@winspan/claude-forge 8.41.0 → 8.51.0

package/dist/core/constants.js

@@ -9,6 +9,20 @@ export const FORGE_PATHS = {
     config: () => join(FORGE_HOME, 'config.yaml'),
     database: () => join(FORGE_HOME, 'data.db'),
     logs: () => join(FORGE_HOME, 'logs'),
+    // ── Daemon runtime files ────────────────────────────────
+    daemonSocket: () => join(FORGE_HOME, 'daemon.sock'),
+    daemonPid: () => join(FORGE_HOME, 'daemon.pid'),
+    daemonToken: () => join(FORGE_HOME, 'daemon.token'),
+    daemonLog: () => join(FORGE_HOME, 'daemon.log'),
+    daemonStdout: () => join(FORGE_HOME, 'daemon-stdout.log'),
+    daemonStderr: () => join(FORGE_HOME, 'daemon-stderr.log'),
+    // ── Subdirs ─────────────────────────────────────────────
+    hooks: () => join(FORGE_HOME, 'hooks'),
+    queue: () => join(FORGE_HOME, 'queue'),
+    queueDead: () => join(FORGE_HOME, 'queue', 'dead'),
+    // ── Patchable targets ───────────────────────────────────
+    routingYaml: () => join(FORGE_HOME, 'routing.yaml'),
+    backups: (kind) => join(FORGE_HOME, 'backups', kind),
 };
 /**
  * Time constants in milliseconds
@@ -33,9 +47,9 @@ export const DATABASE = {
  * Default config values
  */
 export const DEFAULTS = {
-    DISTILL_MODEL: 'claude-sonnet-4-6',
-    DISTILL_PROVIDER: 'anthropic',
+    AI_MODEL: 'claude-sonnet-4-6',
+    AI_PROVIDER: 'anthropic',
     STORAGE_MAX_SIZE_MB: 500,
-    WEB_PORT: 3456,
+    WEB_PORT: 3721,
 };
 //# sourceMappingURL=constants.js.map

package/dist/core/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/core/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,GAAG,EAAE,CAAC,UAAU;IACtB,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC;IAC7C,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC;IAC3C,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,WAAW;CACT,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM;CAClB,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,aAAa,EAAE,mBAAmB;IAClC,gBAAgB,EAAE,WAAW;IAC7B,mBAAmB,EAAE,GAAG;IACxB,QAAQ,EAAE,IAAI;CACN,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/core/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,GAAG,EAAE,CAAC,UAAU;IACtB,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC;IAC7C,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC;IAC3C,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;IAEpC,2DAA2D;IAC3D,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC;IACnD,SAAS,EAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;IAClD,WAAW,EAAG,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC;IACpD,SAAS,EAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;IAClD,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzD,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC;IAEzD,2DAA2D;IAC3D,KAAK,EAAS,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7C,KAAK,EAAS,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7C,SAAS,EAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC;IAErD,2DAA2D;IAC3D,WAAW,EAAG,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC;IACpD,OAAO,EAAO,CAAC,IAA0B,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC;CACvE,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,WAAW;CACT,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM;CAClB,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,QAAQ,EAAE,mBAAmB;IAC7B,WAAW,EAAE,WAAW;IACxB,mBAAmB,EAAE,GAAG;IACxB,QAAQ,EAAE,IAAI;CACN,CAAC"}

package/dist/core/event-fields.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Typed getters for ForgeEvent.tool_input fields.
+ *
+ * Centralises the defensive-access pattern that previously lived as
+ * `(e.tool_input as any)?.command ?? ''` across 30+ call sites. Each
+ * getter returns `string | undefined`; callers decide their own fallback.
+ *
+ * Adding a new tool field? Extend ToolInputFields in core/types.ts first,
+ * then add a getter here if it needs a normalised access entry.
+ */
+import type { ForgeEvent } from './types.js';
+export declare function getCommand(e: ForgeEvent): string | undefined;
+export declare function getFilePath(e: ForgeEvent): string | undefined;
+export declare function getUserPrompt(e: ForgeEvent): string | undefined;
+export declare function getSubagentType(e: ForgeEvent): string | undefined;
+//# sourceMappingURL=event-fields.d.ts.map

package/dist/core/event-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-fields.d.ts","sourceRoot":"","sources":["../../src/core/event-fields.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAG5D;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAG7D;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAI/D;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAGjE"}

package/dist/core/event-fields.js

@@ -0,0 +1,19 @@
+export function getCommand(e) {
+    const c = e.tool_input?.command;
+    return typeof c === 'string' ? c : undefined;
+}
+export function getFilePath(e) {
+    const fp = e.tool_input?.file_path ?? e.tool_input?.notebook_path;
+    return typeof fp === 'string' && fp.length > 0 ? fp : undefined;
+}
+export function getUserPrompt(e) {
+    if (typeof e.user_prompt === 'string')
+        return e.user_prompt;
+    const fallback = e.tool_input?.user_prompt;
+    return typeof fallback === 'string' ? fallback : undefined;
+}
+export function getSubagentType(e) {
+    const s = e.tool_input?.subagent_type;
+    return typeof s === 'string' ? s : undefined;
+}
+//# sourceMappingURL=event-fields.js.map

package/dist/core/event-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-fields.js","sourceRoot":"","sources":["../../src/core/event-fields.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,UAAU,CAAC,CAAa;IACtC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC;IAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAa;IACvC,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC;IAClE,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAa;IACzC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,WAAW,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC;IAC3C,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAa;IAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC;IACtC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC"}

package/dist/core/queue/index.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Hook failure buffer queue — at-least-once event delivery
+ *
+ * When the daemon is not reachable (socket missing / nc fail), hook scripts
+ * write the raw event JSON to a per-file queue on disk. On the next daemon
+ * startup, `replayQueue` scans the directory and replays every file into
+ * SQLiteStorage.
+ *
+ * Design decisions:
+ * - One file per event: avoids concurrent-write collisions across 5 hook processes
+ * - File name: <iso-timestamp>-<event_id>.json  (sortable + unique)
+ * - Dedup: events table PRIMARY KEY; UNIQUE constraint error → silently skip
+ * - Capacity: MAX_FILES=500, TTL=7d; overflow → drop oldest; expired → dead-letter
+ */
+import type { SQLiteStorage } from '../storage/sqlite.js';
+import type { ForgeEvent } from '../types.js';
+export declare const QUEUE_DIR: string;
+export declare const DEAD_DIR: string;
+export declare const MAX_FILES = 500;
+export declare const TTL_DAYS = 7;
+/**
+ * pruneQueue — enforce MAX_FILES cap.
+ * Deletes the oldest files (smallest filename) until count < MAX_FILES.
+ * Called by enqueueEvent before writing a new file.
+ */
+export declare function pruneQueue(): void;
+/**
+ * enqueueEvent — write a single event to the queue directory.
+ *
+ * Designed to be called synchronously from hook scripts via a bash child
+ * process. This TypeScript version is used by tests; the bash implementation
+ * mirrors the same file-naming convention.
+ */
+export declare function enqueueEvent(event: ForgeEvent): void;
+export interface ReplayResult {
+    replayed: number;
+    skipped: number;
+    dead: number;
+}
+/**
+ * replayQueue — called by daemon after socket starts listening.
+ *
+ * For each *.json in QUEUE_DIR:
+ *   - If mtime > TTL → move to dead-letter
+ *   - Parse JSON → storage.writeEvent()
+ *     - Success → rm file, replayed++
+ *     - UNIQUE constraint → rm file, skipped++ (already in DB)
+ *     - Other error → move to dead-letter, dead++
+ *   - Bad JSON → move to dead-letter, dead++
+ */
+export declare function replayQueue(storage: SQLiteStorage): Promise<ReplayResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/core/queue/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/queue/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,eAAO,MAAM,SAAS,QAAsB,CAAC;AAC7C,eAAO,MAAM,QAAQ,QAA0B,CAAC;AAChD,eAAO,MAAM,SAAS,MAAM,CAAC;AAC7B,eAAO,MAAM,QAAQ,IAAI,CAAC;AAsB1B;;;;GAIG;AACH,wBAAgB,UAAU,IAAI,IAAI,CAYjC;AAID;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAUpD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAgE/E"}

package/dist/core/queue/index.js

@@ -0,0 +1,175 @@
+/**
+ * Hook failure buffer queue — at-least-once event delivery
+ *
+ * When the daemon is not reachable (socket missing / nc fail), hook scripts
+ * write the raw event JSON to a per-file queue on disk. On the next daemon
+ * startup, `replayQueue` scans the directory and replays every file into
+ * SQLiteStorage.
+ *
+ * Design decisions:
+ * - One file per event: avoids concurrent-write collisions across 5 hook processes
+ * - File name: <iso-timestamp>-<event_id>.json  (sortable + unique)
+ * - Dedup: events table PRIMARY KEY; UNIQUE constraint error → silently skip
+ * - Capacity: MAX_FILES=500, TTL=7d; overflow → drop oldest; expired → dead-letter
+ */
+import { mkdirSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { logger } from '../utils/logger.js';
+import { FORGE_PATHS } from '../constants.js';
+// ── Constants ──────────────────────────────────────────────────────────────
+export const QUEUE_DIR = FORGE_PATHS.queue();
+export const DEAD_DIR = FORGE_PATHS.queueDead();
+export const MAX_FILES = 500;
+export const TTL_DAYS = 7;
+const TTL_MS = TTL_DAYS * 24 * 60 * 60 * 1000;
+// ── Helpers ────────────────────────────────────────────────────────────────
+function ensureDirs() {
+    mkdirSync(QUEUE_DIR, { recursive: true });
+    mkdirSync(DEAD_DIR, { recursive: true });
+}
+/** List all *.json queue files, sorted oldest-first (by filename). */
+function listQueueFiles() {
+    try {
+        return readdirSync(QUEUE_DIR)
+            .filter((f) => f.endsWith('.json'))
+            .sort(); // ISO timestamp prefix → lexicographic = chronological
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * pruneQueue — enforce MAX_FILES cap.
+ * Deletes the oldest files (smallest filename) until count < MAX_FILES.
+ * Called by enqueueEvent before writing a new file.
+ */
+export function pruneQueue() {
+    const files = listQueueFiles();
+    if (files.length < MAX_FILES)
+        return;
+    const toDelete = files.slice(0, files.length - MAX_FILES + 1);
+    for (const f of toDelete) {
+        try {
+            rmSync(join(QUEUE_DIR, f));
+        }
+        catch (err) {
+            logger.warn(`[Queue] Failed to prune ${f}: ${err}`);
+        }
+    }
+}
+// ── Public API ─────────────────────────────────────────────────────────────
+/**
+ * enqueueEvent — write a single event to the queue directory.
+ *
+ * Designed to be called synchronously from hook scripts via a bash child
+ * process. This TypeScript version is used by tests; the bash implementation
+ * mirrors the same file-naming convention.
+ */
+export function enqueueEvent(event) {
+    ensureDirs();
+    pruneQueue();
+    const eventId = event.event_id ?? randomUUID();
+    const ts = new Date().toISOString().replace(/[:.]/g, '-').replace('Z', 'Z');
+    const filename = `${ts}-${eventId}.json`;
+    const filePath = join(QUEUE_DIR, filename);
+    writeFileSync(filePath, JSON.stringify({ ...event, event_id: eventId }), 'utf8');
+}
+/**
+ * replayQueue — called by daemon after socket starts listening.
+ *
+ * For each *.json in QUEUE_DIR:
+ *   - If mtime > TTL → move to dead-letter
+ *   - Parse JSON → storage.writeEvent()
+ *     - Success → rm file, replayed++
+ *     - UNIQUE constraint → rm file, skipped++ (already in DB)
+ *     - Other error → move to dead-letter, dead++
+ *   - Bad JSON → move to dead-letter, dead++
+ */
+export async function replayQueue(storage) {
+    ensureDirs();
+    const files = listQueueFiles();
+    if (files.length === 0) {
+        return { replayed: 0, skipped: 0, dead: 0 };
+    }
+    logger.info(`[Queue] Replaying ${files.length} queued event(s)…`);
+    let replayed = 0;
+    let skipped = 0;
+    let dead = 0;
+    const now = Date.now();
+    for (const filename of files) {
+        const filePath = join(QUEUE_DIR, filename);
+        // ── TTL check ──────────────────────────────────────────────────────────
+        try {
+            const stat = statSync(filePath);
+            if (now - stat.mtimeMs > TTL_MS) {
+                moveToDeadLetter(filePath, filename);
+                dead++;
+                logger.warn(`[Queue] TTL expired, dead-lettered: ${filename}`);
+                continue;
+            }
+        }
+        catch (err) {
+            logger.warn(`[Queue] Cannot stat ${filename}, skipping: ${err}`);
+            continue;
+        }
+        // ── Read + parse ───────────────────────────────────────────────────────
+        let event;
+        try {
+            const raw = await readFile(filePath, 'utf8');
+            event = JSON.parse(raw);
+        }
+        catch {
+            moveToDeadLetter(filePath, filename);
+            dead++;
+            logger.warn(`[Queue] Bad JSON, dead-lettered: ${filename}`);
+            continue;
+        }
+        // ── Write to storage ───────────────────────────────────────────────────
+        try {
+            storage.writeEvent(event);
+            rmSync(filePath);
+            replayed++;
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (isUniqueConstraintError(msg)) {
+                // Already in DB — remove the queue file silently
+                try {
+                    rmSync(filePath);
+                }
+                catch { /* ignore */ }
+                skipped++;
+            }
+            else {
+                moveToDeadLetter(filePath, filename);
+                dead++;
+                logger.warn(`[Queue] writeEvent failed, dead-lettered ${filename}: ${msg}`);
+            }
+        }
+    }
+    return { replayed, skipped, dead };
+}
+// ── Internal helpers ───────────────────────────────────────────────────────
+function moveToDeadLetter(filePath, filename) {
+    try {
+        mkdirSync(DEAD_DIR, { recursive: true });
+        renameSync(filePath, join(DEAD_DIR, filename));
+    }
+    catch (err) {
+        logger.warn(`[Queue] Failed to move ${filename} to dead-letter: ${err}`);
+        try {
+            rmSync(filePath);
+        }
+        catch { /* ignore */ }
+    }
+}
+/**
+ * Detect SQLite UNIQUE constraint violations.
+ * better-sqlite3 throws: "UNIQUE constraint failed: events.event_id"
+ */
+function isUniqueConstraintError(message) {
+    return message.includes('UNIQUE constraint failed');
+}
+//# sourceMappingURL=index.js.map

package/dist/core/queue/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/queue/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC;AAC7B,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC;AAE1B,MAAM,MAAM,GAAG,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C,8EAA8E;AAE9E,SAAS,UAAU;IACjB,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,sEAAsE;AACtE,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,SAAS,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAClC,IAAI,EAAE,CAAC,CAAC,uDAAuD;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO;IAErC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,UAAU,EAAE,CAAC;IACb,UAAU,EAAE,CAAC;IAEb,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;IAC/C,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,OAAO,OAAO,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE3C,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AACnF,CAAC;AAQD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB;IACtD,UAAU,EAAE,CAAC;IAEb,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,qBAAqB,KAAK,CAAC,MAAM,mBAAmB,CAAC,CAAC;IAElE,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE3C,0EAA0E;QAC1E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;gBAChC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACrC,IAAI,EAAE,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;gBAC/D,SAAS;YACX,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,uBAAuB,QAAQ,eAAe,GAAG,EAAE,CAAC,CAAC;YACjE,SAAS;QACX,CAAC;QAED,0EAA0E;QAC1E,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7C,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACrC,IAAI,EAAE,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QAED,0EAA0E;QAC1E,IAAI,CAAC;YACH,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjB,QAAQ,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,iDAAiD;gBACjD,IAAI,CAAC;oBAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAChD,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACrC,IAAI,EAAE,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,4CAA4C,QAAQ,KAAK,GAAG,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,QAAgB,EAAE,QAAgB;IAC1D,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,0BAA0B,QAAQ,oBAAoB,GAAG,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC;YAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AACtD,CAAC"}

package/dist/core/storage/base.d.ts

@@ -0,0 +1,66 @@
+/**
+ * SQLiteBase — 数据库初始化、schema、迁移、辅助
+ *
+ * 拆分自 sqlite.ts。仅负责：
+ * - 打开数据库连接 + 配置 PRAGMA
+ * - 加载 schema.sql（缺失则抛错）
+ * - 增量迁移（hasColumn / addColumnIfMissing）
+ * - 一次性 sessions 回填
+ *
+ * 不涉及业务读写。所有业务读写由 *Operations 类组合 db 实例实现。
+ */
+import Database from 'better-sqlite3';
+export declare class SQLiteBase {
+    protected db: Database.Database;
+    protected dbPath: string;
+    constructor(dbPath: string);
+    private initSchema;
+    protected hasTable(name: string): boolean;
+    protected hasColumn(table: string, column: string): boolean;
+    protected addColumnIfMissing(table: string, column: string, definition: string): void;
+    protected hasIndex(name: string): boolean;
+    /**
+     * Create an index only if it's missing. The CREATE INDEX IF NOT EXISTS already
+     * makes this safe; the hasIndex guard makes it explicit which indexes are still
+     * being patched by migrations (vs. provided by schema.sql).
+     */
+    private createIndexIfMissing;
+    /**
+     * Column migrations run BEFORE initSchema() so legacy tables get missing
+     * columns (e.g. skill_invocations.workflow) before schema.sql's CREATE INDEX
+     * statements try to reference them.
+     */
+    private runColumnMigrations;
+    /**
+     * Index migrations run AFTER initSchema(). Each call is guarded by hasIndex
+     * so:
+     *   - new DBs: schema.sql already created the index → skipped
+     *   - legacy DBs: schema.sql skipped (existing index) for indexes it tries to
+     *     create or covered above; remaining migration-only / pre-H1 indexes are
+     *     patched here.
+     * CREATE INDEX IF NOT EXISTS is preserved as a second line of defense.
+     */
+    private runIndexMigrations;
+    /**
+     * One-shot data migrations + deprecated table cleanup.
+     */
+    private runPostMigrations;
+    /**
+     * 将 events 表按 session_id 聚合回填到 sessions 表，仅在 sessions 尚未对齐
+     * （没有任何一行带 first_prompt）时触发。
+     */
+    private backfillSessionsIfNeeded;
+    /**
+     * @internal 仅供 *Operations 子类、migration、初始化使用。
+     *
+     * Routes / Handlers / Analytics 禁止直接调用。需要查询请走 SQLiteStorage facade
+     * 上的具名方法（query* / get* / list* / count* / aggregate*）；若 facade 缺方法，
+     * 应在对应 Operations 类下沉 SQL 并补 facade 转发，而不是 db.prepare() 直写。
+     *
+     * 历史：H2 (2026-05) 已收敛 27 处越权 SQL，新增越权请走同样的下沉模式。
+     */
+    getDatabase(): Database.Database;
+    getDbPath(): string;
+    protected getDbSizeMb(): number;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/core/storage/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/core/storage/base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAOtC,qBAAa,UAAU;IACrB,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAChC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEb,MAAM,EAAE,MAAM;IAqC1B,OAAO,CAAC,UAAU;IAclB,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAWzC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAS3D,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAerF,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAWzC;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAU5B;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAY3B;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAgD1B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAYzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAoDhC;;;;;;;;OAQG;IACH,WAAW,IAAI,QAAQ,CAAC,QAAQ;IAIhC,SAAS,IAAI,MAAM;IAInB,SAAS,CAAC,WAAW,IAAI,MAAM;CAIhC"}

package/dist/core/storage/base.js

@@ -0,0 +1,254 @@
+/**
+ * SQLiteBase — 数据库初始化、schema、迁移、辅助
+ *
+ * 拆分自 sqlite.ts。仅负责：
+ * - 打开数据库连接 + 配置 PRAGMA
+ * - 加载 schema.sql（缺失则抛错）
+ * - 增量迁移（hasColumn / addColumnIfMissing）
+ * - 一次性 sessions 回填
+ *
+ * 不涉及业务读写。所有业务读写由 *Operations 类组合 db 实例实现。
+ */
+import Database from 'better-sqlite3';
+import { readFileSync, existsSync, mkdirSync, statSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { DATABASE } from '../constants.js';
+import { logger } from '../utils/logger.js';
+export class SQLiteBase {
+    db;
+    dbPath;
+    constructor(dbPath) {
+        this.dbPath = dbPath;
+        const dir = dirname(dbPath);
+        if (!existsSync(dir)) {
+            mkdirSync(dir, { recursive: true });
+        }
+        this.db = new Database(dbPath);
+        // WAL mode optimization for better concurrency
+        this.db.pragma('journal_mode = WAL');
+        this.db.pragma('synchronous = NORMAL');
+        this.db.pragma('wal_autocheckpoint = 1000'); // Increased from 100 for better performance
+        this.db.pragma(`cache_size = ${DATABASE.CACHE_SIZE}`);
+        this.db.pragma(`busy_timeout = ${DATABASE.BUSY_TIMEOUT}`);
+        // Additional performance optimizations
+        this.db.pragma('temp_store = MEMORY'); // Store temp tables in memory
+        this.db.pragma('mmap_size = 30000000000'); // 30GB memory-mapped I/O
+        this.db.pragma('page_size = 4096'); // Optimal page size for most systems
+        // Order matters:
+        //   1) runColumnMigrations() ALTERs missing columns on PRE-EXISTING tables.
+        //      Must run BEFORE initSchema() because schema.sql contains indexes that
+        //      reference new columns (e.g. idx_skill_invocations_workflow). On a
+        //      legacy DB those CREATE INDEX statements would otherwise fail because
+        //      CREATE TABLE IF NOT EXISTS skips the old table and never adds the column.
+        //   2) initSchema() applies schema.sql (idempotent CREATE TABLE/INDEX).
+        //   3) runIndexMigrations() patches indexes that may still be missing on
+        //      legacy DBs (defensive; schema.sql already creates them on new DBs).
+        this.runColumnMigrations();
+        this.initSchema();
+        this.runIndexMigrations();
+        this.runPostMigrations();
+    }
+    initSchema() {
+        const thisDir = dirname(fileURLToPath(import.meta.url));
+        const schemaPath = join(thisDir, 'schema.sql');
+        if (!existsSync(schemaPath)) {
+            throw new Error(`[SQLiteStorage] schema.sql not found at ${schemaPath}. ` +
+                `This indicates a broken build/install. Run \`npm run build\` or reinstall the package.`);
+        }
+        const schema = readFileSync(schemaPath, 'utf-8');
+        this.db.exec(schema);
+    }
+    hasTable(name) {
+        try {
+            const row = this.db
+                .prepare(`SELECT name FROM sqlite_master WHERE type='table' AND name = ?`)
+                .get(name);
+            return !!row;
+        }
+        catch {
+            return false;
+        }
+    }
+    hasColumn(table, column) {
+        try {
+            const rows = this.db.prepare(`PRAGMA table_info(${table})`).all();
+            return rows.some(r => r.name === column);
+        }
+        catch {
+            return false;
+        }
+    }
+    addColumnIfMissing(table, column, definition) {
+        // Skip silently if the table doesn't exist yet — new DBs hit this path on
+        // first boot (initSchema runs after column migrations); the column will be
+        // created by schema.sql's CREATE TABLE.
+        if (!this.hasTable(table))
+            return;
+        if (!this.hasColumn(table, column)) {
+            try {
+                this.db.exec(`ALTER TABLE ${table} ADD COLUMN ${column} ${definition}`);
+                logger.info(`[SQLiteStorage] migration: added ${table}.${column}`);
+            }
+            catch (err) {
+                logger.warn(`[SQLiteStorage] migration: ALTER ${table} ADD ${column} failed: ${err}`);
+            }
+        }
+    }
+    hasIndex(name) {
+        try {
+            const row = this.db
+                .prepare(`SELECT name FROM sqlite_master WHERE type='index' AND name = ?`)
+                .get(name);
+            return !!row;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Create an index only if it's missing. The CREATE INDEX IF NOT EXISTS already
+     * makes this safe; the hasIndex guard makes it explicit which indexes are still
+     * being patched by migrations (vs. provided by schema.sql).
+     */
+    createIndexIfMissing(name, ddl) {
+        if (this.hasIndex(name))
+            return;
+        try {
+            this.db.exec(ddl);
+            logger.debug(`[SQLiteStorage] migration created ${name}`);
+        }
+        catch (err) {
+            logger.warn(`[SQLiteStorage] migration: create ${name} failed: ${err}`);
+        }
+    }
+    /**
+     * Column migrations run BEFORE initSchema() so legacy tables get missing
+     * columns (e.g. skill_invocations.workflow) before schema.sql's CREATE INDEX
+     * statements try to reference them.
+     */
+    runColumnMigrations() {
+        this.addColumnIfMissing('sessions', 'first_prompt', 'TEXT');
+        this.addColumnIfMissing('routing_events', 'skill_confidence', 'REAL');
+        this.addColumnIfMissing('routing_events', 'skill_source', 'TEXT');
+        this.addColumnIfMissing('skill_invocations', 'workflow', 'TEXT');
+        this.addColumnIfMissing('skill_invocations', 'phase', 'TEXT');
+        this.addColumnIfMissing('skill_invocations', 'feature_slug', 'TEXT');
+        this.addColumnIfMissing('skill_invocations', 'artifact_path', 'TEXT');
+    }
+    /**
+     * Index migrations run AFTER initSchema(). Each call is guarded by hasIndex
+     * so:
+     *   - new DBs: schema.sql already created the index → skipped
+     *   - legacy DBs: schema.sql skipped (existing index) for indexes it tries to
+     *     create or covered above; remaining migration-only / pre-H1 indexes are
+     *     patched here.
+     * CREATE INDEX IF NOT EXISTS is preserved as a second line of defense.
+     */
+    runIndexMigrations() {
+        this.createIndexIfMissing('idx_skill_invocations_workflow', `CREATE INDEX IF NOT EXISTS idx_skill_invocations_workflow ON skill_invocations(workflow, phase)`);
+        this.createIndexIfMissing('idx_skill_invocations_feature', `CREATE INDEX IF NOT EXISTS idx_skill_invocations_feature ON skill_invocations(feature_slug)`);
+        this.createIndexIfMissing('idx_sessions_start_time', `CREATE INDEX IF NOT EXISTS idx_sessions_start_time ON sessions(start_time DESC)`);
+        // Composite indexes for high-frequency session-scoped queries
+        this.createIndexIfMissing('idx_events_session_ts', `CREATE INDEX IF NOT EXISTS idx_events_session_ts ON events(session_id, timestamp DESC)`);
+        this.createIndexIfMissing('idx_routing_events_session_ts', `CREATE INDEX IF NOT EXISTS idx_routing_events_session_ts ON routing_events(session_id, ts DESC)`);
+        this.createIndexIfMissing('idx_skill_invocations_session_ts', `CREATE INDEX IF NOT EXISTS idx_skill_invocations_session_ts ON skill_invocations(session_id, timestamp DESC)`);
+        // Phase 1 Refactor: Additional performance indexes
+        this.createIndexIfMissing('idx_routing_events_obeyed_ts', `CREATE INDEX IF NOT EXISTS idx_routing_events_obeyed_ts ON routing_events(obeyed, ts DESC)`);
+        this.createIndexIfMissing('idx_events_session_hook', `CREATE INDEX IF NOT EXISTS idx_events_session_hook ON events(session_id, hook_type, timestamp DESC)`);
+        this.createIndexIfMissing('idx_injections_session_handler', `CREATE INDEX IF NOT EXISTS idx_injections_session_handler ON injections(session_id, source_handler)`);
+        this.createIndexIfMissing('idx_routing_events_type_ts', `CREATE INDEX IF NOT EXISTS idx_routing_events_type_ts ON routing_events(routed_to_type, ts DESC)`);
+    }
+    /**
+     * One-shot data migrations + deprecated table cleanup.
+     */
+    runPostMigrations() {
+        this.backfillSessionsIfNeeded();
+        const deprecatedTables = [
+            'quality_issues', 'distill_results', 'v2_decisions',
+            'v2_tool_events', 'experiment_assignments', 'routing_rule_states',
+        ];
+        for (const table of deprecatedTables) {
+            try {
+                this.db.exec(`DROP TABLE IF EXISTS ${table}`);
+            }
+            catch { /* ignore */ }
+        }
+    }
+    /**
+     * 将 events 表按 session_id 聚合回填到 sessions 表，仅在 sessions 尚未对齐
+     * （没有任何一行带 first_prompt）时触发。
+     */
+    backfillSessionsIfNeeded() {
+        const eventsExists = this.db
+            .prepare(`SELECT name FROM sqlite_master WHERE type='table' AND name='events'`)
+            .get();
+        if (!eventsExists)
+            return;
+        const aggRow = this.db
+            .prepare(`SELECT COUNT(*) AS total, COUNT(first_prompt) AS with_prompt FROM sessions`)
+            .get();
+        if (aggRow.with_prompt > 0)
+            return;
+        logger.info('[SQLiteStorage] backfilling sessions aggregate from events...');
+        try {
+            const backfill = this.db.transaction(() => {
+                this.db.exec(`
+          INSERT INTO sessions (
+            session_id, project_path, status, first_prompt,
+            start_time, end_time, last_event_time, event_count
+          )
+          SELECT
+            e.session_id,
+            e.project_path,
+            'active' AS status,
+            (SELECT substr(COALESCE(e2.user_prompt, json_extract(e2.tool_input, '$.user_prompt')), 1, 200)
+             FROM events e2
+             WHERE e2.session_id = e.session_id
+               AND e2.hook_type = 'UserPromptSubmit'
+               AND (e2.user_prompt IS NOT NULL OR json_extract(e2.tool_input, '$.user_prompt') IS NOT NULL)
+             ORDER BY e2.timestamp ASC LIMIT 1) AS first_prompt,
+            MIN(e.timestamp) AS start_time,
+            MAX(e.timestamp) AS end_time,
+            MAX(e.timestamp) AS last_event_time,
+            COUNT(*) AS event_count
+          FROM events e
+          GROUP BY e.session_id, e.project_path
+          ON CONFLICT(session_id) DO UPDATE SET
+            first_prompt = COALESCE(sessions.first_prompt, excluded.first_prompt),
+            end_time = MAX(COALESCE(sessions.end_time, ''), excluded.end_time),
+            last_event_time = MAX(COALESCE(sessions.last_event_time, ''), excluded.last_event_time),
+            event_count = excluded.event_count,
+            updated_at = datetime('now')
+        `);
+            });
+            backfill();
+            const migrated = this.db.prepare('SELECT COUNT(*) AS c FROM sessions').get();
+            logger.info(`[SQLiteStorage] backfilled ${migrated.c} sessions from events`);
+        }
+        catch (err) {
+            logger.warn(`[SQLiteStorage] backfillSessionsIfNeeded failed: ${err}`);
+        }
+    }
+    /**
+     * @internal 仅供 *Operations 子类、migration、初始化使用。
+     *
+     * Routes / Handlers / Analytics 禁止直接调用。需要查询请走 SQLiteStorage facade
+     * 上的具名方法（query* / get* / list* / count* / aggregate*）；若 facade 缺方法，
+     * 应在对应 Operations 类下沉 SQL 并补 facade 转发，而不是 db.prepare() 直写。
+     *
+     * 历史：H2 (2026-05) 已收敛 27 处越权 SQL，新增越权请走同样的下沉模式。
+     */
+    getDatabase() {
+        return this.db;
+    }
+    getDbPath() {
+        return this.dbPath;
+    }
+    getDbSizeMb() {
+        if (!existsSync(this.dbPath))
+            return 0;
+        return statSync(this.dbPath).size / (1024 * 1024);
+    }
+}
+//# sourceMappingURL=base.js.map