",
-    "directory": "packages/vendo-store"
+    "directory": "packages/store"
   },
   "homepage": "https://vendo.run",
   "bugs": "https://github.com/runvendo/vendo/issues",
@@ -25,6 +25,7 @@
     "access": "public"
   },
   "type": "module",
+  "sideEffects": false,
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -35,24 +36,24 @@
   },
   "files": [
     "dist",
-    "migrations"
+    "README.md"
   ],
   "dependencies": {
-    "@electric-sql/pglite": "^0.2.0",
-    "drizzle-orm": "^0.36.0",
-    "pg": "^8.13.0",
-    "@vendoai/core": "0.1.0",
-    "@vendoai/runtime": "0.1.0"
+    "@electric-sql/pglite": "^0.5.4",
+    "pg": "^8.22.0",
+    "@vendoai/core": "0.4.1"
   },
   "devDependencies": {
-    "@types/pg": "^8.11.0",
-    "drizzle-kit": "^0.28.0",
+    "@types/node": "^22.0.0",
+    "@types/pg": "^8.11.10",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
-    "test": "vitest run",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
+    "conformance": "tsc -p tsconfig.json && vitest run src/conformance.test.ts src/contract-routing.conformance.test.ts src/security/audit-append-only.conformance.test.ts src/security/secrets-aad.conformance.test.ts src/flip-guards.conformance.test.ts src/erase.conformance.test.ts src/postgres-gate.test.ts",
+    "test": "tsc -p tsconfig.json && vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test:coverage": "tsc -p tsconfig.json && vitest run --coverage"
   }
 }

package/dist/automation-store.d.ts

@@ -1,62 +0,0 @@
-import type { AutomationRecord as CoreAutomationRecord, AutomationRun as CoreAutomationRun, Principal } from "@vendoai/core";
-import { type AutomationEngineStore, type AutomationRecord, type AutomationRun, type AutomationSpec, type AutomationVersion, type CreateAutomationInput, type CreateParkedActionInput, type CreateRunInput, type FinalizeRunInput, type ListParkedActionsFilter, type ParkedAction, type ParkedActionResolution, type PendingApproval, type TriggerKind, type UpdateAutomationInput } from "@vendoai/runtime";
-import type { VendoDb } from "./db.js";
-/** Postgres text timestamp -> the ISO 8601 string the runtime writes/expects. */
-export declare function toIso(value: string): string;
-/** Durable port of `InMemoryAutomationStore`; see the module doc for the two
- *  methods that genuinely need database semantics. */
-export declare class DrizzleAutomationStore implements AutomationEngineStore {
-    private readonly handle;
-    private readonly clock;
-    constructor(handle: VendoDb, opts?: {
-        now?: () => string;
-    });
-    private now;
-    private get db();
-    private withTransaction;
-    save(scope: Principal, automation: Omit<CoreAutomationRecord, "id" | "createdAt" | "updatedAt">): Promise<AutomationRecord>;
-    get(scope: Principal, id: string): Promise<AutomationRecord | undefined>;
-    list(scope: Principal): Promise<AutomationRecord[]>;
-    recordRun(scope: Principal, run: CoreAutomationRun): Promise<void>;
-    listRuns(scope: Principal, automationId: string): Promise<AutomationRun[]>;
-    create(scope: Principal, input: CreateAutomationInput): Promise<{
-        automation: AutomationRecord;
-        version: AutomationVersion;
-    }>;
-    update(scope: Principal, id: string, input: UpdateAutomationInput): Promise<{
-        automation: AutomationRecord;
-        version: AutomationVersion;
-    }>;
-    getVersion(scope: Principal, id: string, version: number): Promise<AutomationVersion | undefined>;
-    setStatus(scope: Principal, id: string, status: CoreAutomationRecord["status"], opts?: {
-        disabledReason?: AutomationRecord["disabledReason"];
-    }): Promise<void>;
-    delete(scope: Principal, id: string): Promise<void>;
-    findEnabledByTrigger(scope: Principal, lookup: {
-        kind: TriggerKind;
-        key: string | null;
-    }): Promise<AutomationRecord[]>;
-    createRun(scope: Principal, input: CreateRunInput): Promise<AutomationRun>;
-    updateRun(scope: Principal, id: string, patch: Partial<Pick<AutomationRun, "outcome" | "steps" | "pendingApproval" | "error" | "parkedCount">>): Promise<AutomationRun>;
-    finalizeRun(scope: Principal, id: string, input: FinalizeRunInput): Promise<AutomationRun>;
-    getRun(scope: Principal, id: string): Promise<AutomationRun | undefined>;
-    /** Capture-then-clear in ONE statement (a plain `RETURNING pending_approval`
-     *  after an `UPDATE … SET pending_approval = NULL` returns the new NULL,
-     *  not the value it cleared) — `FOR UPDATE SKIP LOCKED` makes exactly one
-     *  concurrent caller win. */
-    claimPendingApproval(scope: Principal, runId: string): Promise<PendingApproval | undefined>;
-    cancelPendingRuns(scope: Principal, automationId: string): Promise<void>;
-    listEnabledSchedules(): Promise<Array<{
-        automationId: string;
-        trigger: Extract<AutomationSpec["trigger"], {
-            type: "schedule";
-        }>;
-        principal: Principal;
-    }>>;
-    createParkedAction(scope: Principal, input: CreateParkedActionInput): Promise<ParkedAction>;
-    listParkedActions(scope: Principal, filter: ListParkedActionsFilter): Promise<ParkedAction[]>;
-    getParkedAction(scope: Principal, id: string): Promise<ParkedAction | undefined>;
-    resolveParkedAction(scope: Principal, id: string, resolution: ParkedActionResolution, resolvedAt: string): Promise<ParkedAction>;
-    private mustGet;
-    private mustGetRun;
-}