chorus-codes 0.7.0 → 0.7.2

package/dist/lib/db/connection.js

@@ -0,0 +1,254 @@
+"use strict";
+/**
+ * Chorus DB seam — backed by @libsql/client (napi-rs prebuilt for every
+ * platform; no node-gyp at install time). Migrated from better-sqlite3 in
+ * v0.7 to fix `npm install -g` reliability on Windows + locked-down dev
+ * machines (planning/libsql-migration.md).
+ *
+ * SQL dialect + on-disk format are unchanged — same SQLite3 file at
+ * ~/.chorus/chorus.db. Existing user DBs open cleanly.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveDbPath = resolveDbPath;
+exports.getDb = getDb;
+exports._resetDbForTests = _resetDbForTests;
+exports.generateUlid = generateUlid;
+const client_1 = require("@libsql/client");
+const fs_1 = require("fs");
+const fs_2 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+let dbInstance = null;
+let dbInitPromise = null;
+/**
+ * Resolve DB path lazily inside getDb() rather than at module load. Two
+ * reasons:
+ *   1. CHORUS_DB_PATH env override only takes effect if read at init time.
+ *      A module-level `const dbPath = ...` evaluates once on import and is
+ *      then frozen, so tests setting the env after import would have no
+ *      effect.
+ *   2. Tests need to swap DBs between cases without restarting the
+ *      process — see `_resetDbForTests()`.
+ */
+function resolveDbPath() {
+    const override = process.env.CHORUS_DB_PATH;
+    if (override)
+        return override;
+    return path_1.default.join(os_1.default.homedir(), '.chorus', 'chorus.db');
+}
+function resolveSchemaPath() {
+    // dist/lib/db/connection.js needs ../db/schema.sql; src/lib/db/
+    // connection.ts in tsx-watch dev mode resolves the same way. build:server
+    // copies the .sql alongside the compiled .js (see package.json).
+    return path_1.default.join(__dirname, '..', 'db', 'schema.sql');
+}
+async function getDb() {
+    if (dbInstance)
+        return dbInstance;
+    if (dbInitPromise)
+        return dbInitPromise;
+    dbInitPromise = initDb()
+        .then((db) => {
+        dbInstance = db;
+        return db;
+    })
+        .catch((err) => {
+        // CRITICAL: clear the cached promise on failure. Without this, a
+        // single transient init error (corrupted DB, FS hiccup, permission
+        // glitch) would lock the daemon forever — every subsequent getDb()
+        // call would return the same rejected promise until restart.
+        dbInitPromise = null;
+        throw err;
+    });
+    return dbInitPromise;
+}
+async function initDb() {
+    const dbPath = resolveDbPath();
+    const dbDir = path_1.default.dirname(dbPath);
+    if (!fs_2.default.existsSync(dbDir)) {
+        // 0700: only the owner traverses ~/.chorus. Without this the dir
+        // inherits umask (typically 0755 → world-traversable), which lets
+        // other local users `cat ~/.chorus/chorus.db` and read every API
+        // key in the secrets table. Audit A2 BLOCKER.
+        fs_2.default.mkdirSync(dbDir, { recursive: true, mode: 0o700 });
+    }
+    else if (path_1.default.basename(dbDir) === '.chorus') {
+        // Existing ~/.chorus from before this fix shipped — tighten
+        // retroactively on first boot of an upgraded install. Guard on the
+        // dirname so a CHORUS_DB_PATH override pointing at a system dir
+        // (e.g. tests using /tmp/chorus-foo.db) doesn't chmod /tmp to 0700.
+        // Best-effort; failure on exotic filesystems is non-fatal.
+        try {
+            fs_2.default.chmodSync(dbDir, 0o700);
+        }
+        catch {
+            /* non-fatal */
+        }
+    }
+    const isNew = !fs_2.default.existsSync(dbPath);
+    const db = (0, client_1.createClient)({ url: `file:${dbPath}` });
+    // Lock down the SQLite file (and WAL/SHM sidecars when they appear)
+    // to owner-only read/write. Best-effort on every boot — covers fresh
+    // creation, retroactive hardening, and the case where a sidecar was
+    // recreated by libsql with default umask after a rare crash.
+    for (const f of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`, `${dbPath}-journal`]) {
+        try {
+            if (fs_2.default.existsSync(f))
+                fs_2.default.chmodSync(f, 0o600);
+        }
+        catch {
+            /* non-fatal */
+        }
+    }
+    // libsql defaults to WAL on local file URLs. Setting it explicitly
+    // keeps the intent visible in code reviews; no-op if already WAL.
+    await db.execute('PRAGMA journal_mode = WAL');
+    // PRAGMA journal_mode=WAL creates the -wal/-shm sidecars if they
+    // didn't already exist. Re-chmod now so a brand-new DB never lives
+    // even briefly with default-umask permissions on the WAL file.
+    // Round-tripping the chmod loop is cheaper than risking a fast
+    // attacker who can read the WAL between init and first write.
+    for (const f of [`${dbPath}-wal`, `${dbPath}-shm`]) {
+        try {
+            if (fs_2.default.existsSync(f))
+                fs_2.default.chmodSync(f, 0o600);
+        }
+        catch {
+            /* non-fatal */
+        }
+    }
+    if (isNew) {
+        const schema = (0, fs_1.readFileSync)(resolveSchemaPath(), 'utf-8');
+        await db.executeMultiple(schema);
+    }
+    // Run idempotent column-add migrations on every startup, not just for
+    // existing DBs. A fresh DB created from a stale dist/schema.sql (e.g.
+    // when the build script forgot to copy the latest schema) would
+    // otherwise skip these and crash on first INSERT.
+    const cols = (await db.execute('PRAGMA table_info(chats)')).rows;
+    const has = (n) => cols.some((c) => c.name === n);
+    if (!has('repo_path'))
+        await db.execute('ALTER TABLE chats ADD COLUMN repo_path TEXT');
+    if (!has('pr_url'))
+        await db.execute('ALTER TABLE chats ADD COLUMN pr_url TEXT');
+    if (!has('ship_error'))
+        await db.execute('ALTER TABLE chats ADD COLUMN ship_error TEXT');
+    if (!has('artifact'))
+        await db.execute('ALTER TABLE chats ADD COLUMN artifact TEXT');
+    if (!has('verdict'))
+        await db.execute('ALTER TABLE chats ADD COLUMN verdict TEXT');
+    // Nullable for legacy rows; backfilled on first list-load. UNIQUE
+    // partial index lets us resolve /runs/<slug> in O(1).
+    if (!has('slug'))
+        await db.execute('ALTER TABLE chats ADD COLUMN slug TEXT');
+    await db.execute('CREATE UNIQUE INDEX IF NOT EXISTS idx_chats_slug ON chats(slug) WHERE slug IS NOT NULL');
+    await backfillChatSlugs(db);
+    // Personas — added in v0.7. Idempotent CREATE so DBs that pre-date
+    // this version pick it up without a manual migration.
+    await db.execute(`
+    CREATE TABLE IF NOT EXISTS personas (
+      id TEXT PRIMARY KEY,
+      label TEXT NOT NULL,
+      one_liner TEXT NOT NULL,
+      system_prompt TEXT NOT NULL,
+      recommended_lineage TEXT,
+      builtin INTEGER NOT NULL DEFAULT 0,
+      forked_from TEXT,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    )
+  `);
+    // Voices — added in v0.7 (planning/voices.md).
+    await db.execute(`
+    CREATE TABLE IF NOT EXISTS voices (
+      id TEXT PRIMARY KEY,
+      label TEXT NOT NULL,
+      source TEXT NOT NULL,
+      provider TEXT NOT NULL,
+      model_id TEXT NOT NULL,
+      lineage TEXT NOT NULL,
+      vendor_family TEXT,
+      input_cost_per_mtok REAL,
+      output_cost_per_mtok REAL,
+      enabled INTEGER NOT NULL DEFAULT 1,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    )
+  `);
+    await db.execute('CREATE INDEX IF NOT EXISTS idx_voices_lineage ON voices(lineage)');
+    await db.execute('CREATE INDEX IF NOT EXISTS idx_voices_provider ON voices(provider)');
+    await db.execute('CREATE INDEX IF NOT EXISTS idx_voices_source ON voices(source)');
+    // disabled_reason — added so the seed can distinguish user-intent toggles
+    // from transient auto-disables on missed CLI detection. Without this the
+    // re-detect path can't safely re-enable rows; one flaky boot would leave
+    // a voice silently disabled forever.
+    const voiceCols = (await db.execute('PRAGMA table_info(voices)')).rows;
+    const hasVoiceCol = (n) => voiceCols.some((c) => c.name === n);
+    if (!hasVoiceCol('disabled_reason')) {
+        await db.execute('ALTER TABLE voices ADD COLUMN disabled_reason TEXT');
+    }
+    return db;
+}
+/**
+ * One-shot pre-existing-row backfill: any chat row with NULL slug gets
+ * one generated from its `work` text. Idempotent — second run finds no
+ * NULL rows and exits cheaply. Runs inside getDb() so it happens before
+ * any route handler can SELECT a chat with a missing slug.
+ *
+ * Uniqueness via inline existsFn closure to avoid a circular import on
+ * the chats module (which depends on getDb being done).
+ */
+async function backfillChatSlugs(db) {
+    const result = await db.execute('SELECT id, work, template_id FROM chats WHERE slug IS NULL ORDER BY created_at ASC');
+    if (result.rows.length === 0)
+        return;
+    const { generateChatSlug } = await import('../chat-slug.js');
+    for (const row of result.rows) {
+        const slug = await generateChatSlug({
+            work: row.work,
+            templateId: row.template_id,
+            existsFn: async (s) => {
+                const r = await db.execute({
+                    sql: 'SELECT 1 FROM chats WHERE slug = ? LIMIT 1',
+                    args: [s],
+                });
+                return r.rows.length > 0;
+            },
+        });
+        await db.execute({
+            sql: 'UPDATE chats SET slug = ? WHERE id = ?',
+            args: [slug, row.id],
+        });
+    }
+}
+/**
+ * @internal — for tests only. Closes the singleton handle and clears the
+ * cached instance so the next `getDb()` call re-initializes against the
+ * current `CHORUS_DB_PATH` env. Without this, vitest tests running in the
+ * same module instance would all share the first DB they opened.
+ */
+async function _resetDbForTests() {
+    if (dbInstance) {
+        try {
+            dbInstance.close();
+        }
+        catch {
+            /* best-effort */
+        }
+    }
+    dbInstance = null;
+    dbInitPromise = null;
+}
+function generateUlid() {
+    const now = Date.now();
+    const randomBytes = crypto.getRandomValues(new Uint8Array(10));
+    const timeBytes = now.toString(16).padStart(12, '0');
+    const randBytes = Array.from(randomBytes)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+    return (timeBytes + randBytes).toUpperCase();
+}
+//# sourceMappingURL=connection.js.map

package/dist/lib/db/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../../src/lib/db/connection.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;AAqBH,sCAIC;AASD,sBAmBC;AAwKD,4CAUC;AAED,oCAQC;AA/OD,2CAA2D;AAC3D,2BAAkC;AAClC,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AAExB,IAAI,UAAU,GAAkB,IAAI,CAAC;AACrC,IAAI,aAAa,GAA2B,IAAI,CAAC;AAEjD;;;;;;;;;GASG;AACH,SAAgB,aAAa;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC5C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,iBAAiB;IACxB,gEAAgE;IAChE,0EAA0E;IAC1E,iEAAiE;IACjE,OAAO,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;AACxD,CAAC;AAEM,KAAK,UAAU,KAAK;IACzB,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,aAAa,GAAG,MAAM,EAAE;SACrB,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;QACX,UAAU,GAAG,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,iEAAiE;QACjE,mEAAmE;QACnE,mEAAmE;QACnE,6DAA6D;QAC7D,aAAa,GAAG,IAAI,CAAC;QACrB,MAAM,GAAG,CAAC;IACZ,CAAC,CAAC,CAAC;IAEL,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,MAAM;IACnB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,cAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,iEAAiE;QACjE,kEAAkE;QAClE,iEAAiE;QACjE,8CAA8C;QAC9C,YAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;SAAM,IAAI,cAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9C,4DAA4D;QAC5D,mEAAmE;QACnE,gEAAgE;QAChE,oEAAoE;QACpE,2DAA2D;QAC3D,IAAI,CAAC;YACH,YAAE,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,YAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,QAAQ,MAAM,EAAE,EAAE,CAAC,CAAC;IAEnD,oEAAoE;IACpE,qEAAqE;IACrE,oEAAoE;IACpE,6DAA6D;IAC7D,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC;YACH,IAAI,YAAE,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,YAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,kEAAkE;IAClE,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAE9C,iEAAiE;IACjE,mEAAmE;IACnE,+DAA+D;IAC/D,+DAA+D;IAC/D,8DAA8D;IAC9D,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,IAAI,YAAE,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,YAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,gEAAgE;IAChE,kDAAkD;IAClD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAqC,CAAC;IAClG,MAAM,GAAG,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,MAAM,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC;IACvF,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACjF,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,MAAM,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC;IACzF,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,MAAM,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IACrF,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;IACnF,kEAAkE;IAClE,sDAAsD;IACtD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAC7E,MAAM,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC;IAC3G,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAE5B,mEAAmE;IACnE,sDAAsD;IACtD,MAAM,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;GAYhB,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;GAehB,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC;IACrF,MAAM,EAAE,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC;IACvF,MAAM,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC;IAEnF,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAqC,CAAC;IACxG,MAAM,WAAW,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,iBAAiB,CAAC,EAAU;IACzC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAC7B,oFAAoF,CACrF,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAErC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAsE,EAAE,CAAC;QAChG,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACpB,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;oBACzB,GAAG,EAAE,4CAA4C;oBACjD,IAAI,EAAE,CAAC,CAAC,CAAC;iBACV,CAAC,CAAC;gBACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3B,CAAC;SACF,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,CAAC;YACf,GAAG,EAAE,wCAAwC;YAC7C,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,gBAAgB;IACpC,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,UAAU,GAAG,IAAI,CAAC;IAClB,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,SAAgB,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/C,CAAC"}

package/dist/lib/db/index.js

@@ -0,0 +1,34 @@
+"use strict";
+/**
+ * DB seam — barrel re-exports per-table modules.
+ *
+ * Connection lifecycle (getDb, _resetDbForTests, resolveDbPath) lives in
+ * connection.ts; each table has its own file with schema + ops.
+ *
+ * Rollback lever for the libsql migration: the v0.7 swap from
+ * better-sqlite3 was a clean transport change. If a hot-path perf
+ * regression turns up in production, the rollback is a clean revert
+ * (NOT a swap to the sync `libsql` package — its API would require
+ * unwinding every `await` in this layer and its callers).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.voices = exports.personas = exports.secrets = exports.settings = exports.templates = exports.phaseEvents = exports.chats = exports.resolveDbPath = exports.getDb = exports._resetDbForTests = void 0;
+var connection_js_1 = require("./connection.js");
+Object.defineProperty(exports, "_resetDbForTests", { enumerable: true, get: function () { return connection_js_1._resetDbForTests; } });
+Object.defineProperty(exports, "getDb", { enumerable: true, get: function () { return connection_js_1.getDb; } });
+Object.defineProperty(exports, "resolveDbPath", { enumerable: true, get: function () { return connection_js_1.resolveDbPath; } });
+var chats_js_1 = require("./chats.js");
+Object.defineProperty(exports, "chats", { enumerable: true, get: function () { return chats_js_1.chats; } });
+var phase_events_js_1 = require("./phase-events.js");
+Object.defineProperty(exports, "phaseEvents", { enumerable: true, get: function () { return phase_events_js_1.phaseEvents; } });
+var templates_js_1 = require("./templates.js");
+Object.defineProperty(exports, "templates", { enumerable: true, get: function () { return templates_js_1.templates; } });
+var settings_js_1 = require("./settings.js");
+Object.defineProperty(exports, "settings", { enumerable: true, get: function () { return settings_js_1.settings; } });
+var secrets_js_1 = require("./secrets.js");
+Object.defineProperty(exports, "secrets", { enumerable: true, get: function () { return secrets_js_1.secrets; } });
+var personas_js_1 = require("./personas.js");
+Object.defineProperty(exports, "personas", { enumerable: true, get: function () { return personas_js_1.personas; } });
+var voices_js_1 = require("./voices.js");
+Object.defineProperty(exports, "voices", { enumerable: true, get: function () { return voices_js_1.voices; } });
+//# sourceMappingURL=index.js.map

package/dist/lib/db/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/db/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH,iDAAyE;AAAhE,iHAAA,gBAAgB,OAAA;AAAE,sGAAA,KAAK,OAAA;AAAE,8GAAA,aAAa,OAAA;AAC/C,uCAAmC;AAA1B,iGAAA,KAAK,OAAA;AACd,qDAAgD;AAAvC,8GAAA,WAAW,OAAA;AACpB,+CAA2C;AAAlC,yGAAA,SAAS,OAAA;AAClB,6CAAyC;AAAhC,uGAAA,QAAQ,OAAA;AACjB,2CAAuC;AAA9B,qGAAA,OAAO,OAAA;AAChB,6CAA0D;AAAjD,uGAAA,QAAQ,OAAA;AACjB,yCAA4D;AAAnD,mGAAA,MAAM,OAAA"}

package/dist/lib/db/personas.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.personas = void 0;
+const zod_1 = require("zod");
+const connection_js_1 = require("./connection.js");
+const PersonaRowSchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    label: zod_1.z.string(),
+    one_liner: zod_1.z.string(),
+    system_prompt: zod_1.z.string(),
+    recommended_lineage: zod_1.z.string().nullable(),
+    builtin: zod_1.z.coerce.boolean(),
+    forked_from: zod_1.z.string().nullable(),
+    created_at: zod_1.z.number().int(),
+    updated_at: zod_1.z.number().int(),
+});
+exports.personas = {
+    async upsert(input) {
+        const db = await (0, connection_js_1.getDb)();
+        const now = Date.now();
+        const existing = await exports.personas.getById(input.id);
+        await db.execute({
+            sql: `
+        INSERT OR REPLACE INTO personas
+          (id, label, one_liner, system_prompt, recommended_lineage, builtin, forked_from, created_at, updated_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `,
+            args: [
+                input.id,
+                input.label,
+                input.one_liner,
+                input.system_prompt,
+                input.recommended_lineage ?? null,
+                input.builtin ? 1 : 0,
+                input.forked_from ?? null,
+                existing?.created_at ?? now,
+                now,
+            ],
+        });
+        const row = await exports.personas.getById(input.id);
+        if (!row)
+            throw new Error(`personas.upsert: row vanished: ${input.id}`);
+        return row;
+    },
+    async list() {
+        const db = await (0, connection_js_1.getDb)();
+        const result = await db.execute('SELECT * FROM personas ORDER BY label ASC');
+        return result.rows.map((row) => PersonaRowSchema.parse(row));
+    },
+    async getById(id) {
+        const db = await (0, connection_js_1.getDb)();
+        const result = await db.execute({
+            sql: 'SELECT * FROM personas WHERE id = ?',
+            args: [id],
+        });
+        if (result.rows.length === 0)
+            return null;
+        return PersonaRowSchema.parse(result.rows[0]);
+    },
+    async delete(id) {
+        const db = await (0, connection_js_1.getDb)();
+        await db.execute({ sql: 'DELETE FROM personas WHERE id = ?', args: [id] });
+    },
+};
+//# sourceMappingURL=personas.js.map

package/dist/lib/db/personas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personas.js","sourceRoot":"","sources":["../../../src/lib/db/personas.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mDAAwC;AAExC,MAAM,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;IACzB,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,OAAO,EAAE;IAC3B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC7B,CAAC,CAAC;AAcU,QAAA,QAAQ,GAAG;IACtB,KAAK,CAAC,MAAM,CAAC,KAAyB;QACpC,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,gBAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAElD,MAAM,EAAE,CAAC,OAAO,CAAC;YACf,GAAG,EAAE;;;;OAIJ;YACD,IAAI,EAAE;gBACJ,KAAK,CAAC,EAAE;gBACR,KAAK,CAAC,KAAK;gBACX,KAAK,CAAC,SAAS;gBACf,KAAK,CAAC,aAAa;gBACnB,KAAK,CAAC,mBAAmB,IAAI,IAAI;gBACjC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrB,KAAK,CAAC,WAAW,IAAI,IAAI;gBACzB,QAAQ,EAAE,UAAU,IAAI,GAAG;gBAC3B,GAAG;aACJ;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,qCAAqC;YAC1C,IAAI,EAAE,CAAC,EAAE,CAAC;SACX,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;CACF,CAAC"}

package/dist/lib/db/phase-events.js

@@ -0,0 +1,172 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.phaseEvents = void 0;
+const zod_1 = require("zod");
+const connection_js_1 = require("./connection.js");
+const PhaseEventSchema = zod_1.z.object({
+    id: zod_1.z.number().int(),
+    chat_id: zod_1.z.string(),
+    phase_idx: zod_1.z.number().int(),
+    phase_kind: zod_1.z.enum([
+        'plan',
+        'spec',
+        'tests',
+        'implement',
+        'review',
+        'verify',
+        'divergence',
+        'review_only',
+    ]),
+    role: zod_1.z.enum(['doer', 'reviewer']),
+    agent_id: zod_1.z.string().nullable(),
+    // 'warning' is the persisted state for cli_warning events that aren't
+    // terminal failures — model_fallback transitions in particular. Pre-fix
+    // every cli_warning was stored as 'errored', which made a successful
+    // per-slot fallback look like a reviewer crash in audit logs. Replay
+    // (phaseEventToRunnerEvent) ignores this state the same way it ignores
+    // 'errored' / 'reviewing' / 'approved' / 'revising', so live SSE
+    // traffic is unaffected.
+    state: zod_1.z.enum([
+        'drafting',
+        'submitted',
+        'reviewing',
+        'approved',
+        'revising',
+        'blocked',
+        'errored',
+        'warning',
+    ]),
+    output: zod_1.z.string().nullable(),
+    cost_usd: zod_1.z.number().default(0),
+    tokens_in: zod_1.z.number().int().default(0),
+    tokens_out: zod_1.z.number().int().default(0),
+    started_at: zod_1.z.number().int(),
+    finished_at: zod_1.z.number().int().nullable(),
+});
+/**
+ * Hard cap on phase_events.output length. SQLite handles big TEXT cells
+ * fine in isolation, but libsql wraps each row's columns in a result
+ * payload that gets reshipped on every read. A 4 MB reviewer transcript
+ * stored inline turns every `phaseEvents.list(chatId)` call into a 4 MB
+ * fetch — and the run page calls list() on every SSE re-attach. Cap at
+ * 256 KB; if a real output is bigger we keep the head + tail and emit a
+ * truncation marker pointing at the on-disk artifact dir. Long-form
+ * artifacts already live under ~/.chorus/chats/<id>/.
+ */
+const MAX_PHASE_OUTPUT_BYTES = 256 * 1024;
+function buildTruncationMarker(chatId) {
+    return `\n\n... [truncated — see ~/.chorus/chats/${chatId}/ for full transcript] ...\n\n`;
+}
+function capOutput(output, chatId) {
+    if (output === null)
+        return null;
+    // Byte length, not char count — SQLite stores UTF-8 and a 4 MB string
+    // of multi-byte chars would still bloat the row.
+    const byteLen = Buffer.byteLength(output, 'utf-8');
+    if (byteLen <= MAX_PHASE_OUTPUT_BYTES)
+        return output;
+    // Keep head (192 KB) + tail (32 KB). Bytes-based slicing on the
+    // underlying Buffer to stay under the cap even with multi-byte runes.
+    const buf = Buffer.from(output, 'utf-8');
+    const headBytes = 192 * 1024;
+    const tailBytes = 32 * 1024;
+    const head = buf.subarray(0, headBytes).toString('utf-8');
+    const tail = buf.subarray(buf.length - tailBytes).toString('utf-8');
+    return head + buildTruncationMarker(chatId) + tail;
+}
+exports.phaseEvents = {
+    async create(event) {
+        const db = await (0, connection_js_1.getDb)();
+        const validated = PhaseEventSchema.omit({ id: true }).parse(event);
+        const output = capOutput(validated.output, validated.chat_id);
+        const result = await db.execute({
+            sql: `
+        INSERT INTO phase_events (chat_id, phase_idx, phase_kind, role, agent_id, state, output, cost_usd, tokens_in, tokens_out, started_at, finished_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `,
+            args: [
+                validated.chat_id,
+                validated.phase_idx,
+                validated.phase_kind,
+                validated.role,
+                validated.agent_id,
+                validated.state,
+                output,
+                validated.cost_usd,
+                validated.tokens_in,
+                validated.tokens_out,
+                validated.started_at,
+                validated.finished_at,
+            ],
+        });
+        // libsql returns lastInsertRowid as bigint; cast to number for the
+        // existing API. Chorus row counts stay well under 2^53.
+        const id = Number(result.lastInsertRowid);
+        const row = await exports.phaseEvents.getById(id);
+        if (!row)
+            throw new Error(`phaseEvents.create: row vanished: ${id}`);
+        return row;
+    },
+    async list(chatId) {
+        const db = await (0, connection_js_1.getDb)();
+        const result = await db.execute({
+            sql: 'SELECT * FROM phase_events WHERE chat_id = ? ORDER BY phase_idx, id',
+            args: [chatId],
+        });
+        return result.rows.map((row) => PhaseEventSchema.parse(row));
+    },
+    async getById(id) {
+        const db = await (0, connection_js_1.getDb)();
+        const result = await db.execute({
+            sql: 'SELECT * FROM phase_events WHERE id = ?',
+            args: [id],
+        });
+        if (result.rows.length === 0)
+            return null;
+        return PhaseEventSchema.parse(result.rows[0]);
+    },
+    async update(id, partial) {
+        const db = await (0, connection_js_1.getDb)();
+        const event = await exports.phaseEvents.getById(id);
+        if (!event) {
+            throw new Error(`Phase event ${id} not found`);
+        }
+        // CRITICAL: distinguish "output omitted from partial" (preserve
+        // existing) from "output explicitly null" (caller wants to clear).
+        // The naive `partial.output ?? event.output` collapses both into
+        // "preserve" because null ?? x → x, which would silently drop
+        // intentional clears. Detect via the `in` operator on the typed key.
+        // Already-capped outputs in event.output pass through unchanged
+        // (cap is idempotent); only newly-supplied outputs need re-capping.
+        const nextOutput = 'output' in partial
+            ? capOutput(partial.output ?? null, event.chat_id)
+            : event.output;
+        const updated = { ...event, ...partial, output: nextOutput };
+        await db.execute({
+            sql: `
+        UPDATE phase_events
+        SET chat_id = ?, phase_idx = ?, phase_kind = ?, role = ?, agent_id = ?, state = ?, output = ?, cost_usd = ?, tokens_in = ?, tokens_out = ?, finished_at = ?
+        WHERE id = ?
+      `,
+            args: [
+                updated.chat_id,
+                updated.phase_idx,
+                updated.phase_kind,
+                updated.role,
+                updated.agent_id,
+                updated.state,
+                updated.output,
+                updated.cost_usd,
+                updated.tokens_in,
+                updated.tokens_out,
+                updated.finished_at,
+                id,
+            ],
+        });
+        const row = await exports.phaseEvents.getById(id);
+        if (!row)
+            throw new Error(`phaseEvents.update: row vanished: ${id}`);
+        return row;
+    },
+};
+//# sourceMappingURL=phase-events.js.map

package/dist/lib/db/phase-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-events.js","sourceRoot":"","sources":["../../../src/lib/db/phase-events.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mDAAwC;AAExC,MAAM,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC;QACjB,MAAM;QACN,MAAM;QACN,OAAO;QACP,WAAW;QACX,QAAQ;QACR,QAAQ;QACR,YAAY;QACZ,aAAa;KACd,CAAC;IACF,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,sEAAsE;IACtE,wEAAwE;IACxE,qEAAqE;IACrE,qEAAqE;IACrE,uEAAuE;IACvE,iEAAiE;IACjE,yBAAyB;IACzB,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC;QACZ,UAAU;QACV,WAAW;QACX,WAAW;QACX,UAAU;QACV,UAAU;QACV,SAAS;QACT,SAAS;QACT,SAAS;KACV,CAAC;IACF,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAIH;;;;;;;;;GASG;AACH,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,CAAC;AAE1C,SAAS,qBAAqB,CAAC,MAAc;IAC3C,OAAO,4CAA4C,MAAM,gCAAgC,CAAC;AAC5F,CAAC;AAED,SAAS,SAAS,CAAC,MAAqB,EAAE,MAAc;IACtD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,sEAAsE;IACtE,iDAAiD;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,OAAO,IAAI,sBAAsB;QAAE,OAAO,MAAM,CAAC;IACrD,gEAAgE;IAChE,sEAAsE;IACtE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC;IAC7B,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpE,OAAO,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;AACrD,CAAC;AAEY,QAAA,WAAW,GAAG;IACzB,KAAK,CAAC,MAAM,CAAC,KAA6B;QACxC,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE;;;OAGJ;YACD,IAAI,EAAE;gBACJ,SAAS,CAAC,OAAO;gBACjB,SAAS,CAAC,SAAS;gBACnB,SAAS,CAAC,UAAU;gBACpB,SAAS,CAAC,IAAI;gBACd,SAAS,CAAC,QAAQ;gBAClB,SAAS,CAAC,KAAK;gBACf,MAAM;gBACN,SAAS,CAAC,QAAQ;gBAClB,SAAS,CAAC,SAAS;gBACnB,SAAS,CAAC,UAAU;gBACpB,SAAS,CAAC,UAAU;gBACpB,SAAS,CAAC,WAAW;aACtB;SACF,CAAC,CAAC;QAEH,mEAAmE;QACnE,wDAAwD;QACxD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,mBAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc;QACvB,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,qEAAqE;YAC1E,IAAI,EAAE,CAAC,MAAM,CAAC;SACf,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,yCAAyC;YAC9C,IAAI,EAAE,CAAC,EAAE,CAAC;SACX,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,EAAU,EACV,OAAuD;QAEvD,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,mBAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QACjD,CAAC;QAED,gEAAgE;QAChE,mEAAmE;QACnE,iEAAiE;QACjE,8DAA8D;QAC9D,qEAAqE;QACrE,gEAAgE;QAChE,oEAAoE;QACpE,MAAM,UAAU,GACd,QAAQ,IAAI,OAAO;YACjB,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;YAClD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACnB,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAE7D,MAAM,EAAE,CAAC,OAAO,CAAC;YACf,GAAG,EAAE;;;;OAIJ;YACD,IAAI,EAAE;gBACJ,OAAO,CAAC,OAAO;gBACf,OAAO,CAAC,SAAS;gBACjB,OAAO,CAAC,UAAU;gBAClB,OAAO,CAAC,IAAI;gBACZ,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,KAAK;gBACb,OAAO,CAAC,MAAM;gBACd,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,SAAS;gBACjB,OAAO,CAAC,UAAU;gBAClB,OAAO,CAAC,WAAW;gBACnB,EAAE;aACH;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,mBAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAC"}

package/dist/lib/db/secrets.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.secrets = void 0;
+const zod_1 = require("zod");
+const connection_js_1 = require("./connection.js");
+const SecretSchema = zod_1.z.object({
+    provider: zod_1.z.string(),
+    kind: zod_1.z.enum(['api_key', 'cli_subscription']),
+    value: zod_1.z.string(),
+    meta: zod_1.z.string().nullable(),
+    updated_at: zod_1.z.number().int(),
+});
+exports.secrets = {
+    async set(provider, kind, value, meta) {
+        const db = await (0, connection_js_1.getDb)();
+        await db.execute({
+            sql: 'INSERT OR REPLACE INTO secrets (provider, kind, value, meta, updated_at) VALUES (?, ?, ?, ?, ?)',
+            args: [provider, kind, value, meta ? JSON.stringify(meta) : null, Date.now()],
+        });
+    },
+    async get(provider) {
+        const db = await (0, connection_js_1.getDb)();
+        const result = await db.execute({
+            sql: 'SELECT * FROM secrets WHERE provider = ?',
+            args: [provider],
+        });
+        if (result.rows.length === 0)
+            return null;
+        return SecretSchema.parse(result.rows[0]);
+    },
+    async list() {
+        const db = await (0, connection_js_1.getDb)();
+        const result = await db.execute('SELECT provider, kind, meta, updated_at FROM secrets');
+        return result.rows.map((row) => SecretSchema.omit({ value: true })
+            .extend({ meta: zod_1.z.string().nullable() })
+            .parse(row));
+    },
+    /**
+     * Idempotent delete — returns true if a row was actually removed,
+     * false if the secret didn't exist. Callers can use the boolean to
+     * disambiguate "rotated" from "no-op", but the wire surface
+     * (DELETE /secrets/:provider) treats both as success per REST norms.
+     */
+    async delete(provider) {
+        const db = await (0, connection_js_1.getDb)();
+        const result = await db.execute({
+            sql: 'DELETE FROM secrets WHERE provider = ?',
+            args: [provider],
+        });
+        return Number(result.rowsAffected ?? 0) > 0;
+    },
+};
+//# sourceMappingURL=secrets.js.map

package/dist/lib/db/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/lib/db/secrets.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,mDAAwC;AAExC,MAAM,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC7C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC7B,CAAC,CAAC;AAIU,QAAA,OAAO,GAAG;IACrB,KAAK,CAAC,GAAG,CACP,QAAgB,EAChB,IAAoC,EACpC,KAAa,EACb,IAA8B;QAE9B,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,EAAE,CAAC,OAAO,CAAC;YACf,GAAG,EAAE,iGAAiG;YACtG,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,0CAA0C;YAC/C,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAC7B,sDAAsD,CACvD,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aAC/B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;aACvC,KAAK,CAAC,GAAG,CAAC,CACd,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAK,GAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,wCAAwC;YAC7C,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;CACF,CAAC"}

package/dist/lib/db/settings.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.settings = void 0;
+const connection_js_1 = require("./connection.js");
+exports.settings = {
+    async get(key) {
+        const db = await (0, connection_js_1.getDb)();
+        const result = await db.execute({
+            sql: 'SELECT value FROM settings WHERE key = ?',
+            args: [key],
+        });
+        if (result.rows.length === 0)
+            return null;
+        const value = result.rows[0].value;
+        try {
+            return JSON.parse(value);
+        }
+        catch {
+            return value;
+        }
+    },
+    async set(key, value) {
+        const db = await (0, connection_js_1.getDb)();
+        const stringValue = typeof value === 'string' ? value : JSON.stringify(value);
+        await db.execute({
+            sql: 'INSERT OR REPLACE INTO settings (key, value) VALUES (?, ?)',
+            args: [key, stringValue],
+        });
+    },
+    async getAll() {
+        const db = await (0, connection_js_1.getDb)();
+        const result = await db.execute('SELECT key, value FROM settings');
+        const out = {};
+        for (const row of result.rows) {
+            const k = row.key;
+            const v = row.value;
+            try {
+                out[k] = JSON.parse(v);
+            }
+            catch {
+                out[k] = v;
+            }
+        }
+        return out;
+    },
+};
+//# sourceMappingURL=settings.js.map