apex-code 0.0.1-alpha.8 → 0.0.4

package/dist/core/defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/core/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAO,MAAM,sBAAsB,EAAE,aAAwB,CAAC","sourcesContent":["import type { ThinkingLevel } from \"apex-code-agent-core\";\n\nexport const DEFAULT_THINKING_LEVEL: ThinkingLevel = \"medium\";\n"]}
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/core/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAO,MAAM,sBAAsB,EAAE,aAAwB,CAAC;AAC9D,eAAO,MAAM,sBAAsB,EAAE,SAAS,aAAa,EAQ1D,CAAC","sourcesContent":["import type { ThinkingLevel } from \"apex-code-agent-core\";\n\nexport const DEFAULT_THINKING_LEVEL: ThinkingLevel = \"medium\";\nexport const THINKING_LEVEL_OPTIONS: readonly ThinkingLevel[] = [\n\t\"off\",\n\t\"minimal\",\n\t\"low\",\n\t\"medium\",\n\t\"high\",\n\t\"xhigh\",\n\t\"max\",\n];\n"]}

package/dist/core/defaults.js

@@ -1,2 +1,11 @@
 export const DEFAULT_THINKING_LEVEL = "medium";
+export const THINKING_LEVEL_OPTIONS = [
+    "off",
+    "minimal",
+    "low",
+    "medium",
+    "high",
+    "xhigh",
+    "max",
+];
 //# sourceMappingURL=defaults.js.map

package/dist/core/defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/core/defaults.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAkB,QAAQ,CAAC","sourcesContent":["import type { ThinkingLevel } from \"apex-code-agent-core\";\n\nexport const DEFAULT_THINKING_LEVEL: ThinkingLevel = \"medium\";\n"]}
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/core/defaults.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAkB,QAAQ,CAAC;AAC9D,MAAM,CAAC,MAAM,sBAAsB,GAA6B;IAC/D,KAAK;IACL,SAAS;IACT,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,KAAK;CACL,CAAC","sourcesContent":["import type { ThinkingLevel } from \"apex-code-agent-core\";\n\nexport const DEFAULT_THINKING_LEVEL: ThinkingLevel = \"medium\";\nexport const THINKING_LEVEL_OPTIONS: readonly ThinkingLevel[] = [\n\t\"off\",\n\t\"minimal\",\n\t\"low\",\n\t\"medium\",\n\t\"high\",\n\t\"xhigh\",\n\t\"max\",\n];\n"]}

package/dist/core/delegation/runtime.d.ts

@@ -5,14 +5,15 @@
  * agent whose authority can never exceed its parent's.
  *
  * Agent definitions and child-session construction are both injected rather than
- * built in here: agent discovery is a test fixture in this task and becomes real
- * markdown/frontmatter discovery in task 5.5 (`core/delegation/agents.ts`, not yet
- * written); child-session construction is injected so this module stays free of
+ * built in here: production agent discovery lives in `core/delegation/agents.ts`
+ * (markdown + frontmatter, parsed on lookup) and plugs in through the same
+ * resolver interface a test fixture implements; child-session construction is
+ * injected so this module stays free of
  * `AgentSession`/`createAgentSession` and therefore free of the import cycle that
  * would create (`sdk.ts` already imports `agent-session.ts`).
  */
 import type { Capability } from "../tools/contract.ts";
-/** A delegatable agent's static configuration. Markdown + frontmatter in production (task 5.5); a plain object in tests until then. */
+/** A delegatable agent's static configuration. Markdown + frontmatter in production (`agents.ts`); a plain object in tests. */
 export interface AgentDefinition {
     name: string;
     description: string;
@@ -22,7 +23,7 @@ export interface AgentDefinition {
     model?: string;
     systemPrompt: string;
 }
-/** Resolve an agent type to its definition, or `undefined` if unknown. A plain function fixture in this task; real markdown/frontmatter discovery (task 5.5) is just a different implementation of the same shape. */
+/** Resolve an agent type to its definition, or `undefined` if unknown. Production implements this over markdown/frontmatter (`agents.ts`); tests inject plain functions with the same shape. */
 export type AgentDefinitionResolver = (agentType: string) => AgentDefinition | undefined;
 /** A running or completed child, as far as the runtime needs to know. */
 export interface ChildSessionHandle {

package/dist/core/delegation/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGvD,uIAAuI;AACvI,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,6KAA6K;IAC7K,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8FAA8F;IAC9F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,sNAAsN;AACtN,MAAM,MAAM,uBAAuB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,eAAe,GAAG,SAAS,CAAC;AAEzF,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IAClC,2EAA2E;IAC3E,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,kFAAkF;IAClF,OAAO,IAAI,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,eAAe,CAAC;IAC5B,yGAAyG;IACzG,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,oJAAoJ;IACpJ,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACxC,YAAY,EAAE,uBAAuB,CAAC;IACtC,4IAA4I;IAC5I,qBAAqB,EAAE,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;IACrD,0GAA0G;IAC1G,mBAAmB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,WAAW,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;IAC/E,uHAAuH;IACvH,kBAAkB,EAAE,MAAM,MAAM,CAAC;IACjC,sLAAsL;IACtL,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sFAAsF;IACtF,mBAAmB,CAAC,EAAE,MAAM,MAAM,CAAC;IACnC,iBAAiB,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtF;AAED,MAAM,WAAW,gBAAgB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAoBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,aAAa,CAClC,OAAO,EAAE,wBAAwB,EACjC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC,OAAO,CAAC,gBAAgB,CAAC,CA8D3B;AAED,uGAAuG;AACvG,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,wBAAwB,EACjC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAS3B","sourcesContent":["/**\n * The delegation runtime (roadmap Phase 5, ADR 0008, task 5.2). Consumes the\n * capability ceiling (ceiling.ts) and a derived permission store\n * (`../permissions/store.ts`'s `DerivedPermissionRuleStore`) to run a real child\n * agent whose authority can never exceed its parent's.\n *\n * Agent definitions and child-session construction are both injected rather than\n * built in here: agent discovery is a test fixture in this task and becomes real\n * markdown/frontmatter discovery in task 5.5 (`core/delegation/agents.ts`, not yet\n * written); child-session construction is injected so this module stays free of\n * `AgentSession`/`createAgentSession` and therefore free of the import cycle that\n * would create (`sdk.ts` already imports `agent-session.ts`).\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport type { Capability } from \"../tools/contract.ts\";\nimport { computeCapabilityCeiling } from \"./ceiling.ts\";\n\n/** A delegatable agent's static configuration. Markdown + frontmatter in production (task 5.5); a plain object in tests until then. */\nexport interface AgentDefinition {\n\tname: string;\n\tdescription: string;\n\t/** Tool names this agent may use. Never trusted directly -- the runtime derives the actual child tool list from the computed capability set, not from this list verbatim. */\n\ttools: string[];\n\t/** Optional model id. Falls back to the parent's current model when unset or unresolvable. */\n\tmodel?: string;\n\tsystemPrompt: string;\n}\n\n/** Resolve an agent type to its definition, or `undefined` if unknown. A plain function fixture in this task; real markdown/frontmatter discovery (task 5.5) is just a different implementation of the same shape. */\nexport type AgentDefinitionResolver = (agentType: string) => AgentDefinition | undefined;\n\n/** A running or completed child, as far as the runtime needs to know. */\nexport interface ChildSessionHandle {\n\t/** Run the task to completion and return the child's final output text. */\n\trun(task: string): Promise<{ output: string }>;\n\t/** Release the child's resources. Always called, including after a failed run. */\n\tdispose(): void;\n}\n\nexport interface BuildChildSessionRequest {\n\tagentType: string;\n\tdefinition: AgentDefinition;\n\t/** The child's tool allowlist, already ceiling-checked -- exactly `definition.tools`, never narrowed. */\n\ttoolNames: string[];\n\t/** The child's own recursion depth (the parent's depth + 1), for the runtime constructing it to record on the child's session header (task 5.3). */\n\tdepth: number;\n\t/** Stable id used for the child session and its artifact directory. */\n\tsessionId: string;\n\t/** Per-child artifact root, created before the child session is constructed. */\n\tartifactDir?: string;\n}\n\nexport interface DelegationRuntimeOptions {\n\tresolveAgent: AgentDefinitionResolver;\n\t/** The parent's own effective capability set (its authority), unexpanded -- `exec` expansion happens inside the ceiling check, not here. */\n\tgetParentCapabilities: () => ReadonlySet<Capability>;\n\t/** Capability set a named tool requires, from the live registry. `undefined` for an unknown tool name. */\n\tgetToolCapabilities: (toolName: string) => ReadonlySet<Capability> | undefined;\n\t/** The parent session's own recursion depth (`SessionManager.getDelegationDepth()`), read fresh at delegation time. */\n\tgetDelegationDepth: () => number;\n\t/** Delegation is refused once `getDelegationDepth() >= maxDelegationDepth` -- assigned by the runtime, not by the tool, so the bound applies to any future delegation entry point. */\n\tmaxDelegationDepth: number;\n\t/** Parent session directory. When supplied, child artifacts are rooted beneath it. */\n\tgetParentSessionDir?: () => string;\n\tbuildChildSession: (request: BuildChildSessionRequest) => Promise<ChildSessionHandle>;\n}\n\nexport interface DelegationResult {\n\tagentType: string;\n\ttask: string;\n\toutput: string;\n\t/** Present for background work; pass this handle to retrieveDelegationResult. */\n\thandleId?: string;\n}\n\ninterface BackgroundDelegation {\n\tagentType: string;\n\tpromise: Promise<DelegationResult>;\n}\n\n// Results deliberately stay available for the lifetime of their parent runtime.\n// Phase 5 promises in-process retrieval only; restart durability belongs to Phase 6.\nconst backgroundByRuntime = new WeakMap<object, Map<string, BackgroundDelegation>>();\n\nfunction background(options: DelegationRuntimeOptions): Map<string, BackgroundDelegation> {\n\tlet value = backgroundByRuntime.get(options);\n\tif (!value) {\n\t\tvalue = new Map();\n\t\tbackgroundByRuntime.set(options, value);\n\t}\n\treturn value;\n}\n\n/**\n * Run one delegation to completion. Throws rather than returning a failure value,\n * matching this codebase's convention for model-facing routine failures (e.g.\n * `tool_schema`'s unknown-tool case, `web_search`'s unconfigured-backend case): a\n * thrown `Error` here is caught by the agent loop and surfaces as a normal,\n * model-readable `isError` tool result, not a fatal turn failure.\n *\n * The capability check is all-or-nothing by design (ceiling.ts): a definition\n * requesting a tool the parent's own capabilities cannot cover refuses the whole\n * delegation, naming the capability, rather than silently building a child missing\n * that one tool. `buildChildSession` is therefore never called for a refused\n * delegation -- there is no code path that produces a child holding a capability\n * outside the ceiling.\n *\n * The depth check (task 5.3) runs right after agent-type resolution and before the\n * capability check, so recursion is bounded regardless of what is being delegated --\n * a refusal at the bound still names the agent type, but never reaches the ceiling\n * or `buildChildSession`. `buildChildSession` receives the child's depth (parent + 1)\n * so the caller can record it on the child's own session header.\n */\nexport async function runDelegation(\n\toptions: DelegationRuntimeOptions,\n\tagentType: string,\n\ttask: string,\n\trequest: { background?: boolean } = {},\n): Promise<DelegationResult> {\n\tconst definition = options.resolveAgent(agentType);\n\tif (!definition) {\n\t\tthrow new Error(`Unknown agent type \"${agentType}\".`);\n\t}\n\n\tconst depth = options.getDelegationDepth();\n\tif (depth >= options.maxDelegationDepth) {\n\t\tthrow new Error(\n\t\t\t`Delegation depth limit (${options.maxDelegationDepth}) reached at depth ${depth}; cannot delegate to agent \"${agentType}\" further.`,\n\t\t);\n\t}\n\n\tconst requestedCapabilities = new Set<Capability>();\n\tfor (const toolName of definition.tools) {\n\t\tconst capabilities = options.getToolCapabilities(toolName);\n\t\tif (!capabilities) {\n\t\t\tthrow new Error(`Agent \"${agentType}\" requests unknown tool \"${toolName}\".`);\n\t\t}\n\t\tfor (const capability of capabilities) requestedCapabilities.add(capability);\n\t}\n\n\tconst ceiling = computeCapabilityCeiling(options.getParentCapabilities(), requestedCapabilities);\n\tif (!ceiling.allowed) {\n\t\tthrow new Error(\n\t\t\t`Delegating to agent \"${agentType}\" requires capability \"${ceiling.deniedCapability}\", which exceeds the parent's authority.`,\n\t\t);\n\t}\n\n\tconst sessionId = randomUUID();\n\tlet artifactDir: string | undefined;\n\tconst parentSessionDir = options.getParentSessionDir?.();\n\tif (parentSessionDir) {\n\t\tconst parentRoot = resolve(parentSessionDir);\n\t\tartifactDir = join(parentRoot, \"delegations\", sessionId);\n\t\tmkdirSync(artifactDir, { recursive: true });\n\t}\n\tconst child = await options.buildChildSession({\n\t\tagentType,\n\t\tdefinition,\n\t\ttoolNames: definition.tools,\n\t\tdepth: depth + 1,\n\t\tsessionId,\n\t\tartifactDir,\n\t});\n\tconst execute = async (): Promise<DelegationResult> => {\n\t\ttry {\n\t\t\tconst { output } = await child.run(task);\n\t\t\treturn { agentType, task, output };\n\t\t} finally {\n\t\t\tchild.dispose();\n\t\t}\n\t};\n\tif (!request.background) return execute();\n\tconst handleId = sessionId;\n\tconst promise = execute();\n\t// Retrieval owns propagation of a child failure; mark the background promise\n\t// observed now so a child that fails before retrieval does not become an\n\t// unhandled rejection.\n\tvoid promise.catch(() => {});\n\tbackground(options).set(handleId, { agentType, promise });\n\treturn { agentType, task, output: `Delegation started. Retrieve result with handle \"${handleId}\".`, handleId };\n}\n\n/** Retrieve a background delegation. Running children are awaited; unknown handles fail explicitly. */\nexport async function retrieveDelegationResult(\n\toptions: DelegationRuntimeOptions,\n\thandleId: string,\n\texpectedAgentType?: string,\n): Promise<DelegationResult> {\n\tconst entry = background(options).get(handleId);\n\tif (!entry) throw new Error(`Unknown delegation handle \"${handleId}\".`);\n\tif (expectedAgentType !== undefined && entry.agentType !== expectedAgentType) {\n\t\tthrow new Error(\n\t\t\t`Delegation handle \"${handleId}\" belongs to agent \"${entry.agentType}\", not \"${expectedAgentType}\".`,\n\t\t);\n\t}\n\treturn entry.promise;\n}\n"]}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGvD,+HAA+H;AAC/H,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,6KAA6K;IAC7K,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8FAA8F;IAC9F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,gMAAgM;AAChM,MAAM,MAAM,uBAAuB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,eAAe,GAAG,SAAS,CAAC;AAEzF,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IAClC,2EAA2E;IAC3E,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,kFAAkF;IAClF,OAAO,IAAI,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,eAAe,CAAC;IAC5B,yGAAyG;IACzG,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,oJAAoJ;IACpJ,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACxC,YAAY,EAAE,uBAAuB,CAAC;IACtC,4IAA4I;IAC5I,qBAAqB,EAAE,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;IACrD,0GAA0G;IAC1G,mBAAmB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,WAAW,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;IAC/E,uHAAuH;IACvH,kBAAkB,EAAE,MAAM,MAAM,CAAC;IACjC,sLAAsL;IACtL,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sFAAsF;IACtF,mBAAmB,CAAC,EAAE,MAAM,MAAM,CAAC;IACnC,iBAAiB,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtF;AAED,MAAM,WAAW,gBAAgB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAoBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,aAAa,CAClC,OAAO,EAAE,wBAAwB,EACjC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC,OAAO,CAAC,gBAAgB,CAAC,CA8D3B;AAED,uGAAuG;AACvG,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,wBAAwB,EACjC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAS3B","sourcesContent":["/**\n * The delegation runtime (roadmap Phase 5, ADR 0008, task 5.2). Consumes the\n * capability ceiling (ceiling.ts) and a derived permission store\n * (`../permissions/store.ts`'s `DerivedPermissionRuleStore`) to run a real child\n * agent whose authority can never exceed its parent's.\n *\n * Agent definitions and child-session construction are both injected rather than\n * built in here: production agent discovery lives in `core/delegation/agents.ts`\n * (markdown + frontmatter, parsed on lookup) and plugs in through the same\n * resolver interface a test fixture implements; child-session construction is\n * injected so this module stays free of\n * `AgentSession`/`createAgentSession` and therefore free of the import cycle that\n * would create (`sdk.ts` already imports `agent-session.ts`).\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport type { Capability } from \"../tools/contract.ts\";\nimport { computeCapabilityCeiling } from \"./ceiling.ts\";\n\n/** A delegatable agent's static configuration. Markdown + frontmatter in production (`agents.ts`); a plain object in tests. */\nexport interface AgentDefinition {\n\tname: string;\n\tdescription: string;\n\t/** Tool names this agent may use. Never trusted directly -- the runtime derives the actual child tool list from the computed capability set, not from this list verbatim. */\n\ttools: string[];\n\t/** Optional model id. Falls back to the parent's current model when unset or unresolvable. */\n\tmodel?: string;\n\tsystemPrompt: string;\n}\n\n/** Resolve an agent type to its definition, or `undefined` if unknown. Production implements this over markdown/frontmatter (`agents.ts`); tests inject plain functions with the same shape. */\nexport type AgentDefinitionResolver = (agentType: string) => AgentDefinition | undefined;\n\n/** A running or completed child, as far as the runtime needs to know. */\nexport interface ChildSessionHandle {\n\t/** Run the task to completion and return the child's final output text. */\n\trun(task: string): Promise<{ output: string }>;\n\t/** Release the child's resources. Always called, including after a failed run. */\n\tdispose(): void;\n}\n\nexport interface BuildChildSessionRequest {\n\tagentType: string;\n\tdefinition: AgentDefinition;\n\t/** The child's tool allowlist, already ceiling-checked -- exactly `definition.tools`, never narrowed. */\n\ttoolNames: string[];\n\t/** The child's own recursion depth (the parent's depth + 1), for the runtime constructing it to record on the child's session header (task 5.3). */\n\tdepth: number;\n\t/** Stable id used for the child session and its artifact directory. */\n\tsessionId: string;\n\t/** Per-child artifact root, created before the child session is constructed. */\n\tartifactDir?: string;\n}\n\nexport interface DelegationRuntimeOptions {\n\tresolveAgent: AgentDefinitionResolver;\n\t/** The parent's own effective capability set (its authority), unexpanded -- `exec` expansion happens inside the ceiling check, not here. */\n\tgetParentCapabilities: () => ReadonlySet<Capability>;\n\t/** Capability set a named tool requires, from the live registry. `undefined` for an unknown tool name. */\n\tgetToolCapabilities: (toolName: string) => ReadonlySet<Capability> | undefined;\n\t/** The parent session's own recursion depth (`SessionManager.getDelegationDepth()`), read fresh at delegation time. */\n\tgetDelegationDepth: () => number;\n\t/** Delegation is refused once `getDelegationDepth() >= maxDelegationDepth` -- assigned by the runtime, not by the tool, so the bound applies to any future delegation entry point. */\n\tmaxDelegationDepth: number;\n\t/** Parent session directory. When supplied, child artifacts are rooted beneath it. */\n\tgetParentSessionDir?: () => string;\n\tbuildChildSession: (request: BuildChildSessionRequest) => Promise<ChildSessionHandle>;\n}\n\nexport interface DelegationResult {\n\tagentType: string;\n\ttask: string;\n\toutput: string;\n\t/** Present for background work; pass this handle to retrieveDelegationResult. */\n\thandleId?: string;\n}\n\ninterface BackgroundDelegation {\n\tagentType: string;\n\tpromise: Promise<DelegationResult>;\n}\n\n// Results deliberately stay available for the lifetime of their parent runtime.\n// Phase 5 promises in-process retrieval only; restart durability belongs to Phase 6.\nconst backgroundByRuntime = new WeakMap<object, Map<string, BackgroundDelegation>>();\n\nfunction background(options: DelegationRuntimeOptions): Map<string, BackgroundDelegation> {\n\tlet value = backgroundByRuntime.get(options);\n\tif (!value) {\n\t\tvalue = new Map();\n\t\tbackgroundByRuntime.set(options, value);\n\t}\n\treturn value;\n}\n\n/**\n * Run one delegation to completion. Throws rather than returning a failure value,\n * matching this codebase's convention for model-facing routine failures (e.g.\n * `tool_schema`'s unknown-tool case, `web_search`'s unconfigured-backend case): a\n * thrown `Error` here is caught by the agent loop and surfaces as a normal,\n * model-readable `isError` tool result, not a fatal turn failure.\n *\n * The capability check is all-or-nothing by design (ceiling.ts): a definition\n * requesting a tool the parent's own capabilities cannot cover refuses the whole\n * delegation, naming the capability, rather than silently building a child missing\n * that one tool. `buildChildSession` is therefore never called for a refused\n * delegation -- there is no code path that produces a child holding a capability\n * outside the ceiling.\n *\n * The depth check (task 5.3) runs right after agent-type resolution and before the\n * capability check, so recursion is bounded regardless of what is being delegated --\n * a refusal at the bound still names the agent type, but never reaches the ceiling\n * or `buildChildSession`. `buildChildSession` receives the child's depth (parent + 1)\n * so the caller can record it on the child's own session header.\n */\nexport async function runDelegation(\n\toptions: DelegationRuntimeOptions,\n\tagentType: string,\n\ttask: string,\n\trequest: { background?: boolean } = {},\n): Promise<DelegationResult> {\n\tconst definition = options.resolveAgent(agentType);\n\tif (!definition) {\n\t\tthrow new Error(`Unknown agent type \"${agentType}\".`);\n\t}\n\n\tconst depth = options.getDelegationDepth();\n\tif (depth >= options.maxDelegationDepth) {\n\t\tthrow new Error(\n\t\t\t`Delegation depth limit (${options.maxDelegationDepth}) reached at depth ${depth}; cannot delegate to agent \"${agentType}\" further.`,\n\t\t);\n\t}\n\n\tconst requestedCapabilities = new Set<Capability>();\n\tfor (const toolName of definition.tools) {\n\t\tconst capabilities = options.getToolCapabilities(toolName);\n\t\tif (!capabilities) {\n\t\t\tthrow new Error(`Agent \"${agentType}\" requests unknown tool \"${toolName}\".`);\n\t\t}\n\t\tfor (const capability of capabilities) requestedCapabilities.add(capability);\n\t}\n\n\tconst ceiling = computeCapabilityCeiling(options.getParentCapabilities(), requestedCapabilities);\n\tif (!ceiling.allowed) {\n\t\tthrow new Error(\n\t\t\t`Delegating to agent \"${agentType}\" requires capability \"${ceiling.deniedCapability}\", which exceeds the parent's authority.`,\n\t\t);\n\t}\n\n\tconst sessionId = randomUUID();\n\tlet artifactDir: string | undefined;\n\tconst parentSessionDir = options.getParentSessionDir?.();\n\tif (parentSessionDir) {\n\t\tconst parentRoot = resolve(parentSessionDir);\n\t\tartifactDir = join(parentRoot, \"delegations\", sessionId);\n\t\tmkdirSync(artifactDir, { recursive: true });\n\t}\n\tconst child = await options.buildChildSession({\n\t\tagentType,\n\t\tdefinition,\n\t\ttoolNames: definition.tools,\n\t\tdepth: depth + 1,\n\t\tsessionId,\n\t\tartifactDir,\n\t});\n\tconst execute = async (): Promise<DelegationResult> => {\n\t\ttry {\n\t\t\tconst { output } = await child.run(task);\n\t\t\treturn { agentType, task, output };\n\t\t} finally {\n\t\t\tchild.dispose();\n\t\t}\n\t};\n\tif (!request.background) return execute();\n\tconst handleId = sessionId;\n\tconst promise = execute();\n\t// Retrieval owns propagation of a child failure; mark the background promise\n\t// observed now so a child that fails before retrieval does not become an\n\t// unhandled rejection.\n\tvoid promise.catch(() => {});\n\tbackground(options).set(handleId, { agentType, promise });\n\treturn { agentType, task, output: `Delegation started. Retrieve result with handle \"${handleId}\".`, handleId };\n}\n\n/** Retrieve a background delegation. Running children are awaited; unknown handles fail explicitly. */\nexport async function retrieveDelegationResult(\n\toptions: DelegationRuntimeOptions,\n\thandleId: string,\n\texpectedAgentType?: string,\n): Promise<DelegationResult> {\n\tconst entry = background(options).get(handleId);\n\tif (!entry) throw new Error(`Unknown delegation handle \"${handleId}\".`);\n\tif (expectedAgentType !== undefined && entry.agentType !== expectedAgentType) {\n\t\tthrow new Error(\n\t\t\t`Delegation handle \"${handleId}\" belongs to agent \"${entry.agentType}\", not \"${expectedAgentType}\".`,\n\t\t);\n\t}\n\treturn entry.promise;\n}\n"]}

package/dist/core/delegation/runtime.js

@@ -5,9 +5,10 @@
  * agent whose authority can never exceed its parent's.
  *
  * Agent definitions and child-session construction are both injected rather than
- * built in here: agent discovery is a test fixture in this task and becomes real
- * markdown/frontmatter discovery in task 5.5 (`core/delegation/agents.ts`, not yet
- * written); child-session construction is injected so this module stays free of
+ * built in here: production agent discovery lives in `core/delegation/agents.ts`
+ * (markdown + frontmatter, parsed on lookup) and plugs in through the same
+ * resolver interface a test fixture implements; child-session construction is
+ * injected so this module stays free of
  * `AgentSession`/`createAgentSession` and therefore free of the import cycle that
  * would create (`sdk.ts` already imports `agent-session.ts`).
  */

package/dist/core/delegation/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/core/delegation/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAiExD,gFAAgF;AAChF,qFAAqF;AACrF,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAA6C,CAAC;AAErF,SAAS,UAAU,CAAC,OAAiC,EAAqC;IACzF,IAAI,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QAClB,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,OAAiC,EACjC,SAAiB,EACjB,IAAY,EACZ,OAAO,GAA6B,EAAE,EACV;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAC3C,IAAI,KAAK,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACd,2BAA2B,OAAO,CAAC,kBAAkB,sBAAsB,KAAK,+BAA+B,SAAS,YAAY,CACpI,CAAC;IACH,CAAC;IAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAc,CAAC;IACpD,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,4BAA4B,QAAQ,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,YAAY;YAAE,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACjG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACd,wBAAwB,SAAS,0BAA0B,OAAO,CAAC,gBAAgB,0CAA0C,CAC7H,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,IAAI,WAA+B,CAAC;IACpC,MAAM,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;IACzD,IAAI,gBAAgB,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC7C,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QACzD,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;QAC7C,SAAS;QACT,UAAU;QACV,SAAS,EAAE,UAAU,CAAC,KAAK;QAC3B,KAAK,EAAE,KAAK,GAAG,CAAC;QAChB,SAAS;QACT,WAAW;KACX,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,KAAK,IAA+B,EAAE,CAAC;QACtD,IAAI,CAAC;YACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACpC,CAAC;gBAAS,CAAC;YACV,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IAAA,CACD,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,OAAO,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;IAC1B,6EAA6E;IAC7E,yEAAyE;IACzE,uBAAuB;IACvB,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IAC7B,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,oDAAoD,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;AAAA,CAC/G;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,OAAiC,EACjC,QAAgB,EAChB,iBAA0B,EACE;IAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,IAAI,CAAC,CAAC;IACxE,IAAI,iBAAiB,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CACd,sBAAsB,QAAQ,uBAAuB,KAAK,CAAC,SAAS,WAAW,iBAAiB,IAAI,CACpG,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC;AAAA,CACrB","sourcesContent":["/**\n * The delegation runtime (roadmap Phase 5, ADR 0008, task 5.2). Consumes the\n * capability ceiling (ceiling.ts) and a derived permission store\n * (`../permissions/store.ts`'s `DerivedPermissionRuleStore`) to run a real child\n * agent whose authority can never exceed its parent's.\n *\n * Agent definitions and child-session construction are both injected rather than\n * built in here: agent discovery is a test fixture in this task and becomes real\n * markdown/frontmatter discovery in task 5.5 (`core/delegation/agents.ts`, not yet\n * written); child-session construction is injected so this module stays free of\n * `AgentSession`/`createAgentSession` and therefore free of the import cycle that\n * would create (`sdk.ts` already imports `agent-session.ts`).\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport type { Capability } from \"../tools/contract.ts\";\nimport { computeCapabilityCeiling } from \"./ceiling.ts\";\n\n/** A delegatable agent's static configuration. Markdown + frontmatter in production (task 5.5); a plain object in tests until then. */\nexport interface AgentDefinition {\n\tname: string;\n\tdescription: string;\n\t/** Tool names this agent may use. Never trusted directly -- the runtime derives the actual child tool list from the computed capability set, not from this list verbatim. */\n\ttools: string[];\n\t/** Optional model id. Falls back to the parent's current model when unset or unresolvable. */\n\tmodel?: string;\n\tsystemPrompt: string;\n}\n\n/** Resolve an agent type to its definition, or `undefined` if unknown. A plain function fixture in this task; real markdown/frontmatter discovery (task 5.5) is just a different implementation of the same shape. */\nexport type AgentDefinitionResolver = (agentType: string) => AgentDefinition | undefined;\n\n/** A running or completed child, as far as the runtime needs to know. */\nexport interface ChildSessionHandle {\n\t/** Run the task to completion and return the child's final output text. */\n\trun(task: string): Promise<{ output: string }>;\n\t/** Release the child's resources. Always called, including after a failed run. */\n\tdispose(): void;\n}\n\nexport interface BuildChildSessionRequest {\n\tagentType: string;\n\tdefinition: AgentDefinition;\n\t/** The child's tool allowlist, already ceiling-checked -- exactly `definition.tools`, never narrowed. */\n\ttoolNames: string[];\n\t/** The child's own recursion depth (the parent's depth + 1), for the runtime constructing it to record on the child's session header (task 5.3). */\n\tdepth: number;\n\t/** Stable id used for the child session and its artifact directory. */\n\tsessionId: string;\n\t/** Per-child artifact root, created before the child session is constructed. */\n\tartifactDir?: string;\n}\n\nexport interface DelegationRuntimeOptions {\n\tresolveAgent: AgentDefinitionResolver;\n\t/** The parent's own effective capability set (its authority), unexpanded -- `exec` expansion happens inside the ceiling check, not here. */\n\tgetParentCapabilities: () => ReadonlySet<Capability>;\n\t/** Capability set a named tool requires, from the live registry. `undefined` for an unknown tool name. */\n\tgetToolCapabilities: (toolName: string) => ReadonlySet<Capability> | undefined;\n\t/** The parent session's own recursion depth (`SessionManager.getDelegationDepth()`), read fresh at delegation time. */\n\tgetDelegationDepth: () => number;\n\t/** Delegation is refused once `getDelegationDepth() >= maxDelegationDepth` -- assigned by the runtime, not by the tool, so the bound applies to any future delegation entry point. */\n\tmaxDelegationDepth: number;\n\t/** Parent session directory. When supplied, child artifacts are rooted beneath it. */\n\tgetParentSessionDir?: () => string;\n\tbuildChildSession: (request: BuildChildSessionRequest) => Promise<ChildSessionHandle>;\n}\n\nexport interface DelegationResult {\n\tagentType: string;\n\ttask: string;\n\toutput: string;\n\t/** Present for background work; pass this handle to retrieveDelegationResult. */\n\thandleId?: string;\n}\n\ninterface BackgroundDelegation {\n\tagentType: string;\n\tpromise: Promise<DelegationResult>;\n}\n\n// Results deliberately stay available for the lifetime of their parent runtime.\n// Phase 5 promises in-process retrieval only; restart durability belongs to Phase 6.\nconst backgroundByRuntime = new WeakMap<object, Map<string, BackgroundDelegation>>();\n\nfunction background(options: DelegationRuntimeOptions): Map<string, BackgroundDelegation> {\n\tlet value = backgroundByRuntime.get(options);\n\tif (!value) {\n\t\tvalue = new Map();\n\t\tbackgroundByRuntime.set(options, value);\n\t}\n\treturn value;\n}\n\n/**\n * Run one delegation to completion. Throws rather than returning a failure value,\n * matching this codebase's convention for model-facing routine failures (e.g.\n * `tool_schema`'s unknown-tool case, `web_search`'s unconfigured-backend case): a\n * thrown `Error` here is caught by the agent loop and surfaces as a normal,\n * model-readable `isError` tool result, not a fatal turn failure.\n *\n * The capability check is all-or-nothing by design (ceiling.ts): a definition\n * requesting a tool the parent's own capabilities cannot cover refuses the whole\n * delegation, naming the capability, rather than silently building a child missing\n * that one tool. `buildChildSession` is therefore never called for a refused\n * delegation -- there is no code path that produces a child holding a capability\n * outside the ceiling.\n *\n * The depth check (task 5.3) runs right after agent-type resolution and before the\n * capability check, so recursion is bounded regardless of what is being delegated --\n * a refusal at the bound still names the agent type, but never reaches the ceiling\n * or `buildChildSession`. `buildChildSession` receives the child's depth (parent + 1)\n * so the caller can record it on the child's own session header.\n */\nexport async function runDelegation(\n\toptions: DelegationRuntimeOptions,\n\tagentType: string,\n\ttask: string,\n\trequest: { background?: boolean } = {},\n): Promise<DelegationResult> {\n\tconst definition = options.resolveAgent(agentType);\n\tif (!definition) {\n\t\tthrow new Error(`Unknown agent type \"${agentType}\".`);\n\t}\n\n\tconst depth = options.getDelegationDepth();\n\tif (depth >= options.maxDelegationDepth) {\n\t\tthrow new Error(\n\t\t\t`Delegation depth limit (${options.maxDelegationDepth}) reached at depth ${depth}; cannot delegate to agent \"${agentType}\" further.`,\n\t\t);\n\t}\n\n\tconst requestedCapabilities = new Set<Capability>();\n\tfor (const toolName of definition.tools) {\n\t\tconst capabilities = options.getToolCapabilities(toolName);\n\t\tif (!capabilities) {\n\t\t\tthrow new Error(`Agent \"${agentType}\" requests unknown tool \"${toolName}\".`);\n\t\t}\n\t\tfor (const capability of capabilities) requestedCapabilities.add(capability);\n\t}\n\n\tconst ceiling = computeCapabilityCeiling(options.getParentCapabilities(), requestedCapabilities);\n\tif (!ceiling.allowed) {\n\t\tthrow new Error(\n\t\t\t`Delegating to agent \"${agentType}\" requires capability \"${ceiling.deniedCapability}\", which exceeds the parent's authority.`,\n\t\t);\n\t}\n\n\tconst sessionId = randomUUID();\n\tlet artifactDir: string | undefined;\n\tconst parentSessionDir = options.getParentSessionDir?.();\n\tif (parentSessionDir) {\n\t\tconst parentRoot = resolve(parentSessionDir);\n\t\tartifactDir = join(parentRoot, \"delegations\", sessionId);\n\t\tmkdirSync(artifactDir, { recursive: true });\n\t}\n\tconst child = await options.buildChildSession({\n\t\tagentType,\n\t\tdefinition,\n\t\ttoolNames: definition.tools,\n\t\tdepth: depth + 1,\n\t\tsessionId,\n\t\tartifactDir,\n\t});\n\tconst execute = async (): Promise<DelegationResult> => {\n\t\ttry {\n\t\t\tconst { output } = await child.run(task);\n\t\t\treturn { agentType, task, output };\n\t\t} finally {\n\t\t\tchild.dispose();\n\t\t}\n\t};\n\tif (!request.background) return execute();\n\tconst handleId = sessionId;\n\tconst promise = execute();\n\t// Retrieval owns propagation of a child failure; mark the background promise\n\t// observed now so a child that fails before retrieval does not become an\n\t// unhandled rejection.\n\tvoid promise.catch(() => {});\n\tbackground(options).set(handleId, { agentType, promise });\n\treturn { agentType, task, output: `Delegation started. Retrieve result with handle \"${handleId}\".`, handleId };\n}\n\n/** Retrieve a background delegation. Running children are awaited; unknown handles fail explicitly. */\nexport async function retrieveDelegationResult(\n\toptions: DelegationRuntimeOptions,\n\thandleId: string,\n\texpectedAgentType?: string,\n): Promise<DelegationResult> {\n\tconst entry = background(options).get(handleId);\n\tif (!entry) throw new Error(`Unknown delegation handle \"${handleId}\".`);\n\tif (expectedAgentType !== undefined && entry.agentType !== expectedAgentType) {\n\t\tthrow new Error(\n\t\t\t`Delegation handle \"${handleId}\" belongs to agent \"${entry.agentType}\", not \"${expectedAgentType}\".`,\n\t\t);\n\t}\n\treturn entry.promise;\n}\n"]}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/core/delegation/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAiExD,gFAAgF;AAChF,qFAAqF;AACrF,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAA6C,CAAC;AAErF,SAAS,UAAU,CAAC,OAAiC,EAAqC;IACzF,IAAI,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QAClB,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,OAAiC,EACjC,SAAiB,EACjB,IAAY,EACZ,OAAO,GAA6B,EAAE,EACV;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAC3C,IAAI,KAAK,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACd,2BAA2B,OAAO,CAAC,kBAAkB,sBAAsB,KAAK,+BAA+B,SAAS,YAAY,CACpI,CAAC;IACH,CAAC;IAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAc,CAAC;IACpD,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,4BAA4B,QAAQ,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,YAAY;YAAE,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACjG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACd,wBAAwB,SAAS,0BAA0B,OAAO,CAAC,gBAAgB,0CAA0C,CAC7H,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,IAAI,WAA+B,CAAC;IACpC,MAAM,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;IACzD,IAAI,gBAAgB,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC7C,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QACzD,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;QAC7C,SAAS;QACT,UAAU;QACV,SAAS,EAAE,UAAU,CAAC,KAAK;QAC3B,KAAK,EAAE,KAAK,GAAG,CAAC;QAChB,SAAS;QACT,WAAW;KACX,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,KAAK,IAA+B,EAAE,CAAC;QACtD,IAAI,CAAC;YACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACpC,CAAC;gBAAS,CAAC;YACV,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IAAA,CACD,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,OAAO,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;IAC1B,6EAA6E;IAC7E,yEAAyE;IACzE,uBAAuB;IACvB,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IAC7B,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,oDAAoD,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;AAAA,CAC/G;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,OAAiC,EACjC,QAAgB,EAChB,iBAA0B,EACE;IAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,IAAI,CAAC,CAAC;IACxE,IAAI,iBAAiB,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CACd,sBAAsB,QAAQ,uBAAuB,KAAK,CAAC,SAAS,WAAW,iBAAiB,IAAI,CACpG,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC;AAAA,CACrB","sourcesContent":["/**\n * The delegation runtime (roadmap Phase 5, ADR 0008, task 5.2). Consumes the\n * capability ceiling (ceiling.ts) and a derived permission store\n * (`../permissions/store.ts`'s `DerivedPermissionRuleStore`) to run a real child\n * agent whose authority can never exceed its parent's.\n *\n * Agent definitions and child-session construction are both injected rather than\n * built in here: production agent discovery lives in `core/delegation/agents.ts`\n * (markdown + frontmatter, parsed on lookup) and plugs in through the same\n * resolver interface a test fixture implements; child-session construction is\n * injected so this module stays free of\n * `AgentSession`/`createAgentSession` and therefore free of the import cycle that\n * would create (`sdk.ts` already imports `agent-session.ts`).\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport type { Capability } from \"../tools/contract.ts\";\nimport { computeCapabilityCeiling } from \"./ceiling.ts\";\n\n/** A delegatable agent's static configuration. Markdown + frontmatter in production (`agents.ts`); a plain object in tests. */\nexport interface AgentDefinition {\n\tname: string;\n\tdescription: string;\n\t/** Tool names this agent may use. Never trusted directly -- the runtime derives the actual child tool list from the computed capability set, not from this list verbatim. */\n\ttools: string[];\n\t/** Optional model id. Falls back to the parent's current model when unset or unresolvable. */\n\tmodel?: string;\n\tsystemPrompt: string;\n}\n\n/** Resolve an agent type to its definition, or `undefined` if unknown. Production implements this over markdown/frontmatter (`agents.ts`); tests inject plain functions with the same shape. */\nexport type AgentDefinitionResolver = (agentType: string) => AgentDefinition | undefined;\n\n/** A running or completed child, as far as the runtime needs to know. */\nexport interface ChildSessionHandle {\n\t/** Run the task to completion and return the child's final output text. */\n\trun(task: string): Promise<{ output: string }>;\n\t/** Release the child's resources. Always called, including after a failed run. */\n\tdispose(): void;\n}\n\nexport interface BuildChildSessionRequest {\n\tagentType: string;\n\tdefinition: AgentDefinition;\n\t/** The child's tool allowlist, already ceiling-checked -- exactly `definition.tools`, never narrowed. */\n\ttoolNames: string[];\n\t/** The child's own recursion depth (the parent's depth + 1), for the runtime constructing it to record on the child's session header (task 5.3). */\n\tdepth: number;\n\t/** Stable id used for the child session and its artifact directory. */\n\tsessionId: string;\n\t/** Per-child artifact root, created before the child session is constructed. */\n\tartifactDir?: string;\n}\n\nexport interface DelegationRuntimeOptions {\n\tresolveAgent: AgentDefinitionResolver;\n\t/** The parent's own effective capability set (its authority), unexpanded -- `exec` expansion happens inside the ceiling check, not here. */\n\tgetParentCapabilities: () => ReadonlySet<Capability>;\n\t/** Capability set a named tool requires, from the live registry. `undefined` for an unknown tool name. */\n\tgetToolCapabilities: (toolName: string) => ReadonlySet<Capability> | undefined;\n\t/** The parent session's own recursion depth (`SessionManager.getDelegationDepth()`), read fresh at delegation time. */\n\tgetDelegationDepth: () => number;\n\t/** Delegation is refused once `getDelegationDepth() >= maxDelegationDepth` -- assigned by the runtime, not by the tool, so the bound applies to any future delegation entry point. */\n\tmaxDelegationDepth: number;\n\t/** Parent session directory. When supplied, child artifacts are rooted beneath it. */\n\tgetParentSessionDir?: () => string;\n\tbuildChildSession: (request: BuildChildSessionRequest) => Promise<ChildSessionHandle>;\n}\n\nexport interface DelegationResult {\n\tagentType: string;\n\ttask: string;\n\toutput: string;\n\t/** Present for background work; pass this handle to retrieveDelegationResult. */\n\thandleId?: string;\n}\n\ninterface BackgroundDelegation {\n\tagentType: string;\n\tpromise: Promise<DelegationResult>;\n}\n\n// Results deliberately stay available for the lifetime of their parent runtime.\n// Phase 5 promises in-process retrieval only; restart durability belongs to Phase 6.\nconst backgroundByRuntime = new WeakMap<object, Map<string, BackgroundDelegation>>();\n\nfunction background(options: DelegationRuntimeOptions): Map<string, BackgroundDelegation> {\n\tlet value = backgroundByRuntime.get(options);\n\tif (!value) {\n\t\tvalue = new Map();\n\t\tbackgroundByRuntime.set(options, value);\n\t}\n\treturn value;\n}\n\n/**\n * Run one delegation to completion. Throws rather than returning a failure value,\n * matching this codebase's convention for model-facing routine failures (e.g.\n * `tool_schema`'s unknown-tool case, `web_search`'s unconfigured-backend case): a\n * thrown `Error` here is caught by the agent loop and surfaces as a normal,\n * model-readable `isError` tool result, not a fatal turn failure.\n *\n * The capability check is all-or-nothing by design (ceiling.ts): a definition\n * requesting a tool the parent's own capabilities cannot cover refuses the whole\n * delegation, naming the capability, rather than silently building a child missing\n * that one tool. `buildChildSession` is therefore never called for a refused\n * delegation -- there is no code path that produces a child holding a capability\n * outside the ceiling.\n *\n * The depth check (task 5.3) runs right after agent-type resolution and before the\n * capability check, so recursion is bounded regardless of what is being delegated --\n * a refusal at the bound still names the agent type, but never reaches the ceiling\n * or `buildChildSession`. `buildChildSession` receives the child's depth (parent + 1)\n * so the caller can record it on the child's own session header.\n */\nexport async function runDelegation(\n\toptions: DelegationRuntimeOptions,\n\tagentType: string,\n\ttask: string,\n\trequest: { background?: boolean } = {},\n): Promise<DelegationResult> {\n\tconst definition = options.resolveAgent(agentType);\n\tif (!definition) {\n\t\tthrow new Error(`Unknown agent type \"${agentType}\".`);\n\t}\n\n\tconst depth = options.getDelegationDepth();\n\tif (depth >= options.maxDelegationDepth) {\n\t\tthrow new Error(\n\t\t\t`Delegation depth limit (${options.maxDelegationDepth}) reached at depth ${depth}; cannot delegate to agent \"${agentType}\" further.`,\n\t\t);\n\t}\n\n\tconst requestedCapabilities = new Set<Capability>();\n\tfor (const toolName of definition.tools) {\n\t\tconst capabilities = options.getToolCapabilities(toolName);\n\t\tif (!capabilities) {\n\t\t\tthrow new Error(`Agent \"${agentType}\" requests unknown tool \"${toolName}\".`);\n\t\t}\n\t\tfor (const capability of capabilities) requestedCapabilities.add(capability);\n\t}\n\n\tconst ceiling = computeCapabilityCeiling(options.getParentCapabilities(), requestedCapabilities);\n\tif (!ceiling.allowed) {\n\t\tthrow new Error(\n\t\t\t`Delegating to agent \"${agentType}\" requires capability \"${ceiling.deniedCapability}\", which exceeds the parent's authority.`,\n\t\t);\n\t}\n\n\tconst sessionId = randomUUID();\n\tlet artifactDir: string | undefined;\n\tconst parentSessionDir = options.getParentSessionDir?.();\n\tif (parentSessionDir) {\n\t\tconst parentRoot = resolve(parentSessionDir);\n\t\tartifactDir = join(parentRoot, \"delegations\", sessionId);\n\t\tmkdirSync(artifactDir, { recursive: true });\n\t}\n\tconst child = await options.buildChildSession({\n\t\tagentType,\n\t\tdefinition,\n\t\ttoolNames: definition.tools,\n\t\tdepth: depth + 1,\n\t\tsessionId,\n\t\tartifactDir,\n\t});\n\tconst execute = async (): Promise<DelegationResult> => {\n\t\ttry {\n\t\t\tconst { output } = await child.run(task);\n\t\t\treturn { agentType, task, output };\n\t\t} finally {\n\t\t\tchild.dispose();\n\t\t}\n\t};\n\tif (!request.background) return execute();\n\tconst handleId = sessionId;\n\tconst promise = execute();\n\t// Retrieval owns propagation of a child failure; mark the background promise\n\t// observed now so a child that fails before retrieval does not become an\n\t// unhandled rejection.\n\tvoid promise.catch(() => {});\n\tbackground(options).set(handleId, { agentType, promise });\n\treturn { agentType, task, output: `Delegation started. Retrieve result with handle \"${handleId}\".`, handleId };\n}\n\n/** Retrieve a background delegation. Running children are awaited; unknown handles fail explicitly. */\nexport async function retrieveDelegationResult(\n\toptions: DelegationRuntimeOptions,\n\thandleId: string,\n\texpectedAgentType?: string,\n): Promise<DelegationResult> {\n\tconst entry = background(options).get(handleId);\n\tif (!entry) throw new Error(`Unknown delegation handle \"${handleId}\".`);\n\tif (expectedAgentType !== undefined && entry.agentType !== expectedAgentType) {\n\t\tthrow new Error(\n\t\t\t`Delegation handle \"${handleId}\" belongs to agent \"${entry.agentType}\", not \"${expectedAgentType}\".`,\n\t\t);\n\t}\n\treturn entry.promise;\n}\n"]}

package/dist/core/durable-state/sqlite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../../src/core/durable-state/sqlite.ts"],"names":[],"mappings":"AAGA,iEAAiE;AACjE,eAAO,MAAM,oCAAoC,IAAI,CAAC;AAEtD,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,aAAa,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,WAAW,CAAC;AACtD,MAAM,WAAW,kBAAkB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAiCD;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,SAAS,GAAG,SAAS,CAAC;IACrC,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IACjC,aAAa,IAAI,MAAM,CAAC;IACxB,UAAU,IAAI,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACrC,YAAY,CAAC,KAAK,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,oBAAoB,CAAC;IAC/F,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACnH,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,mBAAmB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAAC;IACrH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAAC;IACzD,YAAY,IAAI,MAAM,CAAC;IACvB,yBAAyB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACnE,wCAAwC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAChF,YAAY,CAAC,KAAK,EAAE;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,gBAAgB,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC;KACd,GAAG,kBAAkB,CAAC;IACvB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC5D,sBAAsB,CAAC,GAAG,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACvD,oBAAoB,IAAI,mBAAmB,EAAE,CAAC;IAC9C,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACpD,KAAK,IAAI,IAAI,CAAC;CACd;AA4HD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAsPrE","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { DatabaseSync } from \"node:sqlite\";\n\n/** Current schema for the daemon-owned durable-state sidecar. */\nexport const CURRENT_DURABLE_STATE_SCHEMA_VERSION = 4;\n\nexport type CommandJournalState = \"created\" | \"running\" | \"completed\" | \"failed\" | \"interrupted\";\n\nexport type SessionLeaseMode = \"shared\" | \"exclusive\";\nexport interface SessionLeaseRecord {\n\tsessionId: string;\n\townerId: string;\n\tmode: SessionLeaseMode;\n\texpiresAt: string;\n}\n\nexport interface CommandJournalRecord {\n\tid: string;\n\tsessionId: string;\n\tcommand: string;\n\tstate: CommandJournalState;\n\tcreatedAt: string;\n\tupdatedAt: string;\n\trecoveryReason?: string;\n}\n\nconst COMMAND_TRANSITIONS: Record<CommandJournalState, readonly CommandJournalState[]> = {\n\tcreated: [\"running\", \"failed\", \"interrupted\"],\n\trunning: [\"completed\", \"failed\", \"interrupted\"],\n\tcompleted: [],\n\tfailed: [],\n\tinterrupted: [],\n};\n\nconst TABLES = [\n\t\"cache_entries\",\n\t\"command_journal\",\n\t\"daemon_metadata\",\n\t\"model_performance\",\n\t\"schema_migrations\",\n\t\"session_leases\",\n] as const;\n\n/** Columns added to `model_performance` in schema version 4 (roadmap Phase 8). */\nconst MODEL_PERFORMANCE_V4_COLUMNS: ReadonlyArray<readonly [string, string]> = [\n\t[\"session_id\", \"TEXT\"],\n\t[\"role\", \"TEXT\"],\n\t[\"credential_identity\", \"TEXT\"],\n\t[\"outcome\", \"TEXT\"],\n\t[\"failure_kind\", \"TEXT\"],\n\t[\"input_tokens\", \"INTEGER\"],\n\t[\"output_tokens\", \"INTEGER\"],\n\t[\"cache_read_tokens\", \"INTEGER\"],\n\t[\"cache_write_tokens\", \"INTEGER\"],\n\t[\"cost\", \"REAL\"],\n];\n\n/**\n * Plain, domain-independent row shape for `model_performance`. Deliberately not the\n * richer `UsagePerformanceSample` (which carries a branded `CredentialIdentity` and a\n * nested `usage` object) — this module owns SQLite schema and writes only, never\n * `ModelRuntime`'s domain types, to avoid a circular import between the two.\n */\nexport interface UsagePerformanceRow {\n\tprovider: string;\n\tmodelId: string;\n\tttftMs: number | null;\n\tgenerationMs: number | null;\n\tsampledAt: string;\n\tsessionId: string | null;\n\trole: string | null;\n\tcredentialIdentity: string | null;\n\toutcome: string | null;\n\tfailureKind: string | null;\n\tinputTokens: number | null;\n\toutputTokens: number | null;\n\tcacheReadTokens: number | null;\n\tcacheWriteTokens: number | null;\n\tcost: number | null;\n}\n\nexport interface RecoveryDiagnostic {\n\tcommandId: string;\n\tsessionId: string;\n\tpreviousState: \"created\" | \"running\";\n\tstate: \"interrupted\";\n\treason: string;\n\trecoveredAt: string;\n}\n\nexport interface DurableStateStore {\n\tschemaVersion(): number;\n\ttableNames(): string[];\n\tcolumns(tableName: string): string[];\n\tbeginCommand(input: { id?: string; sessionId: string; command: string }): CommandJournalRecord;\n\trunCommand<T>(input: { id?: string; sessionId: string; command: string }, operation: () => Promise<T>): Promise<T>;\n\ttransitionCommand(id: string, state: Exclude<CommandJournalState, \"created\">, reason?: string): CommandJournalRecord;\n\tgetCommand(id: string): CommandJournalRecord | undefined;\n\tcommandCount(): number;\n\trecoverUnfinishedCommands(reason?: string): CommandJournalRecord[];\n\trecoverUnfinishedCommandsWithDiagnostics(reason?: string): RecoveryDiagnostic[];\n\tacquireLease(input: {\n\t\tsessionId: string;\n\t\townerId: string;\n\t\tmode: SessionLeaseMode;\n\t\tttlMs: number;\n\t}): SessionLeaseRecord;\n\treleaseLease(sessionId: string, ownerId: string): void;\n\tgetLease(sessionId: string): SessionLeaseRecord | undefined;\n\trecordUsagePerformance(row: UsagePerformanceRow): void;\n\tlistUsagePerformance(): UsagePerformanceRow[];\n\tpruneUsagePerformance(olderThanIso: string): number;\n\tclose(): void;\n}\n\nfunction readSchemaVersion(database: DatabaseSync): number {\n\tconst row = database.prepare(\"SELECT COALESCE(MAX(version), 0) AS version FROM schema_migrations\").get() as\n\t\t| { version: number }\n\t\t| undefined;\n\treturn row?.version ?? 0;\n}\n\nfunction createSchema(database: DatabaseSync): void {\n\tdatabase.exec(`\n\t\tCREATE TABLE IF NOT EXISTS schema_migrations (\n\t\t\tversion INTEGER PRIMARY KEY,\n\t\t\tapplied_at TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS daemon_metadata (\n\t\t\tkey TEXT PRIMARY KEY,\n\t\t\tvalue TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS command_journal (\n\t\t\tid TEXT PRIMARY KEY,\n\t\t\tsession_id TEXT NOT NULL,\n\t\t\tcommand TEXT NOT NULL,\n\t\t\tstate TEXT NOT NULL,\n\t\t\trecovery_reason TEXT,\n\t\t\tcreated_at TEXT NOT NULL,\n\t\t\tupdated_at TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS session_leases (\n\t\t\tsession_id TEXT NOT NULL,\n\t\t\towner_id TEXT NOT NULL,\n\t\t\tmode TEXT NOT NULL,\n\t\t\texpires_at TEXT NOT NULL,\n\t\t\tPRIMARY KEY (session_id, owner_id)\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS model_performance (\n\t\t\tid INTEGER PRIMARY KEY,\n\t\t\tprovider TEXT NOT NULL,\n\t\t\tmodel_id TEXT NOT NULL,\n\t\t\tttft_ms REAL,\n\t\t\tgeneration_ms REAL,\n\t\t\tsampled_at TEXT NOT NULL,\n\t\t\tsession_id TEXT,\n\t\t\trole TEXT,\n\t\t\tcredential_identity TEXT,\n\t\t\toutcome TEXT,\n\t\t\tfailure_kind TEXT,\n\t\t\tinput_tokens INTEGER,\n\t\t\toutput_tokens INTEGER,\n\t\t\tcache_read_tokens INTEGER,\n\t\t\tcache_write_tokens INTEGER,\n\t\t\tcost REAL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS cache_entries (\n\t\t\tkey TEXT PRIMARY KEY,\n\t\t\tvalue BLOB NOT NULL,\n\t\t\texpires_at TEXT\n\t\t);\n\t`);\n}\n\nfunction readCommand(database: DatabaseSync, id: string): CommandJournalRecord | undefined {\n\tconst row = database\n\t\t.prepare(\n\t\t\t\"SELECT id, session_id, command, state, recovery_reason, created_at, updated_at FROM command_journal WHERE id = ?\",\n\t\t)\n\t\t.get(id) as\n\t\t| {\n\t\t\t\tid: string;\n\t\t\t\tsession_id: string;\n\t\t\t\tcommand: string;\n\t\t\t\tstate: CommandJournalState;\n\t\t\t\trecovery_reason: string | null;\n\t\t\t\tcreated_at: string;\n\t\t\t\tupdated_at: string;\n\t\t  }\n\t\t| undefined;\n\tif (!row) return undefined;\n\treturn {\n\t\tid: row.id,\n\t\tsessionId: row.session_id,\n\t\tcommand: row.command,\n\t\tstate: row.state,\n\t\tcreatedAt: row.created_at,\n\t\tupdatedAt: row.updated_at,\n\t\t...(row.recovery_reason ? { recoveryReason: row.recovery_reason } : {}),\n\t};\n}\n\nfunction readLeases(database: DatabaseSync, sessionId: string): SessionLeaseRecord[] {\n\tconst rows = database\n\t\t.prepare(\n\t\t\t\"SELECT session_id, owner_id, mode, expires_at FROM session_leases WHERE session_id = ? ORDER BY owner_id\",\n\t\t)\n\t\t.all(sessionId) as Array<{ session_id: string; owner_id: string; mode: SessionLeaseMode; expires_at: string }>;\n\treturn rows.map((row) => ({\n\t\tsessionId: row.session_id,\n\t\townerId: row.owner_id,\n\t\tmode: row.mode,\n\t\texpiresAt: row.expires_at,\n\t}));\n}\n\nfunction readLease(database: DatabaseSync, sessionId: string): SessionLeaseRecord | undefined {\n\treturn readLeases(database, sessionId)[0];\n}\n\nfunction transitionCommand(\n\tdatabase: DatabaseSync,\n\tid: string,\n\tstate: Exclude<CommandJournalState, \"created\">,\n\treason?: string,\n): CommandJournalRecord {\n\tconst current = readCommand(database, id);\n\tif (!current) throw new Error(`Unknown command journal entry: ${id}`);\n\tif (!COMMAND_TRANSITIONS[current.state].includes(state))\n\t\tthrow new Error(`Invalid command transition: ${current.state} -> ${state}`);\n\tconst now = new Date().toISOString();\n\tdatabase\n\t\t.prepare(\"UPDATE command_journal SET state = ?, recovery_reason = ?, updated_at = ? WHERE id = ?\")\n\t\t.run(state, reason ?? null, now, id);\n\treturn readCommand(database, id)!;\n}\n\nexport function openDurableStateStore(path: string): DurableStateStore {\n\tconst database = new DatabaseSync(path);\n\ttry {\n\t\tdatabase.exec(\"BEGIN IMMEDIATE\");\n\t\tcreateSchema(database);\n\t\tconst version = readSchemaVersion(database);\n\t\tif (version > CURRENT_DURABLE_STATE_SCHEMA_VERSION) {\n\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t\tthrow new Error(\n\t\t\t\t`Durable state database schema version ${version} is newer than this version (${CURRENT_DURABLE_STATE_SCHEMA_VERSION})`,\n\t\t\t);\n\t\t}\n\t\tif (version < 2) {\n\t\t\tconst commandColumns = database.prepare('PRAGMA table_info(\"command_journal\")').all() as Array<{\n\t\t\t\tname: string;\n\t\t\t}>;\n\t\t\tif (!commandColumns.some((column) => column.name === \"recovery_reason\"))\n\t\t\t\tdatabase.exec(\"ALTER TABLE command_journal ADD COLUMN recovery_reason TEXT\");\n\t\t}\n\t\tif (version < 3 && version > 0) {\n\t\t\tdatabase.exec(`\n\t\t\t\tALTER TABLE session_leases RENAME TO session_leases_v2;\n\t\t\t\tCREATE TABLE session_leases (\n\t\t\t\t\tsession_id TEXT NOT NULL,\n\t\t\t\t\towner_id TEXT NOT NULL,\n\t\t\t\t\tmode TEXT NOT NULL,\n\t\t\t\t\texpires_at TEXT NOT NULL,\n\t\t\t\t\tPRIMARY KEY (session_id, owner_id)\n\t\t\t\t);\n\t\t\t\tINSERT INTO session_leases (session_id, owner_id, mode, expires_at)\n\t\t\t\tSELECT session_id, owner_id, mode, expires_at FROM session_leases_v2;\n\t\t\t\tDROP TABLE session_leases_v2;\n\t\t\t`);\n\t\t}\n\t\tif (version < 4 && version > 0) {\n\t\t\tconst modelPerformanceColumns = database.prepare('PRAGMA table_info(\"model_performance\")').all() as Array<{\n\t\t\t\tname: string;\n\t\t\t}>;\n\t\t\tconst existingNames = new Set(modelPerformanceColumns.map((column) => column.name));\n\t\t\tfor (const [name, type] of MODEL_PERFORMANCE_V4_COLUMNS) {\n\t\t\t\tif (!existingNames.has(name)) database.exec(`ALTER TABLE model_performance ADD COLUMN ${name} ${type}`);\n\t\t\t}\n\t\t\tdatabase.exec(\"DROP TABLE IF EXISTS usage_totals\");\n\t\t}\n\t\tif (version < CURRENT_DURABLE_STATE_SCHEMA_VERSION) {\n\t\t\tdatabase\n\t\t\t\t.prepare(\"INSERT INTO schema_migrations (version, applied_at) VALUES (?, ?)\")\n\t\t\t\t.run(CURRENT_DURABLE_STATE_SCHEMA_VERSION, new Date().toISOString());\n\t\t}\n\t\tdatabase.exec(\"COMMIT\");\n\t} catch (error) {\n\t\ttry {\n\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t} catch {\n\t\t\t// Preserve the original migration error.\n\t\t}\n\t\tdatabase.close();\n\t\tthrow error;\n\t}\n\n\treturn {\n\t\tschemaVersion: () => readSchemaVersion(database),\n\t\ttableNames: () => {\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%' ORDER BY name\")\n\t\t\t\t.all() as Array<{ name: string }>;\n\t\t\treturn rows.map((row) => row.name);\n\t\t},\n\t\tcolumns: (tableName) => {\n\t\t\tif (!TABLES.includes(tableName as (typeof TABLES)[number]))\n\t\t\t\tthrow new Error(`Unknown durable-state table: ${tableName}`);\n\t\t\tconst rows = database.prepare(`PRAGMA table_info(\"${tableName}\")`).all() as Array<{ name: string }>;\n\t\t\treturn rows.map((row) => row.name);\n\t\t},\n\t\tbeginCommand: ({ id = randomUUID(), sessionId, command }) => {\n\t\t\tconst now = new Date().toISOString();\n\t\t\tdatabase\n\t\t\t\t.prepare(\n\t\t\t\t\t\"INSERT INTO command_journal (id, session_id, command, state, created_at, updated_at) VALUES (?, ?, ?, 'created', ?, ?)\",\n\t\t\t\t)\n\t\t\t\t.run(id, sessionId, command, now, now);\n\t\t\treturn readCommand(database, id)!;\n\t\t},\n\t\trunCommand: async (input, operation) => {\n\t\t\tconst entry = (() => {\n\t\t\t\tconst id = input.id ?? randomUUID();\n\t\t\t\tconst now = new Date().toISOString();\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\"INSERT INTO command_journal (id, session_id, command, state, created_at, updated_at) VALUES (?, ?, ?, 'created', ?, ?)\",\n\t\t\t\t\t)\n\t\t\t\t\t.run(id, input.sessionId, input.command, now, now);\n\t\t\t\treturn readCommand(database, id)!;\n\t\t\t})();\n\t\t\ttransitionCommand(database, entry.id, \"running\");\n\t\t\ttry {\n\t\t\t\tconst result = await operation();\n\t\t\t\ttransitionCommand(database, entry.id, \"completed\");\n\t\t\t\treturn result;\n\t\t\t} catch (error) {\n\t\t\t\ttransitionCommand(database, entry.id, \"failed\");\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\t\ttransitionCommand: (id, state, reason) => {\n\t\t\tconst current = readCommand(database, id);\n\t\t\tif (!current) throw new Error(`Unknown command journal entry: ${id}`);\n\t\t\tif (!COMMAND_TRANSITIONS[current.state].includes(state))\n\t\t\t\tthrow new Error(`Invalid command transition: ${current.state} -> ${state}`);\n\t\t\tconst now = new Date().toISOString();\n\t\t\tdatabase\n\t\t\t\t.prepare(\"UPDATE command_journal SET state = ?, recovery_reason = ?, updated_at = ? WHERE id = ?\")\n\t\t\t\t.run(state, reason ?? null, now, id);\n\t\t\treturn readCommand(database, id)!;\n\t\t},\n\t\tgetCommand: (id) => readCommand(database, id),\n\t\tcommandCount: () =>\n\t\t\t(database.prepare(\"SELECT COUNT(*) AS count FROM command_journal\").get() as { count: number }).count,\n\t\trecoverUnfinishedCommands: (reason = \"daemon restarted before command completion\") => {\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT id FROM command_journal WHERE state IN ('created', 'running')\")\n\t\t\t\t.all() as Array<{ id: string }>;\n\t\t\treturn rows.map(({ id }) => {\n\t\t\t\tconst current = readCommand(database, id)!;\n\t\t\t\treturn current.state === \"interrupted\" ? current : transitionCommand(database, id, \"interrupted\", reason);\n\t\t\t});\n\t\t},\n\t\trecoverUnfinishedCommandsWithDiagnostics: (reason = \"daemon restarted before command completion\") => {\n\t\t\tconst recoveredAt = new Date().toISOString();\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT id, session_id, state FROM command_journal WHERE state IN ('created', 'running')\")\n\t\t\t\t.all() as Array<{ id: string; session_id: string; state: \"created\" | \"running\" }>;\n\t\t\treturn rows.map((row) => {\n\t\t\t\ttransitionCommand(database, row.id, \"interrupted\", reason);\n\t\t\t\treturn {\n\t\t\t\t\tcommandId: row.id,\n\t\t\t\t\tsessionId: row.session_id,\n\t\t\t\t\tpreviousState: row.state,\n\t\t\t\t\tstate: \"interrupted\" as const,\n\t\t\t\t\treason,\n\t\t\t\t\trecoveredAt,\n\t\t\t\t};\n\t\t\t});\n\t\t},\n\t\tacquireLease: ({ sessionId, ownerId, mode, ttlMs }) => {\n\t\t\tif (!Number.isFinite(ttlMs) || ttlMs <= 0) throw new Error(\"Lease TTL must be positive\");\n\t\t\tdatabase.exec(\"BEGIN IMMEDIATE\");\n\t\t\ttry {\n\t\t\t\tdatabase.prepare(\"DELETE FROM session_leases WHERE expires_at <= ?\").run(new Date().toISOString());\n\t\t\t\tconst active = readLeases(database, sessionId).filter((lease) => lease.ownerId !== ownerId);\n\t\t\t\tif (active.some((lease) => lease.mode === \"exclusive\") || (mode === \"exclusive\" && active.length > 0)) {\n\t\t\t\t\tthrow new Error(`Session lease is held for ${sessionId}`);\n\t\t\t\t}\n\t\t\t\tconst expiresAt = new Date(Date.now() + ttlMs).toISOString();\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\"INSERT INTO session_leases (session_id, owner_id, mode, expires_at) VALUES (?, ?, ?, ?) ON CONFLICT(session_id, owner_id) DO UPDATE SET mode=excluded.mode, expires_at=excluded.expires_at\",\n\t\t\t\t\t)\n\t\t\t\t\t.run(sessionId, ownerId, mode, expiresAt);\n\t\t\t\tdatabase.exec(\"COMMIT\");\n\t\t\t\treturn readLeases(database, sessionId).find((lease) => lease.ownerId === ownerId)!;\n\t\t\t} catch (error) {\n\t\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\t\treleaseLease: (sessionId, ownerId) => {\n\t\t\tdatabase.prepare(\"DELETE FROM session_leases WHERE session_id = ? AND owner_id = ?\").run(sessionId, ownerId);\n\t\t},\n\t\tgetLease: (sessionId) => readLease(database, sessionId),\n\t\trecordUsagePerformance: (row) => {\n\t\t\tdatabase\n\t\t\t\t.prepare(\n\t\t\t\t\t`INSERT INTO model_performance (\n\t\t\t\t\t\tprovider, model_id, ttft_ms, generation_ms, sampled_at,\n\t\t\t\t\t\tsession_id, role, credential_identity, outcome, failure_kind,\n\t\t\t\t\t\tinput_tokens, output_tokens, cache_read_tokens, cache_write_tokens, cost\n\t\t\t\t\t) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n\t\t\t\t)\n\t\t\t\t.run(\n\t\t\t\t\trow.provider,\n\t\t\t\t\trow.modelId,\n\t\t\t\t\trow.ttftMs,\n\t\t\t\t\trow.generationMs,\n\t\t\t\t\trow.sampledAt,\n\t\t\t\t\trow.sessionId,\n\t\t\t\t\trow.role,\n\t\t\t\t\trow.credentialIdentity,\n\t\t\t\t\trow.outcome,\n\t\t\t\t\trow.failureKind,\n\t\t\t\t\trow.inputTokens,\n\t\t\t\t\trow.outputTokens,\n\t\t\t\t\trow.cacheReadTokens,\n\t\t\t\t\trow.cacheWriteTokens,\n\t\t\t\t\trow.cost,\n\t\t\t\t);\n\t\t},\n\t\tlistUsagePerformance: () =>\n\t\t\t(\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t`SELECT provider, model_id, ttft_ms, generation_ms, sampled_at, session_id, role,\n\t\t\t\t\t\t\tcredential_identity, outcome, failure_kind, input_tokens, output_tokens,\n\t\t\t\t\t\t\tcache_read_tokens, cache_write_tokens, cost\n\t\t\t\t\t\tFROM model_performance ORDER BY id ASC`,\n\t\t\t\t\t)\n\t\t\t\t\t.all() as Array<{\n\t\t\t\t\tprovider: string;\n\t\t\t\t\tmodel_id: string;\n\t\t\t\t\tttft_ms: number | null;\n\t\t\t\t\tgeneration_ms: number | null;\n\t\t\t\t\tsampled_at: string;\n\t\t\t\t\tsession_id: string | null;\n\t\t\t\t\trole: string | null;\n\t\t\t\t\tcredential_identity: string | null;\n\t\t\t\t\toutcome: string | null;\n\t\t\t\t\tfailure_kind: string | null;\n\t\t\t\t\tinput_tokens: number | null;\n\t\t\t\t\toutput_tokens: number | null;\n\t\t\t\t\tcache_read_tokens: number | null;\n\t\t\t\t\tcache_write_tokens: number | null;\n\t\t\t\t\tcost: number | null;\n\t\t\t\t}>\n\t\t\t).map((row) => ({\n\t\t\t\tprovider: row.provider,\n\t\t\t\tmodelId: row.model_id,\n\t\t\t\tttftMs: row.ttft_ms,\n\t\t\t\tgenerationMs: row.generation_ms,\n\t\t\t\tsampledAt: row.sampled_at,\n\t\t\t\tsessionId: row.session_id,\n\t\t\t\trole: row.role,\n\t\t\t\tcredentialIdentity: row.credential_identity,\n\t\t\t\toutcome: row.outcome,\n\t\t\t\tfailureKind: row.failure_kind,\n\t\t\t\tinputTokens: row.input_tokens,\n\t\t\t\toutputTokens: row.output_tokens,\n\t\t\t\tcacheReadTokens: row.cache_read_tokens,\n\t\t\t\tcacheWriteTokens: row.cache_write_tokens,\n\t\t\t\tcost: row.cost,\n\t\t\t})),\n\t\tpruneUsagePerformance: (olderThanIso) => {\n\t\t\tconst result = database.prepare(\"DELETE FROM model_performance WHERE sampled_at < ?\").run(olderThanIso);\n\t\t\treturn Number(result.changes);\n\t\t},\n\t\tclose: () => database.close(),\n\t};\n}\n"]}
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../../src/core/durable-state/sqlite.ts"],"names":[],"mappings":"AAkCA,iEAAiE;AACjE,eAAO,MAAM,oCAAoC,IAAI,CAAC;AAEtD,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,aAAa,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,WAAW,CAAC;AACtD,MAAM,WAAW,kBAAkB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAiCD;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,SAAS,GAAG,SAAS,CAAC;IACrC,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IACjC,aAAa,IAAI,MAAM,CAAC;IACxB,UAAU,IAAI,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACrC,YAAY,CAAC,KAAK,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,oBAAoB,CAAC;IAC/F,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACnH,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,mBAAmB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAAC;IACrH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAAC;IACzD,YAAY,IAAI,MAAM,CAAC;IACvB,yBAAyB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACnE,wCAAwC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAChF,YAAY,CAAC,KAAK,EAAE;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,gBAAgB,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC;KACd,GAAG,kBAAkB,CAAC;IACvB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC5D,sBAAsB,CAAC,GAAG,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACvD,oBAAoB,IAAI,mBAAmB,EAAE,CAAC;IAC9C,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACpD,KAAK,IAAI,IAAI,CAAC;CACd;AA4HD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAuPrE","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { createRequire } from \"node:module\";\nimport type { DatabaseSync } from \"node:sqlite\";\n\n/**\n * `bun build --compile` bundles this module into the standalone binary, and Bun does not\n * implement `node:sqlite` at all — not under `bun run`, not compiled. A static\n * `import { DatabaseSync } from \"node:sqlite\"` therefore breaks the standalone binary. Bun\n * ships its own `bun:sqlite`, whose `Database` exposes the same `.exec` / `.prepare(sql).get\n * /.all/.run` / `.close` surface this module relies on (verified directly against 1.3.14),\n * so the fix is to pick the binding at runtime rather than pull in either module statically.\n *\n * `createRequire` plus a runtime-computed specifier is load-bearing: it's what keeps this\n * `require(\"node:sqlite\")` call from being resolved when Bun bundles the compiled binary\n * (the branch is never taken under Bun, but the bundler would still try to resolve every\n * import it can see statically). A plain top-level `import` of either module — or a\n * dynamic `import()` with a literal specifier — does not get that exemption.\n */\nconst requireSqliteModule = createRequire(import.meta.url);\n\n/** The subset of `DatabaseSync` / `bun:sqlite`'s `Database` this module actually uses. */\ntype SqliteDatabaseConstructor = new (path: string) => DatabaseSync;\n\nfunction loadSqliteDatabaseConstructor(): SqliteDatabaseConstructor {\n\tif (typeof (globalThis as { Bun?: unknown }).Bun !== \"undefined\") {\n\t\tconst { Database } = requireSqliteModule(\"bun:sqlite\") as { Database: SqliteDatabaseConstructor };\n\t\treturn Database;\n\t}\n\tconst { DatabaseSync: NodeDatabaseSync } = requireSqliteModule(\"node:sqlite\") as {\n\t\tDatabaseSync: SqliteDatabaseConstructor;\n\t};\n\treturn NodeDatabaseSync;\n}\n\n/** Current schema for the daemon-owned durable-state sidecar. */\nexport const CURRENT_DURABLE_STATE_SCHEMA_VERSION = 4;\n\nexport type CommandJournalState = \"created\" | \"running\" | \"completed\" | \"failed\" | \"interrupted\";\n\nexport type SessionLeaseMode = \"shared\" | \"exclusive\";\nexport interface SessionLeaseRecord {\n\tsessionId: string;\n\townerId: string;\n\tmode: SessionLeaseMode;\n\texpiresAt: string;\n}\n\nexport interface CommandJournalRecord {\n\tid: string;\n\tsessionId: string;\n\tcommand: string;\n\tstate: CommandJournalState;\n\tcreatedAt: string;\n\tupdatedAt: string;\n\trecoveryReason?: string;\n}\n\nconst COMMAND_TRANSITIONS: Record<CommandJournalState, readonly CommandJournalState[]> = {\n\tcreated: [\"running\", \"failed\", \"interrupted\"],\n\trunning: [\"completed\", \"failed\", \"interrupted\"],\n\tcompleted: [],\n\tfailed: [],\n\tinterrupted: [],\n};\n\nconst TABLES = [\n\t\"cache_entries\",\n\t\"command_journal\",\n\t\"daemon_metadata\",\n\t\"model_performance\",\n\t\"schema_migrations\",\n\t\"session_leases\",\n] as const;\n\n/** Columns added to `model_performance` in schema version 4 (roadmap Phase 8). */\nconst MODEL_PERFORMANCE_V4_COLUMNS: ReadonlyArray<readonly [string, string]> = [\n\t[\"session_id\", \"TEXT\"],\n\t[\"role\", \"TEXT\"],\n\t[\"credential_identity\", \"TEXT\"],\n\t[\"outcome\", \"TEXT\"],\n\t[\"failure_kind\", \"TEXT\"],\n\t[\"input_tokens\", \"INTEGER\"],\n\t[\"output_tokens\", \"INTEGER\"],\n\t[\"cache_read_tokens\", \"INTEGER\"],\n\t[\"cache_write_tokens\", \"INTEGER\"],\n\t[\"cost\", \"REAL\"],\n];\n\n/**\n * Plain, domain-independent row shape for `model_performance`. Deliberately not the\n * richer `UsagePerformanceSample` (which carries a branded `CredentialIdentity` and a\n * nested `usage` object) — this module owns SQLite schema and writes only, never\n * `ModelRuntime`'s domain types, to avoid a circular import between the two.\n */\nexport interface UsagePerformanceRow {\n\tprovider: string;\n\tmodelId: string;\n\tttftMs: number | null;\n\tgenerationMs: number | null;\n\tsampledAt: string;\n\tsessionId: string | null;\n\trole: string | null;\n\tcredentialIdentity: string | null;\n\toutcome: string | null;\n\tfailureKind: string | null;\n\tinputTokens: number | null;\n\toutputTokens: number | null;\n\tcacheReadTokens: number | null;\n\tcacheWriteTokens: number | null;\n\tcost: number | null;\n}\n\nexport interface RecoveryDiagnostic {\n\tcommandId: string;\n\tsessionId: string;\n\tpreviousState: \"created\" | \"running\";\n\tstate: \"interrupted\";\n\treason: string;\n\trecoveredAt: string;\n}\n\nexport interface DurableStateStore {\n\tschemaVersion(): number;\n\ttableNames(): string[];\n\tcolumns(tableName: string): string[];\n\tbeginCommand(input: { id?: string; sessionId: string; command: string }): CommandJournalRecord;\n\trunCommand<T>(input: { id?: string; sessionId: string; command: string }, operation: () => Promise<T>): Promise<T>;\n\ttransitionCommand(id: string, state: Exclude<CommandJournalState, \"created\">, reason?: string): CommandJournalRecord;\n\tgetCommand(id: string): CommandJournalRecord | undefined;\n\tcommandCount(): number;\n\trecoverUnfinishedCommands(reason?: string): CommandJournalRecord[];\n\trecoverUnfinishedCommandsWithDiagnostics(reason?: string): RecoveryDiagnostic[];\n\tacquireLease(input: {\n\t\tsessionId: string;\n\t\townerId: string;\n\t\tmode: SessionLeaseMode;\n\t\tttlMs: number;\n\t}): SessionLeaseRecord;\n\treleaseLease(sessionId: string, ownerId: string): void;\n\tgetLease(sessionId: string): SessionLeaseRecord | undefined;\n\trecordUsagePerformance(row: UsagePerformanceRow): void;\n\tlistUsagePerformance(): UsagePerformanceRow[];\n\tpruneUsagePerformance(olderThanIso: string): number;\n\tclose(): void;\n}\n\nfunction readSchemaVersion(database: DatabaseSync): number {\n\tconst row = database.prepare(\"SELECT COALESCE(MAX(version), 0) AS version FROM schema_migrations\").get() as\n\t\t| { version: number }\n\t\t| undefined;\n\treturn row?.version ?? 0;\n}\n\nfunction createSchema(database: DatabaseSync): void {\n\tdatabase.exec(`\n\t\tCREATE TABLE IF NOT EXISTS schema_migrations (\n\t\t\tversion INTEGER PRIMARY KEY,\n\t\t\tapplied_at TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS daemon_metadata (\n\t\t\tkey TEXT PRIMARY KEY,\n\t\t\tvalue TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS command_journal (\n\t\t\tid TEXT PRIMARY KEY,\n\t\t\tsession_id TEXT NOT NULL,\n\t\t\tcommand TEXT NOT NULL,\n\t\t\tstate TEXT NOT NULL,\n\t\t\trecovery_reason TEXT,\n\t\t\tcreated_at TEXT NOT NULL,\n\t\t\tupdated_at TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS session_leases (\n\t\t\tsession_id TEXT NOT NULL,\n\t\t\towner_id TEXT NOT NULL,\n\t\t\tmode TEXT NOT NULL,\n\t\t\texpires_at TEXT NOT NULL,\n\t\t\tPRIMARY KEY (session_id, owner_id)\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS model_performance (\n\t\t\tid INTEGER PRIMARY KEY,\n\t\t\tprovider TEXT NOT NULL,\n\t\t\tmodel_id TEXT NOT NULL,\n\t\t\tttft_ms REAL,\n\t\t\tgeneration_ms REAL,\n\t\t\tsampled_at TEXT NOT NULL,\n\t\t\tsession_id TEXT,\n\t\t\trole TEXT,\n\t\t\tcredential_identity TEXT,\n\t\t\toutcome TEXT,\n\t\t\tfailure_kind TEXT,\n\t\t\tinput_tokens INTEGER,\n\t\t\toutput_tokens INTEGER,\n\t\t\tcache_read_tokens INTEGER,\n\t\t\tcache_write_tokens INTEGER,\n\t\t\tcost REAL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS cache_entries (\n\t\t\tkey TEXT PRIMARY KEY,\n\t\t\tvalue BLOB NOT NULL,\n\t\t\texpires_at TEXT\n\t\t);\n\t`);\n}\n\nfunction readCommand(database: DatabaseSync, id: string): CommandJournalRecord | undefined {\n\tconst row = database\n\t\t.prepare(\n\t\t\t\"SELECT id, session_id, command, state, recovery_reason, created_at, updated_at FROM command_journal WHERE id = ?\",\n\t\t)\n\t\t.get(id) as\n\t\t| {\n\t\t\t\tid: string;\n\t\t\t\tsession_id: string;\n\t\t\t\tcommand: string;\n\t\t\t\tstate: CommandJournalState;\n\t\t\t\trecovery_reason: string | null;\n\t\t\t\tcreated_at: string;\n\t\t\t\tupdated_at: string;\n\t\t  }\n\t\t| undefined;\n\tif (!row) return undefined;\n\treturn {\n\t\tid: row.id,\n\t\tsessionId: row.session_id,\n\t\tcommand: row.command,\n\t\tstate: row.state,\n\t\tcreatedAt: row.created_at,\n\t\tupdatedAt: row.updated_at,\n\t\t...(row.recovery_reason ? { recoveryReason: row.recovery_reason } : {}),\n\t};\n}\n\nfunction readLeases(database: DatabaseSync, sessionId: string): SessionLeaseRecord[] {\n\tconst rows = database\n\t\t.prepare(\n\t\t\t\"SELECT session_id, owner_id, mode, expires_at FROM session_leases WHERE session_id = ? ORDER BY owner_id\",\n\t\t)\n\t\t.all(sessionId) as Array<{ session_id: string; owner_id: string; mode: SessionLeaseMode; expires_at: string }>;\n\treturn rows.map((row) => ({\n\t\tsessionId: row.session_id,\n\t\townerId: row.owner_id,\n\t\tmode: row.mode,\n\t\texpiresAt: row.expires_at,\n\t}));\n}\n\nfunction readLease(database: DatabaseSync, sessionId: string): SessionLeaseRecord | undefined {\n\treturn readLeases(database, sessionId)[0];\n}\n\nfunction transitionCommand(\n\tdatabase: DatabaseSync,\n\tid: string,\n\tstate: Exclude<CommandJournalState, \"created\">,\n\treason?: string,\n): CommandJournalRecord {\n\tconst current = readCommand(database, id);\n\tif (!current) throw new Error(`Unknown command journal entry: ${id}`);\n\tif (!COMMAND_TRANSITIONS[current.state].includes(state))\n\t\tthrow new Error(`Invalid command transition: ${current.state} -> ${state}`);\n\tconst now = new Date().toISOString();\n\tdatabase\n\t\t.prepare(\"UPDATE command_journal SET state = ?, recovery_reason = ?, updated_at = ? WHERE id = ?\")\n\t\t.run(state, reason ?? null, now, id);\n\treturn readCommand(database, id)!;\n}\n\nexport function openDurableStateStore(path: string): DurableStateStore {\n\tconst Sqlite = loadSqliteDatabaseConstructor();\n\tconst database = new Sqlite(path);\n\ttry {\n\t\tdatabase.exec(\"BEGIN IMMEDIATE\");\n\t\tcreateSchema(database);\n\t\tconst version = readSchemaVersion(database);\n\t\tif (version > CURRENT_DURABLE_STATE_SCHEMA_VERSION) {\n\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t\tthrow new Error(\n\t\t\t\t`Durable state database schema version ${version} is newer than this version (${CURRENT_DURABLE_STATE_SCHEMA_VERSION})`,\n\t\t\t);\n\t\t}\n\t\tif (version < 2) {\n\t\t\tconst commandColumns = database.prepare('PRAGMA table_info(\"command_journal\")').all() as Array<{\n\t\t\t\tname: string;\n\t\t\t}>;\n\t\t\tif (!commandColumns.some((column) => column.name === \"recovery_reason\"))\n\t\t\t\tdatabase.exec(\"ALTER TABLE command_journal ADD COLUMN recovery_reason TEXT\");\n\t\t}\n\t\tif (version < 3 && version > 0) {\n\t\t\tdatabase.exec(`\n\t\t\t\tALTER TABLE session_leases RENAME TO session_leases_v2;\n\t\t\t\tCREATE TABLE session_leases (\n\t\t\t\t\tsession_id TEXT NOT NULL,\n\t\t\t\t\towner_id TEXT NOT NULL,\n\t\t\t\t\tmode TEXT NOT NULL,\n\t\t\t\t\texpires_at TEXT NOT NULL,\n\t\t\t\t\tPRIMARY KEY (session_id, owner_id)\n\t\t\t\t);\n\t\t\t\tINSERT INTO session_leases (session_id, owner_id, mode, expires_at)\n\t\t\t\tSELECT session_id, owner_id, mode, expires_at FROM session_leases_v2;\n\t\t\t\tDROP TABLE session_leases_v2;\n\t\t\t`);\n\t\t}\n\t\tif (version < 4 && version > 0) {\n\t\t\tconst modelPerformanceColumns = database.prepare('PRAGMA table_info(\"model_performance\")').all() as Array<{\n\t\t\t\tname: string;\n\t\t\t}>;\n\t\t\tconst existingNames = new Set(modelPerformanceColumns.map((column) => column.name));\n\t\t\tfor (const [name, type] of MODEL_PERFORMANCE_V4_COLUMNS) {\n\t\t\t\tif (!existingNames.has(name)) database.exec(`ALTER TABLE model_performance ADD COLUMN ${name} ${type}`);\n\t\t\t}\n\t\t\tdatabase.exec(\"DROP TABLE IF EXISTS usage_totals\");\n\t\t}\n\t\tif (version < CURRENT_DURABLE_STATE_SCHEMA_VERSION) {\n\t\t\tdatabase\n\t\t\t\t.prepare(\"INSERT INTO schema_migrations (version, applied_at) VALUES (?, ?)\")\n\t\t\t\t.run(CURRENT_DURABLE_STATE_SCHEMA_VERSION, new Date().toISOString());\n\t\t}\n\t\tdatabase.exec(\"COMMIT\");\n\t} catch (error) {\n\t\ttry {\n\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t} catch {\n\t\t\t// Preserve the original migration error.\n\t\t}\n\t\tdatabase.close();\n\t\tthrow error;\n\t}\n\n\treturn {\n\t\tschemaVersion: () => readSchemaVersion(database),\n\t\ttableNames: () => {\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%' ORDER BY name\")\n\t\t\t\t.all() as Array<{ name: string }>;\n\t\t\treturn rows.map((row) => row.name);\n\t\t},\n\t\tcolumns: (tableName) => {\n\t\t\tif (!TABLES.includes(tableName as (typeof TABLES)[number]))\n\t\t\t\tthrow new Error(`Unknown durable-state table: ${tableName}`);\n\t\t\tconst rows = database.prepare(`PRAGMA table_info(\"${tableName}\")`).all() as Array<{ name: string }>;\n\t\t\treturn rows.map((row) => row.name);\n\t\t},\n\t\tbeginCommand: ({ id = randomUUID(), sessionId, command }) => {\n\t\t\tconst now = new Date().toISOString();\n\t\t\tdatabase\n\t\t\t\t.prepare(\n\t\t\t\t\t\"INSERT INTO command_journal (id, session_id, command, state, created_at, updated_at) VALUES (?, ?, ?, 'created', ?, ?)\",\n\t\t\t\t)\n\t\t\t\t.run(id, sessionId, command, now, now);\n\t\t\treturn readCommand(database, id)!;\n\t\t},\n\t\trunCommand: async (input, operation) => {\n\t\t\tconst entry = (() => {\n\t\t\t\tconst id = input.id ?? randomUUID();\n\t\t\t\tconst now = new Date().toISOString();\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\"INSERT INTO command_journal (id, session_id, command, state, created_at, updated_at) VALUES (?, ?, ?, 'created', ?, ?)\",\n\t\t\t\t\t)\n\t\t\t\t\t.run(id, input.sessionId, input.command, now, now);\n\t\t\t\treturn readCommand(database, id)!;\n\t\t\t})();\n\t\t\ttransitionCommand(database, entry.id, \"running\");\n\t\t\ttry {\n\t\t\t\tconst result = await operation();\n\t\t\t\ttransitionCommand(database, entry.id, \"completed\");\n\t\t\t\treturn result;\n\t\t\t} catch (error) {\n\t\t\t\ttransitionCommand(database, entry.id, \"failed\");\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\t\ttransitionCommand: (id, state, reason) => {\n\t\t\tconst current = readCommand(database, id);\n\t\t\tif (!current) throw new Error(`Unknown command journal entry: ${id}`);\n\t\t\tif (!COMMAND_TRANSITIONS[current.state].includes(state))\n\t\t\t\tthrow new Error(`Invalid command transition: ${current.state} -> ${state}`);\n\t\t\tconst now = new Date().toISOString();\n\t\t\tdatabase\n\t\t\t\t.prepare(\"UPDATE command_journal SET state = ?, recovery_reason = ?, updated_at = ? WHERE id = ?\")\n\t\t\t\t.run(state, reason ?? null, now, id);\n\t\t\treturn readCommand(database, id)!;\n\t\t},\n\t\tgetCommand: (id) => readCommand(database, id),\n\t\tcommandCount: () =>\n\t\t\t(database.prepare(\"SELECT COUNT(*) AS count FROM command_journal\").get() as { count: number }).count,\n\t\trecoverUnfinishedCommands: (reason = \"daemon restarted before command completion\") => {\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT id FROM command_journal WHERE state IN ('created', 'running')\")\n\t\t\t\t.all() as Array<{ id: string }>;\n\t\t\treturn rows.map(({ id }) => {\n\t\t\t\tconst current = readCommand(database, id)!;\n\t\t\t\treturn current.state === \"interrupted\" ? current : transitionCommand(database, id, \"interrupted\", reason);\n\t\t\t});\n\t\t},\n\t\trecoverUnfinishedCommandsWithDiagnostics: (reason = \"daemon restarted before command completion\") => {\n\t\t\tconst recoveredAt = new Date().toISOString();\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT id, session_id, state FROM command_journal WHERE state IN ('created', 'running')\")\n\t\t\t\t.all() as Array<{ id: string; session_id: string; state: \"created\" | \"running\" }>;\n\t\t\treturn rows.map((row) => {\n\t\t\t\ttransitionCommand(database, row.id, \"interrupted\", reason);\n\t\t\t\treturn {\n\t\t\t\t\tcommandId: row.id,\n\t\t\t\t\tsessionId: row.session_id,\n\t\t\t\t\tpreviousState: row.state,\n\t\t\t\t\tstate: \"interrupted\" as const,\n\t\t\t\t\treason,\n\t\t\t\t\trecoveredAt,\n\t\t\t\t};\n\t\t\t});\n\t\t},\n\t\tacquireLease: ({ sessionId, ownerId, mode, ttlMs }) => {\n\t\t\tif (!Number.isFinite(ttlMs) || ttlMs <= 0) throw new Error(\"Lease TTL must be positive\");\n\t\t\tdatabase.exec(\"BEGIN IMMEDIATE\");\n\t\t\ttry {\n\t\t\t\tdatabase.prepare(\"DELETE FROM session_leases WHERE expires_at <= ?\").run(new Date().toISOString());\n\t\t\t\tconst active = readLeases(database, sessionId).filter((lease) => lease.ownerId !== ownerId);\n\t\t\t\tif (active.some((lease) => lease.mode === \"exclusive\") || (mode === \"exclusive\" && active.length > 0)) {\n\t\t\t\t\tthrow new Error(`Session lease is held for ${sessionId}`);\n\t\t\t\t}\n\t\t\t\tconst expiresAt = new Date(Date.now() + ttlMs).toISOString();\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\"INSERT INTO session_leases (session_id, owner_id, mode, expires_at) VALUES (?, ?, ?, ?) ON CONFLICT(session_id, owner_id) DO UPDATE SET mode=excluded.mode, expires_at=excluded.expires_at\",\n\t\t\t\t\t)\n\t\t\t\t\t.run(sessionId, ownerId, mode, expiresAt);\n\t\t\t\tdatabase.exec(\"COMMIT\");\n\t\t\t\treturn readLeases(database, sessionId).find((lease) => lease.ownerId === ownerId)!;\n\t\t\t} catch (error) {\n\t\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\t\treleaseLease: (sessionId, ownerId) => {\n\t\t\tdatabase.prepare(\"DELETE FROM session_leases WHERE session_id = ? AND owner_id = ?\").run(sessionId, ownerId);\n\t\t},\n\t\tgetLease: (sessionId) => readLease(database, sessionId),\n\t\trecordUsagePerformance: (row) => {\n\t\t\tdatabase\n\t\t\t\t.prepare(\n\t\t\t\t\t`INSERT INTO model_performance (\n\t\t\t\t\t\tprovider, model_id, ttft_ms, generation_ms, sampled_at,\n\t\t\t\t\t\tsession_id, role, credential_identity, outcome, failure_kind,\n\t\t\t\t\t\tinput_tokens, output_tokens, cache_read_tokens, cache_write_tokens, cost\n\t\t\t\t\t) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n\t\t\t\t)\n\t\t\t\t.run(\n\t\t\t\t\trow.provider,\n\t\t\t\t\trow.modelId,\n\t\t\t\t\trow.ttftMs,\n\t\t\t\t\trow.generationMs,\n\t\t\t\t\trow.sampledAt,\n\t\t\t\t\trow.sessionId,\n\t\t\t\t\trow.role,\n\t\t\t\t\trow.credentialIdentity,\n\t\t\t\t\trow.outcome,\n\t\t\t\t\trow.failureKind,\n\t\t\t\t\trow.inputTokens,\n\t\t\t\t\trow.outputTokens,\n\t\t\t\t\trow.cacheReadTokens,\n\t\t\t\t\trow.cacheWriteTokens,\n\t\t\t\t\trow.cost,\n\t\t\t\t);\n\t\t},\n\t\tlistUsagePerformance: () =>\n\t\t\t(\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t`SELECT provider, model_id, ttft_ms, generation_ms, sampled_at, session_id, role,\n\t\t\t\t\t\t\tcredential_identity, outcome, failure_kind, input_tokens, output_tokens,\n\t\t\t\t\t\t\tcache_read_tokens, cache_write_tokens, cost\n\t\t\t\t\t\tFROM model_performance ORDER BY id ASC`,\n\t\t\t\t\t)\n\t\t\t\t\t.all() as Array<{\n\t\t\t\t\tprovider: string;\n\t\t\t\t\tmodel_id: string;\n\t\t\t\t\tttft_ms: number | null;\n\t\t\t\t\tgeneration_ms: number | null;\n\t\t\t\t\tsampled_at: string;\n\t\t\t\t\tsession_id: string | null;\n\t\t\t\t\trole: string | null;\n\t\t\t\t\tcredential_identity: string | null;\n\t\t\t\t\toutcome: string | null;\n\t\t\t\t\tfailure_kind: string | null;\n\t\t\t\t\tinput_tokens: number | null;\n\t\t\t\t\toutput_tokens: number | null;\n\t\t\t\t\tcache_read_tokens: number | null;\n\t\t\t\t\tcache_write_tokens: number | null;\n\t\t\t\t\tcost: number | null;\n\t\t\t\t}>\n\t\t\t).map((row) => ({\n\t\t\t\tprovider: row.provider,\n\t\t\t\tmodelId: row.model_id,\n\t\t\t\tttftMs: row.ttft_ms,\n\t\t\t\tgenerationMs: row.generation_ms,\n\t\t\t\tsampledAt: row.sampled_at,\n\t\t\t\tsessionId: row.session_id,\n\t\t\t\trole: row.role,\n\t\t\t\tcredentialIdentity: row.credential_identity,\n\t\t\t\toutcome: row.outcome,\n\t\t\t\tfailureKind: row.failure_kind,\n\t\t\t\tinputTokens: row.input_tokens,\n\t\t\t\toutputTokens: row.output_tokens,\n\t\t\t\tcacheReadTokens: row.cache_read_tokens,\n\t\t\t\tcacheWriteTokens: row.cache_write_tokens,\n\t\t\t\tcost: row.cost,\n\t\t\t})),\n\t\tpruneUsagePerformance: (olderThanIso) => {\n\t\t\tconst result = database.prepare(\"DELETE FROM model_performance WHERE sampled_at < ?\").run(olderThanIso);\n\t\t\treturn Number(result.changes);\n\t\t},\n\t\tclose: () => database.close(),\n\t};\n}\n"]}

package/dist/core/durable-state/sqlite.js

@@ -1,5 +1,28 @@
 import { randomUUID } from "node:crypto";
-import { DatabaseSync } from "node:sqlite";
+import { createRequire } from "node:module";
+/**
+ * `bun build --compile` bundles this module into the standalone binary, and Bun does not
+ * implement `node:sqlite` at all — not under `bun run`, not compiled. A static
+ * `import { DatabaseSync } from "node:sqlite"` therefore breaks the standalone binary. Bun
+ * ships its own `bun:sqlite`, whose `Database` exposes the same `.exec` / `.prepare(sql).get
+ * /.all/.run` / `.close` surface this module relies on (verified directly against 1.3.14),
+ * so the fix is to pick the binding at runtime rather than pull in either module statically.
+ *
+ * `createRequire` plus a runtime-computed specifier is load-bearing: it's what keeps this
+ * `require("node:sqlite")` call from being resolved when Bun bundles the compiled binary
+ * (the branch is never taken under Bun, but the bundler would still try to resolve every
+ * import it can see statically). A plain top-level `import` of either module — or a
+ * dynamic `import()` with a literal specifier — does not get that exemption.
+ */
+const requireSqliteModule = createRequire(import.meta.url);
+function loadSqliteDatabaseConstructor() {
+    if (typeof globalThis.Bun !== "undefined") {
+        const { Database } = requireSqliteModule("bun:sqlite");
+        return Database;
+    }
+    const { DatabaseSync: NodeDatabaseSync } = requireSqliteModule("node:sqlite");
+    return NodeDatabaseSync;
+}
 /** Current schema for the daemon-owned durable-state sidecar. */
 export const CURRENT_DURABLE_STATE_SCHEMA_VERSION = 4;
 const COMMAND_TRANSITIONS = {
@@ -128,7 +151,8 @@ function transitionCommand(database, id, state, reason) {
     return readCommand(database, id);
 }
 export function openDurableStateStore(path) {
-    const database = new DatabaseSync(path);
+    const Sqlite = loadSqliteDatabaseConstructor();
+    const database = new Sqlite(path);
     try {
         database.exec("BEGIN IMMEDIATE");
         createSchema(database);

package/dist/core/durable-state/sqlite.js.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../../src/core/durable-state/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,iEAAiE;AACjE,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAsBtD,MAAM,mBAAmB,GAAgE;IACxF,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC;IAC7C,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC;IAC/C,SAAS,EAAE,EAAE;IACb,MAAM,EAAE,EAAE;IACV,WAAW,EAAE,EAAE;CACf,CAAC;AAEF,MAAM,MAAM,GAAG;IACd,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;CACP,CAAC;AAEX,kFAAkF;AAClF,MAAM,4BAA4B,GAA6C;IAC9E,CAAC,YAAY,EAAE,MAAM,CAAC;IACtB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,qBAAqB,EAAE,MAAM,CAAC;IAC/B,CAAC,SAAS,EAAE,MAAM,CAAC;IACnB,CAAC,cAAc,EAAE,MAAM,CAAC;IACxB,CAAC,cAAc,EAAE,SAAS,CAAC;IAC3B,CAAC,eAAe,EAAE,SAAS,CAAC;IAC5B,CAAC,mBAAmB,EAAE,SAAS,CAAC;IAChC,CAAC,oBAAoB,EAAE,SAAS,CAAC;IACjC,CAAC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AA4DF,SAAS,iBAAiB,CAAC,QAAsB,EAAU;IAC1D,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC,GAAG,EAE1F,CAAC;IACb,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;AAAA,CACzB;AAED,SAAS,YAAY,CAAC,QAAsB,EAAQ;IACnD,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgDb,CAAC,CAAC;AAAA,CACH;AAED,SAAS,WAAW,CAAC,QAAsB,EAAE,EAAU,EAAoC;IAC1F,MAAM,GAAG,GAAG,QAAQ;SAClB,OAAO,CACP,kHAAkH,CAClH;SACA,GAAG,CAAC,EAAE,CAUI,CAAC;IACb,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO;QACN,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AAAA,CACF;AAED,SAAS,UAAU,CAAC,QAAsB,EAAE,SAAiB,EAAwB;IACpF,MAAM,IAAI,GAAG,QAAQ;SACnB,OAAO,CACP,0GAA0G,CAC1G;SACA,GAAG,CAAC,SAAS,CAAgG,CAAC;IAChH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,UAAU;KACzB,CAAC,CAAC,CAAC;AAAA,CACJ;AAED,SAAS,SAAS,CAAC,QAAsB,EAAE,SAAiB,EAAkC;IAC7F,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,CAC1C;AAED,SAAS,iBAAiB,CACzB,QAAsB,EACtB,EAAU,EACV,KAA8C,EAC9C,MAAe,EACQ;IACvB,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,KAAK,OAAO,KAAK,EAAE,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,QAAQ;SACN,OAAO,CAAC,wFAAwF,CAAC;SACjG,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;AAAA,CAClC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAqB;IACtE,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC;QACJ,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,OAAO,GAAG,oCAAoC,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,IAAI,KAAK,CACd,yCAAyC,OAAO,gCAAgC,oCAAoC,GAAG,CACvH,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,EAEjF,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC;gBACtE,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;IAYb,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,uBAAuB,GAAG,QAAQ,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,EAE5F,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACpF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,4BAA4B,EAAE,CAAC;gBACzD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,4CAA4C,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YACzG,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,GAAG,oCAAoC,EAAE,CAAC;YACpD,QAAQ;iBACN,OAAO,CAAC,mEAAmE,CAAC;iBAC5E,GAAG,CAAC,oCAAoC,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,yCAAyC;QAC1C,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,KAAK,CAAC;IACb,CAAC;IAED,OAAO;QACN,aAAa,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QAChD,UAAU,EAAE,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,QAAQ;iBACnB,OAAO,CAAC,gGAAgG,CAAC;iBACzG,GAAG,EAA6B,CAAC;YACnC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAA,CACnC;QACD,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAoC,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,SAAS,IAAI,CAAC,CAAC,GAAG,EAA6B,CAAC;YACpG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAA,CACnC;QACD,YAAY,EAAE,CAAC,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,QAAQ;iBACN,OAAO,CACP,wHAAwH,CACxH;iBACA,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;QAAA,CAClC;QACD,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;gBACpB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,QAAQ;qBACN,OAAO,CACP,wHAAwH,CACxH;qBACA,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACpD,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;YAAA,CAClC,CAAC,EAAE,CAAC;YACL,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACjD,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;gBACjC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;gBACnD,OAAO,MAAM,CAAC;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM,KAAK,CAAC;YACb,CAAC;QAAA,CACD;QACD,iBAAiB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,KAAK,OAAO,KAAK,EAAE,CAAC,CAAC;YAC7E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,QAAQ;iBACN,OAAO,CAAC,wFAAwF,CAAC;iBACjG,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACtC,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;QAAA,CAClC;QACD,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC7C,YAAY,EAAE,GAAG,EAAE,CACjB,QAAQ,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK;QACrG,yBAAyB,EAAE,CAAC,MAAM,GAAG,4CAA4C,EAAE,EAAE,CAAC;YACrF,MAAM,IAAI,GAAG,QAAQ;iBACnB,OAAO,CAAC,sEAAsE,CAAC;iBAC/E,GAAG,EAA2B,CAAC;YACjC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YAAA,CAC1G,CAAC,CAAC;QAAA,CACH;QACD,wCAAwC,EAAE,CAAC,MAAM,GAAG,4CAA4C,EAAE,EAAE,CAAC;YACpG,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,QAAQ;iBACnB,OAAO,CAAC,yFAAyF,CAAC;iBAClG,GAAG,EAA6E,CAAC;YACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxB,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC3D,OAAO;oBACN,SAAS,EAAE,GAAG,CAAC,EAAE;oBACjB,SAAS,EAAE,GAAG,CAAC,UAAU;oBACzB,aAAa,EAAE,GAAG,CAAC,KAAK;oBACxB,KAAK,EAAE,aAAsB;oBAC7B,MAAM;oBACN,WAAW;iBACX,CAAC;YAAA,CACF,CAAC,CAAC;QAAA,CACH;QACD,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACzF,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACjC,IAAI,CAAC;gBACJ,QAAQ,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;gBACnG,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;gBAC5F,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;oBACvG,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,EAAE,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC7D,QAAQ;qBACN,OAAO,CACP,4LAA4L,CAC5L;qBACA,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC3C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxB,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAE,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC1B,MAAM,KAAK,CAAC;YACb,CAAC;QAAA,CACD;QACD,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YACrC,QAAQ,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAAA,CAC7G;QACD,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;QACvD,sBAAsB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;YAChC,QAAQ;iBACN,OAAO,CACP;;;;4DAIuD,CACvD;iBACA,GAAG,CACH,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,YAAY,EAChB,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,EACtB,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,EAChB,GAAG,CAAC,eAAe,EACnB,GAAG,CAAC,gBAAgB,EACpB,GAAG,CAAC,IAAI,CACR,CAAC;QAAA,CACH;QACD,oBAAoB,EAAE,GAAG,EAAE,CAEzB,QAAQ;aACN,OAAO,CACP;;;6CAGuC,CACvC;aACA,GAAG,EAiBL,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACf,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,kBAAkB,EAAE,GAAG,CAAC,mBAAmB;YAC3C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,eAAe,EAAE,GAAG,CAAC,iBAAiB;YACtC,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;YACxC,IAAI,EAAE,GAAG,CAAC,IAAI;SACd,CAAC,CAAC;QACJ,qBAAqB,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACxG,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAA,CAC9B;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE;KAC7B,CAAC;AAAA,CACF","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { DatabaseSync } from \"node:sqlite\";\n\n/** Current schema for the daemon-owned durable-state sidecar. */\nexport const CURRENT_DURABLE_STATE_SCHEMA_VERSION = 4;\n\nexport type CommandJournalState = \"created\" | \"running\" | \"completed\" | \"failed\" | \"interrupted\";\n\nexport type SessionLeaseMode = \"shared\" | \"exclusive\";\nexport interface SessionLeaseRecord {\n\tsessionId: string;\n\townerId: string;\n\tmode: SessionLeaseMode;\n\texpiresAt: string;\n}\n\nexport interface CommandJournalRecord {\n\tid: string;\n\tsessionId: string;\n\tcommand: string;\n\tstate: CommandJournalState;\n\tcreatedAt: string;\n\tupdatedAt: string;\n\trecoveryReason?: string;\n}\n\nconst COMMAND_TRANSITIONS: Record<CommandJournalState, readonly CommandJournalState[]> = {\n\tcreated: [\"running\", \"failed\", \"interrupted\"],\n\trunning: [\"completed\", \"failed\", \"interrupted\"],\n\tcompleted: [],\n\tfailed: [],\n\tinterrupted: [],\n};\n\nconst TABLES = [\n\t\"cache_entries\",\n\t\"command_journal\",\n\t\"daemon_metadata\",\n\t\"model_performance\",\n\t\"schema_migrations\",\n\t\"session_leases\",\n] as const;\n\n/** Columns added to `model_performance` in schema version 4 (roadmap Phase 8). */\nconst MODEL_PERFORMANCE_V4_COLUMNS: ReadonlyArray<readonly [string, string]> = [\n\t[\"session_id\", \"TEXT\"],\n\t[\"role\", \"TEXT\"],\n\t[\"credential_identity\", \"TEXT\"],\n\t[\"outcome\", \"TEXT\"],\n\t[\"failure_kind\", \"TEXT\"],\n\t[\"input_tokens\", \"INTEGER\"],\n\t[\"output_tokens\", \"INTEGER\"],\n\t[\"cache_read_tokens\", \"INTEGER\"],\n\t[\"cache_write_tokens\", \"INTEGER\"],\n\t[\"cost\", \"REAL\"],\n];\n\n/**\n * Plain, domain-independent row shape for `model_performance`. Deliberately not the\n * richer `UsagePerformanceSample` (which carries a branded `CredentialIdentity` and a\n * nested `usage` object) — this module owns SQLite schema and writes only, never\n * `ModelRuntime`'s domain types, to avoid a circular import between the two.\n */\nexport interface UsagePerformanceRow {\n\tprovider: string;\n\tmodelId: string;\n\tttftMs: number | null;\n\tgenerationMs: number | null;\n\tsampledAt: string;\n\tsessionId: string | null;\n\trole: string | null;\n\tcredentialIdentity: string | null;\n\toutcome: string | null;\n\tfailureKind: string | null;\n\tinputTokens: number | null;\n\toutputTokens: number | null;\n\tcacheReadTokens: number | null;\n\tcacheWriteTokens: number | null;\n\tcost: number | null;\n}\n\nexport interface RecoveryDiagnostic {\n\tcommandId: string;\n\tsessionId: string;\n\tpreviousState: \"created\" | \"running\";\n\tstate: \"interrupted\";\n\treason: string;\n\trecoveredAt: string;\n}\n\nexport interface DurableStateStore {\n\tschemaVersion(): number;\n\ttableNames(): string[];\n\tcolumns(tableName: string): string[];\n\tbeginCommand(input: { id?: string; sessionId: string; command: string }): CommandJournalRecord;\n\trunCommand<T>(input: { id?: string; sessionId: string; command: string }, operation: () => Promise<T>): Promise<T>;\n\ttransitionCommand(id: string, state: Exclude<CommandJournalState, \"created\">, reason?: string): CommandJournalRecord;\n\tgetCommand(id: string): CommandJournalRecord | undefined;\n\tcommandCount(): number;\n\trecoverUnfinishedCommands(reason?: string): CommandJournalRecord[];\n\trecoverUnfinishedCommandsWithDiagnostics(reason?: string): RecoveryDiagnostic[];\n\tacquireLease(input: {\n\t\tsessionId: string;\n\t\townerId: string;\n\t\tmode: SessionLeaseMode;\n\t\tttlMs: number;\n\t}): SessionLeaseRecord;\n\treleaseLease(sessionId: string, ownerId: string): void;\n\tgetLease(sessionId: string): SessionLeaseRecord | undefined;\n\trecordUsagePerformance(row: UsagePerformanceRow): void;\n\tlistUsagePerformance(): UsagePerformanceRow[];\n\tpruneUsagePerformance(olderThanIso: string): number;\n\tclose(): void;\n}\n\nfunction readSchemaVersion(database: DatabaseSync): number {\n\tconst row = database.prepare(\"SELECT COALESCE(MAX(version), 0) AS version FROM schema_migrations\").get() as\n\t\t| { version: number }\n\t\t| undefined;\n\treturn row?.version ?? 0;\n}\n\nfunction createSchema(database: DatabaseSync): void {\n\tdatabase.exec(`\n\t\tCREATE TABLE IF NOT EXISTS schema_migrations (\n\t\t\tversion INTEGER PRIMARY KEY,\n\t\t\tapplied_at TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS daemon_metadata (\n\t\t\tkey TEXT PRIMARY KEY,\n\t\t\tvalue TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS command_journal (\n\t\t\tid TEXT PRIMARY KEY,\n\t\t\tsession_id TEXT NOT NULL,\n\t\t\tcommand TEXT NOT NULL,\n\t\t\tstate TEXT NOT NULL,\n\t\t\trecovery_reason TEXT,\n\t\t\tcreated_at TEXT NOT NULL,\n\t\t\tupdated_at TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS session_leases (\n\t\t\tsession_id TEXT NOT NULL,\n\t\t\towner_id TEXT NOT NULL,\n\t\t\tmode TEXT NOT NULL,\n\t\t\texpires_at TEXT NOT NULL,\n\t\t\tPRIMARY KEY (session_id, owner_id)\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS model_performance (\n\t\t\tid INTEGER PRIMARY KEY,\n\t\t\tprovider TEXT NOT NULL,\n\t\t\tmodel_id TEXT NOT NULL,\n\t\t\tttft_ms REAL,\n\t\t\tgeneration_ms REAL,\n\t\t\tsampled_at TEXT NOT NULL,\n\t\t\tsession_id TEXT,\n\t\t\trole TEXT,\n\t\t\tcredential_identity TEXT,\n\t\t\toutcome TEXT,\n\t\t\tfailure_kind TEXT,\n\t\t\tinput_tokens INTEGER,\n\t\t\toutput_tokens INTEGER,\n\t\t\tcache_read_tokens INTEGER,\n\t\t\tcache_write_tokens INTEGER,\n\t\t\tcost REAL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS cache_entries (\n\t\t\tkey TEXT PRIMARY KEY,\n\t\t\tvalue BLOB NOT NULL,\n\t\t\texpires_at TEXT\n\t\t);\n\t`);\n}\n\nfunction readCommand(database: DatabaseSync, id: string): CommandJournalRecord | undefined {\n\tconst row = database\n\t\t.prepare(\n\t\t\t\"SELECT id, session_id, command, state, recovery_reason, created_at, updated_at FROM command_journal WHERE id = ?\",\n\t\t)\n\t\t.get(id) as\n\t\t| {\n\t\t\t\tid: string;\n\t\t\t\tsession_id: string;\n\t\t\t\tcommand: string;\n\t\t\t\tstate: CommandJournalState;\n\t\t\t\trecovery_reason: string | null;\n\t\t\t\tcreated_at: string;\n\t\t\t\tupdated_at: string;\n\t\t  }\n\t\t| undefined;\n\tif (!row) return undefined;\n\treturn {\n\t\tid: row.id,\n\t\tsessionId: row.session_id,\n\t\tcommand: row.command,\n\t\tstate: row.state,\n\t\tcreatedAt: row.created_at,\n\t\tupdatedAt: row.updated_at,\n\t\t...(row.recovery_reason ? { recoveryReason: row.recovery_reason } : {}),\n\t};\n}\n\nfunction readLeases(database: DatabaseSync, sessionId: string): SessionLeaseRecord[] {\n\tconst rows = database\n\t\t.prepare(\n\t\t\t\"SELECT session_id, owner_id, mode, expires_at FROM session_leases WHERE session_id = ? ORDER BY owner_id\",\n\t\t)\n\t\t.all(sessionId) as Array<{ session_id: string; owner_id: string; mode: SessionLeaseMode; expires_at: string }>;\n\treturn rows.map((row) => ({\n\t\tsessionId: row.session_id,\n\t\townerId: row.owner_id,\n\t\tmode: row.mode,\n\t\texpiresAt: row.expires_at,\n\t}));\n}\n\nfunction readLease(database: DatabaseSync, sessionId: string): SessionLeaseRecord | undefined {\n\treturn readLeases(database, sessionId)[0];\n}\n\nfunction transitionCommand(\n\tdatabase: DatabaseSync,\n\tid: string,\n\tstate: Exclude<CommandJournalState, \"created\">,\n\treason?: string,\n): CommandJournalRecord {\n\tconst current = readCommand(database, id);\n\tif (!current) throw new Error(`Unknown command journal entry: ${id}`);\n\tif (!COMMAND_TRANSITIONS[current.state].includes(state))\n\t\tthrow new Error(`Invalid command transition: ${current.state} -> ${state}`);\n\tconst now = new Date().toISOString();\n\tdatabase\n\t\t.prepare(\"UPDATE command_journal SET state = ?, recovery_reason = ?, updated_at = ? WHERE id = ?\")\n\t\t.run(state, reason ?? null, now, id);\n\treturn readCommand(database, id)!;\n}\n\nexport function openDurableStateStore(path: string): DurableStateStore {\n\tconst database = new DatabaseSync(path);\n\ttry {\n\t\tdatabase.exec(\"BEGIN IMMEDIATE\");\n\t\tcreateSchema(database);\n\t\tconst version = readSchemaVersion(database);\n\t\tif (version > CURRENT_DURABLE_STATE_SCHEMA_VERSION) {\n\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t\tthrow new Error(\n\t\t\t\t`Durable state database schema version ${version} is newer than this version (${CURRENT_DURABLE_STATE_SCHEMA_VERSION})`,\n\t\t\t);\n\t\t}\n\t\tif (version < 2) {\n\t\t\tconst commandColumns = database.prepare('PRAGMA table_info(\"command_journal\")').all() as Array<{\n\t\t\t\tname: string;\n\t\t\t}>;\n\t\t\tif (!commandColumns.some((column) => column.name === \"recovery_reason\"))\n\t\t\t\tdatabase.exec(\"ALTER TABLE command_journal ADD COLUMN recovery_reason TEXT\");\n\t\t}\n\t\tif (version < 3 && version > 0) {\n\t\t\tdatabase.exec(`\n\t\t\t\tALTER TABLE session_leases RENAME TO session_leases_v2;\n\t\t\t\tCREATE TABLE session_leases (\n\t\t\t\t\tsession_id TEXT NOT NULL,\n\t\t\t\t\towner_id TEXT NOT NULL,\n\t\t\t\t\tmode TEXT NOT NULL,\n\t\t\t\t\texpires_at TEXT NOT NULL,\n\t\t\t\t\tPRIMARY KEY (session_id, owner_id)\n\t\t\t\t);\n\t\t\t\tINSERT INTO session_leases (session_id, owner_id, mode, expires_at)\n\t\t\t\tSELECT session_id, owner_id, mode, expires_at FROM session_leases_v2;\n\t\t\t\tDROP TABLE session_leases_v2;\n\t\t\t`);\n\t\t}\n\t\tif (version < 4 && version > 0) {\n\t\t\tconst modelPerformanceColumns = database.prepare('PRAGMA table_info(\"model_performance\")').all() as Array<{\n\t\t\t\tname: string;\n\t\t\t}>;\n\t\t\tconst existingNames = new Set(modelPerformanceColumns.map((column) => column.name));\n\t\t\tfor (const [name, type] of MODEL_PERFORMANCE_V4_COLUMNS) {\n\t\t\t\tif (!existingNames.has(name)) database.exec(`ALTER TABLE model_performance ADD COLUMN ${name} ${type}`);\n\t\t\t}\n\t\t\tdatabase.exec(\"DROP TABLE IF EXISTS usage_totals\");\n\t\t}\n\t\tif (version < CURRENT_DURABLE_STATE_SCHEMA_VERSION) {\n\t\t\tdatabase\n\t\t\t\t.prepare(\"INSERT INTO schema_migrations (version, applied_at) VALUES (?, ?)\")\n\t\t\t\t.run(CURRENT_DURABLE_STATE_SCHEMA_VERSION, new Date().toISOString());\n\t\t}\n\t\tdatabase.exec(\"COMMIT\");\n\t} catch (error) {\n\t\ttry {\n\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t} catch {\n\t\t\t// Preserve the original migration error.\n\t\t}\n\t\tdatabase.close();\n\t\tthrow error;\n\t}\n\n\treturn {\n\t\tschemaVersion: () => readSchemaVersion(database),\n\t\ttableNames: () => {\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%' ORDER BY name\")\n\t\t\t\t.all() as Array<{ name: string }>;\n\t\t\treturn rows.map((row) => row.name);\n\t\t},\n\t\tcolumns: (tableName) => {\n\t\t\tif (!TABLES.includes(tableName as (typeof TABLES)[number]))\n\t\t\t\tthrow new Error(`Unknown durable-state table: ${tableName}`);\n\t\t\tconst rows = database.prepare(`PRAGMA table_info(\"${tableName}\")`).all() as Array<{ name: string }>;\n\t\t\treturn rows.map((row) => row.name);\n\t\t},\n\t\tbeginCommand: ({ id = randomUUID(), sessionId, command }) => {\n\t\t\tconst now = new Date().toISOString();\n\t\t\tdatabase\n\t\t\t\t.prepare(\n\t\t\t\t\t\"INSERT INTO command_journal (id, session_id, command, state, created_at, updated_at) VALUES (?, ?, ?, 'created', ?, ?)\",\n\t\t\t\t)\n\t\t\t\t.run(id, sessionId, command, now, now);\n\t\t\treturn readCommand(database, id)!;\n\t\t},\n\t\trunCommand: async (input, operation) => {\n\t\t\tconst entry = (() => {\n\t\t\t\tconst id = input.id ?? randomUUID();\n\t\t\t\tconst now = new Date().toISOString();\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\"INSERT INTO command_journal (id, session_id, command, state, created_at, updated_at) VALUES (?, ?, ?, 'created', ?, ?)\",\n\t\t\t\t\t)\n\t\t\t\t\t.run(id, input.sessionId, input.command, now, now);\n\t\t\t\treturn readCommand(database, id)!;\n\t\t\t})();\n\t\t\ttransitionCommand(database, entry.id, \"running\");\n\t\t\ttry {\n\t\t\t\tconst result = await operation();\n\t\t\t\ttransitionCommand(database, entry.id, \"completed\");\n\t\t\t\treturn result;\n\t\t\t} catch (error) {\n\t\t\t\ttransitionCommand(database, entry.id, \"failed\");\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\t\ttransitionCommand: (id, state, reason) => {\n\t\t\tconst current = readCommand(database, id);\n\t\t\tif (!current) throw new Error(`Unknown command journal entry: ${id}`);\n\t\t\tif (!COMMAND_TRANSITIONS[current.state].includes(state))\n\t\t\t\tthrow new Error(`Invalid command transition: ${current.state} -> ${state}`);\n\t\t\tconst now = new Date().toISOString();\n\t\t\tdatabase\n\t\t\t\t.prepare(\"UPDATE command_journal SET state = ?, recovery_reason = ?, updated_at = ? WHERE id = ?\")\n\t\t\t\t.run(state, reason ?? null, now, id);\n\t\t\treturn readCommand(database, id)!;\n\t\t},\n\t\tgetCommand: (id) => readCommand(database, id),\n\t\tcommandCount: () =>\n\t\t\t(database.prepare(\"SELECT COUNT(*) AS count FROM command_journal\").get() as { count: number }).count,\n\t\trecoverUnfinishedCommands: (reason = \"daemon restarted before command completion\") => {\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT id FROM command_journal WHERE state IN ('created', 'running')\")\n\t\t\t\t.all() as Array<{ id: string }>;\n\t\t\treturn rows.map(({ id }) => {\n\t\t\t\tconst current = readCommand(database, id)!;\n\t\t\t\treturn current.state === \"interrupted\" ? current : transitionCommand(database, id, \"interrupted\", reason);\n\t\t\t});\n\t\t},\n\t\trecoverUnfinishedCommandsWithDiagnostics: (reason = \"daemon restarted before command completion\") => {\n\t\t\tconst recoveredAt = new Date().toISOString();\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT id, session_id, state FROM command_journal WHERE state IN ('created', 'running')\")\n\t\t\t\t.all() as Array<{ id: string; session_id: string; state: \"created\" | \"running\" }>;\n\t\t\treturn rows.map((row) => {\n\t\t\t\ttransitionCommand(database, row.id, \"interrupted\", reason);\n\t\t\t\treturn {\n\t\t\t\t\tcommandId: row.id,\n\t\t\t\t\tsessionId: row.session_id,\n\t\t\t\t\tpreviousState: row.state,\n\t\t\t\t\tstate: \"interrupted\" as const,\n\t\t\t\t\treason,\n\t\t\t\t\trecoveredAt,\n\t\t\t\t};\n\t\t\t});\n\t\t},\n\t\tacquireLease: ({ sessionId, ownerId, mode, ttlMs }) => {\n\t\t\tif (!Number.isFinite(ttlMs) || ttlMs <= 0) throw new Error(\"Lease TTL must be positive\");\n\t\t\tdatabase.exec(\"BEGIN IMMEDIATE\");\n\t\t\ttry {\n\t\t\t\tdatabase.prepare(\"DELETE FROM session_leases WHERE expires_at <= ?\").run(new Date().toISOString());\n\t\t\t\tconst active = readLeases(database, sessionId).filter((lease) => lease.ownerId !== ownerId);\n\t\t\t\tif (active.some((lease) => lease.mode === \"exclusive\") || (mode === \"exclusive\" && active.length > 0)) {\n\t\t\t\t\tthrow new Error(`Session lease is held for ${sessionId}`);\n\t\t\t\t}\n\t\t\t\tconst expiresAt = new Date(Date.now() + ttlMs).toISOString();\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\"INSERT INTO session_leases (session_id, owner_id, mode, expires_at) VALUES (?, ?, ?, ?) ON CONFLICT(session_id, owner_id) DO UPDATE SET mode=excluded.mode, expires_at=excluded.expires_at\",\n\t\t\t\t\t)\n\t\t\t\t\t.run(sessionId, ownerId, mode, expiresAt);\n\t\t\t\tdatabase.exec(\"COMMIT\");\n\t\t\t\treturn readLeases(database, sessionId).find((lease) => lease.ownerId === ownerId)!;\n\t\t\t} catch (error) {\n\t\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\t\treleaseLease: (sessionId, ownerId) => {\n\t\t\tdatabase.prepare(\"DELETE FROM session_leases WHERE session_id = ? AND owner_id = ?\").run(sessionId, ownerId);\n\t\t},\n\t\tgetLease: (sessionId) => readLease(database, sessionId),\n\t\trecordUsagePerformance: (row) => {\n\t\t\tdatabase\n\t\t\t\t.prepare(\n\t\t\t\t\t`INSERT INTO model_performance (\n\t\t\t\t\t\tprovider, model_id, ttft_ms, generation_ms, sampled_at,\n\t\t\t\t\t\tsession_id, role, credential_identity, outcome, failure_kind,\n\t\t\t\t\t\tinput_tokens, output_tokens, cache_read_tokens, cache_write_tokens, cost\n\t\t\t\t\t) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n\t\t\t\t)\n\t\t\t\t.run(\n\t\t\t\t\trow.provider,\n\t\t\t\t\trow.modelId,\n\t\t\t\t\trow.ttftMs,\n\t\t\t\t\trow.generationMs,\n\t\t\t\t\trow.sampledAt,\n\t\t\t\t\trow.sessionId,\n\t\t\t\t\trow.role,\n\t\t\t\t\trow.credentialIdentity,\n\t\t\t\t\trow.outcome,\n\t\t\t\t\trow.failureKind,\n\t\t\t\t\trow.inputTokens,\n\t\t\t\t\trow.outputTokens,\n\t\t\t\t\trow.cacheReadTokens,\n\t\t\t\t\trow.cacheWriteTokens,\n\t\t\t\t\trow.cost,\n\t\t\t\t);\n\t\t},\n\t\tlistUsagePerformance: () =>\n\t\t\t(\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t`SELECT provider, model_id, ttft_ms, generation_ms, sampled_at, session_id, role,\n\t\t\t\t\t\t\tcredential_identity, outcome, failure_kind, input_tokens, output_tokens,\n\t\t\t\t\t\t\tcache_read_tokens, cache_write_tokens, cost\n\t\t\t\t\t\tFROM model_performance ORDER BY id ASC`,\n\t\t\t\t\t)\n\t\t\t\t\t.all() as Array<{\n\t\t\t\t\tprovider: string;\n\t\t\t\t\tmodel_id: string;\n\t\t\t\t\tttft_ms: number | null;\n\t\t\t\t\tgeneration_ms: number | null;\n\t\t\t\t\tsampled_at: string;\n\t\t\t\t\tsession_id: string | null;\n\t\t\t\t\trole: string | null;\n\t\t\t\t\tcredential_identity: string | null;\n\t\t\t\t\toutcome: string | null;\n\t\t\t\t\tfailure_kind: string | null;\n\t\t\t\t\tinput_tokens: number | null;\n\t\t\t\t\toutput_tokens: number | null;\n\t\t\t\t\tcache_read_tokens: number | null;\n\t\t\t\t\tcache_write_tokens: number | null;\n\t\t\t\t\tcost: number | null;\n\t\t\t\t}>\n\t\t\t).map((row) => ({\n\t\t\t\tprovider: row.provider,\n\t\t\t\tmodelId: row.model_id,\n\t\t\t\tttftMs: row.ttft_ms,\n\t\t\t\tgenerationMs: row.generation_ms,\n\t\t\t\tsampledAt: row.sampled_at,\n\t\t\t\tsessionId: row.session_id,\n\t\t\t\trole: row.role,\n\t\t\t\tcredentialIdentity: row.credential_identity,\n\t\t\t\toutcome: row.outcome,\n\t\t\t\tfailureKind: row.failure_kind,\n\t\t\t\tinputTokens: row.input_tokens,\n\t\t\t\toutputTokens: row.output_tokens,\n\t\t\t\tcacheReadTokens: row.cache_read_tokens,\n\t\t\t\tcacheWriteTokens: row.cache_write_tokens,\n\t\t\t\tcost: row.cost,\n\t\t\t})),\n\t\tpruneUsagePerformance: (olderThanIso) => {\n\t\t\tconst result = database.prepare(\"DELETE FROM model_performance WHERE sampled_at < ?\").run(olderThanIso);\n\t\t\treturn Number(result.changes);\n\t\t},\n\t\tclose: () => database.close(),\n\t};\n}\n"]}
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../../src/core/durable-state/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C;;;;;;;;;;;;;GAaG;AACH,MAAM,mBAAmB,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAK3D,SAAS,6BAA6B,GAA8B;IACnE,IAAI,OAAQ,UAAgC,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QAClE,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,YAAY,CAA4C,CAAC;QAClG,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,mBAAmB,CAAC,aAAa,CAE3E,CAAC;IACF,OAAO,gBAAgB,CAAC;AAAA,CACxB;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAsBtD,MAAM,mBAAmB,GAAgE;IACxF,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC;IAC7C,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC;IAC/C,SAAS,EAAE,EAAE;IACb,MAAM,EAAE,EAAE;IACV,WAAW,EAAE,EAAE;CACf,CAAC;AAEF,MAAM,MAAM,GAAG;IACd,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;CACP,CAAC;AAEX,kFAAkF;AAClF,MAAM,4BAA4B,GAA6C;IAC9E,CAAC,YAAY,EAAE,MAAM,CAAC;IACtB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,qBAAqB,EAAE,MAAM,CAAC;IAC/B,CAAC,SAAS,EAAE,MAAM,CAAC;IACnB,CAAC,cAAc,EAAE,MAAM,CAAC;IACxB,CAAC,cAAc,EAAE,SAAS,CAAC;IAC3B,CAAC,eAAe,EAAE,SAAS,CAAC;IAC5B,CAAC,mBAAmB,EAAE,SAAS,CAAC;IAChC,CAAC,oBAAoB,EAAE,SAAS,CAAC;IACjC,CAAC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AA4DF,SAAS,iBAAiB,CAAC,QAAsB,EAAU;IAC1D,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC,GAAG,EAE1F,CAAC;IACb,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;AAAA,CACzB;AAED,SAAS,YAAY,CAAC,QAAsB,EAAQ;IACnD,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgDb,CAAC,CAAC;AAAA,CACH;AAED,SAAS,WAAW,CAAC,QAAsB,EAAE,EAAU,EAAoC;IAC1F,MAAM,GAAG,GAAG,QAAQ;SAClB,OAAO,CACP,kHAAkH,CAClH;SACA,GAAG,CAAC,EAAE,CAUI,CAAC;IACb,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO;QACN,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AAAA,CACF;AAED,SAAS,UAAU,CAAC,QAAsB,EAAE,SAAiB,EAAwB;IACpF,MAAM,IAAI,GAAG,QAAQ;SACnB,OAAO,CACP,0GAA0G,CAC1G;SACA,GAAG,CAAC,SAAS,CAAgG,CAAC;IAChH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,UAAU;KACzB,CAAC,CAAC,CAAC;AAAA,CACJ;AAED,SAAS,SAAS,CAAC,QAAsB,EAAE,SAAiB,EAAkC;IAC7F,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,CAC1C;AAED,SAAS,iBAAiB,CACzB,QAAsB,EACtB,EAAU,EACV,KAA8C,EAC9C,MAAe,EACQ;IACvB,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,KAAK,OAAO,KAAK,EAAE,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,QAAQ;SACN,OAAO,CAAC,wFAAwF,CAAC;SACjG,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;AAAA,CAClC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAqB;IACtE,MAAM,MAAM,GAAG,6BAA6B,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC;QACJ,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,OAAO,GAAG,oCAAoC,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,IAAI,KAAK,CACd,yCAAyC,OAAO,gCAAgC,oCAAoC,GAAG,CACvH,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,EAEjF,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC;gBACtE,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;IAYb,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,uBAAuB,GAAG,QAAQ,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,EAE5F,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACpF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,4BAA4B,EAAE,CAAC;gBACzD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,4CAA4C,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YACzG,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,GAAG,oCAAoC,EAAE,CAAC;YACpD,QAAQ;iBACN,OAAO,CAAC,mEAAmE,CAAC;iBAC5E,GAAG,CAAC,oCAAoC,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,yCAAyC;QAC1C,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,KAAK,CAAC;IACb,CAAC;IAED,OAAO;QACN,aAAa,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QAChD,UAAU,EAAE,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,QAAQ;iBACnB,OAAO,CAAC,gGAAgG,CAAC;iBACzG,GAAG,EAA6B,CAAC;YACnC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAA,CACnC;QACD,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAoC,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,SAAS,IAAI,CAAC,CAAC,GAAG,EAA6B,CAAC;YACpG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAA,CACnC;QACD,YAAY,EAAE,CAAC,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,QAAQ;iBACN,OAAO,CACP,wHAAwH,CACxH;iBACA,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;QAAA,CAClC;QACD,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;gBACpB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,QAAQ;qBACN,OAAO,CACP,wHAAwH,CACxH;qBACA,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACpD,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;YAAA,CAClC,CAAC,EAAE,CAAC;YACL,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACjD,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;gBACjC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;gBACnD,OAAO,MAAM,CAAC;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM,KAAK,CAAC;YACb,CAAC;QAAA,CACD;QACD,iBAAiB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,KAAK,OAAO,KAAK,EAAE,CAAC,CAAC;YAC7E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,QAAQ;iBACN,OAAO,CAAC,wFAAwF,CAAC;iBACjG,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACtC,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;QAAA,CAClC;QACD,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC7C,YAAY,EAAE,GAAG,EAAE,CACjB,QAAQ,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK;QACrG,yBAAyB,EAAE,CAAC,MAAM,GAAG,4CAA4C,EAAE,EAAE,CAAC;YACrF,MAAM,IAAI,GAAG,QAAQ;iBACnB,OAAO,CAAC,sEAAsE,CAAC;iBAC/E,GAAG,EAA2B,CAAC;YACjC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YAAA,CAC1G,CAAC,CAAC;QAAA,CACH;QACD,wCAAwC,EAAE,CAAC,MAAM,GAAG,4CAA4C,EAAE,EAAE,CAAC;YACpG,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,QAAQ;iBACnB,OAAO,CAAC,yFAAyF,CAAC;iBAClG,GAAG,EAA6E,CAAC;YACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxB,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC3D,OAAO;oBACN,SAAS,EAAE,GAAG,CAAC,EAAE;oBACjB,SAAS,EAAE,GAAG,CAAC,UAAU;oBACzB,aAAa,EAAE,GAAG,CAAC,KAAK;oBACxB,KAAK,EAAE,aAAsB;oBAC7B,MAAM;oBACN,WAAW;iBACX,CAAC;YAAA,CACF,CAAC,CAAC;QAAA,CACH;QACD,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACzF,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACjC,IAAI,CAAC;gBACJ,QAAQ,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;gBACnG,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;gBAC5F,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;oBACvG,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,EAAE,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC7D,QAAQ;qBACN,OAAO,CACP,4LAA4L,CAC5L;qBACA,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC3C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxB,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAE,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC1B,MAAM,KAAK,CAAC;YACb,CAAC;QAAA,CACD;QACD,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YACrC,QAAQ,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAAA,CAC7G;QACD,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;QACvD,sBAAsB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;YAChC,QAAQ;iBACN,OAAO,CACP;;;;4DAIuD,CACvD;iBACA,GAAG,CACH,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,YAAY,EAChB,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,kBAAkB,EACtB,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,EAChB,GAAG,CAAC,eAAe,EACnB,GAAG,CAAC,gBAAgB,EACpB,GAAG,CAAC,IAAI,CACR,CAAC;QAAA,CACH;QACD,oBAAoB,EAAE,GAAG,EAAE,CAEzB,QAAQ;aACN,OAAO,CACP;;;6CAGuC,CACvC;aACA,GAAG,EAiBL,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACf,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,kBAAkB,EAAE,GAAG,CAAC,mBAAmB;YAC3C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,eAAe,EAAE,GAAG,CAAC,iBAAiB;YACtC,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;YACxC,IAAI,EAAE,GAAG,CAAC,IAAI;SACd,CAAC,CAAC;QACJ,qBAAqB,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACxG,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAA,CAC9B;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE;KAC7B,CAAC;AAAA,CACF","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { createRequire } from \"node:module\";\nimport type { DatabaseSync } from \"node:sqlite\";\n\n/**\n * `bun build --compile` bundles this module into the standalone binary, and Bun does not\n * implement `node:sqlite` at all — not under `bun run`, not compiled. A static\n * `import { DatabaseSync } from \"node:sqlite\"` therefore breaks the standalone binary. Bun\n * ships its own `bun:sqlite`, whose `Database` exposes the same `.exec` / `.prepare(sql).get\n * /.all/.run` / `.close` surface this module relies on (verified directly against 1.3.14),\n * so the fix is to pick the binding at runtime rather than pull in either module statically.\n *\n * `createRequire` plus a runtime-computed specifier is load-bearing: it's what keeps this\n * `require(\"node:sqlite\")` call from being resolved when Bun bundles the compiled binary\n * (the branch is never taken under Bun, but the bundler would still try to resolve every\n * import it can see statically). A plain top-level `import` of either module — or a\n * dynamic `import()` with a literal specifier — does not get that exemption.\n */\nconst requireSqliteModule = createRequire(import.meta.url);\n\n/** The subset of `DatabaseSync` / `bun:sqlite`'s `Database` this module actually uses. */\ntype SqliteDatabaseConstructor = new (path: string) => DatabaseSync;\n\nfunction loadSqliteDatabaseConstructor(): SqliteDatabaseConstructor {\n\tif (typeof (globalThis as { Bun?: unknown }).Bun !== \"undefined\") {\n\t\tconst { Database } = requireSqliteModule(\"bun:sqlite\") as { Database: SqliteDatabaseConstructor };\n\t\treturn Database;\n\t}\n\tconst { DatabaseSync: NodeDatabaseSync } = requireSqliteModule(\"node:sqlite\") as {\n\t\tDatabaseSync: SqliteDatabaseConstructor;\n\t};\n\treturn NodeDatabaseSync;\n}\n\n/** Current schema for the daemon-owned durable-state sidecar. */\nexport const CURRENT_DURABLE_STATE_SCHEMA_VERSION = 4;\n\nexport type CommandJournalState = \"created\" | \"running\" | \"completed\" | \"failed\" | \"interrupted\";\n\nexport type SessionLeaseMode = \"shared\" | \"exclusive\";\nexport interface SessionLeaseRecord {\n\tsessionId: string;\n\townerId: string;\n\tmode: SessionLeaseMode;\n\texpiresAt: string;\n}\n\nexport interface CommandJournalRecord {\n\tid: string;\n\tsessionId: string;\n\tcommand: string;\n\tstate: CommandJournalState;\n\tcreatedAt: string;\n\tupdatedAt: string;\n\trecoveryReason?: string;\n}\n\nconst COMMAND_TRANSITIONS: Record<CommandJournalState, readonly CommandJournalState[]> = {\n\tcreated: [\"running\", \"failed\", \"interrupted\"],\n\trunning: [\"completed\", \"failed\", \"interrupted\"],\n\tcompleted: [],\n\tfailed: [],\n\tinterrupted: [],\n};\n\nconst TABLES = [\n\t\"cache_entries\",\n\t\"command_journal\",\n\t\"daemon_metadata\",\n\t\"model_performance\",\n\t\"schema_migrations\",\n\t\"session_leases\",\n] as const;\n\n/** Columns added to `model_performance` in schema version 4 (roadmap Phase 8). */\nconst MODEL_PERFORMANCE_V4_COLUMNS: ReadonlyArray<readonly [string, string]> = [\n\t[\"session_id\", \"TEXT\"],\n\t[\"role\", \"TEXT\"],\n\t[\"credential_identity\", \"TEXT\"],\n\t[\"outcome\", \"TEXT\"],\n\t[\"failure_kind\", \"TEXT\"],\n\t[\"input_tokens\", \"INTEGER\"],\n\t[\"output_tokens\", \"INTEGER\"],\n\t[\"cache_read_tokens\", \"INTEGER\"],\n\t[\"cache_write_tokens\", \"INTEGER\"],\n\t[\"cost\", \"REAL\"],\n];\n\n/**\n * Plain, domain-independent row shape for `model_performance`. Deliberately not the\n * richer `UsagePerformanceSample` (which carries a branded `CredentialIdentity` and a\n * nested `usage` object) — this module owns SQLite schema and writes only, never\n * `ModelRuntime`'s domain types, to avoid a circular import between the two.\n */\nexport interface UsagePerformanceRow {\n\tprovider: string;\n\tmodelId: string;\n\tttftMs: number | null;\n\tgenerationMs: number | null;\n\tsampledAt: string;\n\tsessionId: string | null;\n\trole: string | null;\n\tcredentialIdentity: string | null;\n\toutcome: string | null;\n\tfailureKind: string | null;\n\tinputTokens: number | null;\n\toutputTokens: number | null;\n\tcacheReadTokens: number | null;\n\tcacheWriteTokens: number | null;\n\tcost: number | null;\n}\n\nexport interface RecoveryDiagnostic {\n\tcommandId: string;\n\tsessionId: string;\n\tpreviousState: \"created\" | \"running\";\n\tstate: \"interrupted\";\n\treason: string;\n\trecoveredAt: string;\n}\n\nexport interface DurableStateStore {\n\tschemaVersion(): number;\n\ttableNames(): string[];\n\tcolumns(tableName: string): string[];\n\tbeginCommand(input: { id?: string; sessionId: string; command: string }): CommandJournalRecord;\n\trunCommand<T>(input: { id?: string; sessionId: string; command: string }, operation: () => Promise<T>): Promise<T>;\n\ttransitionCommand(id: string, state: Exclude<CommandJournalState, \"created\">, reason?: string): CommandJournalRecord;\n\tgetCommand(id: string): CommandJournalRecord | undefined;\n\tcommandCount(): number;\n\trecoverUnfinishedCommands(reason?: string): CommandJournalRecord[];\n\trecoverUnfinishedCommandsWithDiagnostics(reason?: string): RecoveryDiagnostic[];\n\tacquireLease(input: {\n\t\tsessionId: string;\n\t\townerId: string;\n\t\tmode: SessionLeaseMode;\n\t\tttlMs: number;\n\t}): SessionLeaseRecord;\n\treleaseLease(sessionId: string, ownerId: string): void;\n\tgetLease(sessionId: string): SessionLeaseRecord | undefined;\n\trecordUsagePerformance(row: UsagePerformanceRow): void;\n\tlistUsagePerformance(): UsagePerformanceRow[];\n\tpruneUsagePerformance(olderThanIso: string): number;\n\tclose(): void;\n}\n\nfunction readSchemaVersion(database: DatabaseSync): number {\n\tconst row = database.prepare(\"SELECT COALESCE(MAX(version), 0) AS version FROM schema_migrations\").get() as\n\t\t| { version: number }\n\t\t| undefined;\n\treturn row?.version ?? 0;\n}\n\nfunction createSchema(database: DatabaseSync): void {\n\tdatabase.exec(`\n\t\tCREATE TABLE IF NOT EXISTS schema_migrations (\n\t\t\tversion INTEGER PRIMARY KEY,\n\t\t\tapplied_at TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS daemon_metadata (\n\t\t\tkey TEXT PRIMARY KEY,\n\t\t\tvalue TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS command_journal (\n\t\t\tid TEXT PRIMARY KEY,\n\t\t\tsession_id TEXT NOT NULL,\n\t\t\tcommand TEXT NOT NULL,\n\t\t\tstate TEXT NOT NULL,\n\t\t\trecovery_reason TEXT,\n\t\t\tcreated_at TEXT NOT NULL,\n\t\t\tupdated_at TEXT NOT NULL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS session_leases (\n\t\t\tsession_id TEXT NOT NULL,\n\t\t\towner_id TEXT NOT NULL,\n\t\t\tmode TEXT NOT NULL,\n\t\t\texpires_at TEXT NOT NULL,\n\t\t\tPRIMARY KEY (session_id, owner_id)\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS model_performance (\n\t\t\tid INTEGER PRIMARY KEY,\n\t\t\tprovider TEXT NOT NULL,\n\t\t\tmodel_id TEXT NOT NULL,\n\t\t\tttft_ms REAL,\n\t\t\tgeneration_ms REAL,\n\t\t\tsampled_at TEXT NOT NULL,\n\t\t\tsession_id TEXT,\n\t\t\trole TEXT,\n\t\t\tcredential_identity TEXT,\n\t\t\toutcome TEXT,\n\t\t\tfailure_kind TEXT,\n\t\t\tinput_tokens INTEGER,\n\t\t\toutput_tokens INTEGER,\n\t\t\tcache_read_tokens INTEGER,\n\t\t\tcache_write_tokens INTEGER,\n\t\t\tcost REAL\n\t\t);\n\t\tCREATE TABLE IF NOT EXISTS cache_entries (\n\t\t\tkey TEXT PRIMARY KEY,\n\t\t\tvalue BLOB NOT NULL,\n\t\t\texpires_at TEXT\n\t\t);\n\t`);\n}\n\nfunction readCommand(database: DatabaseSync, id: string): CommandJournalRecord | undefined {\n\tconst row = database\n\t\t.prepare(\n\t\t\t\"SELECT id, session_id, command, state, recovery_reason, created_at, updated_at FROM command_journal WHERE id = ?\",\n\t\t)\n\t\t.get(id) as\n\t\t| {\n\t\t\t\tid: string;\n\t\t\t\tsession_id: string;\n\t\t\t\tcommand: string;\n\t\t\t\tstate: CommandJournalState;\n\t\t\t\trecovery_reason: string | null;\n\t\t\t\tcreated_at: string;\n\t\t\t\tupdated_at: string;\n\t\t  }\n\t\t| undefined;\n\tif (!row) return undefined;\n\treturn {\n\t\tid: row.id,\n\t\tsessionId: row.session_id,\n\t\tcommand: row.command,\n\t\tstate: row.state,\n\t\tcreatedAt: row.created_at,\n\t\tupdatedAt: row.updated_at,\n\t\t...(row.recovery_reason ? { recoveryReason: row.recovery_reason } : {}),\n\t};\n}\n\nfunction readLeases(database: DatabaseSync, sessionId: string): SessionLeaseRecord[] {\n\tconst rows = database\n\t\t.prepare(\n\t\t\t\"SELECT session_id, owner_id, mode, expires_at FROM session_leases WHERE session_id = ? ORDER BY owner_id\",\n\t\t)\n\t\t.all(sessionId) as Array<{ session_id: string; owner_id: string; mode: SessionLeaseMode; expires_at: string }>;\n\treturn rows.map((row) => ({\n\t\tsessionId: row.session_id,\n\t\townerId: row.owner_id,\n\t\tmode: row.mode,\n\t\texpiresAt: row.expires_at,\n\t}));\n}\n\nfunction readLease(database: DatabaseSync, sessionId: string): SessionLeaseRecord | undefined {\n\treturn readLeases(database, sessionId)[0];\n}\n\nfunction transitionCommand(\n\tdatabase: DatabaseSync,\n\tid: string,\n\tstate: Exclude<CommandJournalState, \"created\">,\n\treason?: string,\n): CommandJournalRecord {\n\tconst current = readCommand(database, id);\n\tif (!current) throw new Error(`Unknown command journal entry: ${id}`);\n\tif (!COMMAND_TRANSITIONS[current.state].includes(state))\n\t\tthrow new Error(`Invalid command transition: ${current.state} -> ${state}`);\n\tconst now = new Date().toISOString();\n\tdatabase\n\t\t.prepare(\"UPDATE command_journal SET state = ?, recovery_reason = ?, updated_at = ? WHERE id = ?\")\n\t\t.run(state, reason ?? null, now, id);\n\treturn readCommand(database, id)!;\n}\n\nexport function openDurableStateStore(path: string): DurableStateStore {\n\tconst Sqlite = loadSqliteDatabaseConstructor();\n\tconst database = new Sqlite(path);\n\ttry {\n\t\tdatabase.exec(\"BEGIN IMMEDIATE\");\n\t\tcreateSchema(database);\n\t\tconst version = readSchemaVersion(database);\n\t\tif (version > CURRENT_DURABLE_STATE_SCHEMA_VERSION) {\n\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t\tthrow new Error(\n\t\t\t\t`Durable state database schema version ${version} is newer than this version (${CURRENT_DURABLE_STATE_SCHEMA_VERSION})`,\n\t\t\t);\n\t\t}\n\t\tif (version < 2) {\n\t\t\tconst commandColumns = database.prepare('PRAGMA table_info(\"command_journal\")').all() as Array<{\n\t\t\t\tname: string;\n\t\t\t}>;\n\t\t\tif (!commandColumns.some((column) => column.name === \"recovery_reason\"))\n\t\t\t\tdatabase.exec(\"ALTER TABLE command_journal ADD COLUMN recovery_reason TEXT\");\n\t\t}\n\t\tif (version < 3 && version > 0) {\n\t\t\tdatabase.exec(`\n\t\t\t\tALTER TABLE session_leases RENAME TO session_leases_v2;\n\t\t\t\tCREATE TABLE session_leases (\n\t\t\t\t\tsession_id TEXT NOT NULL,\n\t\t\t\t\towner_id TEXT NOT NULL,\n\t\t\t\t\tmode TEXT NOT NULL,\n\t\t\t\t\texpires_at TEXT NOT NULL,\n\t\t\t\t\tPRIMARY KEY (session_id, owner_id)\n\t\t\t\t);\n\t\t\t\tINSERT INTO session_leases (session_id, owner_id, mode, expires_at)\n\t\t\t\tSELECT session_id, owner_id, mode, expires_at FROM session_leases_v2;\n\t\t\t\tDROP TABLE session_leases_v2;\n\t\t\t`);\n\t\t}\n\t\tif (version < 4 && version > 0) {\n\t\t\tconst modelPerformanceColumns = database.prepare('PRAGMA table_info(\"model_performance\")').all() as Array<{\n\t\t\t\tname: string;\n\t\t\t}>;\n\t\t\tconst existingNames = new Set(modelPerformanceColumns.map((column) => column.name));\n\t\t\tfor (const [name, type] of MODEL_PERFORMANCE_V4_COLUMNS) {\n\t\t\t\tif (!existingNames.has(name)) database.exec(`ALTER TABLE model_performance ADD COLUMN ${name} ${type}`);\n\t\t\t}\n\t\t\tdatabase.exec(\"DROP TABLE IF EXISTS usage_totals\");\n\t\t}\n\t\tif (version < CURRENT_DURABLE_STATE_SCHEMA_VERSION) {\n\t\t\tdatabase\n\t\t\t\t.prepare(\"INSERT INTO schema_migrations (version, applied_at) VALUES (?, ?)\")\n\t\t\t\t.run(CURRENT_DURABLE_STATE_SCHEMA_VERSION, new Date().toISOString());\n\t\t}\n\t\tdatabase.exec(\"COMMIT\");\n\t} catch (error) {\n\t\ttry {\n\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t} catch {\n\t\t\t// Preserve the original migration error.\n\t\t}\n\t\tdatabase.close();\n\t\tthrow error;\n\t}\n\n\treturn {\n\t\tschemaVersion: () => readSchemaVersion(database),\n\t\ttableNames: () => {\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%' ORDER BY name\")\n\t\t\t\t.all() as Array<{ name: string }>;\n\t\t\treturn rows.map((row) => row.name);\n\t\t},\n\t\tcolumns: (tableName) => {\n\t\t\tif (!TABLES.includes(tableName as (typeof TABLES)[number]))\n\t\t\t\tthrow new Error(`Unknown durable-state table: ${tableName}`);\n\t\t\tconst rows = database.prepare(`PRAGMA table_info(\"${tableName}\")`).all() as Array<{ name: string }>;\n\t\t\treturn rows.map((row) => row.name);\n\t\t},\n\t\tbeginCommand: ({ id = randomUUID(), sessionId, command }) => {\n\t\t\tconst now = new Date().toISOString();\n\t\t\tdatabase\n\t\t\t\t.prepare(\n\t\t\t\t\t\"INSERT INTO command_journal (id, session_id, command, state, created_at, updated_at) VALUES (?, ?, ?, 'created', ?, ?)\",\n\t\t\t\t)\n\t\t\t\t.run(id, sessionId, command, now, now);\n\t\t\treturn readCommand(database, id)!;\n\t\t},\n\t\trunCommand: async (input, operation) => {\n\t\t\tconst entry = (() => {\n\t\t\t\tconst id = input.id ?? randomUUID();\n\t\t\t\tconst now = new Date().toISOString();\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\"INSERT INTO command_journal (id, session_id, command, state, created_at, updated_at) VALUES (?, ?, ?, 'created', ?, ?)\",\n\t\t\t\t\t)\n\t\t\t\t\t.run(id, input.sessionId, input.command, now, now);\n\t\t\t\treturn readCommand(database, id)!;\n\t\t\t})();\n\t\t\ttransitionCommand(database, entry.id, \"running\");\n\t\t\ttry {\n\t\t\t\tconst result = await operation();\n\t\t\t\ttransitionCommand(database, entry.id, \"completed\");\n\t\t\t\treturn result;\n\t\t\t} catch (error) {\n\t\t\t\ttransitionCommand(database, entry.id, \"failed\");\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\t\ttransitionCommand: (id, state, reason) => {\n\t\t\tconst current = readCommand(database, id);\n\t\t\tif (!current) throw new Error(`Unknown command journal entry: ${id}`);\n\t\t\tif (!COMMAND_TRANSITIONS[current.state].includes(state))\n\t\t\t\tthrow new Error(`Invalid command transition: ${current.state} -> ${state}`);\n\t\t\tconst now = new Date().toISOString();\n\t\t\tdatabase\n\t\t\t\t.prepare(\"UPDATE command_journal SET state = ?, recovery_reason = ?, updated_at = ? WHERE id = ?\")\n\t\t\t\t.run(state, reason ?? null, now, id);\n\t\t\treturn readCommand(database, id)!;\n\t\t},\n\t\tgetCommand: (id) => readCommand(database, id),\n\t\tcommandCount: () =>\n\t\t\t(database.prepare(\"SELECT COUNT(*) AS count FROM command_journal\").get() as { count: number }).count,\n\t\trecoverUnfinishedCommands: (reason = \"daemon restarted before command completion\") => {\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT id FROM command_journal WHERE state IN ('created', 'running')\")\n\t\t\t\t.all() as Array<{ id: string }>;\n\t\t\treturn rows.map(({ id }) => {\n\t\t\t\tconst current = readCommand(database, id)!;\n\t\t\t\treturn current.state === \"interrupted\" ? current : transitionCommand(database, id, \"interrupted\", reason);\n\t\t\t});\n\t\t},\n\t\trecoverUnfinishedCommandsWithDiagnostics: (reason = \"daemon restarted before command completion\") => {\n\t\t\tconst recoveredAt = new Date().toISOString();\n\t\t\tconst rows = database\n\t\t\t\t.prepare(\"SELECT id, session_id, state FROM command_journal WHERE state IN ('created', 'running')\")\n\t\t\t\t.all() as Array<{ id: string; session_id: string; state: \"created\" | \"running\" }>;\n\t\t\treturn rows.map((row) => {\n\t\t\t\ttransitionCommand(database, row.id, \"interrupted\", reason);\n\t\t\t\treturn {\n\t\t\t\t\tcommandId: row.id,\n\t\t\t\t\tsessionId: row.session_id,\n\t\t\t\t\tpreviousState: row.state,\n\t\t\t\t\tstate: \"interrupted\" as const,\n\t\t\t\t\treason,\n\t\t\t\t\trecoveredAt,\n\t\t\t\t};\n\t\t\t});\n\t\t},\n\t\tacquireLease: ({ sessionId, ownerId, mode, ttlMs }) => {\n\t\t\tif (!Number.isFinite(ttlMs) || ttlMs <= 0) throw new Error(\"Lease TTL must be positive\");\n\t\t\tdatabase.exec(\"BEGIN IMMEDIATE\");\n\t\t\ttry {\n\t\t\t\tdatabase.prepare(\"DELETE FROM session_leases WHERE expires_at <= ?\").run(new Date().toISOString());\n\t\t\t\tconst active = readLeases(database, sessionId).filter((lease) => lease.ownerId !== ownerId);\n\t\t\t\tif (active.some((lease) => lease.mode === \"exclusive\") || (mode === \"exclusive\" && active.length > 0)) {\n\t\t\t\t\tthrow new Error(`Session lease is held for ${sessionId}`);\n\t\t\t\t}\n\t\t\t\tconst expiresAt = new Date(Date.now() + ttlMs).toISOString();\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\"INSERT INTO session_leases (session_id, owner_id, mode, expires_at) VALUES (?, ?, ?, ?) ON CONFLICT(session_id, owner_id) DO UPDATE SET mode=excluded.mode, expires_at=excluded.expires_at\",\n\t\t\t\t\t)\n\t\t\t\t\t.run(sessionId, ownerId, mode, expiresAt);\n\t\t\t\tdatabase.exec(\"COMMIT\");\n\t\t\t\treturn readLeases(database, sessionId).find((lease) => lease.ownerId === ownerId)!;\n\t\t\t} catch (error) {\n\t\t\t\tdatabase.exec(\"ROLLBACK\");\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\t\treleaseLease: (sessionId, ownerId) => {\n\t\t\tdatabase.prepare(\"DELETE FROM session_leases WHERE session_id = ? AND owner_id = ?\").run(sessionId, ownerId);\n\t\t},\n\t\tgetLease: (sessionId) => readLease(database, sessionId),\n\t\trecordUsagePerformance: (row) => {\n\t\t\tdatabase\n\t\t\t\t.prepare(\n\t\t\t\t\t`INSERT INTO model_performance (\n\t\t\t\t\t\tprovider, model_id, ttft_ms, generation_ms, sampled_at,\n\t\t\t\t\t\tsession_id, role, credential_identity, outcome, failure_kind,\n\t\t\t\t\t\tinput_tokens, output_tokens, cache_read_tokens, cache_write_tokens, cost\n\t\t\t\t\t) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n\t\t\t\t)\n\t\t\t\t.run(\n\t\t\t\t\trow.provider,\n\t\t\t\t\trow.modelId,\n\t\t\t\t\trow.ttftMs,\n\t\t\t\t\trow.generationMs,\n\t\t\t\t\trow.sampledAt,\n\t\t\t\t\trow.sessionId,\n\t\t\t\t\trow.role,\n\t\t\t\t\trow.credentialIdentity,\n\t\t\t\t\trow.outcome,\n\t\t\t\t\trow.failureKind,\n\t\t\t\t\trow.inputTokens,\n\t\t\t\t\trow.outputTokens,\n\t\t\t\t\trow.cacheReadTokens,\n\t\t\t\t\trow.cacheWriteTokens,\n\t\t\t\t\trow.cost,\n\t\t\t\t);\n\t\t},\n\t\tlistUsagePerformance: () =>\n\t\t\t(\n\t\t\t\tdatabase\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t`SELECT provider, model_id, ttft_ms, generation_ms, sampled_at, session_id, role,\n\t\t\t\t\t\t\tcredential_identity, outcome, failure_kind, input_tokens, output_tokens,\n\t\t\t\t\t\t\tcache_read_tokens, cache_write_tokens, cost\n\t\t\t\t\t\tFROM model_performance ORDER BY id ASC`,\n\t\t\t\t\t)\n\t\t\t\t\t.all() as Array<{\n\t\t\t\t\tprovider: string;\n\t\t\t\t\tmodel_id: string;\n\t\t\t\t\tttft_ms: number | null;\n\t\t\t\t\tgeneration_ms: number | null;\n\t\t\t\t\tsampled_at: string;\n\t\t\t\t\tsession_id: string | null;\n\t\t\t\t\trole: string | null;\n\t\t\t\t\tcredential_identity: string | null;\n\t\t\t\t\toutcome: string | null;\n\t\t\t\t\tfailure_kind: string | null;\n\t\t\t\t\tinput_tokens: number | null;\n\t\t\t\t\toutput_tokens: number | null;\n\t\t\t\t\tcache_read_tokens: number | null;\n\t\t\t\t\tcache_write_tokens: number | null;\n\t\t\t\t\tcost: number | null;\n\t\t\t\t}>\n\t\t\t).map((row) => ({\n\t\t\t\tprovider: row.provider,\n\t\t\t\tmodelId: row.model_id,\n\t\t\t\tttftMs: row.ttft_ms,\n\t\t\t\tgenerationMs: row.generation_ms,\n\t\t\t\tsampledAt: row.sampled_at,\n\t\t\t\tsessionId: row.session_id,\n\t\t\t\trole: row.role,\n\t\t\t\tcredentialIdentity: row.credential_identity,\n\t\t\t\toutcome: row.outcome,\n\t\t\t\tfailureKind: row.failure_kind,\n\t\t\t\tinputTokens: row.input_tokens,\n\t\t\t\toutputTokens: row.output_tokens,\n\t\t\t\tcacheReadTokens: row.cache_read_tokens,\n\t\t\t\tcacheWriteTokens: row.cache_write_tokens,\n\t\t\t\tcost: row.cost,\n\t\t\t})),\n\t\tpruneUsagePerformance: (olderThanIso) => {\n\t\t\tconst result = database.prepare(\"DELETE FROM model_performance WHERE sampled_at < ?\").run(olderThanIso);\n\t\t\treturn Number(result.changes);\n\t\t},\n\t\tclose: () => database.close(),\n\t};\n}\n"]}

package/dist/core/exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/core/exec.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,wCAAwC;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC,CAoErB","sourcesContent":["/**\n * Shared command execution utilities for extensions and custom tools.\n */\n\nimport { spawn } from \"node:child_process\";\nimport { waitForChildProcess } from \"../utils/child-process.ts\";\n\n/**\n * Options for executing shell commands.\n */\nexport interface ExecOptions {\n\t/** AbortSignal to cancel the command */\n\tsignal?: AbortSignal;\n\t/** Timeout in milliseconds */\n\ttimeout?: number;\n\t/** Working directory */\n\tcwd?: string;\n}\n\n/**\n * Result of executing a shell command.\n */\nexport interface ExecResult {\n\tstdout: string;\n\tstderr: string;\n\tcode: number;\n\tkilled: boolean;\n}\n\n/**\n * Execute a shell command and return stdout/stderr/code.\n * Supports timeout and abort signal.\n */\nexport async function execCommand(\n\tcommand: string,\n\targs: string[],\n\tcwd: string,\n\toptions?: ExecOptions,\n): Promise<ExecResult> {\n\treturn new Promise((resolve) => {\n\t\tconst proc = spawn(command, args, {\n\t\t\tcwd,\n\t\t\tshell: false,\n\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t});\n\n\t\tlet stdout = \"\";\n\t\tlet stderr = \"\";\n\t\tlet killed = false;\n\t\tlet timeoutId: NodeJS.Timeout | undefined;\n\n\t\tconst killProcess = () => {\n\t\t\tif (!killed) {\n\t\t\t\tkilled = true;\n\t\t\t\tproc.kill(\"SIGTERM\");\n\t\t\t\t// Force kill after 5 seconds if SIGTERM doesn't work\n\t\t\t\tsetTimeout(() => {\n\t\t\t\t\tif (!proc.killed) {\n\t\t\t\t\t\tproc.kill(\"SIGKILL\");\n\t\t\t\t\t}\n\t\t\t\t}, 5000);\n\t\t\t}\n\t\t};\n\n\t\t// Handle abort signal\n\t\tif (options?.signal) {\n\t\t\tif (options.signal.aborted) {\n\t\t\t\tkillProcess();\n\t\t\t} else {\n\t\t\t\toptions.signal.addEventListener(\"abort\", killProcess, { once: true });\n\t\t\t}\n\t\t}\n\n\t\t// Handle timeout\n\t\tif (options?.timeout && options.timeout > 0) {\n\t\t\ttimeoutId = setTimeout(() => {\n\t\t\t\tkillProcess();\n\t\t\t}, options.timeout);\n\t\t}\n\n\t\tproc.stdout?.on(\"data\", (data) => {\n\t\t\tstdout += data.toString();\n\t\t});\n\n\t\tproc.stderr?.on(\"data\", (data) => {\n\t\t\tstderr += data.toString();\n\t\t});\n\n\t\t// Wait for process termination without hanging on inherited stdio handles\n\t\t// held open by detached descendants.\n\t\twaitForChildProcess(proc)\n\t\t\t.then((code) => {\n\t\t\t\tif (timeoutId) clearTimeout(timeoutId);\n\t\t\t\tif (options?.signal) {\n\t\t\t\t\toptions.signal.removeEventListener(\"abort\", killProcess);\n\t\t\t\t}\n\t\t\t\tresolve({ stdout, stderr, code: code ?? 0, killed });\n\t\t\t})\n\t\t\t.catch((_err) => {\n\t\t\t\tif (timeoutId) clearTimeout(timeoutId);\n\t\t\t\tif (options?.signal) {\n\t\t\t\t\toptions.signal.removeEventListener(\"abort\", killProcess);\n\t\t\t\t}\n\t\t\t\tresolve({ stdout, stderr, code: 1, killed });\n\t\t\t});\n\t});\n}\n"]}
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/core/exec.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,wCAAwC;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC,CAuErB","sourcesContent":["/**\n * Shared command execution utilities for extensions and custom tools.\n */\n\nimport { spawn } from \"node:child_process\";\nimport { waitForChildProcess } from \"../utils/child-process.ts\";\n\n/**\n * Options for executing shell commands.\n */\nexport interface ExecOptions {\n\t/** AbortSignal to cancel the command */\n\tsignal?: AbortSignal;\n\t/** Timeout in milliseconds */\n\ttimeout?: number;\n\t/** Working directory */\n\tcwd?: string;\n}\n\n/**\n * Result of executing a shell command.\n */\nexport interface ExecResult {\n\tstdout: string;\n\tstderr: string;\n\tcode: number;\n\tkilled: boolean;\n}\n\n/**\n * Execute a shell command and return stdout/stderr/code.\n * Supports timeout and abort signal.\n */\nexport async function execCommand(\n\tcommand: string,\n\targs: string[],\n\tcwd: string,\n\toptions?: ExecOptions,\n): Promise<ExecResult> {\n\treturn new Promise((resolve) => {\n\t\tconst proc = spawn(command, args, {\n\t\t\tcwd,\n\t\t\tshell: false,\n\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t});\n\n\t\tlet stdout = \"\";\n\t\tlet stderr = \"\";\n\t\tlet killed = false;\n\t\tlet timeoutId: NodeJS.Timeout | undefined;\n\n\t\tconst killProcess = () => {\n\t\t\tif (!killed) {\n\t\t\t\tkilled = true;\n\t\t\t\tproc.kill(\"SIGTERM\");\n\t\t\t\t// Force kill after 5 seconds if SIGTERM doesn't work.\n\t\t\t\t// unref'd: an aborted command must not hold the process open\n\t\t\t\t// for the escalation window on normal exit.\n\t\t\t\tconst forceKillTimer = setTimeout(() => {\n\t\t\t\t\tif (!proc.killed) {\n\t\t\t\t\t\tproc.kill(\"SIGKILL\");\n\t\t\t\t\t}\n\t\t\t\t}, 5000);\n\t\t\t\tforceKillTimer.unref();\n\t\t\t}\n\t\t};\n\n\t\t// Handle abort signal\n\t\tif (options?.signal) {\n\t\t\tif (options.signal.aborted) {\n\t\t\t\tkillProcess();\n\t\t\t} else {\n\t\t\t\toptions.signal.addEventListener(\"abort\", killProcess, { once: true });\n\t\t\t}\n\t\t}\n\n\t\t// Handle timeout\n\t\tif (options?.timeout && options.timeout > 0) {\n\t\t\ttimeoutId = setTimeout(() => {\n\t\t\t\tkillProcess();\n\t\t\t}, options.timeout);\n\t\t}\n\n\t\tproc.stdout?.on(\"data\", (data) => {\n\t\t\tstdout += data.toString();\n\t\t});\n\n\t\tproc.stderr?.on(\"data\", (data) => {\n\t\t\tstderr += data.toString();\n\t\t});\n\n\t\t// Wait for process termination without hanging on inherited stdio handles\n\t\t// held open by detached descendants.\n\t\twaitForChildProcess(proc)\n\t\t\t.then((code) => {\n\t\t\t\tif (timeoutId) clearTimeout(timeoutId);\n\t\t\t\tif (options?.signal) {\n\t\t\t\t\toptions.signal.removeEventListener(\"abort\", killProcess);\n\t\t\t\t}\n\t\t\t\tresolve({ stdout, stderr, code: code ?? 0, killed });\n\t\t\t})\n\t\t\t.catch((_err) => {\n\t\t\t\tif (timeoutId) clearTimeout(timeoutId);\n\t\t\t\tif (options?.signal) {\n\t\t\t\t\toptions.signal.removeEventListener(\"abort\", killProcess);\n\t\t\t\t}\n\t\t\t\tresolve({ stdout, stderr, code: 1, killed });\n\t\t\t});\n\t});\n}\n"]}

package/dist/core/exec.js

@@ -22,12 +22,15 @@ export async function execCommand(command, args, cwd, options) {
             if (!killed) {
                 killed = true;
                 proc.kill("SIGTERM");
-                // Force kill after 5 seconds if SIGTERM doesn't work
-                setTimeout(() => {
+                // Force kill after 5 seconds if SIGTERM doesn't work.
+                // unref'd: an aborted command must not hold the process open
+                // for the escalation window on normal exit.
+                const forceKillTimer = setTimeout(() => {
                     if (!proc.killed) {
                         proc.kill("SIGKILL");
                     }
                 }, 5000);
+                forceKillTimer.unref();
             }
         };
         // Handle abort signal

package/dist/core/exec.js.map

@@ -1 +1 @@
-{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/core/exec.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAwBhE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAChC,OAAe,EACf,IAAc,EACd,GAAW,EACX,OAAqB,EACC;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG;YACH,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SACjC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,SAAqC,CAAC;QAE1C,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACrB,qDAAqD;gBACrD,UAAU,CAAC,GAAG,EAAE,CAAC;oBAChB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;wBAClB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,CAAC;gBAAA,CACD,EAAE,IAAI,CAAC,CAAC;YACV,CAAC;QAAA,CACD,CAAC;QAEF,sBAAsB;QACtB,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC5B,WAAW,EAAE,CAAC;YACf,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;QACF,CAAC;QAED,iBAAiB;QACjB,IAAI,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YAC7C,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;gBAC5B,WAAW,EAAE,CAAC;YAAA,CACd,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAA,CAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAA,CAC1B,CAAC,CAAC;QAEH,0EAA0E;QAC1E,qCAAqC;QACrC,mBAAmB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACf,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAAA,CACrD,CAAC;aACD,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAChB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAAA,CAC7C,CAAC,CAAC;IAAA,CACJ,CAAC,CAAC;AAAA,CACH","sourcesContent":["/**\n * Shared command execution utilities for extensions and custom tools.\n */\n\nimport { spawn } from \"node:child_process\";\nimport { waitForChildProcess } from \"../utils/child-process.ts\";\n\n/**\n * Options for executing shell commands.\n */\nexport interface ExecOptions {\n\t/** AbortSignal to cancel the command */\n\tsignal?: AbortSignal;\n\t/** Timeout in milliseconds */\n\ttimeout?: number;\n\t/** Working directory */\n\tcwd?: string;\n}\n\n/**\n * Result of executing a shell command.\n */\nexport interface ExecResult {\n\tstdout: string;\n\tstderr: string;\n\tcode: number;\n\tkilled: boolean;\n}\n\n/**\n * Execute a shell command and return stdout/stderr/code.\n * Supports timeout and abort signal.\n */\nexport async function execCommand(\n\tcommand: string,\n\targs: string[],\n\tcwd: string,\n\toptions?: ExecOptions,\n): Promise<ExecResult> {\n\treturn new Promise((resolve) => {\n\t\tconst proc = spawn(command, args, {\n\t\t\tcwd,\n\t\t\tshell: false,\n\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t});\n\n\t\tlet stdout = \"\";\n\t\tlet stderr = \"\";\n\t\tlet killed = false;\n\t\tlet timeoutId: NodeJS.Timeout | undefined;\n\n\t\tconst killProcess = () => {\n\t\t\tif (!killed) {\n\t\t\t\tkilled = true;\n\t\t\t\tproc.kill(\"SIGTERM\");\n\t\t\t\t// Force kill after 5 seconds if SIGTERM doesn't work\n\t\t\t\tsetTimeout(() => {\n\t\t\t\t\tif (!proc.killed) {\n\t\t\t\t\t\tproc.kill(\"SIGKILL\");\n\t\t\t\t\t}\n\t\t\t\t}, 5000);\n\t\t\t}\n\t\t};\n\n\t\t// Handle abort signal\n\t\tif (options?.signal) {\n\t\t\tif (options.signal.aborted) {\n\t\t\t\tkillProcess();\n\t\t\t} else {\n\t\t\t\toptions.signal.addEventListener(\"abort\", killProcess, { once: true });\n\t\t\t}\n\t\t}\n\n\t\t// Handle timeout\n\t\tif (options?.timeout && options.timeout > 0) {\n\t\t\ttimeoutId = setTimeout(() => {\n\t\t\t\tkillProcess();\n\t\t\t}, options.timeout);\n\t\t}\n\n\t\tproc.stdout?.on(\"data\", (data) => {\n\t\t\tstdout += data.toString();\n\t\t});\n\n\t\tproc.stderr?.on(\"data\", (data) => {\n\t\t\tstderr += data.toString();\n\t\t});\n\n\t\t// Wait for process termination without hanging on inherited stdio handles\n\t\t// held open by detached descendants.\n\t\twaitForChildProcess(proc)\n\t\t\t.then((code) => {\n\t\t\t\tif (timeoutId) clearTimeout(timeoutId);\n\t\t\t\tif (options?.signal) {\n\t\t\t\t\toptions.signal.removeEventListener(\"abort\", killProcess);\n\t\t\t\t}\n\t\t\t\tresolve({ stdout, stderr, code: code ?? 0, killed });\n\t\t\t})\n\t\t\t.catch((_err) => {\n\t\t\t\tif (timeoutId) clearTimeout(timeoutId);\n\t\t\t\tif (options?.signal) {\n\t\t\t\t\toptions.signal.removeEventListener(\"abort\", killProcess);\n\t\t\t\t}\n\t\t\t\tresolve({ stdout, stderr, code: 1, killed });\n\t\t\t});\n\t});\n}\n"]}
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/core/exec.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAwBhE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAChC,OAAe,EACf,IAAc,EACd,GAAW,EACX,OAAqB,EACC;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG;YACH,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SACjC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,SAAqC,CAAC;QAE1C,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACrB,sDAAsD;gBACtD,6DAA6D;gBAC7D,4CAA4C;gBAC5C,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;oBACvC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;wBAClB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,CAAC;gBAAA,CACD,EAAE,IAAI,CAAC,CAAC;gBACT,cAAc,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;QAAA,CACD,CAAC;QAEF,sBAAsB;QACtB,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC5B,WAAW,EAAE,CAAC;YACf,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;QACF,CAAC;QAED,iBAAiB;QACjB,IAAI,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YAC7C,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;gBAC5B,WAAW,EAAE,CAAC;YAAA,CACd,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAA,CAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAA,CAC1B,CAAC,CAAC;QAEH,0EAA0E;QAC1E,qCAAqC;QACrC,mBAAmB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACf,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAAA,CACrD,CAAC;aACD,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAChB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAAA,CAC7C,CAAC,CAAC;IAAA,CACJ,CAAC,CAAC;AAAA,CACH","sourcesContent":["/**\n * Shared command execution utilities for extensions and custom tools.\n */\n\nimport { spawn } from \"node:child_process\";\nimport { waitForChildProcess } from \"../utils/child-process.ts\";\n\n/**\n * Options for executing shell commands.\n */\nexport interface ExecOptions {\n\t/** AbortSignal to cancel the command */\n\tsignal?: AbortSignal;\n\t/** Timeout in milliseconds */\n\ttimeout?: number;\n\t/** Working directory */\n\tcwd?: string;\n}\n\n/**\n * Result of executing a shell command.\n */\nexport interface ExecResult {\n\tstdout: string;\n\tstderr: string;\n\tcode: number;\n\tkilled: boolean;\n}\n\n/**\n * Execute a shell command and return stdout/stderr/code.\n * Supports timeout and abort signal.\n */\nexport async function execCommand(\n\tcommand: string,\n\targs: string[],\n\tcwd: string,\n\toptions?: ExecOptions,\n): Promise<ExecResult> {\n\treturn new Promise((resolve) => {\n\t\tconst proc = spawn(command, args, {\n\t\t\tcwd,\n\t\t\tshell: false,\n\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t});\n\n\t\tlet stdout = \"\";\n\t\tlet stderr = \"\";\n\t\tlet killed = false;\n\t\tlet timeoutId: NodeJS.Timeout | undefined;\n\n\t\tconst killProcess = () => {\n\t\t\tif (!killed) {\n\t\t\t\tkilled = true;\n\t\t\t\tproc.kill(\"SIGTERM\");\n\t\t\t\t// Force kill after 5 seconds if SIGTERM doesn't work.\n\t\t\t\t// unref'd: an aborted command must not hold the process open\n\t\t\t\t// for the escalation window on normal exit.\n\t\t\t\tconst forceKillTimer = setTimeout(() => {\n\t\t\t\t\tif (!proc.killed) {\n\t\t\t\t\t\tproc.kill(\"SIGKILL\");\n\t\t\t\t\t}\n\t\t\t\t}, 5000);\n\t\t\t\tforceKillTimer.unref();\n\t\t\t}\n\t\t};\n\n\t\t// Handle abort signal\n\t\tif (options?.signal) {\n\t\t\tif (options.signal.aborted) {\n\t\t\t\tkillProcess();\n\t\t\t} else {\n\t\t\t\toptions.signal.addEventListener(\"abort\", killProcess, { once: true });\n\t\t\t}\n\t\t}\n\n\t\t// Handle timeout\n\t\tif (options?.timeout && options.timeout > 0) {\n\t\t\ttimeoutId = setTimeout(() => {\n\t\t\t\tkillProcess();\n\t\t\t}, options.timeout);\n\t\t}\n\n\t\tproc.stdout?.on(\"data\", (data) => {\n\t\t\tstdout += data.toString();\n\t\t});\n\n\t\tproc.stderr?.on(\"data\", (data) => {\n\t\t\tstderr += data.toString();\n\t\t});\n\n\t\t// Wait for process termination without hanging on inherited stdio handles\n\t\t// held open by detached descendants.\n\t\twaitForChildProcess(proc)\n\t\t\t.then((code) => {\n\t\t\t\tif (timeoutId) clearTimeout(timeoutId);\n\t\t\t\tif (options?.signal) {\n\t\t\t\t\toptions.signal.removeEventListener(\"abort\", killProcess);\n\t\t\t\t}\n\t\t\t\tresolve({ stdout, stderr, code: code ?? 0, killed });\n\t\t\t})\n\t\t\t.catch((_err) => {\n\t\t\t\tif (timeoutId) clearTimeout(timeoutId);\n\t\t\t\tif (options?.signal) {\n\t\t\t\t\toptions.signal.removeEventListener(\"abort\", killProcess);\n\t\t\t\t}\n\t\t\t\tresolve({ stdout, stderr, code: 1, killed });\n\t\t\t});\n\t});\n}\n"]}

package/dist/core/extensions/index.d.ts

@@ -6,7 +6,7 @@ export type { SourceInfo } from "../source-info.ts";
 export { createExtensionRuntime, discoverAndLoadExtensions, loadExtensionFromFactory, loadExtensions, } from "./loader.ts";
 export type { ExtensionErrorListener, ForkHandler, NavigateTreeHandler, NewSessionHandler, ShutdownHandler, SwitchSessionHandler, } from "./runner.ts";
 export { ExtensionRunner } from "./runner.ts";
-export type { AfterProviderResponseEvent, AgentEndEvent, AgentSettledEvent, AgentStartEvent, AgentToolResult, AgentToolUpdateCallback, AppendEntryHandler, AppKeybinding, AutocompleteProviderFactory, BashToolCallEvent, BashToolResultEvent, BeforeAgentStartEvent, BeforeAgentStartEventResult, BeforeProviderHeadersEvent, BeforeProviderRequestEvent, BeforeProviderRequestEventResult, BuildSystemPromptOptions, CompactOptions, ContextEvent, ContextEventResult, ContextUsage, CustomToolCallEvent, CustomToolResultEvent, EditorFactory, EditToolCallEvent, EditToolResultEvent, EntryRenderer, EntryRenderOptions, ExecOptions, ExecResult, Extension, ExtensionActions, ExtensionAPI, ExtensionCommandContext, ExtensionCommandContextActions, ExtensionContext, ExtensionContextActions, ExtensionError, ExtensionEvent, ExtensionFactory, ExtensionFlag, ExtensionHandler, ExtensionMode, ExtensionRuntime, ExtensionShortcut, ExtensionUIContext, ExtensionUIDialogOptions, ExtensionWidgetOptions, FindToolCallEvent, FindToolResultEvent, GetActiveToolsHandler, GetAllToolsHandler, GetCommandsHandler, GetThinkingLevelHandler, GrepToolCallEvent, GrepToolResultEvent, InlineExtension, InputEvent, InputEventResult, InputSource, KeybindingsManager, LoadExtensionsResult, LsToolCallEvent, LsToolResultEvent, MarkdownTransformContext, MarkdownTransformer, MessageEndEvent, MessageRenderer, MessageRenderOptions, MessageStartEvent, MessageUpdateEvent, ModelSelectEvent, ModelSelectSource, ProjectTrustContext, ProjectTrustEvent, ProjectTrustEventDecision, ProjectTrustEventResult, ProjectTrustHandler, ProviderConfig, ProviderModelConfig, ReadToolCallEvent, ReadToolResultEvent, RegisteredCommand, RegisteredTool, ReplacedSessionContext, ResolvedCommand, ResourcesDiscoverEvent, ResourcesDiscoverResult, SendMessageHandler, SendUserMessageHandler, SessionBeforeCompactEvent, SessionBeforeCompactResult, SessionBeforeForkEvent, SessionBeforeForkResult, SessionBeforeSwitchEvent, SessionBeforeSwitchResult, SessionBeforeTreeEvent, SessionBeforeTreeResult, SessionCompactEvent, SessionEvent, SessionInfoChangedEvent, SessionShutdownEvent, SessionStartEvent, SessionTreeEvent, SetActiveToolsHandler, SetLabelHandler, SetModelHandler, SetThinkingLevelHandler, TerminalInputHandler, ToolCallEvent, ToolCallEventResult, ToolDefinition, ToolExecutionEndEvent, ToolExecutionMode, ToolExecutionStartEvent, ToolExecutionUpdateEvent, ToolInfo, ToolRenderResultOptions, ToolResultEvent, ToolResultEventResult, TreePreparation, TurnEndEvent, TurnStartEvent, UserBashEvent, UserBashEventResult, WidgetPlacement, WorkingIndicatorOptions, WriteToolCallEvent, WriteToolResultEvent, } from "./types.ts";
-export { defineTool, isBashToolResult, isEditToolResult, isFindToolResult, isGrepToolResult, isLsToolResult, isReadToolResult, isToolCallEventType, isWriteToolResult, } from "./types.ts";
+export type { AfterProviderResponseEvent, AgentEndEvent, AgentSettledEvent, AgentStartEvent, AgentToolResult, AgentToolUpdateCallback, AppendEntryHandler, AppKeybinding, AutocompleteProviderFactory, BashToolCallEvent, BashToolResultEvent, BeforeAgentStartEvent, BeforeAgentStartEventResult, BeforeProviderHeadersEvent, BeforeProviderRequestEvent, BeforeProviderRequestEventResult, BuildSystemPromptOptions, CompactOptions, ContextEvent, ContextEventResult, ContextUsage, CustomToolCallEvent, CustomToolResultEvent, EditorFactory, EditToolCallEvent, EditToolResultEvent, EntryRenderer, EntryRenderOptions, ExecOptions, ExecResult, Extension, ExtensionActions, ExtensionAPI, ExtensionCommandContext, ExtensionCommandContextActions, ExtensionContext, ExtensionContextActions, ExtensionError, ExtensionEvent, ExtensionFactory, ExtensionFlag, ExtensionHandler, ExtensionMode, ExtensionRuntime, ExtensionShortcut, ExtensionUIContext, ExtensionUIDialogOptions, ExtensionWidgetOptions, FindToolCallEvent, FindToolResultEvent, GetActiveToolsHandler, GetAllToolsHandler, GetCommandsHandler, GetThinkingLevelHandler, GrepToolCallEvent, GrepToolResultEvent, InlineExtension, InputEvent, InputEventResult, InputSource, KeybindingsManager, LoadExtensionsResult, LsToolCallEvent, LsToolResultEvent, MarkdownTransformContext, MarkdownTransformer, MessageEndEvent, MessageRenderer, MessageRenderOptions, MessageStartEvent, MessageUpdateEvent, ModelSelectEvent, ModelSelectSource, PowerShellToolCallEvent, PowerShellToolResultEvent, ProjectTrustContext, ProjectTrustEvent, ProjectTrustEventDecision, ProjectTrustEventResult, ProjectTrustHandler, ProviderConfig, ProviderModelConfig, ReadToolCallEvent, ReadToolResultEvent, RegisteredCommand, RegisteredTool, ReplacedSessionContext, ResolvedCommand, ResourcesDiscoverEvent, ResourcesDiscoverResult, SendMessageHandler, SendUserMessageHandler, SessionBeforeCompactEvent, SessionBeforeCompactResult, SessionBeforeForkEvent, SessionBeforeForkResult, SessionBeforeSwitchEvent, SessionBeforeSwitchResult, SessionBeforeTreeEvent, SessionBeforeTreeResult, SessionCompactEvent, SessionCompactFailedEvent, SessionEvent, SessionInfoChangedEvent, SessionShutdownEvent, SessionStartEvent, SessionTreeEvent, SetActiveToolsHandler, SetLabelHandler, SetModelHandler, SetThinkingLevelHandler, TerminalInputHandler, ToolCallEvent, ToolCallEventResult, ToolDefinition, ToolExecutionEndEvent, ToolExecutionMode, ToolExecutionStartEvent, ToolExecutionUpdateEvent, ToolInfo, ToolRenderResultOptions, ToolResultEvent, ToolResultEventResult, TreePreparation, TurnEndEvent, TurnStartEvent, UIPromptEndEvent, UIPromptKind, UIPromptStartEvent, UserBashEvent, UserBashEventResult, WidgetPlacement, WorkingIndicatorOptions, WriteToolCallEvent, WriteToolResultEvent, } from "./types.ts";
+export { defineTool, isBashToolResult, isEditToolResult, isFindToolResult, isGrepToolResult, isLsToolResult, isPowerShellToolResult, isReadToolResult, isToolCallEventType, isWriteToolResult, } from "./types.ts";
 export { wrapRegisteredTool, wrapRegisteredTools } from "./wrapper.ts";
 //# sourceMappingURL=index.d.ts.map