agentix-cli 0.23.0 → 0.26.0

package/dist/chunk-LDHPMJ7M.js

@@ -0,0 +1,257 @@
+var d={};function g(r){d=r}function v(){return d}var w=`<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link href="https://fonts.googleapis.com/css2?family=Outfit:wght@400;500;600;700;800&family=Roboto+Mono:wght@400;500;600&display=swap" rel="stylesheet">
+<script>(function(){try{var t=localStorage.getItem('ax-theme');if(t!=='light'&&t!=='dark'){t='dark';localStorage.setItem('ax-theme',t)}document.documentElement.setAttribute('data-theme',t)}catch(e){document.documentElement.setAttribute('data-theme','dark')}})();</script>`,y=`
+.ax-topbar{display:flex;align-items:center;justify-content:space-between;
+  padding:8px 18px;border-bottom:1px solid var(--ax-border);
+  background:var(--ax-bg-elev);position:sticky;top:0;z-index:20;gap:10px;flex-wrap:nowrap}
+.ax-topbar__left{display:flex;align-items:center;gap:18px;min-width:0}
+.ax-brand{display:flex;align-items:center;gap:10px;font-weight:600;letter-spacing:-0.01em;flex-shrink:0}
+.ax-brand__mark{font-family:var(--ax-mono);font-size:12px;padding:2px 8px;
+  border:1px solid var(--ax-border-2);color:var(--ax-accent);border-radius:4px}
+.ax-brand__name{font-size:14px}
+.ax-brand__subtitle{font-size:11px;color:var(--ax-muted);
+  border-left:1px solid var(--ax-border);padding-left:12px;margin-left:4px}
+.ax-topbar__tabs{display:flex;gap:14px;min-width:0;overflow-x:auto;align-items:center}
+/* Tier groups (System / Processes / Procedures) \u2014 visual separators
+ * mirror the docs/architecture/three-tier.md hierarchy. */
+.ax-topbar__group{display:flex;align-items:center;gap:0;padding:0 4px;
+  border-left:1px solid var(--ax-border);position:relative}
+.ax-topbar__group:first-child{border-left:none;padding-left:0}
+.ax-topbar__group-label{font:inherit;font-family:var(--ax-mono);font-size:9px;
+  letter-spacing:0.08em;text-transform:uppercase;color:var(--ax-muted);
+  padding:0 8px;white-space:nowrap;opacity:0.7}
+.ax-topbar__tab{background:transparent;border:none;color:var(--ax-text-2);
+  padding:8px 12px;font:inherit;cursor:pointer;font-size:12px;text-decoration:none;
+  border-bottom:2px solid transparent;letter-spacing:-0.005em;white-space:nowrap}
+.ax-topbar__tab:hover{color:var(--ax-text)}
+.ax-topbar__tab.is-active{color:var(--ax-text);border-bottom-color:var(--ax-accent)}
+.ax-topbar__right{display:flex;align-items:center;gap:10px;font-size:11px;
+  color:var(--ax-muted);flex-shrink:0}
+.ax-topbar__right .ax-mono{color:var(--ax-text-2)}
+
+/* Mesh selector */
+.ax-mesh-sel{position:relative;display:inline-flex;align-items:center;gap:6px;
+  padding:4px 10px;border:1px solid var(--ax-border-2);border-radius:4px;
+  background:var(--ax-surface);cursor:pointer;font:inherit;font-size:11px;
+  color:var(--ax-text-2);white-space:nowrap}
+.ax-mesh-sel:hover{border-color:var(--ax-accent);color:var(--ax-text)}
+.ax-mesh-sel.is-proxy{background:color-mix(in oklch,var(--ax-accent) 14%,var(--ax-surface));
+  border-color:color-mix(in oklch,var(--ax-accent) 45%,var(--ax-border-2));color:var(--ax-accent)}
+.ax-mesh-sel .lbl{font-size:9px;letter-spacing:0.06em;text-transform:uppercase;color:var(--ax-muted);margin-right:2px}
+.ax-mesh-sel .name{font-weight:500;color:var(--ax-text)}
+.ax-mesh-sel .chev{font-size:9px;opacity:0.6;margin-left:2px}
+.ax-mesh-menu{position:absolute;top:calc(100% + 4px);right:0;min-width:240px;
+  background:var(--ax-surface);border:1px solid var(--ax-border-2);
+  border-radius:6px;box-shadow:0 8px 24px rgba(0,0,0,0.4);padding:4px;z-index:30;display:none}
+.ax-mesh-sel.is-open .ax-mesh-menu{display:block}
+.ax-mesh-menu a{display:block;padding:7px 10px;border-radius:4px;text-decoration:none;
+  color:var(--ax-text-2);font-size:12px}
+.ax-mesh-menu a:hover{background:var(--ax-surface-2);color:var(--ax-text)}
+.ax-mesh-menu a.is-current{background:color-mix(in oklch,var(--ax-accent) 12%,var(--ax-surface));
+  color:var(--ax-accent);border:1px solid color-mix(in oklch,var(--ax-accent) 30%,var(--ax-border-2))}
+.ax-mesh-menu a .row{display:flex;align-items:center;gap:8px}
+.ax-mesh-menu a .row .dot{width:6px;height:6px;border-radius:50%;background:var(--ax-accent)}
+.ax-mesh-menu a.is-offline .row .dot{background:var(--ax-border-2)}
+.ax-mesh-menu a .url{font-family:var(--ax-mono);font-size:10px;color:var(--ax-muted);margin-top:2px}
+
+/* Theme switcher segmented control */
+.ax-theme-switch{display:inline-flex;border:1px solid var(--ax-border-2);
+  border-radius:4px;overflow:hidden}
+.ax-theme-switch button{background:transparent;border:none;color:var(--ax-muted);
+  padding:3px 9px;font:inherit;font-size:10px;cursor:pointer;letter-spacing:0.04em;
+  text-transform:uppercase;font-family:var(--ax-mono);border-right:1px solid var(--ax-border-2)}
+.ax-theme-switch button:last-child{border-right:none}
+.ax-theme-switch button:hover{color:var(--ax-text);background:var(--ax-surface-2,var(--ax-surface))}
+.ax-theme-switch button.is-active{color:var(--ax-accent);
+  background:color-mix(in oklch,var(--ax-accent) 12%,var(--ax-surface))}
+
+/* Subheader \u2014 page-specific toolbar below the main topbar. Kanban uses it
+ * for the board picker + search + filters; others can use it for context
+ * bars if they want. */
+.ax-subheader{display:flex;align-items:center;gap:10px;padding:10px 18px;
+  background:var(--ax-bg-elev);border-bottom:1px solid var(--ax-border);
+  flex-wrap:wrap}
+.ax-subheader > * {flex-shrink:0}
+.ax-subheader .spacer{flex:1}`,k=`<script>
+(function(){
+  function wireTheme(){
+    var sw = document.querySelectorAll('[data-theme-opt]');
+    if (!sw.length) return;
+    var current = document.documentElement.getAttribute('data-theme') || 'dark';
+    sw.forEach(function(b){
+      if (b.dataset.wired) return; b.dataset.wired = '1';
+      if (b.getAttribute('data-theme-opt') === current) b.classList.add('is-active');
+      b.addEventListener('click', function(){
+        var t = b.getAttribute('data-theme-opt');
+        document.documentElement.setAttribute('data-theme', t);
+        try { localStorage.setItem('ax-theme', t); } catch (e) {}
+        sw.forEach(function(x){ x.classList.toggle('is-active', x === b); });
+      });
+    });
+  }
+  function currentPeer(){
+    try { return localStorage.getItem('ax-peer') || 'primary'; } catch { return 'primary'; }
+  }
+  function setCurrentPeer(id){
+    try {
+      if (id && id !== 'primary') localStorage.setItem('ax-peer', id);
+      else localStorage.removeItem('ax-peer');
+    } catch {}
+  }
+  function reflectPeerPill(){
+    var sel = document.querySelector('.ax-mesh-sel');
+    if (!sel) return;
+    var cur = currentPeer();
+    sel.classList.toggle('is-proxy', cur !== 'primary');
+    // If a proxy is active, update the visible pill label + highlight.
+    var picked = null;
+    sel.querySelectorAll('.ax-mesh-menu a').forEach(function(a){
+      a.classList.toggle('is-current', a.getAttribute('data-peer-id') === cur || (cur === 'primary' && a.getAttribute('data-peer-id') === 'primary'));
+      if (a.getAttribute('data-peer-id') === cur) picked = a;
+    });
+    if (picked) {
+      var name = picked.querySelector('span'); // first <span> inside .row
+      var visibleName = sel.querySelector('.name');
+      if (name && visibleName) visibleName.textContent = name.textContent.replace(/ \xB7 primary/, '');
+    }
+  }
+  function wireMesh(){
+    var sel = document.querySelector('.ax-mesh-sel');
+    if (!sel || sel.dataset.wired) return; sel.dataset.wired = '1';
+    sel.addEventListener('click', function(e){
+      var link = e.target.closest('.ax-mesh-menu a[data-peer-action="proxy"]');
+      if (link) {
+        e.preventDefault();
+        setCurrentPeer(link.getAttribute('data-peer-id'));
+        reflectPeerPill();
+        sel.classList.remove('is-open');
+        // Reload so the admin panel re-reads state from the selected peer.
+        location.reload();
+        return;
+      }
+      if (e.target.closest('.ax-mesh-menu a')) return; // plain navigate anchor
+      sel.classList.toggle('is-open');
+    });
+    document.addEventListener('click', function(e){
+      if (!sel.contains(e.target)) sel.classList.remove('is-open');
+    });
+    reflectPeerPill();
+  }
+  function wireHostRewrite(){
+    try {
+      var h = location.hostname || 'localhost';
+      document.querySelectorAll('.ax-topbar__tab[href*="__HOST__"]').forEach(function(a){
+        a.href = a.getAttribute('href').replace(/__HOST__/g, h);
+      });
+    } catch (e) {}
+  }
+  /**
+   * Make the topbar peer selector actually drive page content. When the
+   * operator picks a non-primary peer, every /api/admin/* request gets an
+   * X-Agentx-Peer header (and every EventSource on that path gets a ?peer=
+   * query, since EventSource can't set headers). The dashboard's existing
+   * proxy handler picks it up and forwards to the chosen peer.
+   *
+   * Without this hook, the activity-graph (and other admin pages) silently
+   * keep showing only the local node's data even after the operator picks
+   * a different peer in the topbar.
+   */
+  function wirePeerProxy(){
+    if (window.__axPeerWired) return; window.__axPeerWired = true;
+    // Path-prefix allowlist for the peer-proxy interceptor. Extend here
+    // when a new admin-side surface needs to follow the mesh selector.
+    // /api/workflows is the workflow dashboard's read/write API \u2014 it
+    // lives outside /api/admin for legacy reasons, but the page is part
+    // of the admin surface and should proxy when a non-primary peer is
+    // selected (otherwise the workflows page on Mac shows local-only
+    // YAMLs while the runtime lives on clawd).
+    function shouldProxy(url){
+      if (!url) return false;
+      // Admin-side surfaces that follow the mesh selector. Each entry
+      // is a path-prefix match. Extend when a new admin surface lands
+      // outside /api/admin/* but should still proxy when the operator
+      // picks a non-primary peer.
+      //   /api/admin/   \u2014 original admin surface (activity, ledger, \u2026)
+      //   /api/workflows \u2014 workflow editor + observability page
+      //   /api/agents   \u2014 agent dropdowns inside the workflow editor +
+      //                   anywhere else the page asks "which agents
+      //                   exist on the selected node?"
+      return url.indexOf('/api/admin/') >= 0
+          || url.indexOf('/api/workflows') >= 0
+          || url.indexOf('/api/agents') >= 0;
+    }
+    var origFetch = window.fetch.bind(window);
+    window.fetch = function(input, init){
+      try {
+        var peer = currentPeer();
+        if (peer && peer !== 'primary') {
+          var url = typeof input === 'string' ? input : (input && input.url) || '';
+          if (shouldProxy(url)) {
+            init = init || {};
+            init.headers = new Headers(init.headers || {});
+            init.headers.set('X-Agentx-Peer', peer);
+          }
+        }
+      } catch (e) {}
+      return origFetch(input, init);
+    };
+    var OrigES = window.EventSource;
+    if (OrigES) {
+      window.EventSource = function(url, cfg){
+        try {
+          var peer = currentPeer();
+          if (peer && peer !== 'primary' && typeof url === 'string' && shouldProxy(url)) {
+            url += (url.indexOf('?') >= 0 ? '&' : '?') + 'peer=' + encodeURIComponent(peer);
+          }
+        } catch (e) {}
+        return new OrigES(url, cfg);
+      };
+      window.EventSource.prototype = OrigES.prototype;
+      window.EventSource.CONNECTING = OrigES.CONNECTING;
+      window.EventSource.OPEN = OrigES.OPEN;
+      window.EventSource.CLOSED = OrigES.CLOSED;
+    }
+  }
+  // wirePeerProxy() is synchronous and DOM-independent \u2014 it just wraps
+  // window.fetch + window.EventSource. Fire it IMMEDIATELY (before
+  // DOMContentLoaded) so deferred page bundles that issue their first
+  // fetch on bundle-parse (e.g. the workflow editor's React useEffect)
+  // see the wrapped fetch and pick up the X-Agentx-Peer header. Without
+  // this, the workflow editor's load on Mac:4202 hit local /api/workflows
+  // (instead of proxying to the selected peer), got a 404, and silently
+  // fell back to blank-graph state \u2014 looking like a "new workflow".
+  wirePeerProxy();
+  function wire(){ wireHostRewrite(); wireTheme(); wireMesh(); /* wirePeerProxy already ran */ }
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', wire);
+  } else { wire(); }
+})();
+</script>`;function _(r){let t=r.peers&&r.peers.length>0?r.peers:[{id:"local",name:"this daemon",dashboardUrl:"",primary:!0}],c=r.currentPeerId||t.find(e=>e.primary)?.id||t[0].id,p=t.find(e=>e.id===c)||t[0],x=t.map(e=>{let n=e.id===c,o=e.primary?' <span style="color:var(--ax-muted);font-size:10px">\xB7 primary</span>':"",i=!!e.tokenScope&&!e.primary,s=i?"#":e.dashboardUrl?`${e.dashboardUrl.replace(/\/+$/,"")}/admin`:"#",l=i?` data-peer-id="${a(e.id)}" data-peer-action="proxy"`:e.primary?' data-peer-id="primary" data-peer-action="proxy"':"",m=i?'<div class="url" style="color:var(--ax-accent)">manage from this dashboard \u2713</div>':e.tokenScope?`<div class="url">${a(e.tokenScope)}</div>`:e.dashboardUrl?'<div class="url" style="color:var(--ax-muted)">(open peer dashboard \u2197)</div>':"";return`<a href="${a(s)}" class="${n?"is-current":""}"${l}>
+      <div class="row"><span class="dot"></span><span>${a(e.name)}${o}</span></div>
+      ${e.dashboardUrl?`<div class="url">${a(e.dashboardUrl)}</div>`:""}
+      ${m}
+    </a>`}).join(""),h=`<div class="ax-mesh-sel" aria-haspopup="menu">
+    <span class="lbl">managing</span>
+    <span class="name">${a(p.name)}</span>
+    <span class="chev">\u25BE</span>
+    <div class="ax-mesh-menu" role="menu">${x}</div>
+  </div>`,u=[{name:"Mesh",tabs:[{id:"live",label:"Live",href:"/live"},{id:"mesh",label:"Operations",href:"/mesh"},{id:"admin",label:"Settings",href:"/admin"}]}].map(e=>{let n=e.tabs.map(o=>{let i=o.id===r.activeTab?"ax-topbar__tab is-active":"ax-topbar__tab",s=o.external?' target="_blank" rel="noopener"':"",l=o.external?' <span style="font-size:9px;opacity:0.6">\u2197</span>':"";return`<a href="${o.href}" class="${i}"${s}>${o.label}${l}</a>`}).join("");return`<div class="ax-topbar__group" title="${a(e.name)} tier"><span class="ax-topbar__group-label">${a(e.name)}</span>${n}</div>`}).join("");return`<header class="ax-topbar">
+  <div class="ax-topbar__left">
+    <div class="ax-brand">
+      <span class="ax-brand__mark">AX</span>
+      <span class="ax-brand__name">AgentX</span>
+      <span class="ax-brand__subtitle">${a(r.subtitle)}</span>
+    </div>
+    <nav class="ax-topbar__tabs">${u}</nav>
+  </div>
+  <div class="ax-topbar__right">
+    ${r.rightExtras||""}
+    ${h}
+    <div class="ax-theme-switch" role="tablist" aria-label="Theme">
+      <button data-theme-opt="dark">Dark</button>
+      <button data-theme-opt="light">Light</button>
+    </div>
+  </div>
+</header>${r.subheader?`<div class="ax-subheader">${r.subheader}</div>`:""}`}function a(r){return String(r||"").replace(/[&<>"']/g,t=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[t])}export{g as a,v as b,w as c,y as d,k as e,_ as f};
+//# sourceMappingURL=chunk-LDHPMJ7M.js.map

package/dist/chunk-LDHPMJ7M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/daemon/topbar.ts"],"sourcesContent":["// --- Shared top-chrome for every dashboard surface ---\n//\n// Four pages render in different files (live + kanban + glossary in\n// board-dashboard.ts, settings in admin-panel.ts) but must share: design\n// tokens, fonts, theme switcher, brand, primary tab nav, and a mesh-node\n// selector. This module exports the CSS + HTML snippets so each page\n// composes exactly the same chrome and we never drift them again.\n//\n// Nothing here is page-specific — callers pass in { activeTab, subtitle,\n// subheader? } and compose their own <main> below.\n\nexport type TopbarTab = \"live\" | \"mesh\" | \"boards\" | \"admin\" | \"graph\" | \"glossary\" | \"workflows\" | \"health\" | \"cost\" | \"wiki\" | \"procedures\" | \"inbox\" | \"projects\"\n\nexport interface TopbarPeer {\n  /** Stable id: primary node id, or URL for configured daemons */\n  id: string\n  name: string\n  /** Absolute URL of the peer's dashboard (http://host:port) — selector\n   *  navigates to <url>/admin when switched. */\n  dashboardUrl: string\n  /** True for the node hosting this dashboard (locks the default). */\n  primary?: boolean\n  /** Optional; shown in the dropdown as \"managing via token\" hint. */\n  tokenScope?: string\n}\n\nexport interface TopbarFeatures {\n  /** Show the Team/Business Settings sub-tabs — config.business.enabled. */\n  business?: boolean\n}\n\n// Set once at server start (board-dashboard + daemon both call it).\n//\n// This used to carry `boards` and `workflows` flags that gated top-level\n// tabs. The nav is now fixed (Live, Operations, Settings), so those flags had\n// nothing left to gate and were removed rather than left describing chrome\n// that no longer exists.\nlet topbarFeatures: TopbarFeatures = {}\n\nexport function setTopbarFeatures(features: TopbarFeatures): void {\n  topbarFeatures = features\n}\n\nexport function getTopbarFeatures(): TopbarFeatures {\n  return topbarFeatures\n}\n\nexport interface TopbarOpts {\n  activeTab: TopbarTab\n  /** Text after the brand, e.g. \"Live\" / \"Settings\" / \"Boards\". */\n  subtitle: string\n  /** Optional HTML inserted as a second row under the topbar. */\n  subheader?: string\n  /** Peers to list in the mesh selector. */\n  peers?: TopbarPeer[]\n  /** id of the peer currently being managed — defaults to the primary. */\n  currentPeerId?: string\n  /** Optional right-side HTML added before the theme switcher (clocks,\n   *  connection dots, etc.). */\n  rightExtras?: string\n}\n\n/**\n * Font link tags + tiny inline bootstrap script. Callers drop this in <head>.\n */\n// Fonts degrade to the system stack when the box is offline or air-gapped —\n// the tokens list real fallbacks, so a failed font fetch costs typography,\n// never layout.\n//\n// The theme bootstrap runs before first paint to avoid a flash. A stored\n// \"crt\" from before that theme was removed falls back to dark rather than\n// leaving data-theme set to a value no stylesheet defines.\nexport const TOPBAR_HEAD = `<link rel=\"preconnect\" href=\"https://fonts.googleapis.com\">\n<link rel=\"preconnect\" href=\"https://fonts.gstatic.com\" crossorigin>\n<link href=\"https://fonts.googleapis.com/css2?family=Outfit:wght@400;500;600;700;800&family=Roboto+Mono:wght@400;500;600&display=swap\" rel=\"stylesheet\">\n<script>(function(){try{var t=localStorage.getItem('ax-theme');if(t!=='light'&&t!=='dark'){t='dark';localStorage.setItem('ax-theme',t)}document.documentElement.setAttribute('data-theme',t)}catch(e){document.documentElement.setAttribute('data-theme','dark')}})();</script>`\n\n/**\n * CSS for topbar + subheader + theme switch + mesh selector. No token\n * definitions — those are per-page because each page's CSS block owns its\n * own :root overrides.\n */\nexport const TOPBAR_CSS = `\n.ax-topbar{display:flex;align-items:center;justify-content:space-between;\n  padding:8px 18px;border-bottom:1px solid var(--ax-border);\n  background:var(--ax-bg-elev);position:sticky;top:0;z-index:20;gap:10px;flex-wrap:nowrap}\n.ax-topbar__left{display:flex;align-items:center;gap:18px;min-width:0}\n.ax-brand{display:flex;align-items:center;gap:10px;font-weight:600;letter-spacing:-0.01em;flex-shrink:0}\n.ax-brand__mark{font-family:var(--ax-mono);font-size:12px;padding:2px 8px;\n  border:1px solid var(--ax-border-2);color:var(--ax-accent);border-radius:4px}\n.ax-brand__name{font-size:14px}\n.ax-brand__subtitle{font-size:11px;color:var(--ax-muted);\n  border-left:1px solid var(--ax-border);padding-left:12px;margin-left:4px}\n.ax-topbar__tabs{display:flex;gap:14px;min-width:0;overflow-x:auto;align-items:center}\n/* Tier groups (System / Processes / Procedures) — visual separators\n * mirror the docs/architecture/three-tier.md hierarchy. */\n.ax-topbar__group{display:flex;align-items:center;gap:0;padding:0 4px;\n  border-left:1px solid var(--ax-border);position:relative}\n.ax-topbar__group:first-child{border-left:none;padding-left:0}\n.ax-topbar__group-label{font:inherit;font-family:var(--ax-mono);font-size:9px;\n  letter-spacing:0.08em;text-transform:uppercase;color:var(--ax-muted);\n  padding:0 8px;white-space:nowrap;opacity:0.7}\n.ax-topbar__tab{background:transparent;border:none;color:var(--ax-text-2);\n  padding:8px 12px;font:inherit;cursor:pointer;font-size:12px;text-decoration:none;\n  border-bottom:2px solid transparent;letter-spacing:-0.005em;white-space:nowrap}\n.ax-topbar__tab:hover{color:var(--ax-text)}\n.ax-topbar__tab.is-active{color:var(--ax-text);border-bottom-color:var(--ax-accent)}\n.ax-topbar__right{display:flex;align-items:center;gap:10px;font-size:11px;\n  color:var(--ax-muted);flex-shrink:0}\n.ax-topbar__right .ax-mono{color:var(--ax-text-2)}\n\n/* Mesh selector */\n.ax-mesh-sel{position:relative;display:inline-flex;align-items:center;gap:6px;\n  padding:4px 10px;border:1px solid var(--ax-border-2);border-radius:4px;\n  background:var(--ax-surface);cursor:pointer;font:inherit;font-size:11px;\n  color:var(--ax-text-2);white-space:nowrap}\n.ax-mesh-sel:hover{border-color:var(--ax-accent);color:var(--ax-text)}\n.ax-mesh-sel.is-proxy{background:color-mix(in oklch,var(--ax-accent) 14%,var(--ax-surface));\n  border-color:color-mix(in oklch,var(--ax-accent) 45%,var(--ax-border-2));color:var(--ax-accent)}\n.ax-mesh-sel .lbl{font-size:9px;letter-spacing:0.06em;text-transform:uppercase;color:var(--ax-muted);margin-right:2px}\n.ax-mesh-sel .name{font-weight:500;color:var(--ax-text)}\n.ax-mesh-sel .chev{font-size:9px;opacity:0.6;margin-left:2px}\n.ax-mesh-menu{position:absolute;top:calc(100% + 4px);right:0;min-width:240px;\n  background:var(--ax-surface);border:1px solid var(--ax-border-2);\n  border-radius:6px;box-shadow:0 8px 24px rgba(0,0,0,0.4);padding:4px;z-index:30;display:none}\n.ax-mesh-sel.is-open .ax-mesh-menu{display:block}\n.ax-mesh-menu a{display:block;padding:7px 10px;border-radius:4px;text-decoration:none;\n  color:var(--ax-text-2);font-size:12px}\n.ax-mesh-menu a:hover{background:var(--ax-surface-2);color:var(--ax-text)}\n.ax-mesh-menu a.is-current{background:color-mix(in oklch,var(--ax-accent) 12%,var(--ax-surface));\n  color:var(--ax-accent);border:1px solid color-mix(in oklch,var(--ax-accent) 30%,var(--ax-border-2))}\n.ax-mesh-menu a .row{display:flex;align-items:center;gap:8px}\n.ax-mesh-menu a .row .dot{width:6px;height:6px;border-radius:50%;background:var(--ax-accent)}\n.ax-mesh-menu a.is-offline .row .dot{background:var(--ax-border-2)}\n.ax-mesh-menu a .url{font-family:var(--ax-mono);font-size:10px;color:var(--ax-muted);margin-top:2px}\n\n/* Theme switcher segmented control */\n.ax-theme-switch{display:inline-flex;border:1px solid var(--ax-border-2);\n  border-radius:4px;overflow:hidden}\n.ax-theme-switch button{background:transparent;border:none;color:var(--ax-muted);\n  padding:3px 9px;font:inherit;font-size:10px;cursor:pointer;letter-spacing:0.04em;\n  text-transform:uppercase;font-family:var(--ax-mono);border-right:1px solid var(--ax-border-2)}\n.ax-theme-switch button:last-child{border-right:none}\n.ax-theme-switch button:hover{color:var(--ax-text);background:var(--ax-surface-2,var(--ax-surface))}\n.ax-theme-switch button.is-active{color:var(--ax-accent);\n  background:color-mix(in oklch,var(--ax-accent) 12%,var(--ax-surface))}\n\n/* Subheader — page-specific toolbar below the main topbar. Kanban uses it\n * for the board picker + search + filters; others can use it for context\n * bars if they want. */\n.ax-subheader{display:flex;align-items:center;gap:10px;padding:10px 18px;\n  background:var(--ax-bg-elev);border-bottom:1px solid var(--ax-border);\n  flex-wrap:wrap}\n.ax-subheader > * {flex-shrink:0}\n.ax-subheader .spacer{flex:1}`\n\n/**\n * Shared click wiring for the theme switcher + mesh selector. Safe to call\n * multiple times — only binds once per element.\n */\nexport const TOPBAR_SCRIPT = `<script>\n(function(){\n  function wireTheme(){\n    var sw = document.querySelectorAll('[data-theme-opt]');\n    if (!sw.length) return;\n    var current = document.documentElement.getAttribute('data-theme') || 'dark';\n    sw.forEach(function(b){\n      if (b.dataset.wired) return; b.dataset.wired = '1';\n      if (b.getAttribute('data-theme-opt') === current) b.classList.add('is-active');\n      b.addEventListener('click', function(){\n        var t = b.getAttribute('data-theme-opt');\n        document.documentElement.setAttribute('data-theme', t);\n        try { localStorage.setItem('ax-theme', t); } catch (e) {}\n        sw.forEach(function(x){ x.classList.toggle('is-active', x === b); });\n      });\n    });\n  }\n  function currentPeer(){\n    try { return localStorage.getItem('ax-peer') || 'primary'; } catch { return 'primary'; }\n  }\n  function setCurrentPeer(id){\n    try {\n      if (id && id !== 'primary') localStorage.setItem('ax-peer', id);\n      else localStorage.removeItem('ax-peer');\n    } catch {}\n  }\n  function reflectPeerPill(){\n    var sel = document.querySelector('.ax-mesh-sel');\n    if (!sel) return;\n    var cur = currentPeer();\n    sel.classList.toggle('is-proxy', cur !== 'primary');\n    // If a proxy is active, update the visible pill label + highlight.\n    var picked = null;\n    sel.querySelectorAll('.ax-mesh-menu a').forEach(function(a){\n      a.classList.toggle('is-current', a.getAttribute('data-peer-id') === cur || (cur === 'primary' && a.getAttribute('data-peer-id') === 'primary'));\n      if (a.getAttribute('data-peer-id') === cur) picked = a;\n    });\n    if (picked) {\n      var name = picked.querySelector('span'); // first <span> inside .row\n      var visibleName = sel.querySelector('.name');\n      if (name && visibleName) visibleName.textContent = name.textContent.replace(/ · primary/, '');\n    }\n  }\n  function wireMesh(){\n    var sel = document.querySelector('.ax-mesh-sel');\n    if (!sel || sel.dataset.wired) return; sel.dataset.wired = '1';\n    sel.addEventListener('click', function(e){\n      var link = e.target.closest('.ax-mesh-menu a[data-peer-action=\"proxy\"]');\n      if (link) {\n        e.preventDefault();\n        setCurrentPeer(link.getAttribute('data-peer-id'));\n        reflectPeerPill();\n        sel.classList.remove('is-open');\n        // Reload so the admin panel re-reads state from the selected peer.\n        location.reload();\n        return;\n      }\n      if (e.target.closest('.ax-mesh-menu a')) return; // plain navigate anchor\n      sel.classList.toggle('is-open');\n    });\n    document.addEventListener('click', function(e){\n      if (!sel.contains(e.target)) sel.classList.remove('is-open');\n    });\n    reflectPeerPill();\n  }\n  function wireHostRewrite(){\n    try {\n      var h = location.hostname || 'localhost';\n      document.querySelectorAll('.ax-topbar__tab[href*=\"__HOST__\"]').forEach(function(a){\n        a.href = a.getAttribute('href').replace(/__HOST__/g, h);\n      });\n    } catch (e) {}\n  }\n  /**\n   * Make the topbar peer selector actually drive page content. When the\n   * operator picks a non-primary peer, every /api/admin/* request gets an\n   * X-Agentx-Peer header (and every EventSource on that path gets a ?peer=\n   * query, since EventSource can't set headers). The dashboard's existing\n   * proxy handler picks it up and forwards to the chosen peer.\n   *\n   * Without this hook, the activity-graph (and other admin pages) silently\n   * keep showing only the local node's data even after the operator picks\n   * a different peer in the topbar.\n   */\n  function wirePeerProxy(){\n    if (window.__axPeerWired) return; window.__axPeerWired = true;\n    // Path-prefix allowlist for the peer-proxy interceptor. Extend here\n    // when a new admin-side surface needs to follow the mesh selector.\n    // /api/workflows is the workflow dashboard's read/write API — it\n    // lives outside /api/admin for legacy reasons, but the page is part\n    // of the admin surface and should proxy when a non-primary peer is\n    // selected (otherwise the workflows page on Mac shows local-only\n    // YAMLs while the runtime lives on clawd).\n    function shouldProxy(url){\n      if (!url) return false;\n      // Admin-side surfaces that follow the mesh selector. Each entry\n      // is a path-prefix match. Extend when a new admin surface lands\n      // outside /api/admin/* but should still proxy when the operator\n      // picks a non-primary peer.\n      //   /api/admin/   — original admin surface (activity, ledger, …)\n      //   /api/workflows — workflow editor + observability page\n      //   /api/agents   — agent dropdowns inside the workflow editor +\n      //                   anywhere else the page asks \"which agents\n      //                   exist on the selected node?\"\n      return url.indexOf('/api/admin/') >= 0\n          || url.indexOf('/api/workflows') >= 0\n          || url.indexOf('/api/agents') >= 0;\n    }\n    var origFetch = window.fetch.bind(window);\n    window.fetch = function(input, init){\n      try {\n        var peer = currentPeer();\n        if (peer && peer !== 'primary') {\n          var url = typeof input === 'string' ? input : (input && input.url) || '';\n          if (shouldProxy(url)) {\n            init = init || {};\n            init.headers = new Headers(init.headers || {});\n            init.headers.set('X-Agentx-Peer', peer);\n          }\n        }\n      } catch (e) {}\n      return origFetch(input, init);\n    };\n    var OrigES = window.EventSource;\n    if (OrigES) {\n      window.EventSource = function(url, cfg){\n        try {\n          var peer = currentPeer();\n          if (peer && peer !== 'primary' && typeof url === 'string' && shouldProxy(url)) {\n            url += (url.indexOf('?') >= 0 ? '&' : '?') + 'peer=' + encodeURIComponent(peer);\n          }\n        } catch (e) {}\n        return new OrigES(url, cfg);\n      };\n      window.EventSource.prototype = OrigES.prototype;\n      window.EventSource.CONNECTING = OrigES.CONNECTING;\n      window.EventSource.OPEN = OrigES.OPEN;\n      window.EventSource.CLOSED = OrigES.CLOSED;\n    }\n  }\n  // wirePeerProxy() is synchronous and DOM-independent — it just wraps\n  // window.fetch + window.EventSource. Fire it IMMEDIATELY (before\n  // DOMContentLoaded) so deferred page bundles that issue their first\n  // fetch on bundle-parse (e.g. the workflow editor's React useEffect)\n  // see the wrapped fetch and pick up the X-Agentx-Peer header. Without\n  // this, the workflow editor's load on Mac:4202 hit local /api/workflows\n  // (instead of proxying to the selected peer), got a 404, and silently\n  // fell back to blank-graph state — looking like a \"new workflow\".\n  wirePeerProxy();\n  function wire(){ wireHostRewrite(); wireTheme(); wireMesh(); /* wirePeerProxy already ran */ }\n  if (document.readyState === 'loading') {\n    document.addEventListener('DOMContentLoaded', wire);\n  } else { wire(); }\n})();\n</script>`\n\n/**\n * Render the topbar element. Caller places this at the start of <body>.\n * Emits a matching .ax-subheader row only when `subheader` HTML is provided.\n */\nexport function renderTopbar(opts: TopbarOpts): string {\n  const peers = opts.peers && opts.peers.length > 0 ? opts.peers : [{ id: \"local\", name: \"this daemon\", dashboardUrl: \"\", primary: true }]\n  const currentId = opts.currentPeerId || peers.find((p) => p.primary)?.id || peers[0].id\n  const current = peers.find((p) => p.id === currentId) || peers[0]\n\n  const meshMenu = peers.map((p) => {\n    const isCurrent = p.id === currentId\n    const primaryMark = p.primary ? ' <span style=\"color:var(--ax-muted);font-size:10px\">· primary</span>' : \"\"\n    const proxyable = !!p.tokenScope && !p.primary\n    // Proxyable peers: use data-peer-id so the click handler switches locally\n    // via localStorage + reload. Un-proxyable (no token): legacy navigate.\n    const href = proxyable\n      ? \"#\"\n      : p.dashboardUrl\n        ? `${p.dashboardUrl.replace(/\\/+$/, \"\")}/admin`\n        : \"#\"\n    const dataAttr = proxyable ? ` data-peer-id=\"${esc(p.id)}\" data-peer-action=\"proxy\"` : p.primary ? ` data-peer-id=\"primary\" data-peer-action=\"proxy\"` : \"\"\n    const hint = proxyable\n      ? '<div class=\"url\" style=\"color:var(--ax-accent)\">manage from this dashboard ✓</div>'\n      : p.tokenScope\n        ? `<div class=\"url\">${esc(p.tokenScope)}</div>`\n        : p.dashboardUrl\n          ? '<div class=\"url\" style=\"color:var(--ax-muted)\">(open peer dashboard ↗)</div>'\n          : \"\"\n    return `<a href=\"${esc(href)}\" class=\"${isCurrent ? \"is-current\" : \"\"}\"${dataAttr}>\n      <div class=\"row\"><span class=\"dot\"></span><span>${esc(p.name)}${primaryMark}</span></div>\n      ${p.dashboardUrl ? `<div class=\"url\">${esc(p.dashboardUrl)}</div>` : \"\"}\n      ${hint}\n    </a>`\n  }).join(\"\")\n\n  const meshSelector = `<div class=\"ax-mesh-sel\" aria-haspopup=\"menu\">\n    <span class=\"lbl\">managing</span>\n    <span class=\"name\">${esc(current.name)}</span>\n    <span class=\"chev\">▾</span>\n    <div class=\"ax-mesh-menu\" role=\"menu\">${meshMenu}</div>\n  </div>`\n\n  // Minimal, mesh-first nav. The primary group answers the four ops\n  // questions in order: who's alive and what are they doing (Live),\n  // what happened (Ledger), what did it cost (Cost), how is it wired\n  // (Settings). A second \"Work\" group appears only when the operator\n  // actually configured that surface (boards / workflows) — flags are\n  // set once per process via setTopbarFeatures().\n  //\n  // Deliberately NOT in the nav (all still routable by URL):\n  //   /admin/ledger  /admin/cost         what happened, what it cost\n  //   /workflows  /inbox              BPM surfaces\n  //   /  (boards)                       Kanban\n  //   /admin/health  /admin/activity-graph  /admin/graph  /admin/projects\n  //   /procedures  /admin/wiki  /glossary  /processes\n  //\n  // Three tabs are the whole nav. Every page above is one link away from Live\n  // or Settings, and none of them is where an operator starts their day —\n  // \"who is alive and what are they doing\" (Live) and \"how is this wired\"\n  // (Settings) are. A tab bar that lists every surface an app HAS is a site\n  // map, not navigation; it makes the two answers people actually want\n  // harder to find, which is the opposite of what chrome is for.\n  //\n  // Removing a tab does not remove the page. If view counts later show a\n  // surface earning its place, adding a tab back is one line.\n  type Tab = { id: TopbarTab; label: string; href: string; external?: boolean }\n  const groups: Array<{ name: string; tabs: Tab[] }> = [\n    {\n      name: \"Mesh\",\n      tabs: [\n        { id: \"live\", label: \"Live\", href: \"/live\" },\n        { id: \"mesh\", label: \"Operations\", href: \"/mesh\" },\n        { id: \"admin\", label: \"Settings\", href: \"/admin\" },\n      ],\n    },\n  ]\n\n  const tabs = groups.map((g) => {\n    const inner = g.tabs.map((t) => {\n      const cls = t.id === opts.activeTab ? \"ax-topbar__tab is-active\" : \"ax-topbar__tab\"\n      const extAttrs = t.external ? ` target=\"_blank\" rel=\"noopener\"` : \"\"\n      const extGlyph = t.external ? ' <span style=\"font-size:9px;opacity:0.6\">↗</span>' : \"\"\n      return `<a href=\"${t.href}\" class=\"${cls}\"${extAttrs}>${t.label}${extGlyph}</a>`\n    }).join(\"\")\n    return `<div class=\"ax-topbar__group\" title=\"${esc(g.name)} tier\"><span class=\"ax-topbar__group-label\">${esc(g.name)}</span>${inner}</div>`\n  }).join(\"\")\n\n  const header = `<header class=\"ax-topbar\">\n  <div class=\"ax-topbar__left\">\n    <div class=\"ax-brand\">\n      <span class=\"ax-brand__mark\">AX</span>\n      <span class=\"ax-brand__name\">AgentX</span>\n      <span class=\"ax-brand__subtitle\">${esc(opts.subtitle)}</span>\n    </div>\n    <nav class=\"ax-topbar__tabs\">${tabs}</nav>\n  </div>\n  <div class=\"ax-topbar__right\">\n    ${opts.rightExtras || \"\"}\n    ${meshSelector}\n    <div class=\"ax-theme-switch\" role=\"tablist\" aria-label=\"Theme\">\n      <button data-theme-opt=\"dark\">Dark</button>\n      <button data-theme-opt=\"light\">Light</button>\n    </div>\n  </div>\n</header>${opts.subheader ? `<div class=\"ax-subheader\">${opts.subheader}</div>` : \"\"}`\n  return header\n}\n\nfunction esc(s: string): string {\n  return String(s || \"\").replace(/[&<>\"']/g, (c) => ({ \"&\": \"&amp;\", \"<\": \"&lt;\", \">\": \"&gt;\", '\"': \"&quot;\", \"'\": \"&#39;\" }[c] as string))\n}\n"],"mappings":"AAqCA,IAAIA,EAAiC,CAAC,EAE/B,SAASC,EAAkBC,EAAgC,CAChEF,EAAiBE,CACnB,CAEO,SAASC,GAAoC,CAClD,OAAOH,CACT,CA2BO,IAAMI,EAAc;AAAA;AAAA;AAAA,iRAUdC,EAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,+BA8EbC,EAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,WAgKtB,SAASC,EAAaC,EAA0B,CACrD,IAAMC,EAAQD,EAAK,OAASA,EAAK,MAAM,OAAS,EAAIA,EAAK,MAAQ,CAAC,CAAE,GAAI,QAAS,KAAM,cAAe,aAAc,GAAI,QAAS,EAAK,CAAC,EACjIE,EAAYF,EAAK,eAAiBC,EAAM,KAAME,GAAMA,EAAE,OAAO,GAAG,IAAMF,EAAM,CAAC,EAAE,GAC/EG,EAAUH,EAAM,KAAME,GAAMA,EAAE,KAAOD,CAAS,GAAKD,EAAM,CAAC,EAE1DI,EAAWJ,EAAM,IAAKE,GAAM,CAChC,IAAMG,EAAYH,EAAE,KAAOD,EACrBK,EAAcJ,EAAE,QAAU,0EAAyE,GACnGK,EAAY,CAAC,CAACL,EAAE,YAAc,CAACA,EAAE,QAGjCM,EAAOD,EACT,IACAL,EAAE,aACA,GAAGA,EAAE,aAAa,QAAQ,OAAQ,EAAE,UACpC,IACAO,EAAWF,EAAY,kBAAkBG,EAAIR,EAAE,EAAE,8BAAgCA,EAAE,QAAU,mDAAqD,GAClJS,EAAOJ,EACT,0FACAL,EAAE,WACA,oBAAoBQ,EAAIR,EAAE,UAAU,UACpCA,EAAE,aACA,oFACA,GACR,MAAO,YAAYQ,EAAIF,CAAI,aAAaH,EAAY,aAAe,MAAMI;AAAA,wDACrBC,EAAIR,EAAE,IAAI,IAAII;AAAA,QAC9DJ,EAAE,aAAe,oBAAoBQ,EAAIR,EAAE,YAAY,UAAY;AAAA,QACnES;AAAA,SAEN,CAAC,EAAE,KAAK,EAAE,EAEJC,EAAe;AAAA;AAAA,yBAEEF,EAAIP,EAAQ,IAAI;AAAA;AAAA,4CAEGC;AAAA,UAsCpCS,EAX+C,CACnD,CACE,KAAM,OACN,KAAM,CACJ,CAAE,GAAI,OAAQ,MAAO,OAAQ,KAAM,OAAQ,EAC3C,CAAE,GAAI,OAAQ,MAAO,aAAc,KAAM,OAAQ,EACjD,CAAE,GAAI,QAAS,MAAO,WAAY,KAAM,QAAS,CACnD,CACF,CACF,EAEoB,IAAKC,GAAM,CAC7B,IAAMC,EAAQD,EAAE,KAAK,IAAKE,GAAM,CAC9B,IAAMC,EAAMD,EAAE,KAAOjB,EAAK,UAAY,2BAA6B,iBAC7DmB,EAAWF,EAAE,SAAW,kCAAoC,GAC5DG,EAAWH,EAAE,SAAW,yDAAsD,GACpF,MAAO,YAAYA,EAAE,gBAAgBC,KAAOC,KAAYF,EAAE,QAAQG,OACpE,CAAC,EAAE,KAAK,EAAE,EACV,MAAO,wCAAwCT,EAAII,EAAE,IAAI,gDAAgDJ,EAAII,EAAE,IAAI,WAAWC,SAChI,CAAC,EAAE,KAAK,EAAE,EAoBV,MAlBe;AAAA;AAAA;AAAA;AAAA;AAAA,yCAKwBL,EAAIX,EAAK,QAAQ;AAAA;AAAA,mCAEvBc;AAAA;AAAA;AAAA,MAG7Bd,EAAK,aAAe;AAAA,MACpBa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,WAMKb,EAAK,UAAY,6BAA6BA,EAAK,kBAAoB,IAElF,CAEA,SAASW,EAAIU,EAAmB,CAC9B,OAAO,OAAOA,GAAK,EAAE,EAAE,QAAQ,WAAaC,IAAO,CAAE,IAAK,QAAS,IAAK,OAAQ,IAAK,OAAQ,IAAK,SAAU,IAAK,OAAQ,GAAEA,CAAC,CAAY,CAC1I","names":["topbarFeatures","setTopbarFeatures","features","getTopbarFeatures","TOPBAR_HEAD","TOPBAR_CSS","TOPBAR_SCRIPT","renderTopbar","opts","peers","currentId","p","current","meshMenu","isCurrent","primaryMark","proxyable","href","dataAttr","esc","hint","meshSelector","tabs","g","inner","t","cls","extAttrs","extGlyph","s","c"]}

package/dist/chunk-M4AMWP3H.js

@@ -0,0 +1,178 @@
+import{createRequire as d}from"module";import{mkdirSync as _}from"fs";import{dirname as c,resolve as N}from"path";var l=d(import.meta.url),T,u;function o(t){let a=String(t?.message??t),e=process.versions.modules,s=`Run "pnpm rebuild better-sqlite3" with the same Node used by the daemon (${process.version}, modules ${e}).`;return/NODE_MODULE_VERSION|was compiled against|Module version mismatch|invalid ELF|mach-o/i.test(a)?`${a} ${s}`:`${a} ${s}`}function L(t=!1){if(u)return u;try{return u=l("better-sqlite3"),u}catch(a){return t||console.error(`[storage/sqlite] better-sqlite3 native binding failed to load: ${o(a)}`),null}}function O(t={}){if(t.disabled)return null;if(T)return T;let a=N(process.cwd(),t.path??".agentx/db.sqlite"),e=L(t.quiet);if(!e)return null;try{_(c(a),{recursive:!0});let n=new e(a);return n.pragma("journal_mode = WAL"),n.pragma("synchronous = NORMAL"),n.pragma("foreign_keys = ON"),R(n),T=n,T}catch(n){return t.quiet||console.error(`[storage/sqlite] openDb failed at ${a}: ${o(n)}`),null}}function R(t){t.exec(`
+    CREATE TABLE IF NOT EXISTS schema_version (
+      v INTEGER PRIMARY KEY
+    );
+  `);let a=t.prepare("SELECT MAX(v) AS v FROM schema_version").get().v??0,e=[{v:1,sql:`
+        CREATE TABLE task_history (
+          id TEXT PRIMARY KEY,
+          agent_id TEXT NOT NULL,
+          channel TEXT,
+          chat_id TEXT,
+          status TEXT NOT NULL,           -- 'ok' | 'error' | 'timeout'
+          message_preview TEXT,
+          error TEXT,
+          duration_ms INTEGER,
+          input_tokens INTEGER,
+          output_tokens INTEGER,
+          cache_read_tokens INTEGER,
+          cache_create_tokens INTEGER,
+          started_at TEXT NOT NULL,
+          finished_at TEXT NOT NULL
+        );
+        CREATE INDEX idx_task_history_agent_started
+          ON task_history(agent_id, started_at);
+        CREATE INDEX idx_task_history_status
+          ON task_history(status, started_at);
+      `},{v:2,sql:`
+        CREATE TABLE usage_daily (
+          agent_id TEXT NOT NULL,
+          model TEXT NOT NULL,
+          day TEXT NOT NULL,                  -- 'YYYY-MM-DD' UTC
+          input_tokens INTEGER DEFAULT 0,
+          output_tokens INTEGER DEFAULT 0,
+          cache_read_tokens INTEGER DEFAULT 0,
+          cache_create_tokens INTEGER DEFAULT 0,
+          tasks INTEGER DEFAULT 0,
+          PRIMARY KEY (agent_id, model, day)
+        );
+        CREATE INDEX idx_usage_day ON usage_daily(day);
+      `},{v:3,sql:`
+        CREATE TABLE rotations (
+          id INTEGER PRIMARY KEY AUTOINCREMENT,
+          agent_id TEXT NOT NULL,
+          channel TEXT NOT NULL,
+          chat_id TEXT NOT NULL,
+          reason TEXT NOT NULL,           -- 'stale' | 'tier-2' | 'max-turns'
+          last_turn_input_tokens INTEGER,
+          rotated_at TEXT NOT NULL
+        );
+        CREATE INDEX idx_rotations_agent_at
+          ON rotations(agent_id, rotated_at);
+      `},{v:4,sql:`
+        CREATE TABLE route_traces (
+          id INTEGER PRIMARY KEY AUTOINCREMENT,
+          channel TEXT NOT NULL,
+          chat_id TEXT NOT NULL,
+          msg_id TEXT NOT NULL,
+          account_id TEXT,
+          kind TEXT NOT NULL,             -- 'match' | 'drop'
+          deciding_stage TEXT,
+          agent_id TEXT,
+          reason TEXT,
+          at TEXT NOT NULL
+        );
+        CREATE INDEX idx_route_traces_channel_at
+          ON route_traces(channel, at);
+      `},{v:5,sql:`
+        ALTER TABLE usage_daily ADD COLUMN tier2_input_tokens        INTEGER DEFAULT 0;
+        ALTER TABLE usage_daily ADD COLUMN tier2_output_tokens       INTEGER DEFAULT 0;
+        ALTER TABLE usage_daily ADD COLUMN tier2_cache_read_tokens   INTEGER DEFAULT 0;
+        ALTER TABLE usage_daily ADD COLUMN tier2_cache_create_tokens INTEGER DEFAULT 0;
+      `},{v:6,sql:`
+        CREATE TABLE task_traces (
+          task_id TEXT PRIMARY KEY,
+          agent_id TEXT NOT NULL,
+          channel TEXT,
+          chat_id TEXT,
+          workflow_run_id TEXT,
+          workflow_id TEXT,
+          workflow_node_id TEXT,
+          intent_event_id TEXT,
+          intent_decided_by TEXT,
+          resume_session_id TEXT,
+          final_session_id TEXT,
+          model TEXT,
+          status TEXT NOT NULL,
+          started_at INTEGER NOT NULL,
+          finished_at INTEGER,
+          duration_ms INTEGER,
+          input_tokens INTEGER,
+          output_tokens INTEGER,
+          cache_read_tokens INTEGER,
+          cache_create_tokens INTEGER,
+          error TEXT,
+          message_preview TEXT
+        );
+        CREATE INDEX idx_traces_agent_started   ON task_traces(agent_id, started_at);
+        CREATE INDEX idx_traces_workflow_run    ON task_traces(workflow_run_id);
+        CREATE INDEX idx_traces_intent_event    ON task_traces(intent_event_id);
+        CREATE INDEX idx_traces_status_started  ON task_traces(status, started_at);
+      `},{v:7,sql:`
+        CREATE TABLE task_trace_steps (
+          task_id TEXT NOT NULL,
+          seq INTEGER NOT NULL,
+          name TEXT NOT NULL,
+          action TEXT,
+          status TEXT,
+          input_summary TEXT,
+          output_summary TEXT,
+          error TEXT,
+          ms INTEGER,
+          started_at INTEGER NOT NULL,
+          PRIMARY KEY (task_id, seq),
+          FOREIGN KEY (task_id) REFERENCES task_traces(task_id) ON DELETE CASCADE
+        );
+        CREATE INDEX idx_trace_steps_name ON task_trace_steps(name, started_at);
+      `},{v:8,sql:`
+        ALTER TABLE task_traces ADD COLUMN original_message TEXT;
+        ALTER TABLE task_traces ADD COLUMN final_response   TEXT;
+      `},{v:9,sql:`
+        CREATE TABLE task_queue (
+          id TEXT PRIMARY KEY,
+          conversation_id TEXT NOT NULL,
+          agent_id TEXT NOT NULL,
+          summary TEXT NOT NULL,
+          status TEXT NOT NULL DEFAULT 'queued',
+          position INTEGER,
+          created_at INTEGER NOT NULL,
+          started_at INTEGER,
+          finished_at INTEGER
+        );
+        CREATE INDEX idx_task_queue_status    ON task_queue(status, created_at);
+        CREATE INDEX idx_task_queue_convo     ON task_queue(conversation_id, created_at);
+      `},{v:10,sql:`
+        CREATE TABLE guardrail_decisions (
+          id TEXT PRIMARY KEY,
+          ts INTEGER NOT NULL,
+          agent_id TEXT,
+          task_id TEXT,
+          tool TEXT NOT NULL,
+          command TEXT,
+          resolved_target TEXT,
+          matched_rule TEXT,
+          verdict TEXT NOT NULL,
+          effective_action TEXT NOT NULL,
+          mode TEXT,
+          severity TEXT,
+          approver TEXT,
+          ms INTEGER
+        );
+        CREATE INDEX idx_guardrail_ts       ON guardrail_decisions(ts);
+        CREATE INDEX idx_guardrail_verdict  ON guardrail_decisions(verdict, ts);
+        CREATE INDEX idx_guardrail_agent    ON guardrail_decisions(agent_id, ts);
+      `},{v:11,sql:`
+        CREATE TABLE surface_usage (
+          kind TEXT NOT NULL,             -- 'cli' | 'page'
+          name TEXT NOT NULL,             -- 'guard log' | '/live'
+          day TEXT NOT NULL,              -- 'YYYY-MM-DD' UTC
+          count INTEGER NOT NULL DEFAULT 0,
+          last_at TEXT,
+          PRIMARY KEY (kind, name, day)
+        );
+        CREATE INDEX idx_surface_day ON surface_usage(day);
+      `}],n=t.transaction(s=>{t.exec(s.sql),t.prepare("INSERT INTO schema_version (v) VALUES (?)").run(s.v)});for(let s of e)s.v>a&&n(s)}function D(t,a,e){let n=Date.now(),r=t.prepare("SELECT COUNT(*) AS n FROM task_queue WHERE status = 'active'").get().n<e,i=null;return r||(i=t.prepare("SELECT COUNT(*) AS n FROM task_queue WHERE status = 'queued'").get().n+1),t.prepare(`
+    INSERT INTO task_queue (id, conversation_id, agent_id, summary, status, position, created_at, started_at)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+  `).run(a.id,a.conversationId,a.agentId,a.summary,r?"active":"queued",i,n,r?n:null),{id:a.id,status:r?"active":"queued",position:i}}function X(t,a,e="done"){let n=Date.now();t.prepare(`
+    UPDATE task_queue SET status = ?, finished_at = ?, position = NULL WHERE id = ?
+  `).run(e,n,a);let s=t.prepare(`
+    SELECT id FROM task_queue WHERE status = 'queued' ORDER BY created_at ASC LIMIT 1
+  `).get();if(s){t.prepare(`
+      UPDATE task_queue SET status = 'active', position = NULL, started_at = ? WHERE id = ?
+    `).run(n,s.id);let r=t.prepare(`
+      SELECT id FROM task_queue WHERE status = 'queued' ORDER BY created_at ASC
+    `).all(),i=t.prepare("UPDATE task_queue SET position = ? WHERE id = ?");for(let E=0;E<r.length;E++)i.run(E+1,r[E].id)}}function I(t,a){let e=t.prepare("SELECT * FROM task_queue WHERE id = ?").get(a);return e?{id:e.id,conversationId:e.conversation_id,agentId:e.agent_id,summary:e.summary,status:e.status,position:e.position,createdAt:e.created_at,startedAt:e.started_at,finishedAt:e.finished_at}:null}function k(t,a,e=20){return t.prepare(`
+    SELECT * FROM task_queue WHERE conversation_id = ?
+    ORDER BY created_at DESC LIMIT ?
+  `).all(a,e).map(s=>({id:s.id,conversationId:s.conversation_id,agentId:s.agent_id,summary:s.summary,status:s.status,position:s.position,createdAt:s.created_at,startedAt:s.started_at,finishedAt:s.finished_at}))}function v(t,a){let e=Date.now()-a*24*60*60*1e3,n=new Date(e).toISOString(),s=t.prepare("DELETE FROM task_history WHERE started_at < ?").run(n).changes??0,r=t.prepare("DELETE FROM rotations WHERE rotated_at < ?").run(n).changes??0,i=t.prepare("DELETE FROM route_traces WHERE at < ?").run(n).changes??0,E=t.prepare("DELETE FROM task_traces WHERE started_at < ?").run(e).changes??0;if(s+r+i+E>0)try{t.pragma("incremental_vacuum")}catch{}return{taskHistory:s,rotations:r,routeTraces:i,taskTraces:E}}export{O as a,D as b,X as c,I as d,k as e,v as f};
+//# sourceMappingURL=chunk-M4AMWP3H.js.map

package/dist/chunk-M4AMWP3H.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/storage/sqlite.ts"],"sourcesContent":["import type Database from \"better-sqlite3\"\nimport { createRequire } from \"module\"\nimport { existsSync, mkdirSync } from \"fs\"\nimport { dirname, resolve } from \"path\"\n\n// --- SQLite storage layer ---\n//\n// Move 2 of the architectural review (docs/architecture/hexabot-vs-agentx.md).\n// SQLite for the operational tables — task_history, usage, dedup, sessions —\n// where queryable, indexed access has user-visible value (dashboards,\n// retention, analytics). Workflow definitions, wiki, agent-memory, and\n// references stay as files: they're git-diffable, human-readable, and don't\n// need queries.\n//\n// Approach: subscribe to the event bus (src/events/bus.ts) and write to\n// SQLite from the subscribers. Existing JSON writes are not touched —\n// SQLite runs alongside as a parallel pipeline. Once we have a query API\n// the dashboard depends on, we can deprecate the JSON path. Until then,\n// SQLite is observability-grade only.\n//\n// Synchronous API: better-sqlite3 is sync, no callbacks. The daemon's\n// event loop is the single writer; multiple readers (dashboard) use WAL\n// mode for concurrent read while we write.\n\ntype DatabaseConstructor = typeof Database\n\nconst require = createRequire(import.meta.url)\nlet _db: Database.Database | undefined\nlet _Database: DatabaseConstructor | undefined\n\nfunction betterSqlite3Fix(error: any): string {\n  const msg = String(error?.message ?? error)\n  const abi = process.versions.modules\n  const node = process.version\n  const hint = `Run \"pnpm rebuild better-sqlite3\" with the same Node used by the daemon (${node}, modules ${abi}).`\n  if (/NODE_MODULE_VERSION|was compiled against|Module version mismatch|invalid ELF|mach-o/i.test(msg)) {\n    return `${msg} ${hint}`\n  }\n  return `${msg} ${hint}`\n}\n\nfunction loadDatabaseCtor(quiet = false): DatabaseConstructor | null {\n  if (_Database) return _Database\n  try {\n    _Database = require(\"better-sqlite3\") as DatabaseConstructor\n    return _Database\n  } catch (e: any) {\n    if (!quiet) {\n      console.error(`[storage/sqlite] better-sqlite3 native binding failed to load: ${betterSqlite3Fix(e)}`)\n    }\n    return null\n  }\n}\n\nexport interface OpenOptions {\n  /** Resolved relative to cwd. Default: .agentx/db.sqlite */\n  path?: string\n  /** When true, SQLite writes are skipped (used by tests + opt-out). */\n  disabled?: boolean\n  /** Suppress the open-failure log. For best-effort callers whose whole\n   *  contract is \"do nothing if unavailable\" — telemetry, mainly. Without\n   *  this, a native-binding ABI mismatch prints a paragraph of node-gyp\n   *  advice on EVERY CLI invocation, which is worse than the thing it\n   *  is warning about. Load-bearing callers must never pass it. */\n  quiet?: boolean\n}\n\n/**\n * Open the per-process SQLite database. Idempotent — repeated calls\n * return the same handle. The file is created on first open; the schema\n * is migrated forward to the latest version.\n *\n * Returns null when disabled — every subscriber should check for null\n * before issuing a write so the daemon stays runnable without SQLite if\n * someone's environment can't compile the native binding.\n */\nexport function openDb(opts: OpenOptions = {}): Database.Database | null {\n  if (opts.disabled) return null\n  if (_db) return _db\n  const path = resolve(process.cwd(), opts.path ?? \".agentx/db.sqlite\")\n  const Database = loadDatabaseCtor(opts.quiet)\n  if (!Database) return null\n  try {\n    mkdirSync(dirname(path), { recursive: true })\n    const db = new Database(path)\n    // WAL keeps readers (dashboard) unblocked while the daemon writes.\n    // Synchronous=NORMAL is the SQLite-recommended balance for WAL: the\n    // db is durable on power-loss, but a crash within the last few ms can\n    // lose the most recent commit. For our use (observability), that's fine.\n    db.pragma(\"journal_mode = WAL\")\n    db.pragma(\"synchronous = NORMAL\")\n    db.pragma(\"foreign_keys = ON\")\n    runMigrations(db)\n    _db = db\n    return _db\n  } catch (e: any) {\n    // Native binding missing, file unwritable, etc. Surface by default — the\n    // alternative was a silent no-op, which makes the \"SQLite not opened\"\n    // message in the daemon log impossible to debug. `quiet` callers have\n    // explicitly opted out because doing nothing is their correct behavior.\n    if (!opts.quiet) {\n      console.error(`[storage/sqlite] openDb failed at ${path}: ${betterSqlite3Fix(e)}`)\n    }\n    return null\n  }\n}\n\n/** Close the global handle. Test-only — production never closes. */\nexport function closeDb(): void {\n  if (_db) {\n    _db.close()\n    _db = undefined\n  }\n}\n\n/**\n * Per-version schema steps. New tables / columns go in a new migration —\n * never mutate an old one. Run on every open(); each step is idempotent\n * because it CREATE TABLE IF NOT EXISTS. SQLite has no concurrent\n * migration issue here (single writer process).\n */\nfunction runMigrations(db: Database.Database): void {\n  db.exec(`\n    CREATE TABLE IF NOT EXISTS schema_version (\n      v INTEGER PRIMARY KEY\n    );\n  `)\n  const current = (db\n    .prepare(\"SELECT MAX(v) AS v FROM schema_version\")\n    .get() as { v: number | null }).v ?? 0\n\n  const steps: Array<{ v: number; sql: string }> = [\n    {\n      v: 1,\n      sql: `\n        CREATE TABLE task_history (\n          id TEXT PRIMARY KEY,\n          agent_id TEXT NOT NULL,\n          channel TEXT,\n          chat_id TEXT,\n          status TEXT NOT NULL,           -- 'ok' | 'error' | 'timeout'\n          message_preview TEXT,\n          error TEXT,\n          duration_ms INTEGER,\n          input_tokens INTEGER,\n          output_tokens INTEGER,\n          cache_read_tokens INTEGER,\n          cache_create_tokens INTEGER,\n          started_at TEXT NOT NULL,\n          finished_at TEXT NOT NULL\n        );\n        CREATE INDEX idx_task_history_agent_started\n          ON task_history(agent_id, started_at);\n        CREATE INDEX idx_task_history_status\n          ON task_history(status, started_at);\n      `,\n    },\n    {\n      v: 2,\n      sql: `\n        CREATE TABLE usage_daily (\n          agent_id TEXT NOT NULL,\n          model TEXT NOT NULL,\n          day TEXT NOT NULL,                  -- 'YYYY-MM-DD' UTC\n          input_tokens INTEGER DEFAULT 0,\n          output_tokens INTEGER DEFAULT 0,\n          cache_read_tokens INTEGER DEFAULT 0,\n          cache_create_tokens INTEGER DEFAULT 0,\n          tasks INTEGER DEFAULT 0,\n          PRIMARY KEY (agent_id, model, day)\n        );\n        CREATE INDEX idx_usage_day ON usage_daily(day);\n      `,\n    },\n    {\n      v: 3,\n      sql: `\n        CREATE TABLE rotations (\n          id INTEGER PRIMARY KEY AUTOINCREMENT,\n          agent_id TEXT NOT NULL,\n          channel TEXT NOT NULL,\n          chat_id TEXT NOT NULL,\n          reason TEXT NOT NULL,           -- 'stale' | 'tier-2' | 'max-turns'\n          last_turn_input_tokens INTEGER,\n          rotated_at TEXT NOT NULL\n        );\n        CREATE INDEX idx_rotations_agent_at\n          ON rotations(agent_id, rotated_at);\n      `,\n    },\n    {\n      v: 4,\n      sql: `\n        CREATE TABLE route_traces (\n          id INTEGER PRIMARY KEY AUTOINCREMENT,\n          channel TEXT NOT NULL,\n          chat_id TEXT NOT NULL,\n          msg_id TEXT NOT NULL,\n          account_id TEXT,\n          kind TEXT NOT NULL,             -- 'match' | 'drop'\n          deciding_stage TEXT,\n          agent_id TEXT,\n          reason TEXT,\n          at TEXT NOT NULL\n        );\n        CREATE INDEX idx_route_traces_channel_at\n          ON route_traces(channel, at);\n      `,\n    },\n    {\n      // Move A — tier-2 token buckets on usage_daily. The per-request tier\n      // split is decided at record time by TokenTracker (it's a function of\n      // the live cumulative input, not the row totals), so we cannot\n      // reconstruct it on read. Adding columns is additive and idempotent;\n      // existing rows default to 0.\n      v: 5,\n      sql: `\n        ALTER TABLE usage_daily ADD COLUMN tier2_input_tokens        INTEGER DEFAULT 0;\n        ALTER TABLE usage_daily ADD COLUMN tier2_output_tokens       INTEGER DEFAULT 0;\n        ALTER TABLE usage_daily ADD COLUMN tier2_cache_read_tokens   INTEGER DEFAULT 0;\n        ALTER TABLE usage_daily ADD COLUMN tier2_cache_create_tokens INTEGER DEFAULT 0;\n      `,\n    },\n    {\n      // task_traces — per-execution observability surface (improvement plan\n      // #2). One row per executeTask invocation, keyed by a ULID task_id so\n      // it's URL-safe + monotonically sortable. Workflow context columns let\n      // pattern queries group runs by workflow (\"agent-managed workflow as\n      // the program\" framing); intent_event_id cross-links into the rescue\n      // plan's intent ledger so a dispatch decision joins to the execution\n      // it produced. Tokens snapshot the final usage at finish time.\n      v: 6,\n      sql: `\n        CREATE TABLE task_traces (\n          task_id TEXT PRIMARY KEY,\n          agent_id TEXT NOT NULL,\n          channel TEXT,\n          chat_id TEXT,\n          workflow_run_id TEXT,\n          workflow_id TEXT,\n          workflow_node_id TEXT,\n          intent_event_id TEXT,\n          intent_decided_by TEXT,\n          resume_session_id TEXT,\n          final_session_id TEXT,\n          model TEXT,\n          status TEXT NOT NULL,\n          started_at INTEGER NOT NULL,\n          finished_at INTEGER,\n          duration_ms INTEGER,\n          input_tokens INTEGER,\n          output_tokens INTEGER,\n          cache_read_tokens INTEGER,\n          cache_create_tokens INTEGER,\n          error TEXT,\n          message_preview TEXT\n        );\n        CREATE INDEX idx_traces_agent_started   ON task_traces(agent_id, started_at);\n        CREATE INDEX idx_traces_workflow_run    ON task_traces(workflow_run_id);\n        CREATE INDEX idx_traces_intent_event    ON task_traces(intent_event_id);\n        CREATE INDEX idx_traces_status_started  ON task_traces(status, started_at);\n      `,\n    },\n    {\n      // task_trace_steps — append-only step ledger inside one task. Sequence\n      // numbers are 0-based and unique per task_id; ON DELETE CASCADE so\n      // pruning task_traces removes children atomically. The (input|output)_\n      // summary columns are TEXT — callers cap byte-size at the call site,\n      // not in the schema, because the right cap depends on the step kind\n      // (a tool_use's args vs a tool_result's stdout have very different\n      // typical sizes).\n      v: 7,\n      sql: `\n        CREATE TABLE task_trace_steps (\n          task_id TEXT NOT NULL,\n          seq INTEGER NOT NULL,\n          name TEXT NOT NULL,\n          action TEXT,\n          status TEXT,\n          input_summary TEXT,\n          output_summary TEXT,\n          error TEXT,\n          ms INTEGER,\n          started_at INTEGER NOT NULL,\n          PRIMARY KEY (task_id, seq),\n          FOREIGN KEY (task_id) REFERENCES task_traces(task_id) ON DELETE CASCADE\n        );\n        CREATE INDEX idx_trace_steps_name ON task_trace_steps(name, started_at);\n      `,\n    },\n    {\n      // task replay support (handoff item #11). Capture the full original\n      // user message AND the agent's final response so 'agentx trace replay\n      // <taskId> --diff' can show side-by-side without reconstructing from\n      // the step ledger. message_preview stays for cheap listing UX (200\n      // chars); original_message holds the untruncated input. final_response\n      // mirrors the agent's reply text. Both NULLABLE — old rows have NULL\n      // and the replay command falls back to the preview gracefully.\n      v: 8,\n      sql: `\n        ALTER TABLE task_traces ADD COLUMN original_message TEXT;\n        ALTER TABLE task_traces ADD COLUMN final_response   TEXT;\n      `,\n    },\n    {\n      // task_queue — persistent chat-initiated work queue (Phase 2).\n      // Each row represents a task an agent queued during a /chat turn.\n      // status: 'active' = currently running; 'queued' = waiting;\n      //         'done' = completed; 'error' = failed.\n      // position is 1-based rank among queued rows (null when active/done/error).\n      v: 9,\n      sql: `\n        CREATE TABLE task_queue (\n          id TEXT PRIMARY KEY,\n          conversation_id TEXT NOT NULL,\n          agent_id TEXT NOT NULL,\n          summary TEXT NOT NULL,\n          status TEXT NOT NULL DEFAULT 'queued',\n          position INTEGER,\n          created_at INTEGER NOT NULL,\n          started_at INTEGER,\n          finished_at INTEGER\n        );\n        CREATE INDEX idx_task_queue_status    ON task_queue(status, created_at);\n        CREATE INDEX idx_task_queue_convo     ON task_queue(conversation_id, created_at);\n      `,\n    },\n    {\n      // guardrail_decisions — audit trail for the destructive-action guard\n      // (PRD R7). One row per PreToolUse guard verdict, written by the\n      // short-lived `agentx guard check` hook process. `verdict` is the\n      // policy's decision (allow|deny|escalate|warn); `effective_action` is\n      // what was actually enforced after the mode downgrade (in warn mode a\n      // deny is recorded as verdict=deny, effective_action=allow). task_id is\n      // a logical link to task_traces when the guard can resolve it (often\n      // null — the hook doesn't always know the AgentX task id). `approver`\n      // is reserved for Phase 2 escalation (human who approved/denied).\n      v: 10,\n      sql: `\n        CREATE TABLE guardrail_decisions (\n          id TEXT PRIMARY KEY,\n          ts INTEGER NOT NULL,\n          agent_id TEXT,\n          task_id TEXT,\n          tool TEXT NOT NULL,\n          command TEXT,\n          resolved_target TEXT,\n          matched_rule TEXT,\n          verdict TEXT NOT NULL,\n          effective_action TEXT NOT NULL,\n          mode TEXT,\n          severity TEXT,\n          approver TEXT,\n          ms INTEGER\n        );\n        CREATE INDEX idx_guardrail_ts       ON guardrail_decisions(ts);\n        CREATE INDEX idx_guardrail_verdict  ON guardrail_decisions(verdict, ts);\n        CREATE INDEX idx_guardrail_agent    ON guardrail_decisions(agent_id, ts);\n      `,\n    },\n    {\n      // Which operator surfaces actually get used. task_history records agent\n      // dispatches and says nothing about which of the ~46 CLI commands or 16\n      // dashboard pages anyone opens — the two biggest surfaces by count, and\n      // the ones the surface-reduction work needs evidence for.\n      //\n      // Deliberately NOT folded into usage_daily: that table is keyed by\n      // (agent_id, model, day) and is about token cost. Surface counts share\n      // none of that shape, and mixing them would corrupt cost reporting.\n      //\n      // Names only — never arguments, paths, or payloads. This counts which\n      // door was opened, not what was carried through it.\n      v: 11,\n      sql: `\n        CREATE TABLE surface_usage (\n          kind TEXT NOT NULL,             -- 'cli' | 'page'\n          name TEXT NOT NULL,             -- 'guard log' | '/live'\n          day TEXT NOT NULL,              -- 'YYYY-MM-DD' UTC\n          count INTEGER NOT NULL DEFAULT 0,\n          last_at TEXT,\n          PRIMARY KEY (kind, name, day)\n        );\n        CREATE INDEX idx_surface_day ON surface_usage(day);\n      `,\n    },\n  ]\n\n  const txn = db.transaction((step: { v: number; sql: string }) => {\n    db.exec(step.sql)\n    db.prepare(\"INSERT INTO schema_version (v) VALUES (?)\").run(step.v)\n  })\n\n  for (const step of steps) {\n    if (step.v > current) txn(step)\n  }\n}\n\n/** Schema version check for tests. */\nexport function getSchemaVersion(db: Database.Database): number {\n  return (db.prepare(\"SELECT MAX(v) AS v FROM schema_version\").get() as { v: number | null }).v ?? 0\n}\n\n// --- task_queue helpers (Phase 2 chat-initiated work queue) ---\n\nexport interface TaskQueueEntry {\n  id: string\n  conversationId: string\n  agentId: string\n  summary: string\n  status: \"active\" | \"queued\" | \"done\" | \"error\"\n  position: number | null\n  createdAt: number\n  startedAt: number | null\n  finishedAt: number | null\n}\n\nexport interface InsertTaskQueueResult {\n  id: string\n  status: \"active\" | \"queued\"\n  position: number | null\n}\n\n/**\n * Insert a new task into the queue. Respects maxConcurrent — if the number\n * of 'active' rows is below the limit the new task is inserted as 'active';\n * otherwise it is 'queued' with a 1-based position.\n */\nexport function insertTaskQueue(\n  db: Database.Database,\n  entry: { id: string; conversationId: string; agentId: string; summary: string },\n  maxConcurrent: number,\n): InsertTaskQueueResult {\n  const now = Date.now()\n  const activeCount = (db\n    .prepare(\"SELECT COUNT(*) AS n FROM task_queue WHERE status = 'active'\")\n    .get() as { n: number }).n\n\n  const isActive = activeCount < maxConcurrent\n  let position: number | null = null\n  if (!isActive) {\n    const queuedCount = (db\n      .prepare(\"SELECT COUNT(*) AS n FROM task_queue WHERE status = 'queued'\")\n      .get() as { n: number }).n\n    position = queuedCount + 1\n  }\n\n  db.prepare(`\n    INSERT INTO task_queue (id, conversation_id, agent_id, summary, status, position, created_at, started_at)\n    VALUES (?, ?, ?, ?, ?, ?, ?, ?)\n  `).run(\n    entry.id,\n    entry.conversationId,\n    entry.agentId,\n    entry.summary,\n    isActive ? \"active\" : \"queued\",\n    position,\n    now,\n    isActive ? now : null,\n  )\n\n  return { id: entry.id, status: isActive ? \"active\" : \"queued\", position }\n}\n\n/**\n * Mark a task done/error and promote the next queued task (if any) to active.\n */\nexport function completeTaskQueue(\n  db: Database.Database,\n  id: string,\n  status: \"done\" | \"error\" = \"done\",\n): void {\n  const now = Date.now()\n  db.prepare(`\n    UPDATE task_queue SET status = ?, finished_at = ?, position = NULL WHERE id = ?\n  `).run(status, now, id)\n\n  // Promote oldest queued task to active\n  const next = db.prepare(`\n    SELECT id FROM task_queue WHERE status = 'queued' ORDER BY created_at ASC LIMIT 1\n  `).get() as { id: string } | undefined\n  if (next) {\n    db.prepare(`\n      UPDATE task_queue SET status = 'active', position = NULL, started_at = ? WHERE id = ?\n    `).run(now, next.id)\n    // Resequence remaining queued positions\n    const remaining = db.prepare(`\n      SELECT id FROM task_queue WHERE status = 'queued' ORDER BY created_at ASC\n    `).all() as Array<{ id: string }>\n    const upd = db.prepare(\"UPDATE task_queue SET position = ? WHERE id = ?\")\n    for (let i = 0; i < remaining.length; i++) {\n      upd.run(i + 1, remaining[i].id)\n    }\n  }\n}\n\n/** Look up a single task_queue row. */\nexport function getTaskQueue(\n  db: Database.Database,\n  id: string,\n): TaskQueueEntry | null {\n  const row = db.prepare(\"SELECT * FROM task_queue WHERE id = ?\").get(id) as Record<string, unknown> | undefined\n  if (!row) return null\n  return {\n    id: row.id as string,\n    conversationId: row.conversation_id as string,\n    agentId: row.agent_id as string,\n    summary: row.summary as string,\n    status: row.status as TaskQueueEntry[\"status\"],\n    position: row.position as number | null,\n    createdAt: row.created_at as number,\n    startedAt: row.started_at as number | null,\n    finishedAt: row.finished_at as number | null,\n  }\n}\n\n/** List task_queue rows for a conversation, newest first. */\nexport function listTaskQueueByConversation(\n  db: Database.Database,\n  conversationId: string,\n  limit = 20,\n): TaskQueueEntry[] {\n  const rows = db.prepare(`\n    SELECT * FROM task_queue WHERE conversation_id = ?\n    ORDER BY created_at DESC LIMIT ?\n  `).all(conversationId, limit) as Array<Record<string, unknown>>\n  return rows.map((row) => ({\n    id: row.id as string,\n    conversationId: row.conversation_id as string,\n    agentId: row.agent_id as string,\n    summary: row.summary as string,\n    status: row.status as TaskQueueEntry[\"status\"],\n    position: row.position as number | null,\n    createdAt: row.created_at as number,\n    startedAt: row.started_at as number | null,\n    finishedAt: row.finished_at as number | null,\n  }))\n}\n\nexport interface PruneResult {\n  taskHistory: number\n  rotations: number\n  routeTraces: number\n  taskTraces: number\n}\n\n/**\n * Drop rows older than `retentionDays` from the operational tables that grow\n * unbounded over time. `usage_daily` is bounded by (agent, model, day) and\n * doesn't need pruning; the caller decides whether to keep aggregates beyond\n * the retention window.\n *\n * Mirrors the file-based `pruneTaskHistory` sweep that runs at daemon\n * startup. Cheap — three indexed deletes plus an incremental_vacuum.\n */\nexport function pruneSqliteTables(\n  db: Database.Database,\n  retentionDays: number,\n): PruneResult {\n  const cutoffMs = Date.now() - retentionDays * 24 * 60 * 60 * 1000\n  const cutoffIso = new Date(cutoffMs).toISOString()\n\n  const taskHistory = (db\n    .prepare(`DELETE FROM task_history WHERE started_at < ?`)\n    .run(cutoffIso).changes ?? 0) as number\n  const rotations = (db\n    .prepare(`DELETE FROM rotations WHERE rotated_at < ?`)\n    .run(cutoffIso).changes ?? 0) as number\n  const routeTraces = (db\n    .prepare(`DELETE FROM route_traces WHERE at < ?`)\n    .run(cutoffIso).changes ?? 0) as number\n  // task_traces uses ms-epoch INTEGERs (not ISO strings) on started_at.\n  // task_trace_steps cascades automatically via ON DELETE CASCADE.\n  const taskTraces = (db\n    .prepare(`DELETE FROM task_traces WHERE started_at < ?`)\n    .run(cutoffMs).changes ?? 0) as number\n\n  // Reclaim the freelist pages so the file shrinks. WAL writes still\n  // checkpoint independently.\n  if (taskHistory + rotations + routeTraces + taskTraces > 0) {\n    try { db.pragma(\"incremental_vacuum\") } catch { /* best-effort */ }\n  }\n\n  return { taskHistory, rotations, routeTraces, taskTraces }\n}\n"],"mappings":"AACA,OAAS,iBAAAA,MAAqB,SAC9B,OAAqB,aAAAC,MAAiB,KACtC,OAAS,WAAAC,EAAS,WAAAC,MAAe,OAuBjC,IAAMC,EAAUJ,EAAc,YAAY,GAAG,EACzCK,EACAC,EAEJ,SAASC,EAAiBC,EAAoB,CAC5C,IAAMC,EAAM,OAAOD,GAAO,SAAWA,CAAK,EACpCE,EAAM,QAAQ,SAAS,QAEvBC,EAAO,4EADA,QAAQ,oBACqFD,MAC1G,MAAI,uFAAuF,KAAKD,CAAG,EAC1F,GAAGA,KAAOE,IAEZ,GAAGF,KAAOE,GACnB,CAEA,SAASC,EAAiBC,EAAQ,GAAmC,CACnE,GAAIP,EAAW,OAAOA,EACtB,GAAI,CACF,OAAAA,EAAYF,EAAQ,gBAAgB,EAC7BE,CACT,OAASQ,EAAP,CACA,OAAKD,GACH,QAAQ,MAAM,kEAAkEN,EAAiBO,CAAC,GAAG,EAEhG,IACT,CACF,CAwBO,SAASC,EAAOC,EAAoB,CAAC,EAA6B,CACvE,GAAIA,EAAK,SAAU,OAAO,KAC1B,GAAIX,EAAK,OAAOA,EAChB,IAAMY,EAAOd,EAAQ,QAAQ,IAAI,EAAGa,EAAK,MAAQ,mBAAmB,EAC9DE,EAAWN,EAAiBI,EAAK,KAAK,EAC5C,GAAI,CAACE,EAAU,OAAO,KACtB,GAAI,CACFjB,EAAUC,EAAQe,CAAI,EAAG,CAAE,UAAW,EAAK,CAAC,EAC5C,IAAME,EAAK,IAAID,EAASD,CAAI,EAK5B,OAAAE,EAAG,OAAO,oBAAoB,EAC9BA,EAAG,OAAO,sBAAsB,EAChCA,EAAG,OAAO,mBAAmB,EAC7BC,EAAcD,CAAE,EAChBd,EAAMc,EACCd,CACT,OAASS,EAAP,CAKA,OAAKE,EAAK,OACR,QAAQ,MAAM,qCAAqCC,MAASV,EAAiBO,CAAC,GAAG,EAE5E,IACT,CACF,CAgBA,SAASO,EAAcC,EAA6B,CAClDA,EAAG,KAAK;AAAA;AAAA;AAAA;AAAA,GAIP,EACD,IAAMC,EAAWD,EACd,QAAQ,wCAAwC,EAChD,IAAI,EAA2B,GAAK,EAEjCE,EAA2C,CAC/C,CACE,EAAG,EACH,IAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAsBP,EACA,CACE,EAAG,EACH,IAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAcP,EACA,CACE,EAAG,EACH,IAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAaP,EACA,CACE,EAAG,EACH,IAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAgBP,EACA,CAME,EAAG,EACH,IAAK;AAAA;AAAA;AAAA;AAAA;AAAA,OAMP,EACA,CAQE,EAAG,EACH,IAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OA8BP,EACA,CAQE,EAAG,EACH,IAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAiBP,EACA,CAQE,EAAG,EACH,IAAK;AAAA;AAAA;AAAA,OAIP,EACA,CAME,EAAG,EACH,IAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAeP,EACA,CAUE,EAAG,GACH,IAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAqBP,EACA,CAYE,EAAG,GACH,IAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAWP,CACF,EAEMC,EAAMH,EAAG,YAAaI,GAAqC,CAC/DJ,EAAG,KAAKI,EAAK,GAAG,EAChBJ,EAAG,QAAQ,2CAA2C,EAAE,IAAII,EAAK,CAAC,CACpE,CAAC,EAED,QAAWA,KAAQF,EACbE,EAAK,EAAIH,GAASE,EAAIC,CAAI,CAElC,CAgCO,SAASC,EACdC,EACAC,EACAC,EACuB,CACvB,IAAMC,EAAM,KAAK,IAAI,EAKfC,EAJeJ,EAClB,QAAQ,8DAA8D,EACtE,IAAI,EAAoB,EAEIE,EAC3BG,EAA0B,KAC9B,OAAKD,IAIHC,EAHqBL,EAClB,QAAQ,8DAA8D,EACtE,IAAI,EAAoB,EACF,GAG3BA,EAAG,QAAQ;AAAA;AAAA;AAAA,GAGV,EAAE,IACDC,EAAM,GACNA,EAAM,eACNA,EAAM,QACNA,EAAM,QACNG,EAAW,SAAW,SACtBC,EACAF,EACAC,EAAWD,EAAM,IACnB,EAEO,CAAE,GAAIF,EAAM,GAAI,OAAQG,EAAW,SAAW,SAAU,SAAAC,CAAS,CAC1E,CAKO,SAASC,EACdN,EACAO,EACAC,EAA2B,OACrB,CACN,IAAML,EAAM,KAAK,IAAI,EACrBH,EAAG,QAAQ;AAAA;AAAA,GAEV,EAAE,IAAIQ,EAAQL,EAAKI,CAAE,EAGtB,IAAME,EAAOT,EAAG,QAAQ;AAAA;AAAA,GAEvB,EAAE,IAAI,EACP,GAAIS,EAAM,CACRT,EAAG,QAAQ;AAAA;AAAA,KAEV,EAAE,IAAIG,EAAKM,EAAK,EAAE,EAEnB,IAAMC,EAAYV,EAAG,QAAQ;AAAA;AAAA,KAE5B,EAAE,IAAI,EACDW,EAAMX,EAAG,QAAQ,iDAAiD,EACxE,QAASY,EAAI,EAAGA,EAAIF,EAAU,OAAQE,IACpCD,EAAI,IAAIC,EAAI,EAAGF,EAAUE,CAAC,EAAE,EAAE,EAGpC,CAGO,SAASC,EACdb,EACAO,EACuB,CACvB,IAAMO,EAAMd,EAAG,QAAQ,uCAAuC,EAAE,IAAIO,CAAE,EACtE,OAAKO,EACE,CACL,GAAIA,EAAI,GACR,eAAgBA,EAAI,gBACpB,QAASA,EAAI,SACb,QAASA,EAAI,QACb,OAAQA,EAAI,OACZ,SAAUA,EAAI,SACd,UAAWA,EAAI,WACf,UAAWA,EAAI,WACf,WAAYA,EAAI,WAClB,EAXiB,IAYnB,CAGO,SAASC,EACdf,EACAgB,EACAC,EAAQ,GACU,CAKlB,OAJajB,EAAG,QAAQ;AAAA;AAAA;AAAA,GAGvB,EAAE,IAAIgB,EAAgBC,CAAK,EAChB,IAAKH,IAAS,CACxB,GAAIA,EAAI,GACR,eAAgBA,EAAI,gBACpB,QAASA,EAAI,SACb,QAASA,EAAI,QACb,OAAQA,EAAI,OACZ,SAAUA,EAAI,SACd,UAAWA,EAAI,WACf,UAAWA,EAAI,WACf,WAAYA,EAAI,WAClB,EAAE,CACJ,CAkBO,SAASI,EACdlB,EACAmB,EACa,CACb,IAAMC,EAAW,KAAK,IAAI,EAAID,EAAgB,GAAK,GAAK,GAAK,IACvDE,EAAY,IAAI,KAAKD,CAAQ,EAAE,YAAY,EAE3CE,EAAetB,EAClB,QAAQ,+CAA+C,EACvD,IAAIqB,CAAS,EAAE,SAAW,EACvBE,EAAavB,EAChB,QAAQ,4CAA4C,EACpD,IAAIqB,CAAS,EAAE,SAAW,EACvBG,EAAexB,EAClB,QAAQ,uCAAuC,EAC/C,IAAIqB,CAAS,EAAE,SAAW,EAGvBI,EAAczB,EACjB,QAAQ,8CAA8C,EACtD,IAAIoB,CAAQ,EAAE,SAAW,EAI5B,GAAIE,EAAcC,EAAYC,EAAcC,EAAa,EACvD,GAAI,CAAEzB,EAAG,OAAO,oBAAoB,CAAE,MAAE,CAA0B,CAGpE,MAAO,CAAE,YAAAsB,EAAa,UAAAC,EAAW,YAAAC,EAAa,WAAAC,CAAW,CAC3D","names":["createRequire","mkdirSync","dirname","resolve","require","_db","_Database","betterSqlite3Fix","error","msg","abi","hint","loadDatabaseCtor","quiet","e","openDb","opts","path","Database","db","runMigrations","runMigrations","db","current","steps","txn","step","insertTaskQueue","db","entry","maxConcurrent","now","isActive","position","completeTaskQueue","id","status","next","remaining","upd","i","getTaskQueue","row","listTaskQueueByConversation","conversationId","limit","pruneSqliteTables","retentionDays","cutoffMs","cutoffIso","taskHistory","rotations","routeTraces","taskTraces"]}